last executing test programs: 6m45.573014905s ago: executing program 4 (id=492): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000200"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) 6m45.52725688s ago: executing program 4 (id=494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000895}, 0x44094) 6m45.44446105s ago: executing program 4 (id=497): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000380)=@filename='./file0\x00', 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x3, 0x3, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8054}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0xf, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8855}, 0x4004040) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="18427a1384508fc7593400000500000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_GETINFO(r10, 0xffffffff80000502, 0x0, &(0x7f0000000000)) r11 = dup2(r4, r4) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close(r14) ioctl$BLKTRACETEARDOWN(r11, 0x1276, 0x0) 6m45.303850956s ago: executing program 4 (id=501): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) 6m45.063423434s ago: executing program 4 (id=507): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x84, 0x4) sendmmsg$inet6(r0, &(0x7f0000003e40)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x10000, @loopback, 0xd}, 0x1c, 0x0}}], 0x1, 0x2000c824) sendmmsg$inet6(r0, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4044854) 6m44.83673727s ago: executing program 4 (id=513): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 6m44.822539402s ago: executing program 32 (id=513): symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 6m29.24757849s ago: executing program 2 (id=1169): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@bsdgroups}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') execve(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000640), 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 6m29.112515585s ago: executing program 2 (id=1177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m28.38217949s ago: executing program 2 (id=1199): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040844) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0xf, 0xc, &(0x7f00000012c0)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043000000957841ebc23d1f56360da770e8b66156ff76176583d9bd56ce4439661ea93eb3c09b1087f80f93d35690927e2fb50028d1ea95ef71b404571e3f7d5179eb64618c8a36b8ea48f922b2e71ff945d2cb100ce7547aa8dc1db945ca7a75f202a2b144c8f216dad2c7dfdc056490a666d165b54780631c53f233b7ed35c68f03cd27bec88c6fc3ec20bb5775bbf1f3d948587de74a4fb5e1f6988a34621c176b56ae"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) execve(&(0x7f0000001080)='./file0\x00', &(0x7f0000001140)={[&(0x7f00000010c0)='kmem_cache_free\x00', &(0x7f0000001100)='\x00']}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000050}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x64}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r7, 0xef, 0x6}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000040)={0x0, 0xf5ff, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 6m28.133260489s ago: executing program 2 (id=1207): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "1839f45fc0723889c7f5877caaf7fb7dda5b8190582b216c82c2daaaad417cde7f3157df350dd0007c2da327d696788dc45593336f3281d2e6022d86"}, 0x4c) 6m28.04276494s ago: executing program 2 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 6m27.965535409s ago: executing program 2 (id=1210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r1, 0x0, 0x11, 0x801afd) 6m12.96373852s ago: executing program 33 (id=1210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r1, 0x0, 0x11, 0x801afd) 3.42526412s ago: executing program 1 (id=11664): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b80)=ANY=[], 0x134}, 0x1, 0x0, 0x0, 0x24040841}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) write$binfmt_elf64(r1, &(0x7f0000000b80)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0xd, 0x0, 0x948, 0x2, 0x0, 0x1c000000, 0xe3, 0x40, 0x1fb, 0x0, 0x1, 0x38, 0x0, 0x7, 0x3, 0x4}, [], "", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x540) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) 2.358080752s ago: executing program 1 (id=11695): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0xffffffffffffffff, 0x7) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.120938096s ago: executing program 6 (id=11689): r0 = geteuid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1200000, &(0x7f0000000840)={[{@resgid}, {@grpjquota}, {@errors_remount}, {@inlinecrypt}, {@jqfmt_vfsold}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}], [{@uid_gt={'uid>', r0}}, {@uid_gt={'uid>', r0}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@dont_appraise}, {@euid_gt={'euid>', r0}}, {@uid_eq={'uid', 0x3d, r0}}]}, 0x3, 0x572, &(0x7f0000000c40)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x200002e6) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000001580)={0x53, 0xfffffffffffffffe, 0x2b, 0xdd, @buffer={0x0, 0x27, &(0x7f00000001c0)=""/39}, &(0x7f0000000200)="aafdc5bcc93430424473ae8768557bcaa6e385fc4a76382afc235745818f123a5f609612d19718f5b9729b", &(0x7f00000014c0)=""/183, 0x1ff, 0x20, 0x2, &(0x7f0000000280)}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.795200867s ago: executing program 6 (id=11702): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$can_j1939(0x1d, 0x2, 0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000200)=0xe9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x0}) bind$packet(r4, &(0x7f0000000140)={0x11, 0x19, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}, 0x14) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.735005333s ago: executing program 0 (id=11693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x10c, r4, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0xe4, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x64}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eaf89d3fd0b41384f65d292c7c4f4c58caca1d352b68c13ac10c69632a8ccd97"}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}]}, 0x10c}}, 0x0) 1.611626905s ago: executing program 0 (id=11710): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r3, r3]}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xd, 0x5a87, 0x4, 0x3, 0x0, r3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r4, 0x0, 0x8000000}, 0x27) 1.605075515s ago: executing program 5 (id=11698): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) read$msr(r0, 0x0, 0x0) unshare(0x8000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 1.568589759s ago: executing program 0 (id=11701): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r4) r6 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r5) keyctl$unlink(0x9, r6, r3) 1.568072399s ago: executing program 5 (id=11704): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000001940)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') rmdir(&(0x7f0000000000)='./file0\x00') 1.437875971s ago: executing program 1 (id=11705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!', 0x2}], 0x1, 0x7, 0x1) 1.417481833s ago: executing program 0 (id=11706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, 0xffffffffffffffff, 0x0) 1.221484782s ago: executing program 1 (id=11707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0x7ff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r5, 0x2004, 0x0) 1.221225112s ago: executing program 3 (id=11708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) 1.157131088s ago: executing program 3 (id=11709): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) open(&(0x7f00000003c0)='.\x00', 0x101080, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.148401439s ago: executing program 0 (id=11711): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/46, 0x10000, 0x1800, 0x624c, 0x2}, 0x20) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0}, 0x94) socketpair(0x23, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 1.041267189s ago: executing program 3 (id=11712): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x5}, {}, {0x1c, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x7, 0xfc, 0x3}, 0xb}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x4000000) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.040881659s ago: executing program 5 (id=11713): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'erspan0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x8000, 0x7, 0x3, 0x81, {{0xe, 0x4, 0x1, 0x23, 0x38, 0x67, 0x0, 0x8, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, {[@timestamp_addr={0x44, 0x24, 0x40, 0x1, 0x3, [{@remote, 0xa68}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@rand_addr=0x64010101, 0x61}, {@dev={0xac, 0x14, 0x14, 0x2b}}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xff, 0x4, 0x58, @rand_addr=' \x01\x00', @private0, 0x7f01, 0x8000, 0x9, 0x8}}) 1.040259269s ago: executing program 3 (id=11714): r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) mq_getsetattr(r1, &(0x7f0000000380)={0x4, 0xfff, 0x8, 0xc15e}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x8e, &(0x7f0000000700)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x58, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xb, 0xf989, "3138eed99a1365"}, @md5sig={0x13, 0x12, "6171cffc515318c1c852cc0ce8dbc955"}, @sack={0x5, 0x12, [0x1, 0x0, 0xfffffffa, 0x9fd]}, @md5sig={0x13, 0x12, "9829e5b8831b669841f72541c6efc910"}]}}}}}}}}, 0x0) 958.843348ms ago: executing program 5 (id=11715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x3, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x5}, {}, {0x1c, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x1, 0x7, 0xfc, 0x3}, 0xb}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}}, 0x4000000) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 946.111749ms ago: executing program 3 (id=11716): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) splice(r2, 0x0, r5, 0x0, 0xffffffffffffffff, 0x7) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 919.975402ms ago: executing program 5 (id=11717): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x800}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x0, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x3, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 877.178236ms ago: executing program 0 (id=11718): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 876.558036ms ago: executing program 6 (id=11719): openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x921a}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 793.376283ms ago: executing program 6 (id=11720): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 684.306664ms ago: executing program 6 (id=11721): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@nodioread_nolock}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) execve(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 606.173761ms ago: executing program 1 (id=11722): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}}, 0x24) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 605.701342ms ago: executing program 6 (id=11723): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="4bde03157888a32dd0e0eb1c779829f1e07e01ce", 0x14}, {&(0x7f0000000300)="c3617155c990328996fdc71ae7b15a38749a2b561489dc1b93d14e57e96ac17258bae8ad6399143d7545ce19f748b1bbdf9cb4ba62e4049d6df644217bdfd5df207b64a3061b67621c5672f46bb43b0b5888fd9a01054815316e4d23ba0bbe471733ddf5a2d3f0861e5b2cb77dcd6114bb55d0b2ea60514f16a66f8afb203faf0377a8a89cd919ef67b815af19e5a6828fe289dea6b328493ac1743687708bf349ac59fa47bbdac40601d3c9ef28614fdc", 0xb1}], 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 465.104595ms ago: executing program 5 (id=11724): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000100)={0x1, &(0x7f0000000340)=[{0x94, 0x0, 0x2, 0x11}]}) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) 249.091506ms ago: executing program 1 (id=11725): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=11726): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000023"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 1615252, 0x80417272 (sector = 1) [ 359.069540][T25362] loop5: detected capacity change from 0 to 512 [ 359.077414][T25362] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 359.209358][T25386] loop5: detected capacity change from 0 to 512 [ 359.227261][T25386] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 359.242437][T25386] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.8659: corrupted inode contents [ 359.254688][T25386] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.8659: mark_inode_dirty error [ 359.266512][T25386] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.8659: corrupted inode contents [ 359.279005][T25386] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.8659: mark_inode_dirty error [ 359.304564][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.379006][T25405] netlink: 'syz.0.8668': attribute type 6 has an invalid length. [ 359.439125][T25413] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 359.556716][T25419] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 359.999311][T25447] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 360.028783][T25452] __nla_validate_parse: 13 callbacks suppressed [ 360.028806][T25452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8689'. [ 360.066038][T25458] netlink: 'syz.3.8692': attribute type 4 has an invalid length. [ 360.075966][T25458] netlink: 'syz.3.8692': attribute type 4 has an invalid length. [ 360.438009][T25515] 9p: Unknown access argument : -22 [ 360.602388][T25538] loop5: detected capacity change from 0 to 512 [ 360.614213][T25538] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.8730: corrupted in-inode xattr: invalid ea_ino [ 360.633970][T25538] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.8730: couldn't read orphan inode 15 (err -117) [ 360.649057][T25538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.690621][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.781533][T25552] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 360.788077][ T9668] bridge_slave_1: left allmulticast mode [ 360.793777][ T9668] bridge_slave_1: left promiscuous mode [ 360.799614][ T9668] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.812297][ T9668] bridge_slave_0: left allmulticast mode [ 360.818050][ T9668] bridge_slave_0: left promiscuous mode [ 360.823836][ T9668] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.894991][ T9668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.909956][ T9668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.923167][ T9668] bond0 (unregistering): Released all slaves [ 360.958559][T25572] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 360.967411][ T9668] tipc: Disabling bearer [ 360.972445][ T9668] tipc: Left network mode [ 361.201147][ T9668] hsr_slave_0: left promiscuous mode [ 361.223671][ T9668] hsr_slave_1: left promiscuous mode [ 361.231677][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.240376][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.309698][T25599] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 361.338087][ T9668] team0 (unregistering): Port device team_slave_1 removed [ 361.348990][ T9668] team0 (unregistering): Port device team_slave_0 removed [ 361.404793][ T9668] lo (unregistering): left allmulticast mode [ 361.428374][T25612] loop5: detected capacity change from 0 to 256 [ 361.436086][T25612] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 361.477013][T25617] 9pnet_fd: Insufficient options for proto=fd [ 361.552674][T25632] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 361.654552][T25647] netlink: 'syz.6.8779': attribute type 3 has an invalid length. [ 361.668310][T25647] netlink: 'syz.6.8779': attribute type 3 has an invalid length. [ 361.697353][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8781'. [ 361.711049][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8781'. [ 361.711609][T25645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8777'. [ 361.728996][T25645] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8777'. [ 361.871044][T25677] loop5: detected capacity change from 0 to 128 [ 361.899237][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.906927][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.913987][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 361.967943][T25681] infiniband syz2: set active [ 361.972737][T25681] infiniband syz2: added ip6_vti0 [ 361.977835][ T5693] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.003274][T25681] RDS/IB: syz2: added [ 362.008684][T25681] smc: adding ib device syz2 with port count 1 [ 362.016383][T25681] smc: ib device syz2 port 1 has no pnetid [ 362.022595][ T5693] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.059517][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.165249][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.206168][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.248719][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.285917][T25717] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8810'. [ 362.293008][T25681] ip6_vti0 speed is unknown, defaulting to 1000 [ 362.431265][T25738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8821'. [ 362.440208][T25738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8821'. [ 362.578702][T25757] atomic_op ffff888118f5dd28 conn xmit_atomic 0000000000000000 [ 362.647236][T25771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8836'. [ 362.667253][T25770] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8834'. [ 362.700211][T25773] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 363.032852][T25834] loop5: detected capacity change from 0 to 764 [ 363.065551][T25834] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 363.076185][T25834] rock: directory entry would overflow storage [ 363.082489][T25834] rock: sig=0x4f50, size=4, remaining=3 [ 363.088238][T25834] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 363.116369][T25840] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.231515][T25855] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 363.472786][T25890] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 363.733486][T25935] netlink: 'syz.3.8915': attribute type 3 has an invalid length. [ 363.799514][T25918] wg1 speed is unknown, defaulting to 1000 [ 363.807632][T25918] lo speed is unknown, defaulting to 1000 [ 363.867854][T25918] ip6_vti0 speed is unknown, defaulting to 1000 [ 363.902187][T25954] loop5: detected capacity change from 0 to 512 [ 363.969114][T25960] loop5: detected capacity change from 0 to 764 [ 363.993677][ T29] kauditd_printk_skb: 815 callbacks suppressed [ 363.993695][ T29] audit: type=1326 audit(2427.538:39679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 363.996257][T25960] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 363.999902][ T29] audit: type=1326 audit(2427.538:39680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 364.059477][ T29] audit: type=1326 audit(2427.538:39681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 364.082537][ T29] audit: type=1326 audit(2427.538:39682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 364.105988][ T29] audit: type=1326 audit(2427.538:39683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 364.129255][ T29] audit: type=1326 audit(2427.538:39684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f519f1ce17f code=0x7ffc0000 [ 364.152390][ T29] audit: type=1326 audit(2427.538:39685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 364.152433][ T29] audit: type=1326 audit(2427.538:39686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 364.152463][ T29] audit: type=1326 audit(2427.538:39687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 364.198572][ T29] audit: type=1326 audit(2427.538:39688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25959 comm="syz.5.8927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 364.256653][T25960] rock: directory entry would overflow storage [ 364.262908][T25960] rock: sig=0x4f50, size=4, remaining=3 [ 364.268535][T25960] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 365.190138][T26009] 9pnet_fd: Insufficient options for proto=fd [ 365.260852][T26017] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 365.271964][T26019] loop5: detected capacity change from 0 to 2048 [ 365.288157][T26019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 365.395339][T26031] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8953: bg 0: block 345: padding at end of block bitmap is not set [ 365.411442][T26031] EXT4-fs (loop5): Remounting filesystem read-only [ 365.418167][ T9663] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 365.469793][T26040] netlink: 'syz.0.8960': attribute type 10 has an invalid length. [ 365.525563][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.653906][T26048] __nla_validate_parse: 2 callbacks suppressed [ 365.653926][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8965'. [ 365.671689][T26054] 9pnet_fd: Insufficient options for proto=fd [ 365.681780][T26048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8965'. [ 365.764854][T26065] netlink: 188 bytes leftover after parsing attributes in process `syz.0.8973'. [ 365.867295][T26082] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 366.222623][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9002'. [ 366.231619][T26128] netlink: 348 bytes leftover after parsing attributes in process `syz.6.9002'. [ 366.240724][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9002'. [ 366.249677][T26128] netlink: 348 bytes leftover after parsing attributes in process `syz.6.9002'. [ 366.260772][T26128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9002'. [ 366.619828][T26143] wg1 speed is unknown, defaulting to 1000 [ 366.626427][T26143] lo speed is unknown, defaulting to 1000 [ 366.669017][T26143] ip6_vti0 speed is unknown, defaulting to 1000 [ 366.853956][T26166] xt_hashlimit: max too large, truncated to 1048576 [ 366.881528][T26168] loop5: detected capacity change from 0 to 764 [ 366.951316][T26173] rock: directory entry would overflow storage [ 366.957644][T26173] rock: sig=0x4f50, size=4, remaining=3 [ 366.963275][T26173] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 367.001027][T26176] 9pnet_fd: Insufficient options for proto=fd [ 367.037848][T26159] wg1 speed is unknown, defaulting to 1000 [ 367.044601][T26159] lo speed is unknown, defaulting to 1000 [ 367.081882][T26159] ip6_vti0 speed is unknown, defaulting to 1000 [ 367.126104][T26168] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 367.174479][T26181] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 367.516596][T26218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9044'. [ 367.525631][T26218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9044'. [ 367.611579][T26227] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 368.068888][T26284] wg1 speed is unknown, defaulting to 1000 [ 368.075504][T26284] lo speed is unknown, defaulting to 1000 [ 368.114685][T26284] ip6_vti0 speed is unknown, defaulting to 1000 [ 368.281905][T26301] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 368.289096][T26303] xt_hashlimit: max too large, truncated to 1048576 [ 368.369072][T26309] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 368.622744][T26346] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.757574][T26359] SELinux: failed to load policy [ 368.949989][T26393] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 369.154589][T26421] Process accounting resumed [ 369.192872][T26433] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 369.297826][T26455] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 369.471950][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 369.471968][ T29] audit: type=1326 audit(5010.656:40267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 369.505485][ T29] audit: type=1326 audit(5010.656:40268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 369.528821][ T29] audit: type=1326 audit(5010.656:40269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc57708f703 code=0x7ffc0000 [ 369.551966][ T29] audit: type=1326 audit(5010.656:40270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc57708e17f code=0x7ffc0000 [ 369.575063][ T29] audit: type=1326 audit(5010.656:40271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc57708f757 code=0x7ffc0000 [ 369.598260][ T29] audit: type=1326 audit(5010.656:40272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc57708df10 code=0x7ffc0000 [ 369.621649][ T29] audit: type=1326 audit(5010.656:40273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fc57708e32a code=0x7ffc0000 [ 369.644564][ T29] audit: type=1326 audit(5010.656:40274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 369.667777][ T29] audit: type=1326 audit(5010.656:40275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26476 comm="syz.1.9160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 369.692026][ T29] audit: type=1326 audit(5010.862:40276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26478 comm="syz.1.9161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 369.859350][T26505] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 370.308065][T26549] loop5: detected capacity change from 0 to 128 [ 370.314689][T26548] syz2: rxe_newlink: already configured on ip6_vti0 [ 370.494328][T26569] netem: unknown loss type 13 [ 370.499331][T26569] netem: change failed [ 370.641338][T26593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=26593 comm=syz.3.9215 [ 370.654238][T26593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=26593 comm=syz.3.9215 [ 370.670105][T26592] No such timeout policy "syz1" [ 370.703612][T26598] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 370.728794][T26602] netem: unknown loss type 13 [ 370.733547][T26602] netem: change failed [ 371.103744][T26663] syz!: rxe_newlink: already configured on team_slave_0 [ 371.403784][T26704] __nla_validate_parse: 10 callbacks suppressed [ 371.403808][T26704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9266'. [ 371.407858][T26706] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.445730][T26711] loop5: detected capacity change from 0 to 764 [ 371.466581][T26711] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 371.478325][T26711] rock: directory entry would overflow storage [ 371.484585][T26711] rock: sig=0x4f50, size=4, remaining=3 [ 371.486638][T26715] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9272'. [ 371.490263][T26711] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 371.598203][T26732] loop5: detected capacity change from 0 to 128 [ 371.662478][T26744] loop5: detected capacity change from 0 to 764 [ 371.679936][T26744] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 371.689267][T26744] rock: directory entry would overflow storage [ 371.695660][T26744] rock: sig=0x4f50, size=4, remaining=3 [ 371.701339][T26744] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 371.838416][T26774] netlink: 'syz.5.9299': attribute type 3 has an invalid length. [ 371.864325][T26776] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 371.939582][T26788] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 372.186953][T26817] netlink: 'syz.3.9320': attribute type 10 has an invalid length. [ 372.194907][T26817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9320'. [ 372.288362][T26827] xt_hashlimit: max too large, truncated to 1048576 [ 372.298750][T26826] syz2: rxe_newlink: already configured on ip6_vti0 [ 372.597065][T26857] IPv6: Can't replace route, no match found [ 372.843687][T26878] netlink: 87 bytes leftover after parsing attributes in process `syz.3.9349'. [ 373.192840][T26913] loop5: detected capacity change from 0 to 1764 [ 373.229296][T26921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9368'. [ 373.273342][T26926] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 373.352367][T26936] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9376'. [ 373.426632][T26945] dvmrp1: entered allmulticast mode [ 373.442263][T26945] dvmrp1: left allmulticast mode [ 373.721098][T26995] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9403'. [ 373.731318][T26995] netlink: 7 bytes leftover after parsing attributes in process `syz.3.9403'. [ 373.861373][T27011] netlink: 'syz.0.9408': attribute type 3 has an invalid length. [ 374.137023][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9428'. [ 374.150605][T27044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9428'. [ 374.718798][T27109] loop5: detected capacity change from 0 to 1024 [ 374.739403][T27109] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.802567][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.831386][T27122] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.844829][ T29] kauditd_printk_skb: 829 callbacks suppressed [ 374.844847][ T29] audit: type=1326 audit(5015.679:41106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33b17a6567 code=0x7ffc0000 [ 374.943456][ T29] audit: type=1326 audit(5015.717:41107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33b174b779 code=0x7ffc0000 [ 374.966814][ T29] audit: type=1326 audit(5015.717:41108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33b17a6567 code=0x7ffc0000 [ 374.990111][ T29] audit: type=1326 audit(5015.717:41109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33b174b779 code=0x7ffc0000 [ 375.013314][ T29] audit: type=1326 audit(5015.717:41110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 375.036499][ T29] audit: type=1326 audit(5015.717:41111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 375.059641][ T29] audit: type=1326 audit(5015.726:41112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 375.082738][ T29] audit: type=1326 audit(5015.726:41113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33b17a6567 code=0x7ffc0000 [ 375.105861][ T29] audit: type=1326 audit(5015.726:41114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f33b174b779 code=0x7ffc0000 [ 375.128883][ T29] audit: type=1326 audit(5015.726:41115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27123 comm="syz.3.9462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f33b17a6567 code=0x7ffc0000 [ 375.440476][T27162] loop5: detected capacity change from 0 to 512 [ 375.453109][T27162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.486751][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.566803][T27181] loop5: detected capacity change from 0 to 256 [ 375.574139][T27181] msdos: Bad value for 'time_offset' [ 377.624156][T27300] __nla_validate_parse: 4 callbacks suppressed [ 377.624251][T27300] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9545'. [ 378.184871][T27338] loop5: detected capacity change from 0 to 764 [ 378.206345][T27338] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9555'. [ 378.228762][T27338] rock: directory entry would overflow storage [ 378.235024][T27338] rock: sig=0x4f50, size=4, remaining=3 [ 378.240685][T27338] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 378.305483][T27348] loop5: detected capacity change from 0 to 764 [ 378.339309][T27348] rock: directory entry would overflow storage [ 378.345534][T27348] rock: sig=0x4f50, size=4, remaining=3 [ 378.351322][T27348] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 378.396632][T27334] wg1 speed is unknown, defaulting to 1000 [ 378.407775][T27334] lo speed is unknown, defaulting to 1000 [ 378.439935][T27360] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 378.474554][T27366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9568'. [ 378.487599][T27334] ip6_vti0 speed is unknown, defaulting to 1000 [ 378.505035][T27366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9568'. [ 378.610755][T27377] loop5: detected capacity change from 0 to 764 [ 378.646142][T27377] rock: directory entry would overflow storage [ 378.652459][T27377] rock: sig=0x4f50, size=4, remaining=3 [ 378.658081][T27377] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 378.906978][T27385] wg1 speed is unknown, defaulting to 1000 [ 378.913725][T27385] lo speed is unknown, defaulting to 1000 [ 379.012392][T27385] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.044907][T27413] loop5: detected capacity change from 0 to 764 [ 379.076517][T27413] rock: directory entry would overflow storage [ 379.082806][T27413] rock: sig=0x4f50, size=4, remaining=3 [ 379.088396][T27413] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 379.175408][T27409] wg1 speed is unknown, defaulting to 1000 [ 379.181982][T27409] lo speed is unknown, defaulting to 1000 [ 379.235168][T27409] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.656896][T27446] wg1 speed is unknown, defaulting to 1000 [ 379.663928][T27446] lo speed is unknown, defaulting to 1000 [ 379.718899][T27446] ip6_vti0 speed is unknown, defaulting to 1000 [ 379.938579][T27482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27482 comm=syz.5.9620 [ 379.951200][T27482] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27482 comm=syz.5.9620 [ 380.137933][T27476] wg1 speed is unknown, defaulting to 1000 [ 380.144922][T27476] lo speed is unknown, defaulting to 1000 [ 380.219323][T27476] ip6_vti0 speed is unknown, defaulting to 1000 [ 380.283084][T27495] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 380.295499][ T29] kauditd_printk_skb: 750 callbacks suppressed [ 380.295517][ T29] audit: type=1326 audit(10176.783:41866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27494 comm="syz.3.9625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 380.411746][T27510] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=27510 comm=syz.0.9639 [ 380.424465][T27510] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=27510 comm=syz.0.9639 [ 380.472835][T27515] netlink: 204 bytes leftover after parsing attributes in process `syz.3.9633'. [ 380.918852][T27516] wg1 speed is unknown, defaulting to 1000 [ 380.948419][T27516] lo speed is unknown, defaulting to 1000 [ 381.044436][ T29] audit: type=1326 audit(10177.485:41867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d662bf6c9 code=0x7ffc0000 [ 381.067782][ T29] audit: type=1326 audit(10177.485:41868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d662bf6c9 code=0x7ffc0000 [ 381.091036][ T29] audit: type=1326 audit(10177.485:41869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7f6d662bf6c9 code=0x7ffc0000 [ 381.114194][ T29] audit: type=1326 audit(10177.485:41870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d662bf6c9 code=0x7ffc0000 [ 381.124751][T27516] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.137454][ T29] audit: type=1326 audit(10177.485:41871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d662bf6c9 code=0x7ffc0000 [ 381.166864][ T29] audit: type=1326 audit(10177.485:41872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6d662be17f code=0x7ffc0000 [ 381.189982][ T29] audit: type=1326 audit(10177.485:41873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d662bf6c9 code=0x7ffc0000 [ 381.213171][ T29] audit: type=1326 audit(10177.485:41874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d662bf6c9 code=0x7ffc0000 [ 381.216734][T27562] syz2: rxe_newlink: already configured on ip6_vti0 [ 381.242630][ T29] audit: type=1326 audit(10177.644:41875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27560 comm="syz.6.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d662bf6c9 code=0x7ffc0000 [ 381.581187][T20451] hid_parser_main: 22 callbacks suppressed [ 381.581229][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.594676][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.602121][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.625178][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.632726][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.640203][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.647734][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.655171][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.662577][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.670076][T20451] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 381.679227][T20451] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz0] on syz0 [ 381.803484][T27618] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9680'. [ 381.894199][T27600] wg1 speed is unknown, defaulting to 1000 [ 381.907439][T27600] lo speed is unknown, defaulting to 1000 [ 381.969963][T27600] ip6_vti0 speed is unknown, defaulting to 1000 [ 381.987332][T27630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9695'. [ 382.022483][T27632] loop5: detected capacity change from 0 to 512 [ 382.052134][T27632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.141102][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.256965][T27658] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9698'. [ 382.697200][T27692] loop5: detected capacity change from 0 to 512 [ 382.711809][T27692] EXT4-fs: Ignoring removed oldalloc option [ 382.727879][T27692] EXT4-fs (loop5): 1 truncate cleaned up [ 382.744053][T27692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.756578][T27699] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 382.814763][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.958814][T27711] wg1 speed is unknown, defaulting to 1000 [ 382.965670][T27711] lo speed is unknown, defaulting to 1000 [ 383.018016][T27711] ip6_vti0 speed is unknown, defaulting to 1000 [ 383.174492][T27741] loop5: detected capacity change from 0 to 764 [ 383.203662][T27741] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 383.216838][T27741] rock: directory entry would overflow storage [ 383.223069][T27741] rock: sig=0x4f50, size=4, remaining=3 [ 383.228818][T27741] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 383.320217][T27755] IPVS: sh: FWM 3 0x00000003 - no destination available [ 383.573528][T27783] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 384.511757][T27828] loop5: detected capacity change from 0 to 764 [ 384.553257][T27828] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 384.574524][T27828] rock: directory entry would overflow storage [ 384.580722][T27828] rock: sig=0x4f50, size=4, remaining=3 [ 384.586333][T27828] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 384.768245][T27848] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9783'. [ 384.776274][T27844] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 385.107287][T27880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9797'. [ 385.156808][T27886] syz2: rxe_newlink: already configured on ip6_vti0 [ 385.207476][T27894] syz2: rxe_newlink: already configured on ip6_vti0 [ 385.696105][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 385.696125][ T29] audit: type=1326 audit(10181.834:42318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.725668][ T29] audit: type=1326 audit(10181.834:42319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.750382][ T29] audit: type=1326 audit(10181.881:42320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.773589][ T29] audit: type=1326 audit(10181.881:42321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.797689][ T29] audit: type=1326 audit(10181.881:42322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.820897][ T29] audit: type=1326 audit(10181.881:42323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.844309][ T29] audit: type=1326 audit(10181.881:42324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.867585][ T29] audit: type=1326 audit(10181.928:42325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.890821][ T29] audit: type=1326 audit(10181.928:42326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.914893][ T29] audit: type=1326 audit(10181.928:42327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27912 comm="syz.5.9813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 385.960595][T27918] loop5: detected capacity change from 0 to 764 [ 385.971110][T27918] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 385.980447][T27918] rock: directory entry would overflow storage [ 385.986708][T27918] rock: sig=0x4f50, size=4, remaining=3 [ 385.992291][T27918] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 386.208709][T27922] wg1 speed is unknown, defaulting to 1000 [ 386.239960][T27922] lo speed is unknown, defaulting to 1000 [ 386.279034][T27926] wg1 speed is unknown, defaulting to 1000 [ 386.301910][T27926] lo speed is unknown, defaulting to 1000 [ 386.308080][T27922] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.415278][T27926] ip6_vti0 speed is unknown, defaulting to 1000 [ 386.565809][T27952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9839'. [ 386.655815][T27955] loop5: detected capacity change from 0 to 1024 [ 386.717877][T27955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.736581][T27962] atomic_op ffff88811bbef528 conn xmit_atomic 0000000000000000 [ 386.773944][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.786320][T27963] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 386.837359][T27968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9835'. [ 386.865153][T27970] netlink: 'syz.5.9833': attribute type 10 has an invalid length. [ 386.873039][T27970] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9833'. [ 386.884004][T27973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9838'. [ 386.935254][T27978] loop5: detected capacity change from 0 to 1024 [ 386.944466][T27978] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.370865][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.453397][T28013] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 387.485105][T28015] netlink: 'syz.3.9858': attribute type 21 has an invalid length. [ 387.495154][T28015] netlink: 156 bytes leftover after parsing attributes in process `syz.3.9858'. [ 387.504287][T28015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9858'. [ 387.524760][T28018] atomic_op ffff88814bba5128 conn xmit_atomic 0000000000000000 [ 387.843583][T28039] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 388.109508][T28044] netlink: 'syz.6.9869': attribute type 21 has an invalid length. [ 388.140600][T28044] netlink: 156 bytes leftover after parsing attributes in process `syz.6.9869'. [ 388.149736][T28044] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9869'. [ 388.219170][T28046] netlink: 'syz.1.9870': attribute type 29 has an invalid length. [ 388.230264][T28046] netlink: 'syz.1.9870': attribute type 29 has an invalid length. [ 388.728326][T28075] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 389.351708][T28089] netlink: 'syz.5.9887': attribute type 21 has an invalid length. [ 389.544674][T28115] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 389.662533][T28127] netlink: 'syz.1.9902': attribute type 21 has an invalid length. [ 389.706069][T28129] SELinux: failed to load policy [ 389.750474][T28136] loop5: detected capacity change from 0 to 764 [ 389.779736][T28136] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 389.790185][T28136] rock: directory entry would overflow storage [ 389.796431][T28136] rock: sig=0x4f50, size=4, remaining=3 [ 389.802078][T28136] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 390.105404][T28183] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 390.303071][T28191] wg1 speed is unknown, defaulting to 1000 [ 390.309710][T28191] lo speed is unknown, defaulting to 1000 [ 390.356927][T28191] ip6_vti0 speed is unknown, defaulting to 1000 [ 390.449533][T28200] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 390.615326][T28228] dvmrp1: entered allmulticast mode [ 390.631542][T28228] dvmrp1: left allmulticast mode [ 390.889914][T28245] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 391.019549][T28260] __nla_validate_parse: 7 callbacks suppressed [ 391.019614][T28260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9961'. [ 391.325886][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 391.325914][ T29] audit: type=1326 audit(10187.091:42766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.377706][ T29] audit: type=1326 audit(10187.091:42767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.401065][ T29] audit: type=1326 audit(10187.129:42768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.424229][ T29] audit: type=1326 audit(10187.129:42770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.430381][T28290] netlink: 'syz.3.9969': attribute type 16 has an invalid length. [ 391.447451][ T29] audit: type=1326 audit(10187.129:42769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.447492][ T29] audit: type=1326 audit(10187.129:42771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.447548][ T29] audit: type=1326 audit(10187.129:42773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.447581][ T29] audit: type=1326 audit(10187.129:42772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.455420][T28290] netlink: 'syz.3.9969': attribute type 17 has an invalid length. [ 391.478638][ T29] audit: type=1326 audit(10187.129:42774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28287 comm="syz.5.9968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 391.519224][T28290] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.591612][T28290] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 392.240133][T28339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9989'. [ 392.307384][ T29] audit: type=1400 audit(10188.017:42775): avc: denied { unmount } for pid=4930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 392.714687][T28369] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 392.877646][T28387] loop5: detected capacity change from 0 to 512 [ 392.893547][T28387] EXT4-fs (loop5): orphan cleanup on readonly fs [ 392.914222][T28387] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.10012: bad orphan inode 13 [ 392.941569][T28387] ext4_test_bit(bit=12, block=18) = 1 [ 392.947177][T28387] is_bad_inode(inode)=0 [ 392.951352][T28387] NEXT_ORPHAN(inode)=2130706432 [ 392.956338][T28387] max_ino=32 [ 392.959539][T28387] i_nlink=1 [ 392.971925][T28387] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 393.000064][T28387] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 393.033367][T28387] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 393.059887][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.083093][T28399] syz2: rxe_newlink: already configured on ip6_vti0 [ 393.383550][T28411] pim6reg1: entered promiscuous mode [ 393.388899][T28411] pim6reg1: entered allmulticast mode [ 393.421537][T28430] syz2: rxe_newlink: already configured on ip6_vti0 [ 393.455741][T28434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28434 comm=syz.6.10030 [ 393.513947][ T5693] kernel write not supported for file bpf-prog (pid: 5693 comm: kworker/1:13) [ 393.604741][T28446] veth0: entered promiscuous mode [ 393.631425][T28445] veth0: left promiscuous mode [ 393.668596][T28454] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 393.801187][T28473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10050'. [ 393.866918][T28475] loop5: detected capacity change from 0 to 512 [ 393.883801][T28475] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 393.906705][T28475] EXT4-fs (loop5): 1 truncate cleaned up [ 393.912820][T28475] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.994005][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.012351][T28481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10062'. [ 394.054224][T28488] veth0: entered promiscuous mode [ 394.065042][T28488] bridge0: entered promiscuous mode [ 394.070733][T28488] bridge0: port 4(macsec1) entered blocking state [ 394.077448][T28488] bridge0: port 4(macsec1) entered disabled state [ 394.084489][T28488] macsec1: entered allmulticast mode [ 394.089905][T28488] bridge0: entered allmulticast mode [ 394.095967][T28488] macsec1: left allmulticast mode [ 394.101150][T28488] bridge0: left allmulticast mode [ 394.108288][T28488] bridge0: left promiscuous mode [ 394.143063][T28494] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 394.168274][T28486] veth0: left promiscuous mode [ 394.221054][T28506] netlink: 'syz.6.10059': attribute type 10 has an invalid length. [ 394.247178][T28502] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 394.258990][T28504] loop5: detected capacity change from 0 to 8192 [ 394.344751][T28518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10066'. [ 394.441220][T28510] wg1 speed is unknown, defaulting to 1000 [ 394.447560][T28510] lo speed is unknown, defaulting to 1000 [ 394.481136][T28510] ip6_vti0 speed is unknown, defaulting to 1000 [ 394.552811][T28526] veth0: entered promiscuous mode [ 394.561408][T28526] bridge0: entered promiscuous mode [ 394.567513][T28526] bridge0: port 1(macsec0) entered blocking state [ 394.574079][T28526] bridge0: port 1(macsec0) entered disabled state [ 394.580882][T28526] macsec0: entered allmulticast mode [ 394.586234][T28526] bridge0: entered allmulticast mode [ 394.592390][T28526] macsec0: left allmulticast mode [ 394.597438][T28526] bridge0: left allmulticast mode [ 394.605654][T28526] bridge0: left promiscuous mode [ 394.640008][T28534] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10074'. [ 394.658758][T28525] veth0: left promiscuous mode [ 394.871966][T28554] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 395.352626][T28589] netlink: 272 bytes leftover after parsing attributes in process `syz.5.10097'. [ 396.445764][T28637] loop5: detected capacity change from 0 to 1024 [ 396.453379][T28637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 396.460548][T28637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 396.473140][T28637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.494023][T28642] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 396.514574][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10123'. [ 396.542263][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.749004][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 396.749089][ T29] audit: type=1326 audit(10192.170:43217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.778732][ T29] audit: type=1326 audit(10192.170:43218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.802133][ T29] audit: type=1326 audit(10192.170:43219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.825432][ T29] audit: type=1326 audit(10192.170:43220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.848693][ T29] audit: type=1326 audit(10192.170:43221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.872149][ T29] audit: type=1326 audit(10192.170:43222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.895448][ T29] audit: type=1326 audit(10192.170:43223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.900523][T28672] loop5: detected capacity change from 0 to 256 [ 396.918784][ T29] audit: type=1326 audit(10192.170:43224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.918824][ T29] audit: type=1326 audit(10192.170:43225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 396.925837][T28672] msdos: Bad value for 'time_offset' [ 396.948623][ T29] audit: type=1326 audit(10192.198:43226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.5.10132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 397.047472][T28676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10136'. [ 397.073936][T28680] IPv6: Can't replace route, no match found [ 397.307425][T28702] vlan0: entered allmulticast mode [ 397.402552][T28717] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 397.566631][T28743] vlan0: entered allmulticast mode [ 397.727682][T28750] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 397.848415][T28773] vlan1: entered allmulticast mode [ 398.372672][T28783] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 398.398217][T28785] netlink: 'syz.3.10181': attribute type 12 has an invalid length. [ 398.606304][T28803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=28803 comm=syz.3.10191 [ 398.619638][T28803] netlink: 'syz.3.10191': attribute type 29 has an invalid length. [ 398.705351][T28813] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10196'. [ 398.789093][T28827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=28827 comm=syz.0.10202 [ 398.806955][T28827] netlink: 'syz.0.10202': attribute type 29 has an invalid length. [ 398.839432][T28832] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 399.122019][T28862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=28862 comm=syz.1.10217 [ 399.135093][T28862] netlink: 'syz.1.10217': attribute type 29 has an invalid length. [ 399.163967][T28866] netlink: 'syz.1.10220': attribute type 10 has an invalid length. [ 399.172340][T28866] netlink: 'syz.1.10220': attribute type 10 has an invalid length. [ 399.211928][T28868] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 399.259435][T28878] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 399.266394][T28880] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10228'. [ 399.368010][T28898] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 399.420067][T28908] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 399.721913][T28922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=28922 comm=syz.6.10246 [ 399.735196][T28922] netlink: 'syz.6.10246': attribute type 29 has an invalid length. [ 400.001587][T28964] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10266'. [ 400.010848][T28964] netem: change failed [ 400.042531][T28970] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 400.221176][T28989] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 400.351670][T29001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10284'. [ 400.446181][T29015] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 400.462499][T20451] lo speed is unknown, defaulting to 1000 [ 400.468351][ T5693] ip6_vti0 speed is unknown, defaulting to 1000 [ 400.529224][T29018] syz2: rxe_newlink: already configured on ip6_vti0 [ 400.782236][T29036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.931218][T29050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10305'. [ 401.095877][T29068] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.614572][T29115] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10338'. [ 401.748294][T20451] hid_parser_main: 21 callbacks suppressed [ 401.748313][T20451] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 401.762068][T20451] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 401.775069][T20451] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 401.787341][T20451] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 401.949362][T29156] tipc: New replicast peer: 255.255.255.32 [ 401.955314][T29156] tipc: Enabled bearer , priority 10 [ 401.971516][T29158] xt_CT: You must specify a L4 protocol and not use inversions on it [ 402.038365][T29166] loop5: detected capacity change from 0 to 512 [ 402.045520][T29166] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 402.128773][T29164] wg1 speed is unknown, defaulting to 1000 [ 402.135730][T29164] lo speed is unknown, defaulting to 1000 [ 402.174168][T29164] ip6_vti0 speed is unknown, defaulting to 1000 [ 402.247473][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 402.247490][ T29] audit: type=1326 audit(10203.311:43762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.338275][ T29] audit: type=1326 audit(10203.348:43763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.361784][ T29] audit: type=1326 audit(10203.348:43764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.385121][ T29] audit: type=1326 audit(10203.348:43765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.408413][ T29] audit: type=1326 audit(10203.348:43766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.431834][ T29] audit: type=1326 audit(10203.348:43767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.455227][ T29] audit: type=1326 audit(10203.348:43768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.478587][ T29] audit: type=1326 audit(10203.348:43769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.501890][ T29] audit: type=1326 audit(10203.348:43770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.525144][ T29] audit: type=1326 audit(10203.348:43771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29165 comm="syz.5.10362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 402.835039][T29212] xt_hashlimit: max too large, truncated to 1048576 [ 402.959276][T29236] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 402.974987][T29238] program syz.5.10395 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.037538][T29249] xt_hashlimit: max too large, truncated to 1048576 [ 403.140094][T29264] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 403.162532][ T5683] tipc: Node number set to 528612096 [ 403.219411][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10415'. [ 403.241548][T29280] xt_hashlimit: max too large, truncated to 1048576 [ 403.421564][T29312] loop5: detected capacity change from 0 to 512 [ 403.429754][T29312] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 403.445953][T29312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.487611][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.594472][T29327] loop5: detected capacity change from 0 to 512 [ 403.601622][T29327] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 403.611701][T29327] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.10435: iget: bad i_size value: 38620345925642 [ 403.626290][T29327] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.10435: couldn't read orphan inode 15 (err -117) [ 403.643434][T29327] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.684443][T29327] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.10435: bg 0: block 5: invalid block bitmap [ 403.705479][T29327] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 2 with max blocks 6 with error 28 [ 403.717786][T29327] EXT4-fs (loop5): This should not happen!! Data will be lost [ 403.717786][T29327] [ 403.727455][T29327] EXT4-fs (loop5): Total free blocks count 0 [ 403.733483][T29327] EXT4-fs (loop5): Free/Dirty block details [ 403.739403][T29327] EXT4-fs (loop5): free_blocks=0 [ 403.744424][T29327] EXT4-fs (loop5): dirty_blocks=66 [ 403.749550][T29327] EXT4-fs (loop5): Block reservation details [ 403.755571][T29327] EXT4-fs (loop5): i_reserved_data_blocks=66 [ 403.776199][ T9617] EXT4-fs (loop5): Delayed block allocation failed for inode 19 at logical offset 8 with max blocks 60 with error 28 [ 403.826541][T29337] loop5: detected capacity change from 0 to 256 [ 404.101176][T29358] netlink: 96 bytes leftover after parsing attributes in process `syz.6.10449'. [ 404.260855][T29372] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 404.815854][T29405] netlink: 'syz.6.10470': attribute type 3 has an invalid length. [ 405.643970][T29449] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10488'. [ 406.607486][T29501] wg2: entered promiscuous mode [ 407.636087][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 407.636102][ T29] audit: type=1400 audit(10208.353:43910): avc: denied { mounton } for pid=29538 comm="syz.3.10529" path="/2146/file0" dev="tmpfs" ino=11145 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 407.665563][T29539] 9pnet_fd: Insufficient options for proto=fd [ 407.859328][T29562] netlink: 'syz.3.10541': attribute type 10 has an invalid length. [ 407.896737][ T29] audit: type=1326 audit(10208.596:43911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.3.10543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 407.929865][ T29] audit: type=1326 audit(10208.605:43912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.3.10543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 407.953246][ T29] audit: type=1326 audit(10208.605:43913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.3.10543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 407.976654][ T29] audit: type=1326 audit(10208.624:43914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29565 comm="syz.3.10543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 408.047928][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 408.236997][T29593] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 408.585439][T29628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10569'. [ 408.594642][T29628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10569'. [ 408.655637][ T29] audit: type=1400 audit(10209.307:43915): avc: denied { associate } for pid=29613 comm="syz.1.10563" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 409.386713][ T29] audit: type=1326 audit(10209.990:43916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29669 comm="syz.3.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 409.410086][ T29] audit: type=1326 audit(10209.990:43917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29669 comm="syz.3.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 409.433506][ T29] audit: type=1326 audit(10209.990:43918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29669 comm="syz.3.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 409.456795][ T29] audit: type=1326 audit(10209.990:43919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29669 comm="syz.3.10598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 409.780263][T29704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10604'. [ 409.929669][T29717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10609'. [ 409.978082][T29717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10609'. [ 410.048495][T29724] set match dimension is over the limit! [ 410.092364][T29728] netlink: 'syz.3.10614': attribute type 7 has an invalid length. [ 410.100301][T29728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10614'. [ 410.181535][T29720] wg1 speed is unknown, defaulting to 1000 [ 410.183684][T29733] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10616'. [ 410.190554][T29720] lo speed is unknown, defaulting to 1000 [ 410.204252][T29738] tipc: Enabled bearer , priority 4 [ 410.266039][T29720] ip6_vti0 speed is unknown, defaulting to 1000 [ 410.542745][T29769] netlink: 'syz.6.10632': attribute type 7 has an invalid length. [ 410.550668][T29769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10632'. [ 410.622667][T29774] netlink: 44 bytes leftover after parsing attributes in process `syz.3.10634'. [ 410.813305][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.821243][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.828792][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.836302][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.843877][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.851406][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.858947][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.866462][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.874017][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.881547][ T5683] hid-generic 0000:0000:10001.0008: unknown main item tag 0x0 [ 410.889778][T29797] IPv6: NLM_F_CREATE should be specified when creating new route [ 410.892066][ T5683] hid-generic 0000:0000:10001.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 410.925482][T29799] netlink: 'syz.5.10644': attribute type 7 has an invalid length. [ 410.933334][T29799] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10644'. [ 411.031463][T29810] macsec0: entered promiscuous mode [ 411.066661][T29814] loop5: detected capacity change from 0 to 512 [ 411.085981][T29814] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.10652: iget: bad i_size value: 38620345925642 [ 411.099941][T29814] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.10652: couldn't read orphan inode 15 (err -117) [ 411.116114][T29814] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.137137][T29814] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.10652: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 411.169840][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.477432][T29859] netlink: 'syz.0.10669': attribute type 7 has an invalid length. [ 411.523421][T29865] netlink: 'syz.0.10674': attribute type 30 has an invalid length. [ 411.686105][T29885] IPVS: Unknown mcast interface: ipvlan1 [ 412.190354][T29924] syz.3.10699: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 412.205141][T29924] CPU: 1 UID: 0 PID: 29924 Comm: syz.3.10699 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 412.205181][T29924] Tainted: [W]=WARN [ 412.205189][T29924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 412.205271][T29924] Call Trace: [ 412.205279][T29924] [ 412.205289][T29924] __dump_stack+0x1d/0x30 [ 412.205315][T29924] dump_stack_lvl+0xe8/0x140 [ 412.205340][T29924] dump_stack+0x15/0x1b [ 412.205360][T29924] warn_alloc+0x12b/0x1a0 [ 412.205443][T29924] ? __rcu_read_unlock+0x4f/0x70 [ 412.205533][T29924] __vmalloc_node_range_noprof+0x9d/0xed0 [ 412.205569][T29924] ? __futex_wait+0x1fa/0x260 [ 412.205605][T29924] ? __pfx_futex_wake_mark+0x10/0x10 [ 412.205626][T29924] ? __rcu_read_unlock+0x4f/0x70 [ 412.205652][T29924] ? avc_has_perm_noaudit+0x1b1/0x200 [ 412.205679][T29924] vmalloc_user_noprof+0x7d/0xb0 [ 412.205739][T29924] ? xskq_create+0x80/0xe0 [ 412.205763][T29924] xskq_create+0x80/0xe0 [ 412.205861][T29924] xsk_init_queue+0x95/0xf0 [ 412.205885][T29924] xsk_setsockopt+0x3f5/0x640 [ 412.205907][T29924] ? __pfx_xsk_setsockopt+0x10/0x10 [ 412.205930][T29924] __sys_setsockopt+0x184/0x200 [ 412.206037][T29924] __x64_sys_setsockopt+0x64/0x80 [ 412.206071][T29924] x64_sys_call+0x20ec/0x3000 [ 412.206132][T29924] do_syscall_64+0xd2/0x200 [ 412.206155][T29924] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 412.206185][T29924] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 412.206271][T29924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.206294][T29924] RIP: 0033:0x7f33b17af6c9 [ 412.206311][T29924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.206348][T29924] RSP: 002b:00007f33b020f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 412.206369][T29924] RAX: ffffffffffffffda RBX: 00007f33b1a05fa0 RCX: 00007f33b17af6c9 [ 412.206462][T29924] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 412.206475][T29924] RBP: 00007f33b1831f91 R08: 0000000000000004 R09: 0000000000000000 [ 412.206565][T29924] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.206579][T29924] R13: 00007f33b1a06038 R14: 00007f33b1a05fa0 R15: 00007ffdc425d278 [ 412.206600][T29924] [ 412.427071][T29924] Mem-Info: [ 412.430234][T29924] active_anon:30596 inactive_anon:28148 isolated_anon:0 [ 412.430234][T29924] active_file:16292 inactive_file:13797 isolated_file:0 [ 412.430234][T29924] unevictable:16393 dirty:193 writeback:0 [ 412.430234][T29924] slab_reclaimable:4253 slab_unreclaimable:212714 [ 412.430234][T29924] mapped:30436 shmem:44965 pagetables:2487 [ 412.430234][T29924] sec_pagetables:0 bounce:0 [ 412.430234][T29924] kernel_misc_reclaimable:0 [ 412.430234][T29924] free:1536210 free_pcp:7609 free_cma:0 [ 412.476187][T29924] Node 0 active_anon:122384kB inactive_anon:112592kB active_file:65168kB inactive_file:55188kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:121744kB dirty:772kB writeback:0kB shmem:179860kB kernel_stack:5952kB pagetables:9948kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.504657][T29924] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.534378][T29924] lowmem_reserve[]: 0 2881 7859 7859 [ 412.539821][T29924] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 412.571097][T29924] lowmem_reserve[]: 0 0 4978 4978 [ 412.576225][T29924] Node 0 Normal free:3182752kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:122384kB inactive_anon:112592kB active_file:65168kB inactive_file:55188kB unevictable:65572kB writepending:772kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:27300kB local_pcp:23332kB free_cma:0kB [ 412.610215][T29924] lowmem_reserve[]: 0 0 0 0 [ 412.614957][T29924] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.627749][T29924] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 412.643892][T29924] Node 0 Normal: 2508*4kB (ME) 774*8kB (UME) 282*16kB (UME) 283*32kB (UME) 297*64kB (UME) 200*128kB (UME) 254*256kB (UM) 220*512kB (UME) 128*1024kB (UM) 77*2048kB (UME) 645*4096kB (UM) = 3182752kB [ 412.663475][T29924] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 412.672917][T29924] 91493 total pagecache pages [ 412.677620][T29924] 110 pages in swap cache [ 412.681940][T29924] Free swap = 96920kB [ 412.686003][T29924] Total swap = 124996kB [ 412.690255][T29924] 2097051 pages RAM [ 412.694063][T29924] 0 pages HighMem/MovableOnly [ 412.698753][T29924] 81087 pages reserved [ 412.835379][T29949] netlink: 'syz.3.10712': attribute type 30 has an invalid length. [ 412.935357][T29962] loop5: detected capacity change from 0 to 512 [ 412.960869][T29962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.077365][T29983] Process accounting resumed [ 413.098852][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 413.098871][ T29] audit: type=1326 audit(10469.462:43950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.138603][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.170452][ T29] audit: type=1326 audit(10469.462:43951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.193821][ T29] audit: type=1326 audit(10469.462:43952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.217208][ T29] audit: type=1326 audit(10469.462:43953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.240632][ T29] audit: type=1326 audit(10469.500:43954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.264032][ T29] audit: type=1326 audit(10469.500:43955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.287340][ T29] audit: type=1326 audit(10469.500:43956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.310700][ T29] audit: type=1326 audit(10469.500:43957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.334053][ T29] audit: type=1326 audit(10469.500:43958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.357315][ T29] audit: type=1326 audit(10469.500:43959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29988 comm="syz.0.10729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 413.880003][T30038] IPVS: lc: FWM 3 0x00000003 - no destination available [ 413.935180][T30044] loop5: detected capacity change from 0 to 164 [ 413.944053][T30044] bio_check_eod: 4045 callbacks suppressed [ 413.944067][T30044] syz.5.10753: attempt to access beyond end of device [ 413.944067][T30044] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 413.964094][T30044] syz.5.10753: attempt to access beyond end of device [ 413.964094][T30044] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 414.071515][T30057] veth0_to_team: entered promiscuous mode [ 414.614038][T30087] veth0_to_team: left promiscuous mode [ 414.619703][T30087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.635727][ T5683] lo speed is unknown, defaulting to 1000 [ 414.641475][ T5683] sz1: Port: 1 Link DOWN [ 414.655666][ T5683] ip6_vti0 speed is unknown, defaulting to 1000 [ 414.661965][ T5683] syz2: Port: 1 Link DOWN [ 414.751204][ T9] lo speed is unknown, defaulting to 1000 [ 414.757045][ T9] ip6_vti0 speed is unknown, defaulting to 1000 [ 415.054383][T30122] __nla_validate_parse: 7 callbacks suppressed [ 415.054398][T30122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10785'. [ 415.084177][T30122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10785'. [ 415.281742][T30137] loop5: detected capacity change from 0 to 512 [ 415.292994][T30137] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 415.302416][T30137] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 415.442329][T30137] FAT-fs (loop5): FAT read failed (blocknr 128) [ 415.785928][T30188] Process accounting resumed [ 415.895689][T30211] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10823'. [ 415.940395][T30215] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 415.949126][T30215] netlink: 32 bytes leftover after parsing attributes in process `ÿ'. [ 416.673261][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10842'. [ 416.682938][T30253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10842'. [ 417.827449][T30339] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 417.921116][T30353] bridge: RTM_NEWNEIGH with invalid ether address [ 417.935465][T30355] netlink: 'syz.3.10885': attribute type 3 has an invalid length. [ 419.757542][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 419.757567][ T29] audit: type=1326 audit(10475.692:44008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30386 comm="syz.5.10897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x0 [ 420.759609][T30420] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 420.783521][ T29] audit: type=1400 audit(10476.656:44009): avc: denied { ioctl } for pid=30405 comm="syz.0.10905" path="socket:[87804]" dev="sockfs" ino=87804 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 420.995723][ T29] audit: type=1326 audit(10476.852:44010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30441 comm="syz.5.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 421.021153][ T29] audit: type=1326 audit(10476.871:44011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30441 comm="syz.5.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 421.044506][ T29] audit: type=1326 audit(10476.871:44012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30441 comm="syz.5.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 421.067786][ T29] audit: type=1326 audit(10476.871:44013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30441 comm="syz.5.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 421.092034][ T29] audit: type=1326 audit(10476.946:44014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30441 comm="syz.5.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 421.130764][ T29] audit: type=1326 audit(10476.964:44015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30441 comm="syz.5.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 421.154157][ T29] audit: type=1326 audit(10476.964:44016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30441 comm="syz.5.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 421.177472][ T29] audit: type=1326 audit(10476.964:44017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30441 comm="syz.5.10922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 421.205921][T30454] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10925'. [ 421.327194][T30465] loop5: detected capacity change from 0 to 512 [ 421.335395][T30465] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.10932: iget: bad i_size value: 38620345925642 [ 421.348696][T30465] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.10932: couldn't read orphan inode 15 (err -117) [ 421.361387][T30465] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.377361][T30465] EXT4-fs error (device loop5): ext4_check_all_de:659: inode #12: block 7: comm syz.5.10932: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 421.406617][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.584609][T30498] netlink: 131740 bytes leftover after parsing attributes in process `syz.6.10943'. [ 421.595871][T30498] netlink: zone id is out of range [ 421.601103][T30498] netlink: zone id is out of range [ 421.609463][T30498] netlink: zone id is out of range [ 421.614891][T30498] netlink: zone id is out of range [ 421.620075][T30498] netlink: zone id is out of range [ 421.625480][T30498] netlink: del zone limit has 8 unknown bytes [ 421.760321][T30517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10951'. [ 421.868161][T30535] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10959'. [ 422.165737][T30553] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.10967'. [ 422.188271][T30553] netlink: zone id is out of range [ 422.193531][T30553] netlink: zone id is out of range [ 422.209653][T30553] netlink: zone id is out of range [ 422.219556][T30553] netlink: zone id is out of range [ 422.309607][T30573] bridge0: entered promiscuous mode [ 422.317946][T30573] bridge0: port 1(macsec1) entered blocking state [ 422.320604][T30575] netlink: 'syz.1.10979': attribute type 10 has an invalid length. [ 422.324609][T30573] bridge0: port 1(macsec1) entered disabled state [ 422.339632][T30573] macsec1: entered allmulticast mode [ 422.345051][T30573] bridge0: entered allmulticast mode [ 422.351061][T30573] macsec1: left allmulticast mode [ 422.356216][T30573] bridge0: left allmulticast mode [ 422.362231][T30573] bridge0: left promiscuous mode [ 422.830383][T30611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10994'. [ 422.941135][T30629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11008'. [ 422.955060][T30626] veth0_to_team: entered promiscuous mode [ 422.989785][T30634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11003'. [ 422.999049][T30634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11003'. [ 426.172224][T30824] __nla_validate_parse: 18 callbacks suppressed [ 426.172241][T30824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11099'. [ 426.327036][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 426.327033][T30843] sctp: [Deprecated]: syz.1.11097 (pid 30843) Use of int in maxseg socket option. [ 426.327033][T30843] Use struct sctp_assoc_value instead [ 426.327053][ T29] audit: type=1400 audit(10481.838:44451): avc: denied { getopt } for pid=30842 comm="syz.1.11097" lport=49883 faddr=fe88::2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 426.334432][T30844] loop5: detected capacity change from 0 to 512 [ 426.397741][T30852] netlink: 172 bytes leftover after parsing attributes in process `syz.1.11103'. [ 426.440480][T30858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11107'. [ 426.449643][T30844] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 426.468504][T30844] System zones: 0-2, 18-18, 34-34 [ 426.481164][T30844] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.11100: bg 0: block 248: padding at end of block bitmap is not set [ 426.514235][T30844] Quota error (device loop5): write_blk: dquota write failed [ 426.521889][T30844] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 426.553450][T30844] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.11100: Failed to acquire dquot type 1 [ 426.575269][T30844] EXT4-fs (loop5): 1 truncate cleaned up [ 426.587258][T30844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 426.615726][T30844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.893281][ T29] audit: type=1326 audit(10482.361:44452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30891 comm="syz.1.11131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x0 [ 426.960499][T30895] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11121'. [ 427.154643][T30923] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11135'. [ 427.212792][T30930] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11139'. [ 427.302692][T30943] loop5: detected capacity change from 0 to 164 [ 427.311620][T30943] syz.5.11144: attempt to access beyond end of device [ 427.311620][T30943] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 427.325801][T30943] syz.5.11144: attempt to access beyond end of device [ 427.325801][T30943] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 427.401890][T30951] loop5: detected capacity change from 0 to 1024 [ 427.414835][T30953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11148'. [ 427.435347][T30951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.478793][T30951] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.11147: Allocating blocks 449-513 which overlap fs metadata [ 427.497239][T30950] EXT4-fs (loop5): pa ffff8881071d5af0: logic 48, phys. 177, len 21 [ 427.498395][T30960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11150'. [ 427.505319][T30950] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 427.521927][T30960] smc: adding net device bond0 with user defined pnetid SYZ2 [ 427.533133][T30960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.545828][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.762026][T30973] tipc: Resetting bearer [ 427.796594][T30973] 0ªX¹¦À: left allmulticast mode [ 427.802106][T30973] wg2: left promiscuous mode [ 427.806831][T30973] wg2: left allmulticast mode [ 427.812496][T30973] veth0_to_team: left promiscuous mode [ 427.818655][T30973] veth2: left allmulticast mode [ 427.823613][T30973] veth4: left allmulticast mode [ 427.828817][T30973] veth6: left allmulticast mode [ 427.833869][T30973] veth8: left allmulticast mode [ 427.838848][T30973] veth10: left allmulticast mode [ 427.843861][T30973] veth12: left allmulticast mode [ 427.849036][T30973] veth14: left allmulticast mode [ 427.854180][T30973] veth16: left allmulticast mode [ 427.859307][T30973] veth18: left allmulticast mode [ 427.864391][T30973] veth20: left allmulticast mode [ 427.869676][T30973] veth22: left allmulticast mode [ 427.874718][T30973] veth24: left allmulticast mode [ 427.879923][T30973] veth26: left allmulticast mode [ 427.885044][T30973] veth28: left allmulticast mode [ 427.890192][T30973] veth30: left allmulticast mode [ 427.895269][T30973] veth32: left allmulticast mode [ 427.900425][T30973] veth34: left allmulticast mode [ 427.905547][T30973] veth36: left allmulticast mode [ 427.910567][T30973] veth38: left allmulticast mode [ 427.915815][T30973] veth40: left allmulticast mode [ 427.920849][T30973] veth42: left allmulticast mode [ 427.925901][T30973] veth44: left allmulticast mode [ 427.930960][T30973] veth46: left allmulticast mode [ 427.936133][T30973] veth48: left allmulticast mode [ 427.941239][T30973] veth50: left allmulticast mode [ 427.946280][T30973] veth52: left allmulticast mode [ 427.951295][T30973] veth54: left allmulticast mode [ 427.956344][T30973] veth56: left allmulticast mode [ 427.961368][T30973] veth58: left allmulticast mode [ 427.966438][T30973] veth60: left allmulticast mode [ 427.971456][T30973] veth62: left allmulticast mode [ 427.976720][T30973] veth64: left allmulticast mode [ 427.981845][T30973] veth66: left allmulticast mode [ 427.986957][T30973] veth68: left allmulticast mode [ 427.991972][T30973] veth70: left allmulticast mode [ 427.997083][T30973] veth72: left allmulticast mode [ 428.002232][T30973] veth74: left allmulticast mode [ 428.007433][T30973] veth76: left allmulticast mode [ 428.012495][T30973] veth78: left allmulticast mode [ 428.017476][T30973] veth80: left allmulticast mode [ 428.022593][T30973] veth82: left allmulticast mode [ 428.027571][T30973] veth84: left allmulticast mode [ 428.032666][T30973] veth86: left allmulticast mode [ 428.037850][T30973] veth88: left allmulticast mode [ 428.043021][T30973] veth90: left allmulticast mode [ 428.069238][ T29] audit: type=1326 audit(10483.447:44453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.1.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 428.092745][ T29] audit: type=1326 audit(10483.447:44454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.1.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 428.116077][ T29] audit: type=1326 audit(10483.447:44455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30977 comm="syz.1.11157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 428.273760][T30992] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11163'. [ 428.297796][ T29] audit: type=1326 audit(10483.671:44456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.5.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 428.315478][T30992] ip6gre1: entered allmulticast mode [ 428.321149][ T29] audit: type=1326 audit(10483.671:44457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.5.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 428.349622][ T29] audit: type=1326 audit(10483.671:44458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30993 comm="syz.5.11165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 428.549785][T31030] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 428.646467][T31041] netlink: 'syz.1.11181': attribute type 1 has an invalid length. [ 428.676854][T31041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 428.687641][T31041] erspan0: entered allmulticast mode [ 428.696056][T31041] bond2: (slave erspan0): making interface the new active one [ 428.705060][T31041] bond2: (slave erspan0): Enslaving as an active interface with an up link [ 428.798893][T31058] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.11186'. [ 428.947457][T31070] wireguard0: left promiscuous mode [ 428.952751][T31070] wireguard0: left allmulticast mode [ 428.965893][T31070] ip6gre1: left allmulticast mode [ 431.224604][T31169] bridge0: port 4(batadv0) entered blocking state [ 431.231231][T31169] bridge0: port 4(batadv0) entered disabled state [ 431.237979][T31169] batadv0: entered allmulticast mode [ 431.244028][T31169] batadv0: entered promiscuous mode [ 431.560598][T31198] bridge0: port 1(batadv1) entered blocking state [ 431.567116][T31198] bridge0: port 1(batadv1) entered disabled state [ 431.575819][T31198] batadv1: entered allmulticast mode [ 431.594090][T31198] batadv1: entered promiscuous mode [ 431.770437][ T9614] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 431.779797][ T9614] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 431.979116][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 431.979133][ T29] audit: type=1326 audit(10487.123:44609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc577086567 code=0x7ffc0000 [ 432.067313][ T29] audit: type=1326 audit(10487.160:44610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc57702b779 code=0x7ffc0000 [ 432.090737][ T29] audit: type=1326 audit(10487.160:44611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc577086567 code=0x7ffc0000 [ 432.114080][ T29] audit: type=1326 audit(10487.160:44612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc57702b779 code=0x7ffc0000 [ 432.137306][ T29] audit: type=1326 audit(10487.160:44613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 432.160844][ T29] audit: type=1326 audit(10487.160:44614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 432.184119][ T29] audit: type=1326 audit(10487.160:44615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 432.207542][ T29] audit: type=1326 audit(10487.160:44616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 432.230848][ T29] audit: type=1326 audit(10487.160:44617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 432.254074][ T29] audit: type=1326 audit(10487.160:44618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31214 comm="syz.1.11253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc57708f6c9 code=0x7ffc0000 [ 432.295678][ T9623] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 432.305037][ T9623] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 432.357793][T31233] bridge0: port 1(batadv1) entered blocking state [ 432.364350][T31233] bridge0: port 1(batadv1) entered disabled state [ 432.371124][T31233] batadv1: entered allmulticast mode [ 432.376987][T31233] batadv1: entered promiscuous mode [ 432.425084][T31236] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 432.451809][T31236] pim6reg: entered allmulticast mode [ 432.462691][T31236] pim6reg: left allmulticast mode [ 432.527066][T31251] netlink: 'syz.5.11267': attribute type 12 has an invalid length. [ 432.869672][T31287] __nla_validate_parse: 6 callbacks suppressed [ 432.869695][T31287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11283'. [ 432.893253][ T9652] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 432.902577][ T9652] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 433.165785][T31297] net_ratelimit: 3 callbacks suppressed [ 433.165804][T31297] bond_slave_1: mtu less than device minimum [ 433.508933][T31330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11302'. [ 433.557517][T31336] veth36: entered promiscuous mode [ 433.562788][T31336] veth36: entered allmulticast mode [ 433.666939][T31347] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11311'. [ 433.698262][T31359] netlink: 'syz.3.11324': attribute type 12 has an invalid length. [ 434.437361][T31366] bond_slave_1: mtu less than device minimum [ 434.453494][T31372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11318'. [ 434.503781][T31377] syz.6.11328 (31377): attempted to duplicate a private mapping with mremap. This is not supported. [ 434.522072][T31381] gretap0: left promiscuous mode [ 434.556822][T31381] team0: left promiscuous mode [ 434.563773][T31386] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11322'. [ 434.578947][T31381] wg2: left promiscuous mode [ 434.583657][T31381] wg2: left allmulticast mode [ 435.331424][T31420] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11337'. [ 435.740688][T31463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11358'. [ 435.751473][T31461] xt_hashlimit: max too large, truncated to 1048576 [ 435.779221][T31463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11358'. [ 435.967512][T31472] wg1 speed is unknown, defaulting to 1000 [ 435.974557][T31472] lo speed is unknown, defaulting to 1000 [ 436.016562][T31479] wg1 speed is unknown, defaulting to 1000 [ 436.021368][T31472] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.023586][T31479] lo speed is unknown, defaulting to 1000 [ 436.077846][T31479] ip6_vti0 speed is unknown, defaulting to 1000 [ 436.779559][T31498] netlink: 'syz.6.11370': attribute type 7 has an invalid length. [ 436.787549][T31498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11370'. [ 436.834868][T31501] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11371'. [ 436.957167][T31506] xt_hashlimit: max too large, truncated to 1048576 [ 437.007562][T31510] netlink: 'syz.6.11376': attribute type 1 has an invalid length. [ 437.256739][T31522] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 437.301661][T31525] syz.1.11382: vmalloc error: size 34359742464, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 437.316545][T31525] CPU: 1 UID: 0 PID: 31525 Comm: syz.1.11382 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 437.316628][T31525] Tainted: [W]=WARN [ 437.316638][T31525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 437.316656][T31525] Call Trace: [ 437.316664][T31525] [ 437.316676][T31525] __dump_stack+0x1d/0x30 [ 437.316779][T31525] dump_stack_lvl+0xe8/0x140 [ 437.316808][T31525] dump_stack+0x15/0x1b [ 437.316905][T31525] warn_alloc+0x12b/0x1a0 [ 437.316950][T31525] __vmalloc_node_range_noprof+0x9d/0xed0 [ 437.316992][T31525] ? do_user_addr_fault+0xbad/0x1080 [ 437.317034][T31525] vmalloc_user_noprof+0x7d/0xb0 [ 437.317166][T31525] ? xskq_create+0x80/0xe0 [ 437.317277][T31525] xskq_create+0x80/0xe0 [ 437.317340][T31525] xsk_init_queue+0x95/0xf0 [ 437.317412][T31525] xsk_setsockopt+0x477/0x640 [ 437.317436][T31525] ? __pfx_xsk_setsockopt+0x10/0x10 [ 437.317484][T31525] __sys_setsockopt+0x184/0x200 [ 437.317528][T31525] __x64_sys_setsockopt+0x64/0x80 [ 437.317636][T31525] x64_sys_call+0x20ec/0x3000 [ 437.317668][T31525] do_syscall_64+0xd2/0x200 [ 437.317696][T31525] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 437.317828][T31525] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 437.317888][T31525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.317914][T31525] RIP: 0033:0x7fc57708f6c9 [ 437.317935][T31525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.317960][T31525] RSP: 002b:00007fc575aef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 437.318053][T31525] RAX: ffffffffffffffda RBX: 00007fc5772e5fa0 RCX: 00007fc57708f6c9 [ 437.318071][T31525] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 437.318088][T31525] RBP: 00007fc577111f91 R08: 0000000000000004 R09: 0000000000000000 [ 437.318105][T31525] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 437.318122][T31525] R13: 00007fc5772e6038 R14: 00007fc5772e5fa0 R15: 00007fffcc6a3b98 [ 437.318147][T31525] [ 437.318154][T31525] Mem-Info: [ 437.523479][T31525] active_anon:40278 inactive_anon:28153 isolated_anon:0 [ 437.523479][T31525] active_file:16292 inactive_file:13805 isolated_file:0 [ 437.523479][T31525] unevictable:16342 dirty:64 writeback:0 [ 437.523479][T31525] slab_reclaimable:4273 slab_unreclaimable:323817 [ 437.523479][T31525] mapped:33350 shmem:52477 pagetables:2589 [ 437.523479][T31525] sec_pagetables:0 bounce:0 [ 437.523479][T31525] kernel_misc_reclaimable:0 [ 437.523479][T31525] free:1420902 free_pcp:2032 free_cma:0 [ 437.570460][T31525] Node 0 active_anon:161112kB inactive_anon:112612kB active_file:65168kB inactive_file:55220kB unevictable:65368kB isolated(anon):0kB isolated(file):0kB mapped:133400kB dirty:256kB writeback:0kB shmem:209908kB kernel_stack:6016kB pagetables:10356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 437.598841][T31525] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.628660][T31525] lowmem_reserve[]: 0 2881 7859 7859 [ 437.634081][T31525] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 437.665205][T31525] lowmem_reserve[]: 0 0 4978 4978 [ 437.670286][T31525] Node 0 Normal free:2721520kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:152876kB inactive_anon:112612kB active_file:65168kB inactive_file:55220kB unevictable:65368kB writepending:256kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:12548kB local_pcp:3616kB free_cma:0kB [ 437.704309][T31525] lowmem_reserve[]: 0 0 0 0 [ 437.708967][T31525] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.721816][T31525] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 437.738055][T31525] Node 0 Normal: 23*4kB (UME) 82*8kB (UME) 90*16kB (UME) 9*32kB (UME) 493*64kB (UME) 317*128kB (UME) 225*256kB (UM) 197*512kB (UME) 80*1024kB (UM) 77*2048kB (UME) 549*4096kB (UM) = 2721388kB [ 437.757152][T31525] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 437.766476][T31525] 99048 total pagecache pages [ 437.771163][T31525] 115 pages in swap cache [ 437.775485][T31525] Free swap = 96896kB [ 437.779605][T31525] Total swap = 124996kB [ 437.783826][T31525] 2097051 pages RAM [ 437.787692][T31525] 0 pages HighMem/MovableOnly [ 437.792372][T31525] 81087 pages reserved [ 438.036753][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 438.036842][ T29] audit: type=1326 audit(10492.791:44667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.084652][ T29] audit: type=1326 audit(10492.791:44668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.092750][T31531] wg1 speed is unknown, defaulting to 1000 [ 438.108093][ T29] audit: type=1326 audit(10492.829:44669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.137030][ T29] audit: type=1326 audit(10492.829:44670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.138010][T31531] lo speed is unknown, defaulting to 1000 [ 438.160428][ T29] audit: type=1326 audit(10492.829:44671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.189387][ T29] audit: type=1326 audit(10492.829:44672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.212744][ T29] audit: type=1326 audit(10492.829:44673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.236230][ T29] audit: type=1326 audit(10492.829:44674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.259610][ T29] audit: type=1326 audit(10492.829:44675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.280556][T31531] ip6_vti0 speed is unknown, defaulting to 1000 [ 438.283005][ T29] audit: type=1326 audit(10492.829:44676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31554 comm="syz.3.11395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33b17af6c9 code=0x7ffc0000 [ 438.536330][T31578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11401'. [ 439.062808][T31612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11417'. [ 439.130779][T31606] wg1 speed is unknown, defaulting to 1000 [ 439.137595][T31606] lo speed is unknown, defaulting to 1000 [ 439.175838][T31606] ip6_vti0 speed is unknown, defaulting to 1000 [ 439.613521][T31638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11426'. [ 440.075511][T31655] netlink: 60 bytes leftover after parsing attributes in process `syz.5.11434'. [ 440.323994][T31680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11442'. [ 440.425955][T31687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11448'. [ 440.523273][T31687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11448'. [ 440.633240][T31705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11456'. [ 440.756775][T31714] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 440.765446][T31714] hsr_slave_0: left promiscuous mode [ 440.771177][T31714] hsr_slave_1: left promiscuous mode [ 440.870318][T31718] veth38: entered promiscuous mode [ 440.875651][T31718] veth38: entered allmulticast mode [ 440.911934][T31726] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11464'. [ 441.045613][T31734] pimreg: entered allmulticast mode [ 441.051694][T31734] pimreg: left allmulticast mode [ 441.149272][T31741] netlink: 'syz.0.11471': attribute type 142 has an invalid length. [ 441.540045][T31763] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 441.595922][T31771] xt_hashlimit: max too large, truncated to 1048576 [ 441.620130][T31773] netlink: 'syz.0.11485': attribute type 30 has an invalid length. [ 441.632520][ T9683] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.641169][ T9683] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.653400][ T9683] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.662212][ T9683] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.177740][T31783] netlink: 'syz.6.11489': attribute type 30 has an invalid length. [ 442.263680][T31785] bond_slave_1: mtu less than device minimum [ 442.422999][T31807] netlink: 'syz.1.11500': attribute type 16 has an invalid length. [ 442.431058][T31807] netlink: 'syz.1.11500': attribute type 17 has an invalid length. [ 442.451530][T31807] erspan0: left allmulticast mode [ 442.476355][T31807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.484753][T31807] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.494253][T31807] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 442.647367][T31819] wg2: entered promiscuous mode [ 442.652320][T31819] wg2: entered allmulticast mode [ 442.707807][T31821] loop5: detected capacity change from 0 to 2048 [ 442.725796][T31821] EXT4-fs (loop5): cluster size (2048) smaller than block size (4096) [ 443.360861][T31845] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.695729][T31883] netlink: 'syz.1.11531': attribute type 2 has an invalid length. [ 443.703700][T31883] netlink: 'syz.1.11531': attribute type 2 has an invalid length. [ 443.711558][T31883] netlink: 'syz.1.11531': attribute type 1 has an invalid length. [ 444.339630][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 444.339743][ T29] audit: type=1326 audit(10498.684:45216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.385611][ T29] audit: type=1326 audit(10498.684:45217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.408966][ T29] audit: type=1326 audit(10498.722:45218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.432245][ T29] audit: type=1326 audit(10498.722:45219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.455678][ T29] audit: type=1326 audit(10498.722:45220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.479073][ T29] audit: type=1326 audit(10498.722:45221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.502229][ T29] audit: type=1326 audit(10498.722:45222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.525726][ T29] audit: type=1326 audit(10498.722:45223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.549150][ T29] audit: type=1326 audit(10498.722:45224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.572473][ T29] audit: type=1326 audit(10498.722:45225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31894 comm="syz.5.11535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f1cf6c9 code=0x7ffc0000 [ 444.676220][T31911] __nla_validate_parse: 4 callbacks suppressed [ 444.676395][T31911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11542'. [ 444.916445][T31942] 9pnet_fd: Insufficient options for proto=fd [ 445.194938][T31968] loop5: detected capacity change from 0 to 512 [ 445.203211][T31968] EXT4-fs: Ignoring removed bh option [ 445.214296][T31968] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 445.226140][T31968] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.11562: Invalid block bitmap block 0 in block_group 0 [ 445.240129][T31968] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 445.249085][T31968] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.11562: attempt to clear invalid blocks 983261 len 1 [ 445.262889][T31968] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.11562: Invalid inode table block 0 in block_group 0 [ 445.275882][T31968] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 445.297779][T31968] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 445.306762][T31968] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.11562: Invalid inode table block 0 in block_group 0 [ 445.319778][T31968] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 445.329403][T31968] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.11562: mark_inode_dirty error [ 445.342903][T31968] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 445.352206][T31968] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.11562: Invalid inode table block 0 in block_group 0 [ 445.365560][T31968] EXT4-fs (loop5): 1 truncate cleaned up [ 445.371734][T31968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.490339][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.585343][T31987] blktrace: Concurrent blktraces are not allowed on loop10 [ 445.652368][T31976] wg1 speed is unknown, defaulting to 1000 [ 445.662545][T31976] lo speed is unknown, defaulting to 1000 [ 445.742906][T31976] ip6_vti0 speed is unknown, defaulting to 1000 [ 445.862701][T32008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11580'. [ 445.871799][T32008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11580'. [ 445.880864][T32008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11580'. [ 445.889909][T32008] netlink: 2 bytes leftover after parsing attributes in process `syz.6.11580'. [ 445.914236][T32008] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11580'. [ 445.961852][T32008] IPVS: lc: FWM 3 0x00000003 - no destination available [ 446.254155][T32041] netlink: 'syz.3.11594': attribute type 3 has an invalid length. [ 446.262129][T32041] netlink: 'syz.3.11594': attribute type 7 has an invalid length. [ 446.270003][T32041] netlink: 198828 bytes leftover after parsing attributes in process `syz.3.11594'. [ 446.415437][T32048] loop5: detected capacity change from 0 to 128 [ 446.428612][T32048] syz.5.11597: attempt to access beyond end of device [ 446.428612][T32048] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 446.454563][T32048] syz.5.11597: attempt to access beyond end of device [ 446.454563][T32048] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 446.468138][T32048] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 446.476967][T32048] syz.5.11597: attempt to access beyond end of device [ 446.476967][T32048] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 446.490619][T32048] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 446.500248][T32048] syz.5.11597: attempt to access beyond end of device [ 446.500248][T32048] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 446.581782][T32047] syz.5.11597: attempt to access beyond end of device [ 446.581782][T32047] loop5: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 446.595371][T32047] Buffer I/O error on dev loop5, logical block 77, lost async page write [ 446.604461][T32047] syz.5.11597: attempt to access beyond end of device [ 446.604461][T32047] loop5: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 446.618141][T32047] Buffer I/O error on dev loop5, logical block 78, lost async page write [ 446.628043][T32047] syz.5.11597: attempt to access beyond end of device [ 446.628043][T32047] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 446.641724][T32047] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 446.650426][T32047] syz.5.11597: attempt to access beyond end of device [ 446.650426][T32047] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 446.664081][T32047] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 446.889944][T32068] loop5: detected capacity change from 0 to 512 [ 446.908312][T32068] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 446.931746][T32068] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.11604: Invalid block bitmap block 0 in block_group 0 [ 446.951879][T32068] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 446.962181][T32068] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.11604: attempt to clear invalid blocks 983261 len 1 [ 446.976182][T32068] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.11604: Invalid inode table block 0 in block_group 0 [ 446.997233][T32068] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 447.007323][T32068] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 447.016283][T32068] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.11604: Invalid inode table block 0 in block_group 0 [ 447.031070][T32068] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 447.040838][T32068] EXT4-fs error (device loop5): ext4_truncate:4637: inode #11: comm syz.5.11604: mark_inode_dirty error [ 447.052851][T32068] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 447.061979][T32068] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz.5.11604: Invalid inode table block 0 in block_group 0 [ 447.076577][T32068] EXT4-fs (loop5): 1 truncate cleaned up [ 447.082889][T32068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.125932][T32078] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.11608'. [ 447.126713][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.169991][T32083] wg2: entered promiscuous mode [ 447.174905][T32083] wg2: entered allmulticast mode [ 447.211154][T32088] loop5: detected capacity change from 0 to 512 [ 447.241964][T32088] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.271132][T32088] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.326485][T32101] loop5: detected capacity change from 0 to 164 [ 447.350033][T32101] syz.5.11618: attempt to access beyond end of device [ 447.350033][T32101] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 447.375182][T32101] syz.5.11618: attempt to access beyond end of device [ 447.375182][T32101] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 447.401602][T32092] wg1 speed is unknown, defaulting to 1000 [ 447.408174][T32092] lo speed is unknown, defaulting to 1000 [ 447.448462][T32092] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.072298][T32130] netlink: 87 bytes leftover after parsing attributes in process `syz.3.11631'. [ 448.782253][T32194] wg1 speed is unknown, defaulting to 1000 [ 448.789000][T32194] lo speed is unknown, defaulting to 1000 [ 448.829301][T32194] ip6_vti0 speed is unknown, defaulting to 1000 [ 448.972069][T32211] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11666'. [ 448.981875][T32211] netlink: 'syz.6.11666': attribute type 16 has an invalid length. [ 449.335779][T32236] netlink: 'syz.5.11673': attribute type 16 has an invalid length. [ 449.343800][T32236] netlink: 'syz.5.11673': attribute type 17 has an invalid length. [ 449.381759][T32236] 0ªX¹¦À: left allmulticast mode [ 449.386826][T32236] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 449.418025][T32236] loop5: detected capacity change from 0 to 512 [ 449.445577][T32236] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.11673: iget: bad extra_isize 90 (inode size 256) [ 449.477483][T32236] EXT4-fs (loop5): Remounting filesystem read-only [ 449.487255][T32236] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 449.501689][T32236] EXT4-fs (loop5): 1 orphan inode deleted [ 449.517387][T32236] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.587823][ T4930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.257807][T32284] netlink: 'syz.6.11689': attribute type 3 has an invalid length. [ 450.265700][T32284] netlink: 'syz.6.11689': attribute type 7 has an invalid length. [ 450.273555][T32284] __nla_validate_parse: 2 callbacks suppressed [ 450.273643][T32284] netlink: 198828 bytes leftover after parsing attributes in process `syz.6.11689'. [ 450.614981][T32295] blktrace: Concurrent blktraces are not allowed on loop6 [ 450.772567][T32311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11699'. [ 450.786038][T32311] tipc: Disabling bearer [ 450.795035][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 450.795052][ T29] audit: type=1326 audit(10504.727:45845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 450.825667][ T29] audit: type=1326 audit(10504.755:45846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 450.849048][ T29] audit: type=1326 audit(10504.755:45847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 450.872389][ T29] audit: type=1326 audit(10504.755:45848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 450.933476][T32318] netlink: 'syz.1.11705': attribute type 1 has an invalid length. [ 450.949892][ T29] audit: type=1326 audit(10504.755:45849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 450.973220][ T29] audit: type=1326 audit(10504.755:45850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 450.979722][T32320] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.11706'. [ 450.996578][ T29] audit: type=1326 audit(10504.755:45851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 450.996677][ T29] audit: type=1326 audit(10504.755:45852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 451.034527][T32320] netlink: zone id is out of range [ 451.052464][ T29] audit: type=1326 audit(10504.755:45853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 451.057703][T32320] netlink: zone id is out of range [ 451.086121][ T29] audit: type=1326 audit(10504.802:45854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.0.11701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f680f01f6c9 code=0x7ffc0000 [ 451.127533][T32320] netlink: zone id is out of range [ 451.133588][T32320] netlink: zone id is out of range [ 451.139077][T32320] netlink: zone id is out of range [ 451.144275][T32320] netlink: zone id is out of range [ 451.149420][T32320] netlink: zone id is out of range [ 451.154711][T32320] netlink: zone id is out of range [ 451.159856][T32320] netlink: zone id is out of range [ 451.215574][T32331] block device autoloading is deprecated and will be removed. [ 451.798238][T32349] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11717'. [ 452.389149][ T9644] ================================================================== [ 452.397283][ T9644] BUG: KCSAN: data-race in alloc_pid / copy_process [ 452.403891][ T9644] [ 452.406221][ T9644] read-write to 0xffffffff8685ff98 of 4 bytes by task 37 on cpu 1: [ 452.414112][ T9644] alloc_pid+0x539/0x720 [ 452.418360][ T9644] copy_process+0xe25/0x2000 [ 452.422978][ T9644] kernel_clone+0x16c/0x5c0 [ 452.427497][ T9644] user_mode_thread+0x7d/0xb0 [ 452.432187][ T9644] call_usermodehelper_exec_work+0x7a/0x160 [ 452.438083][ T9644] process_scheduled_works+0x4ce/0x9d0 [ 452.443560][ T9644] worker_thread+0x582/0x770 [ 452.448156][ T9644] kthread+0x489/0x510 [ 452.452230][ T9644] ret_from_fork+0x122/0x1b0 [ 452.456822][ T9644] ret_from_fork_asm+0x1a/0x30 [ 452.461612][ T9644] [ 452.463948][ T9644] read to 0xffffffff8685ff98 of 4 bytes by task 9644 on cpu 0: [ 452.471507][ T9644] copy_process+0x17fc/0x2000 [ 452.476212][ T9644] kernel_clone+0x16c/0x5c0 [ 452.480734][ T9644] user_mode_thread+0x7d/0xb0 [ 452.485427][ T9644] call_usermodehelper_exec_work+0x7a/0x160 [ 452.491325][ T9644] process_scheduled_works+0x4ce/0x9d0 [ 452.496803][ T9644] worker_thread+0x582/0x770 [ 452.501396][ T9644] kthread+0x489/0x510 [ 452.505469][ T9644] ret_from_fork+0x122/0x1b0 [ 452.510150][ T9644] ret_from_fork_asm+0x1a/0x30 [ 452.514969][ T9644] [ 452.517291][ T9644] value changed: 0x800001b5 -> 0x800001b6 [ 452.523008][ T9644] [ 452.525326][ T9644] Reported by Kernel Concurrency Sanitizer on: [ 452.531495][ T9644] CPU: 0 UID: 0 PID: 9644 Comm: kworker/u8:42 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 452.543044][ T9644] Tainted: [W]=WARN [ 452.546842][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 452.556899][ T9644] Workqueue: events_unbound call_usermodehelper_exec_work [ 452.564023][ T9644] ================================================================== [ 453.231399][T32397] wg1 speed is unknown, defaulting to 1000 [ 453.242827][T32397] lo speed is unknown, defaulting to 1000 [ 453.474535][T32397] ip6_vti0 speed is unknown, defaulting to 1000