last executing test programs: 2m7.204013911s ago: executing program 3 (id=1424): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9ff96e3e6ab7b53e, 0x0, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfd2f}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000080)) 2m7.115029309s ago: executing program 3 (id=1427): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r3 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x1e9) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f00000003c0)="85e9bcc00906f29a1c8dc4c374a02954f2cd99565ab7c4016291aa74fabedc6d04df1912f35d15cc0ce5866cd76cbc9f8c6198", 0x33}, {0x0}], 0x2, 0x2000, 0x0, 0x3) write(r0, &(0x7f0000000300), 0x0) 2m5.915224156s ago: executing program 3 (id=1453): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff3, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x44044) 2m5.786094587s ago: executing program 3 (id=1457): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000001480)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) lgetxattr(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 2m5.657972058s ago: executing program 3 (id=1459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000840)="0b42a596edafee7a4d4ab50fa4719e13a85655ce2d1b064449c08e3b7579f4d98778d34a6ca2037729904179c32dbcb852521c8adaa495377d1fb14b4045cf0dce7d5c24ac9febb9ee4476f8ebeef0a4c55bad25d121b54e626a984ffef35f7ee98c1d395d8499a04e4f367e4726bca610a3f92ecc69c1c9540a647bbd278166818b1f7467", 0x85}], 0x1}, 0x40010) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f00000000c0), 0x66) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 2m5.335812157s ago: executing program 3 (id=1466): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7, 0xfffffffb}}}}, 0x588) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50) setresgid(0xee01, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x200408c4) 2m5.312533429s ago: executing program 32 (id=1466): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x2b8, 0x2e8, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x4, 0x2, 0x1000, 0x6, 0x40000003}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7, 0xfffffffb}}}}, 0x588) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x50) setresgid(0xee01, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30040043}, 0x200408c4) 50.345821562s ago: executing program 0 (id=2566): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xff}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}}, 0x0) 50.304428846s ago: executing program 0 (id=2568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 49.382045618s ago: executing program 0 (id=2573): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d1605040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000085000000050000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) signalfd(r2, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r3}) 49.291688285s ago: executing program 0 (id=2577): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400e, &(0x7f0000000300), 0x1, 0x440, &(0x7f0000000cc0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0xf9, 0x7ffc1ffb}]}) clock_settime(0xfffffffb, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc496cf5de499ae74, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0x1800, 0x400}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 49.111844632s ago: executing program 0 (id=2580): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 48.889283171s ago: executing program 0 (id=2595): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000600)=ANY=[], 0x6a5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x4, 0x3}}, 0x2e) write$char_usb(r2, &(0x7f0000002600)="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", 0x92e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 48.761361653s ago: executing program 33 (id=2595): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) write$binfmt_elf32(r2, &(0x7f0000000600)=ANY=[], 0x6a5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x4, 0x3}}, 0x2e) write$char_usb(r2, &(0x7f0000002600)="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", 0x92e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 5.989071728s ago: executing program 6 (id=3052): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 5.215429017s ago: executing program 6 (id=3064): socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) 3.464942072s ago: executing program 5 (id=3084): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x22029, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x70, 0x0, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000004cc0)={0x2, 0x80, 0x3a, 0x2, 0x0, 0x0, 0x0, 0x9, 0x500, 0xe, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x81, 0x40, 0x1, 0x9, 0x9, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x12, 0x2000035e, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000630120000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.212293834s ago: executing program 5 (id=3087): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) pipe2(0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x8b25714e) accept4(r1, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.000040344s ago: executing program 5 (id=3088): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000b8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_qrtr_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 2.509462357s ago: executing program 2 (id=3093): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) chroot(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r0, @ANYBLOB="0100000000000000000011"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 2.422148045s ago: executing program 2 (id=3094): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) 2.291284126s ago: executing program 5 (id=3097): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fffffffffffffff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@commit}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xf0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x2000000000020000}, 0x103328, 0x6, 0x0, 0x9, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x84, 0x75ea, 0x800004}) 2.268286858s ago: executing program 2 (id=3098): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xfc, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200, 0x2, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="a1ab0000ffff00000000320000000800170156"], 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1.870387604s ago: executing program 2 (id=3101): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0x0, &(0x7f0000000040)) 1.761191313s ago: executing program 5 (id=3103): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f0000001200)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x18) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x23, 0x80805, 0x0) listen(r2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x80) connect$phonet_pipe(r2, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) 1.433011763s ago: executing program 2 (id=3106): epoll_create(0x3ff) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a0000000500"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) rt_sigtimedwait(&(0x7f00000000c0)={[0x9]}, &(0x7f0000000100), &(0x7f0000000200)={0x0, 0x989680}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11000009}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa2c806554a5bb67b, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) 1.265302627s ago: executing program 1 (id=3112): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4008084) 1.223939551s ago: executing program 1 (id=3113): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x6, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1210090, &(0x7f00000004c0)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b22b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e32e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02", @ANYRES64, @ANYRESHEX], 0x1, 0x277, &(0x7f00000001c0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) wait4(r0, 0x0, 0x40000000, 0x0) wait4(0x0, 0x0, 0x40000000, &(0x7f0000000600)) ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f0000000200)) 1.002460271s ago: executing program 6 (id=3114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 892.269491ms ago: executing program 6 (id=3116): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44000) 852.850354ms ago: executing program 5 (id=3117): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, r4, 0x309, 0x0, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}]}, 0x20}}, 0x0) 614.536065ms ago: executing program 6 (id=3118): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000040)=0x5, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff22}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0xc}}], 0x2, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 557.58393ms ago: executing program 1 (id=3119): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x120c042, &(0x7f0000000840)={[{@nodiscard}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@debug}, {@minixdf}, {}, {@noauto_da_alloc}, {@noauto_da_alloc}], [{@seclabel}]}, 0x1, 0x5e7, &(0x7f0000001400)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pt22s4Uubacyn0+ydOa9nb7vsP3uvH373m4AlTWY/lOL2BsR00lEfzK/WNcZWeXgwv3u/f3J6fSWRL3+xp9JJFlZfv8k+9mXHdwTET//lMSejtXtzsxdOT8+NTV5Odsfnr0wPTwzd+XguQvjZyfPTl4cfWn02NEjR4+N7G/rvK4WlJ28/v6H/Z+Nvf3dN/8kI9//NpbE8Xg1u2PzeWyUwRhs/J8kq6v6jm10YyXpyP5Omh/ipLPEgFiX/PHrioinoj86YunB649PXys1OGBT1ZOIOlBRifyHisr7Aflr+5Wvg2ul9EqArXD3xMIAwOr871wYG4yextjAzntJNA/rJBFxaAPa3xURt2+NXT9za+x6bNI4HFBs/lpEPF2U/0kj/weiJwYa+V9blv9pv+BU9jMtf73N9lcOFct/2DoL+d+zZv5Hi/x/pyn/322z/cGlzfd6l+V/b7unBAAAAAAAAJV180REvFj0/n9tcf5PFMz/6YuI4xvQ/uCK/dXv/9fubEAzQIG7JyJeaZ7/G7XF/M9m/w50ZFuPNeYDdCVnzk1NHoqIxyPiQHTtSPdH1mjj4Od7vm5VN5jN/8tvaQy3s7mAWRx3OncsP2ZifHb8Yc8biLh7LeKZwvm/yeL1Pym4/qfPB9Nr/N7m9eB7nr9xqtX97p//wGapfxuxv3D9z9KnViRrfj7HoeFGf2A47xWs9uzHX/zQqv12899HTMDDS6//O9fO/4Gk+fN6ZtbfxuG5znqrunb7/93Jm40uRndW9tH47OzlkYju5GRHWrqsfHT9McMjp2spH/J8SfP/wHNrj/8V9f97I2J+xa9P/lq+pjj35L99v7cKSf8fypPm/8S6rv/r3xi9MfBjq/Yf7Pp/pHGtP5CVGP+DBV/ladq9vLwgHTuLqrY6XgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHF7VptaCiiLyKeiJ21qUszsy+cufTBxYm0rvH9/7X8m377F/aT/Pv/B5r2R1fsH46I3RHxZUdvY3/o9KWpibJPHgAAAAAAAAAAAAAAAAAAALaJvhbr/1N/dJQdHbDpOssOAChNQf7/UkYcwNZz/Yfqkv9QXfIfqkv+Q3XJf6gu+Q/VJf+hutrJf3MDAQAAAABg29q97+avSUTMv9zbuKW6s7quUiMDNlut7ACA0ngbH6rL1D+oLq/xgeQ+9T0tD7rfkWuZPv0QBwMAAAAAAAAAAABA5ezfa/0/VJX1/1Bd1v9DdeXr//eVHAew9bzGB6JgJX/zc0Ph+v/CowAAAAAAAAAAAACAzTIzd+X8+NTU5GUbb22PMLZyo16vX03/CrZLPP/zjXwq/HaJZ8VGvtbvwY4q7zkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY7r8AAAD//7wNI2E=") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, r0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x1, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) 395.811005ms ago: executing program 2 (id=3120): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0xfffffffff7ffffdc}, 0x18) mount$nfs4(0x0, 0x0, 0x0, 0x10, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 364.641587ms ago: executing program 4 (id=3121): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x36, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="871000000000000000000100000008000300000001000500060000000000050005"], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) 324.226881ms ago: executing program 4 (id=3122): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@deltclass={0x24, 0x29, 0x2, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff2}, {0xb, 0xfff3}, {0xffff, 0x9}}}, 0x24}}, 0x74000800) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) syz_open_dev$vcsn(&(0x7f0000000380), 0x3622, 0x200000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 209.127841ms ago: executing program 1 (id=3123): r0 = memfd_secret(0x80000) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) set_mempolicy(0x8006, 0x0, 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x3, 0x81, 0x0}) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, 0x0, 0x0) 190.040323ms ago: executing program 4 (id=3124): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xb3}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 121.157229ms ago: executing program 1 (id=3125): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 72.189593ms ago: executing program 4 (id=3126): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', '.'}, 0x5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x7, 0x335, &(0x7f0000000a40)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00'}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x484, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x100008000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 30.892897ms ago: executing program 4 (id=3127): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4000000}, 0x18) r3 = syz_io_uring_setup(0x4b7, &(0x7f0000010400)={0x0, 0x6fb9, 0x40, 0x3}, &(0x7f0000010080), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, 0xfffffffffffffffe, 0x0) 22.261478ms ago: executing program 1 (id=3128): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000240)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 1.996949ms ago: executing program 4 (id=3129): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x100a0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2ef}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 0s ago: executing program 6 (id=3139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) socket$nl_route(0x10, 0x3, 0x0) unshare(0x64000600) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, 0xd, @loopback, @empty, 0x700, 0x0, 0xfffffffc}}) kernel console output (not intermixed with test programs): 20000 - 0 [ 181.119456][T12174] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 181.179502][T12174] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 181.248541][T12179] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2232'. [ 181.275170][T12181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2233'. [ 181.315868][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 181.315886][ T29] audit: type=1326 audit(181.290:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.320156][T12185] loop0: detected capacity change from 0 to 164 [ 181.322147][ T29] audit: type=1326 audit(181.290:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.374207][ T29] audit: type=1326 audit(181.290:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.397267][ T29] audit: type=1326 audit(181.290:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.420196][ T29] audit: type=1326 audit(181.290:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.443085][ T29] audit: type=1326 audit(181.290:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.465970][ T29] audit: type=1326 audit(181.290:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.488903][ T29] audit: type=1326 audit(181.290:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.511778][ T29] audit: type=1326 audit(181.290:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.534696][ T29] audit: type=1326 audit(181.290:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12184 comm="syz.0.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 181.559173][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.571551][ T4015] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.597420][ T4015] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.625966][ T4015] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.639848][ T4015] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.679412][T12192] loop4: detected capacity change from 0 to 512 [ 181.686477][T12192] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 181.712362][T12192] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 181.722708][T12192] FAT-fs (loop4): Filesystem has been set read-only [ 181.778935][T12200] netlink: 'syz.4.2242': attribute type 3 has an invalid length. [ 182.714332][T12221] loop5: detected capacity change from 0 to 1024 [ 182.851647][T12221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.192483][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.762065][T12243] uprobe: syz.0.2257:12243 failed to unregister, leaking uprobe [ 184.017266][T12250] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.027164][T12250] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.201328][T12250] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.211276][T12250] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.232365][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2263'. [ 184.316126][T12250] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.325991][T12250] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.359431][T12264] loop0: detected capacity change from 0 to 128 [ 184.463316][T12250] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.473294][T12250] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.564415][ T3989] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.572689][ T3989] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.598272][ T3989] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.606623][ T3989] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.624690][ T3989] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.632975][ T3989] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.643593][ T3989] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.651848][ T3989] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.729056][T12278] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2272'. [ 184.781117][T12282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2273'. [ 184.849241][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2275'. [ 185.003951][T12293] loop0: detected capacity change from 0 to 512 [ 185.043735][T12293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.046499][T12296] tipc: Started in network mode [ 185.061201][T12296] tipc: Node identity 84e, cluster identity 4711 [ 185.067643][T12296] tipc: Node number set to 2126 [ 185.133934][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.286293][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2285'. [ 185.311031][T12314] loop0: detected capacity change from 0 to 1024 [ 185.416931][T12314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.563247][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.219804][T12361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2301'. [ 186.356246][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 186.356267][ T29] audit: type=1326 audit(186.330:8562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.431176][ T29] audit: type=1326 audit(186.330:8563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.454335][ T29] audit: type=1326 audit(186.370:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.461706][T12371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2307'. [ 186.477556][ T29] audit: type=1326 audit(186.370:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.509418][ T29] audit: type=1326 audit(186.370:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.532472][ T29] audit: type=1326 audit(186.370:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.552354][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 186.555372][ T29] audit: type=1326 audit(186.380:8568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.564382][T12375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 186.587217][ T29] audit: type=1326 audit(186.380:8569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.618933][ T29] audit: type=1326 audit(186.380:8570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.641964][ T29] audit: type=1326 audit(186.380:8571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12364 comm="syz.2.2305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 186.743935][T12301] loop4: detected capacity change from 0 to 512 [ 186.840785][T12301] EXT4-fs (loop4): orphan cleanup on readonly fs [ 186.858699][T12301] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.4.2277: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 186.888478][T12301] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.4.2277: ea_inode dec ref err=-117 [ 186.901586][T12301] EXT4-fs (loop4): 1 orphan inode deleted [ 186.909081][T12301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 186.955822][T12386] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2313'. [ 187.099535][T12394] netlink: 'syz.5.2316': attribute type 4 has an invalid length. [ 187.144591][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.468734][T12405] loop5: detected capacity change from 0 to 512 [ 187.475485][T12405] EXT4-fs: Ignoring removed nobh option [ 187.484723][T12405] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 187.493433][T12405] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2320: invalid indirect mapped block 256 (level 1) [ 187.512647][T12405] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.2320: invalid indirect mapped block 2683928664 (level 1) [ 187.569666][T12405] EXT4-fs (loop5): 1 truncate cleaned up [ 187.575872][T12405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.635865][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.787707][T12414] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 188.307272][T12391] loop0: detected capacity change from 0 to 512 [ 188.324133][T12391] EXT4-fs: Ignoring removed i_version option [ 188.336073][T12391] EXT4-fs (loop0): orphan cleanup on readonly fs [ 188.346704][T12391] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.2315: EA inode hash validation failed [ 188.359525][T12391] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 188.372706][T12391] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.2315: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 188.388025][T12391] EXT4-fs (loop0): Remounting filesystem read-only [ 188.394625][T12391] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.0.2315: ea_inode dec ref err=-117 [ 188.407689][T12391] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 188.416846][T12391] EXT4-fs (loop0): 1 orphan inode deleted [ 188.429709][T12391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 188.454316][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.582174][T12440] loop5: detected capacity change from 0 to 164 [ 188.876966][T12450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12450 comm=syz.1.2336 [ 188.889711][T12450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12450 comm=syz.1.2336 [ 189.647087][T12471] syzkaller0: entered promiscuous mode [ 189.652673][T12471] syzkaller0: entered allmulticast mode [ 189.885651][T12475] __nla_validate_parse: 1 callbacks suppressed [ 189.885715][T12475] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2345'. [ 190.118511][T12496] loop0: detected capacity change from 0 to 1024 [ 190.141911][T12496] EXT4-fs: dax option not supported [ 190.219930][T12502] netlink: 'syz.4.2357': attribute type 13 has an invalid length. [ 190.806723][T12520] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 190.806723][T12520] program syz.5.2362 not setting count and/or reply_len properly [ 190.877825][T12523] netlink: 104 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 190.924859][T12527] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2365'. [ 191.006564][T12534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2368'. [ 191.072970][T12536] infiniband !yz!: set down [ 191.077810][T12536] infiniband !yz!: added team_slave_0 [ 191.092196][T12536] RDS/IB: !yz!: added [ 191.096453][T12536] smc: adding ib device !yz! with port count 1 [ 191.102714][T12536] smc: ib device !yz! port 1 has no pnetid [ 191.353699][T12543] bridge0: port 1(macvtap1) entered blocking state [ 191.360476][T12543] bridge0: port 1(macvtap1) entered disabled state [ 191.367444][T12543] macvtap1: entered allmulticast mode [ 191.374070][T12543] macvtap1: left allmulticast mode [ 191.445702][T12555] netlink: 664 bytes leftover after parsing attributes in process `syz.4.2378'. [ 191.509861][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 191.509877][ T29] audit: type=1400 audit(191.490:9121): avc: denied { nlmsg_read } for pid=12560 comm="syz.4.2380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 191.536416][ T29] audit: type=1107 audit(191.490:9122): pid=12560 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 191.660531][T12568] veth2: left promiscuous mode [ 191.665354][T12568] veth2: left allmulticast mode [ 191.679207][T12568] geneve2: left promiscuous mode [ 191.684213][T12568] geneve2: left allmulticast mode [ 191.695312][ T4015] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.704200][ T4015] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.713012][ T4015] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.721748][ T4015] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 191.776327][T12578] loop5: detected capacity change from 0 to 512 [ 191.804578][T12578] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 191.809166][T12572] can0: slcan on ttyS3. [ 191.815011][T12578] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 191.815036][T12578] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.2387: Failed to acquire dquot type 1 [ 191.816927][T12578] EXT4-fs (loop5): 1 truncate cleaned up [ 191.847934][T12578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.890421][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.918221][T12572] can0 (unregistered): slcan off ttyS3. [ 191.940360][T12600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.949839][T12600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.978569][T12600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.988812][T12600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.998614][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 192.053452][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 192.279054][ T29] audit: type=1400 audit(192.260:9123): avc: denied { create } for pid=12630 comm="syz.1.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.317693][ T29] audit: type=1400 audit(192.290:9124): avc: denied { write } for pid=12630 comm="syz.1.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.336599][ T29] audit: type=1400 audit(192.290:9125): avc: denied { setopt } for pid=12630 comm="syz.1.2396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.532059][ T29] audit: type=1326 audit(192.510:9126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 192.602935][ T29] audit: type=1326 audit(192.540:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 192.626096][ T29] audit: type=1326 audit(192.540:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12642 comm="syz.0.2401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b6f29f749 code=0x7ffc0000 [ 192.854465][T12650] netlink: 'syz.4.2404': attribute type 4 has an invalid length. [ 192.862314][T12650] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2404'. [ 193.630317][ T3426] IPVS: starting estimator thread 0... [ 193.666145][T12666] loop5: detected capacity change from 0 to 2048 [ 193.738225][T12669] IPVS: using max 2544 ests per chain, 127200 per kthread [ 193.749422][T11670] Alternate GPT is invalid, using primary GPT. [ 193.755871][T11670] loop5: p2 p3 p7 [ 193.820208][T12666] Alternate GPT is invalid, using primary GPT. [ 193.826676][T12666] loop5: p2 p3 p7 [ 193.927353][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2417'. [ 193.938419][T12684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 194.480680][T12692] loop5: detected capacity change from 0 to 512 [ 194.491075][T12692] EXT4-fs (loop5): 1 truncate cleaned up [ 194.527940][T12692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.555428][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 194.569332][T11670] udevd[11670]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 194.580799][ T9827] udevd[9827]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 194.625780][ T9827] udevd[9827]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 194.637712][T11670] udevd[11670]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 194.652714][T12700] udevd[12700]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 194.729872][T11670] udevd[11670]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 194.741333][T12700] udevd[12700]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 194.809720][T12715] xt_TCPMSS: Only works on TCP SYN packets [ 194.844135][T12717] netlink: 'syz.1.2429': attribute type 4 has an invalid length. [ 194.861964][T12717] .`: renamed from bond0 [ 195.040551][T12730] __nla_validate_parse: 1 callbacks suppressed [ 195.040569][T12730] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.2434'. [ 195.057751][T12730] netlink: zone id is out of range [ 195.062970][T12730] netlink: zone id is out of range [ 195.087374][T12730] netlink: set zone limit has 8 unknown bytes [ 195.262762][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.547498][T12774] loop0: detected capacity change from 0 to 4096 [ 195.572922][T12774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.915464][T12794] netlink: 'syz.2.2453': attribute type 10 has an invalid length. [ 195.923439][T12794] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2453'. [ 196.621241][T12814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2459'. [ 196.700111][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2459'. [ 196.725446][T12773] syz.0.2449 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 196.736565][T12773] CPU: 0 UID: 0 PID: 12773 Comm: syz.0.2449 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.736598][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.736613][T12773] Call Trace: [ 196.736621][T12773] [ 196.736631][T12773] __dump_stack+0x1d/0x30 [ 196.736710][T12773] dump_stack_lvl+0x95/0xd0 [ 196.736730][T12773] dump_stack+0x15/0x1b [ 196.736817][T12773] dump_header+0x81/0x240 [ 196.736841][T12773] oom_kill_process+0x295/0x350 [ 196.736869][T12773] out_of_memory+0x97b/0xb80 [ 196.736896][T12773] try_charge_memcg+0x610/0xa10 [ 196.737008][T12773] charge_memcg+0x51/0xc0 [ 196.737038][T12773] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 196.737147][T12773] __read_swap_cache_async+0x17b/0x2d0 [ 196.737181][T12773] swap_cluster_readahead+0x262/0x3c0 [ 196.737221][T12773] swapin_readahead+0xde/0x820 [ 196.737254][T12773] ? __rcu_read_unlock+0x4f/0x70 [ 196.737322][T12773] ? __perf_event_task_sched_in+0xa5b/0xac0 [ 196.737348][T12773] ? __rcu_read_unlock+0x4f/0x70 [ 196.737367][T12773] ? __rcu_read_unlock+0x4f/0x70 [ 196.737388][T12773] ? swap_cache_get_folio+0x277/0x280 [ 196.737480][T12773] do_swap_page+0x2b4/0x21e0 [ 196.737581][T12773] ? _raw_spin_unlock+0x26/0x50 [ 196.737674][T12773] ? __schedule+0x85f/0xcd0 [ 196.737697][T12773] ? __pfx_default_wake_function+0x10/0x10 [ 196.737730][T12773] handle_mm_fault+0x9d8/0x2c60 [ 196.737819][T12773] do_user_addr_fault+0x630/0x1080 [ 196.737854][T12773] exc_page_fault+0x62/0xa0 [ 196.737884][T12773] asm_exc_page_fault+0x26/0x30 [ 196.737906][T12773] RIP: 0033:0x7f2b6f1712be [ 196.737921][T12773] Code: e9 17 cf 12 00 0f 1f 80 00 00 00 00 48 83 c4 28 48 c7 c0 ff ff ff ff 5b 5d c3 66 90 41 57 41 56 41 55 41 54 55 53 48 83 ec 38 <80> 3d 3b 0d 38 00 00 89 7c 24 0c 88 54 24 10 48 89 74 24 28 0f 85 [ 196.737956][T12773] RSP: 002b:00007fffb49e90d0 EFLAGS: 00010202 [ 196.737977][T12773] RAX: 00007f2b6f4f5fa0 RBX: 00007f2b6f4f5fa0 RCX: 0000000000000026 [ 196.737993][T12773] RDX: 0000000000000001 RSI: 00007f2b6f4f6038 RDI: 0000000000000004 [ 196.738005][T12773] RBP: 00007f2b6f4f7da0 R08: 0000000000000001 R09: 0000000000000026 [ 196.738018][T12773] R10: 3fffffffffffffff R11: 0000000000000293 R12: 000000000002fef5 [ 196.738093][T12773] R13: 00007f2b6f4f6180 R14: ffffffffffffffff R15: 00007fffb49e9250 [ 196.738116][T12773] [ 196.960217][T12773] memory: usage 307200kB, limit 307200kB, failcnt 1260 [ 196.967085][T12773] memory+swap: usage 309616kB, limit 9007199254740988kB, failcnt 0 [ 196.975027][T12773] kmem: usage 305932kB, limit 9007199254740988kB, failcnt 0 [ 196.982460][T12773] Memory cgroup stats for /syz0: [ 197.058099][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 197.058119][ T29] audit: type=1326 audit(197.030:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.093863][T12773] cache 1261568 [ 197.097346][T12773] rss 0 [ 197.100155][T12773] shmem 0 [ 197.103113][T12773] mapped_file 0 [ 197.106581][T12773] dirty 4096 [ 197.109873][T12773] writeback 1269760 [ 197.113792][T12773] workingset_refault_anon 2251 [ 197.118647][T12773] workingset_refault_file 1478 [ 197.123419][T12773] swap 2473984 [ 197.126913][T12773] swapcached 20480 [ 197.130723][T12773] pgpgin 292394 [ 197.134262][T12773] pgpgout 292077 [ 197.137817][T12773] pgfault 347895 [ 197.141455][T12773] pgmajfault 389 [ 197.145012][T12773] inactive_anon 20480 [ 197.149066][T12773] active_anon 0 [ 197.152740][T12773] inactive_file 0 [ 197.156584][T12773] active_file 1277952 [ 197.160722][T12773] unevictable 0 [ 197.164187][T12773] hierarchical_memory_limit 314572800 [ 197.169605][T12773] hierarchical_memsw_limit 9223372036854771712 [ 197.175776][T12773] total_cache 1261568 [ 197.179857][T12773] total_rss 0 [ 197.183234][T12773] total_shmem 0 [ 197.186734][T12773] total_mapped_file 0 [ 197.190777][T12773] total_dirty 4096 [ 197.194508][T12773] total_writeback 1269760 [ 197.198883][T12773] total_workingset_refault_anon 2251 [ 197.204184][T12773] total_workingset_refault_file 1478 [ 197.209522][T12773] total_swap 2473984 [ 197.213431][T12773] total_swapcached 20480 [ 197.217691][T12773] total_pgpgin 292394 [ 197.221710][T12773] total_pgpgout 292077 [ 197.221824][T12816] loop5: detected capacity change from 0 to 512 [ 197.225793][T12773] total_pgfault 347895 [ 197.225805][T12773] total_pgmajfault 389 [ 197.240315][T12773] total_inactive_anon 20480 [ 197.244835][T12773] total_active_anon 0 [ 197.248900][T12773] total_inactive_file 0 [ 197.253122][T12773] total_active_file 1277952 [ 197.257630][T12773] total_unevictable 0 [ 197.258275][ T29] audit: type=1326 audit(197.080:9360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.261641][T12773] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg= [ 197.284706][ T29] audit: type=1326 audit(197.080:9361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.284743][ T29] audit: type=1326 audit(197.080:9362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.296178][T12773] /syz0,task=syz.0.2449,pid=12773,uid=0 [ 197.347432][T12773] Memory cgroup out of memory: Killed process 12773 (syz.0.2449) total-vm:96148kB, anon-rss:1264kB, file-rss:22356kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 197.366012][T12820] netlink: 'syz.1.2462': attribute type 7 has an invalid length. [ 197.448703][T12816] ------------[ cut here ]------------ [ 197.454318][T12816] EA inode 11 i_nlink=2 [ 197.454336][T12816] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.5.2460/12816 [ 197.469537][T12816] Modules linked in: [ 197.473442][T12816] CPU: 1 UID: 0 PID: 12816 Comm: syz.5.2460 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.483315][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.493447][T12816] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 197.500205][T12816] Code: d1 e2 9c ff 4c 8d 2d 6a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac ac ba 03 66 66 66 2e 0f 1f 84 [ 197.520025][T12816] RSP: 0000:ffffc90001a735a0 EFLAGS: 00010246 [ 197.526111][T12816] RAX: ffff88815e4abc10 RBX: ffff88811a50d348 RCX: ffffffff81bb1d5b [ 197.534140][T12816] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 197.542272][T12816] RBP: 000000000000000b R08: 000188811a50d2fb R09: 0000000000000000 [ 197.550293][T12816] R10: ffffc90001a734d0 R11: 0001c90001a734d0 R12: ffff88811a50d2f8 [ 197.558296][T12816] R13: ffffffff86dc0db0 R14: ffff88811a50d2b0 R15: 0000000000000001 [ 197.566286][T12816] FS: 00007fa3d79976c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 197.575281][T12816] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.581986][T12816] CR2: 00007fbd525ba7a0 CR3: 000000011b0be000 CR4: 00000000003506f0 [ 197.590049][T12816] DR0: fffffffffffffffe DR1: 0000000000000000 DR2: 0000000000000000 [ 197.598096][T12816] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 197.606119][T12816] Call Trace: [ 197.609447][T12816] [ 197.612399][T12816] ext4_xattr_set_entry+0x77f/0x1020 [ 197.617723][T12816] ext4_xattr_ibody_set+0x184/0x3c0 [ 197.623060][ T29] audit: type=1326 audit(197.350:9363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.623096][T12816] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 197.623139][T12816] __ext4_expand_extra_isize+0x246/0x280 [ 197.623163][T12816] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 197.646102][ T29] audit: type=1326 audit(197.350:9364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.651901][T12816] ext4_evict_inode+0x7c4/0xd40 [ 197.657667][ T29] audit: type=1326 audit(197.350:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.663007][T12816] ? __pfx_ext4_evict_inode+0x10/0x10 [ 197.685880][ T29] audit: type=1326 audit(197.350:9366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.690811][T12816] evict+0x2af/0x510 [ 197.713712][ T29] audit: type=1326 audit(197.350:9367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.719440][T12816] ? __dquot_initialize+0x146/0x7c0 [ 197.719472][T12816] iput+0x4bd/0x650 [ 197.719515][T12816] ext4_process_orphan+0x1a9/0x1c0 [ 197.742563][ T29] audit: type=1326 audit(197.350:9368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.2.2461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 197.806772][T12816] ext4_orphan_cleanup+0x6a8/0xa00 [ 197.811967][T12816] ext4_fill_super+0x3411/0x37a0 [ 197.816930][T12816] ? set_blocksize+0x1a8/0x310 [ 197.821823][T12816] ? sb_set_blocksize+0xfc/0x170 [ 197.826868][T12816] ? setup_bdev_super+0x30e/0x370 [ 197.829311][T12824] tipc: Enabling of bearer rejected, failed to enable media [ 197.832026][T12816] ? __pfx_ext4_fill_super+0x10/0x10 [ 197.846234][T12816] get_tree_bdev_flags+0x291/0x300 [ 197.851482][T12816] ? __pfx_ext4_fill_super+0x10/0x10 [ 197.856863][T12816] get_tree_bdev+0x1f/0x30 [ 197.861382][T12816] ext4_get_tree+0x1c/0x30 [ 197.865842][T12816] vfs_get_tree+0x57/0x1d0 [ 197.870385][T12816] do_new_mount+0x24d/0x6a0 [ 197.874932][T12816] path_mount+0x4ab/0xb80 [ 197.879327][T12816] ? user_path_at+0xbf/0x130 [ 197.884120][T12816] __se_sys_mount+0x28c/0x2e0 [ 197.888959][T12816] __x64_sys_mount+0x67/0x80 [ 197.893576][T12816] x64_sys_call+0x2cca/0x3000 [ 197.898349][T12816] do_syscall_64+0xca/0x2b0 [ 197.902961][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.908930][T12816] RIP: 0033:0x7fa3d8f30eea [ 197.913388][T12816] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.933260][T12816] RSP: 002b:00007fa3d7996e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 197.941737][T12816] RAX: ffffffffffffffda RBX: 00007fa3d7996ef0 RCX: 00007fa3d8f30eea [ 197.949756][T12816] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa3d7996eb0 [ 197.957761][T12816] RBP: 0000200000000180 R08: 00007fa3d7996ef0 R09: 0000000000800718 [ 197.965806][T12816] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 197.973841][T12816] R13: 00007fa3d7996eb0 R14: 000000000000046f R15: 0000200000000200 [ 197.981882][T12816] [ 197.984922][T12816] ---[ end trace 0000000000000000 ]--- [ 197.992015][T12816] EXT4-fs (loop5): 1 orphan inode deleted [ 197.998450][T12816] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.066827][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.125086][T12774] syz.0.2449 (12774) used greatest stack depth: 6216 bytes left [ 198.194397][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.302878][T12839] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 198.510819][T12850] netlink: 'syz.2.2472': attribute type 7 has an invalid length. [ 198.518907][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 198.637955][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 198.657856][T12855] syzkaller0: entered promiscuous mode [ 198.663436][T12855] syzkaller0: entered allmulticast mode [ 198.685072][T12861] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2477'. [ 198.727256][T12863] team0: Caught tx_queue_len zero misconfig [ 198.892486][T12883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'. [ 198.920348][T12883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2482'. [ 198.962891][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2484'. [ 199.332933][T12918] IPVS: set_ctl: invalid protocol: 8 172.20.20.187:20000 [ 199.608220][T12908] Set syz1 is full, maxelem 65536 reached [ 200.716736][T12977] __nla_validate_parse: 3 callbacks suppressed [ 200.716759][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2516'. [ 201.028880][T12969] loop5: detected capacity change from 0 to 32768 [ 201.049742][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2520'. [ 201.140443][T12996] ªªªªªª: renamed from wg2 [ 201.689871][T13023] IPv6: Can't replace route, no match found [ 201.749667][T13026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2533'. [ 202.376970][T13197] netlink: 'syz.4.2541': attribute type 83 has an invalid length. [ 202.521750][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 202.521806][ T29] audit: type=1326 audit(202.500:9652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.555686][ T29] audit: type=1326 audit(202.500:9653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.578582][ T29] audit: type=1326 audit(202.500:9654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.601480][ T29] audit: type=1326 audit(202.500:9655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.624437][ T29] audit: type=1326 audit(202.500:9656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.647394][ T29] audit: type=1326 audit(202.500:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.670291][ T29] audit: type=1326 audit(202.500:9658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.693382][ T29] audit: type=1326 audit(202.500:9659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.716291][ T29] audit: type=1326 audit(202.500:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.739425][ T29] audit: type=1326 audit(202.500:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13201 comm="syz.2.2543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7fc00000 [ 202.933873][T13221] netlink: 'syz.0.2548': attribute type 10 has an invalid length. [ 202.944191][T13221] netlink: 'syz.0.2548': attribute type 10 has an invalid length. [ 202.953260][T13221] team0: Failed to send options change via netlink (err -105) [ 202.961038][T13221] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 202.970187][T13221] team0: Port device dummy0 removed [ 203.015317][T13225] process '/newroot/519/file0' started with executable stack [ 203.264157][T13250] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2560'. [ 203.279856][T13250] team_slave_1: Caught tx_queue_len zero misconfig [ 203.740398][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2566'. [ 203.749963][T13266] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 204.732402][T13290] netlink: 'syz.4.2576': attribute type 10 has an invalid length. [ 204.783659][T13291] netlink: 'syz.4.2576': attribute type 10 has an invalid length. [ 204.797998][T13276] Set syz1 is full, maxelem 65536 reached [ 204.829847][T13295] loop0: detected capacity change from 0 to 512 [ 204.838797][T13291] bond2: (slave dummy0): Releasing active interface [ 204.851187][T13291] dummy0: left allmulticast mode [ 204.864940][T13295] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.881775][T13291] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 204.885454][T13295] EXT4-fs (loop0): 1 truncate cleaned up [ 204.896461][T13290] bond0: (slave dummy0): Releasing backup interface [ 204.903552][T13295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.921205][T13290] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 204.931667][T13290] team0: Failed to send options change via netlink (err -105) [ 204.939180][T13290] team0: Port device dummy0 added [ 204.947374][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 204.962893][ T3316] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 204.979627][ T3316] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 205.038388][ T3316] EXT4-fs error (device loop0): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 205.102345][T12505] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.340294][ T4027] vlan2: left promiscuous mode [ 206.345149][ T4027] bridge0: left promiscuous mode [ 206.350432][ T4027] bridge4: port 1(vlan2) entered disabled state [ 206.666694][T13363] netlink: 'syz.5.2593': attribute type 10 has an invalid length. [ 206.717511][T13364] netlink: 'syz.5.2593': attribute type 10 has an invalid length. [ 206.970379][ T4027] bond0 (unregistering): Released all slaves [ 206.982643][T13363] team0: Failed to send options change via netlink (err -105) [ 206.990275][T13363] team0: Port device dummy0 added [ 207.008870][T13364] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 207.027195][T13364] team0: Failed to send options change via netlink (err -105) [ 207.036117][T13364] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 207.045169][T13364] team0: Port device dummy0 removed [ 207.055499][T13364] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 207.067464][T13322] chnl_net:caif_netlink_parms(): no params data found [ 207.099588][ T4027] tipc: Left network mode [ 207.145249][T13375] netlink: 83992 bytes leftover after parsing attributes in process `+“[@'. [ 207.168236][T13375] netlink: zone id is out of range [ 207.173437][T13375] netlink: zone id is out of range [ 207.193890][T13375] netlink: zone id is out of range [ 207.201693][ T4027] hsr_slave_0: left promiscuous mode [ 207.212746][T13375] netlink: zone id is out of range [ 207.218119][T13375] netlink: zone id is out of range [ 207.223753][T13375] netlink: zone id is out of range [ 207.228948][T13375] netlink: zone id is out of range [ 207.234091][T13375] netlink: zone id is out of range [ 207.402869][T13322] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.410059][T13322] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.416895][T13386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2601'. [ 207.434745][T13322] bridge_slave_0: entered allmulticast mode [ 207.454899][T13322] bridge_slave_0: entered promiscuous mode [ 207.491646][T13322] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.498863][T13322] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.522614][T13322] bridge_slave_1: entered allmulticast mode [ 207.541831][T13322] bridge_slave_1: entered promiscuous mode [ 207.611896][T13322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.631126][T13322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.704904][T13322] team0: Port device team_slave_0 added [ 207.711521][T13411] loop5: detected capacity change from 0 to 512 [ 207.724224][T13322] team0: Port device team_slave_1 added [ 207.730593][T13411] EXT4-fs: Ignoring removed oldalloc option [ 207.736559][T13411] journal_path: Lookup failure for './file0' [ 207.742654][T13411] EXT4-fs: error: could not find journal device path [ 207.779343][T13411] sg_write: data in/out 178/204 bytes for SCSI command 0xfe-- guessing data in; [ 207.779343][T13411] program syz.5.2606 not setting count and/or reply_len properly [ 207.813415][T13322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.820581][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.846598][T13322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.937834][T13322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.944906][T13322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.970945][T13322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.071409][T13322] hsr_slave_0: entered promiscuous mode [ 208.084183][T13322] hsr_slave_1: entered promiscuous mode [ 208.409732][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 208.409751][ T29] audit: type=1326 audit(208.390:9870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.448480][ T29] audit: type=1326 audit(208.420:9871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.471493][ T29] audit: type=1326 audit(208.420:9872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.494406][ T29] audit: type=1326 audit(208.420:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.517309][ T29] audit: type=1326 audit(208.420:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.540204][ T29] audit: type=1326 audit(208.420:9875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.563027][ T29] audit: type=1326 audit(208.420:9876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.586025][ T29] audit: type=1326 audit(208.420:9877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.608949][ T29] audit: type=1326 audit(208.420:9878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.631860][ T29] audit: type=1326 audit(208.420:9879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13440 comm="syz.4.2612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 208.655754][T13322] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 208.681968][T13322] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 208.699661][T13450] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 208.711896][T13322] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.736076][T13322] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.855073][T13322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.908892][T13322] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.954180][ T3989] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.961343][ T3989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.001174][ T3989] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.008334][ T3989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.472181][T13480] net_ratelimit: 347 callbacks suppressed [ 209.472195][T13480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.582852][T13322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.800897][T13507] loop5: detected capacity change from 0 to 764 [ 209.817319][T13507] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 209.953676][T13322] veth0_vlan: entered promiscuous mode [ 209.979898][T13322] veth1_vlan: entered promiscuous mode [ 210.240922][T13322] veth0_macvtap: entered promiscuous mode [ 210.248944][T13322] veth1_macvtap: entered promiscuous mode [ 210.282827][T13322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.463835][T13322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.480209][ T2495] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.516224][ T2495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.555824][ T2495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.586755][ T2495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.012248][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2634'. [ 211.173627][T13607] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2636'. [ 211.353237][T13618] lo speed is unknown, defaulting to 1000 [ 211.364883][T13618] lo speed is unknown, defaulting to 1000 [ 211.397706][T13618] lo speed is unknown, defaulting to 1000 [ 211.493203][T13618] infiniband syz1: set down [ 211.497782][T13618] infiniband syz1: added lo [ 211.502423][ T4627] lo speed is unknown, defaulting to 1000 [ 211.513796][T13618] RDS/IB: syz1: added [ 211.517879][T13618] smc: adding ib device syz1 with port count 1 [ 211.524200][T13618] smc: ib device syz1 port 1 has no pnetid [ 211.532457][ T4627] lo speed is unknown, defaulting to 1000 [ 211.538517][T13618] lo speed is unknown, defaulting to 1000 [ 211.577441][T13618] lo speed is unknown, defaulting to 1000 [ 211.616337][T13618] lo speed is unknown, defaulting to 1000 [ 211.654554][T13618] lo speed is unknown, defaulting to 1000 [ 211.692423][T13618] lo speed is unknown, defaulting to 1000 [ 211.875828][T13636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2644'. [ 213.104509][T13685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2660'. [ 213.145694][T13685] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.500393][T13693] loop6: detected capacity change from 0 to 1024 [ 213.570091][T13693] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.716478][T13693] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 213.734801][T13693] System zones: 0-1, 3-36 [ 213.749603][T13693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.822703][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 213.822720][ T29] audit: type=1400 audit(213.800:10034): avc: denied { setattr } for pid=13691 comm="syz.6.2662" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.842094][T13693] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 213.862177][ T29] audit: type=1326 audit(213.840:10035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 213.885217][ T29] audit: type=1326 audit(213.840:10036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 213.908286][ T29] audit: type=1326 audit(213.840:10037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 213.931452][ T29] audit: type=1326 audit(213.840:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 213.954449][ T29] audit: type=1326 audit(213.840:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 213.991477][ T29] audit: type=1326 audit(213.840:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 214.014517][ T29] audit: type=1326 audit(213.840:10041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 214.037519][ T29] audit: type=1326 audit(213.840:10042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 214.060574][ T29] audit: type=1326 audit(213.840:10043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13696 comm="syz.5.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d8f2f749 code=0x7ffc0000 [ 214.084104][T13322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.202062][T13706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2667'. [ 214.244501][T13702] bridge_slave_0: left allmulticast mode [ 214.250547][T13702] bridge_slave_0: left promiscuous mode [ 214.256304][T13702] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.283958][T13702] bridge_slave_1: left allmulticast mode [ 214.289783][T13702] bridge_slave_1: left promiscuous mode [ 214.295476][T13702] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.320742][T13702] bond0: (slave bond_slave_0): Releasing backup interface [ 214.335860][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2670'. [ 214.347422][T13702] bond0: (slave bond_slave_1): Releasing backup interface [ 214.360380][T13702] team0: Port device team_slave_0 removed [ 214.369966][T13702] team0: Port device team_slave_1 removed [ 214.379215][T13702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.386757][T13702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.396167][T13702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.403669][T13702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.420025][T13702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.436161][T13709] team0: Mode changed to "activebackup" [ 214.455161][T13716] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.469307][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2669'. [ 214.478470][T13714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2669'. [ 214.498270][T13719] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 214.516444][T13721] bond4 (unregistering): (slave dummy0): Releasing backup interface [ 214.536642][T13721] bond4 (unregistering): Released all slaves [ 214.579099][T13725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2672'. [ 214.607080][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2672'. [ 214.645044][T13728] lo speed is unknown, defaulting to 1000 [ 214.732623][T13738] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2676'. [ 214.854306][T13740] syzkaller0: entered allmulticast mode [ 214.862211][T13740] syzkaller0: entered promiscuous mode [ 214.889793][T13740] syzkaller0 (unregistering): left allmulticast mode [ 214.896570][T13740] syzkaller0 (unregistering): left promiscuous mode [ 215.061874][T13748] loop6: detected capacity change from 0 to 512 [ 215.082149][T13748] EXT4-fs: Ignoring removed i_version option [ 215.088319][T13748] EXT4-fs: Ignoring removed bh option [ 215.152507][T13748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.202898][T13744] lo speed is unknown, defaulting to 1000 [ 215.243202][T13749] lo speed is unknown, defaulting to 1000 [ 215.258812][T13749] lo speed is unknown, defaulting to 1000 [ 215.271428][T13749] lo speed is unknown, defaulting to 1000 [ 215.289731][T13749] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 215.335592][T13748] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 215.360098][T13749] lo speed is unknown, defaulting to 1000 [ 215.366346][T13749] lo speed is unknown, defaulting to 1000 [ 215.409395][T13749] lo speed is unknown, defaulting to 1000 [ 215.441504][T13322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.452736][T13749] lo speed is unknown, defaulting to 1000 [ 215.461740][T13749] lo speed is unknown, defaulting to 1000 [ 215.467965][T13749] lo speed is unknown, defaulting to 1000 [ 215.586022][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'. [ 215.613272][T13772] loop5: detected capacity change from 0 to 512 [ 215.638301][T13772] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 215.701723][T13772] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.732201][T13782] netlink: 'syz.4.2690': attribute type 7 has an invalid length. [ 215.740046][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'. [ 216.035125][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.289510][T13806] loop4: detected capacity change from 0 to 1024 [ 216.312872][T13803] lo speed is unknown, defaulting to 1000 [ 216.334784][T13806] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2698: bad orphan inode 134217728 [ 216.449245][T13804] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 216.513282][T13806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.729759][T13803] lo speed is unknown, defaulting to 1000 [ 216.902057][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.264117][T13821] lo speed is unknown, defaulting to 1000 [ 217.303789][T13821] lo speed is unknown, defaulting to 1000 [ 217.360537][T13823] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 218.644870][T13879] syzkaller0: entered promiscuous mode [ 218.650527][T13879] syzkaller0: entered allmulticast mode [ 218.689065][T13879] tipc: Enabled bearer , priority 0 [ 218.707324][T13878] tipc: Resetting bearer [ 218.721831][T13878] tipc: Disabling bearer [ 218.814192][T13884] netlink: 'wÞ£ÿ': attribute type 27 has an invalid length. [ 218.864382][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 218.864399][ T29] audit: type=1326 audit(218.840:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 218.894980][ T29] audit: type=1326 audit(218.860:10276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 218.918334][ T29] audit: type=1326 audit(218.860:10277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 218.941507][ T29] audit: type=1326 audit(218.860:10278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 218.964831][ T29] audit: type=1326 audit(218.880:10279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 218.988893][ T29] audit: type=1326 audit(218.890:10280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 219.011993][ T29] audit: type=1326 audit(218.900:10281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 219.035074][ T29] audit: type=1326 audit(218.900:10282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 219.058224][ T29] audit: type=1326 audit(218.900:10283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 219.081250][ T29] audit: type=1326 audit(218.900:10284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13883 comm="syz.4.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc528412005 code=0x7ffc0000 [ 219.152018][T13884] team1: left promiscuous mode [ 219.156857][T13884] team1: left allmulticast mode [ 219.163231][T13884] ip6gre1: left promiscuous mode [ 219.168264][T13884] ip6gre1: left allmulticast mode [ 219.189693][ T4038] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.198368][ T4038] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.278272][ T4038] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.286708][ T4038] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.567364][T13907] __nla_validate_parse: 3 callbacks suppressed [ 219.567387][T13907] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2729'. [ 219.992174][ T4038] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.000627][ T4038] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.009182][ T4038] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.017564][ T4038] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.036382][T13909] loop5: detected capacity change from 0 to 1024 [ 220.061976][T13909] EXT4-fs: inline encryption not supported [ 220.256039][T13909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.307645][T13913] lo speed is unknown, defaulting to 1000 [ 220.354849][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.406302][T13913] lo speed is unknown, defaulting to 1000 [ 220.467642][T13926] loop5: detected capacity change from 0 to 1024 [ 220.501378][T13926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 220.613809][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 220.734369][T13952] loop6: detected capacity change from 0 to 512 [ 220.765757][T13952] EXT4-fs: Ignoring removed i_version option [ 220.790193][T13952] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 220.832288][T13952] EXT4-fs (loop6): 1 truncate cleaned up [ 220.846870][T13952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.030864][T13979] lo speed is unknown, defaulting to 1000 [ 221.109442][T13979] lo speed is unknown, defaulting to 1000 [ 221.123252][T13987] siw: device registration error -23 [ 221.345528][T13322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.773144][T14025] lo speed is unknown, defaulting to 1000 [ 221.832920][T14025] lo speed is unknown, defaulting to 1000 [ 222.424340][T14035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2754'. [ 222.680505][ T4626] IPVS: starting estimator thread 0... [ 222.770364][T14031] lo speed is unknown, defaulting to 1000 [ 222.878295][T14057] IPVS: using max 2496 ests per chain, 124800 per kthread [ 222.985743][T14031] lo speed is unknown, defaulting to 1000 [ 223.027484][T14074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2765'. [ 223.129005][T14078] vlan0: entered promiscuous mode [ 223.134128][T14078] gretap0: entered promiscuous mode [ 223.268890][ T23] IPVS: starting estimator thread 0... [ 223.358305][T14087] IPVS: using max 2544 ests per chain, 127200 per kthread [ 223.427174][T14085] lo speed is unknown, defaulting to 1000 [ 223.523242][T14085] lo speed is unknown, defaulting to 1000 [ 223.737889][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2774'. [ 223.752397][T14099] team0 (unregistering): Port device team_slave_0 removed [ 223.876410][ T29] kauditd_printk_skb: 496 callbacks suppressed [ 223.876429][ T29] audit: type=1326 audit(223.850:10782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f198bb865e7 code=0x7ffc0000 [ 223.905699][ T29] audit: type=1326 audit(223.850:10783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f198bb2b829 code=0x7ffc0000 [ 223.929009][ T29] audit: type=1326 audit(223.850:10784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 223.952034][ T29] audit: type=1326 audit(223.850:10785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f198bb865e7 code=0x7ffc0000 [ 223.975137][ T29] audit: type=1326 audit(223.850:10786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f198bb2b829 code=0x7ffc0000 [ 223.998064][ T29] audit: type=1326 audit(223.850:10787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 224.030853][ T29] audit: type=1326 audit(223.850:10788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f198bb865e7 code=0x7ffc0000 [ 224.053863][ T29] audit: type=1326 audit(223.850:10789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f198bb2b829 code=0x7ffc0000 [ 224.076817][ T29] audit: type=1326 audit(223.850:10790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 224.099876][ T29] audit: type=1326 audit(223.870:10791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14090 comm="syz.6.2772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f198bb865e7 code=0x7ffc0000 [ 224.201141][T14104] loop5: detected capacity change from 0 to 1024 [ 224.208078][T14104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 224.241469][T14104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.320673][T14111] syzkaller0: entered promiscuous mode [ 224.326325][T14111] syzkaller0: entered allmulticast mode [ 224.340833][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.383353][T14111] tipc: Started in network mode [ 224.388493][T14111] tipc: Node identity a6e30764a4b9, cluster identity 4711 [ 224.395884][T14111] tipc: Enabled bearer , priority 0 [ 224.414215][T14110] tipc: Resetting bearer [ 224.423199][T14110] tipc: Disabling bearer [ 224.446633][T14117] loop4: detected capacity change from 0 to 1024 [ 224.463668][T14117] EXT4-fs: inline encryption not supported [ 224.493227][T14117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.529992][ T23] IPVS: starting estimator thread 0... [ 224.618383][T14123] IPVS: using max 2160 ests per chain, 108000 per kthread [ 224.625987][T14124] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 224.753848][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.876670][T14135] netem: change failed [ 225.299540][T14151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2793'. [ 225.349094][T14151] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.503845][T14152] bond4: (slave bridge13): Enslaving as an active interface with an up link [ 225.549638][T14151] bond4: entered promiscuous mode [ 225.554755][T14151] bridge13: entered promiscuous mode [ 225.560296][T14151] bond4: entered allmulticast mode [ 225.565417][T14151] bridge13: entered allmulticast mode [ 225.614333][T14155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 225.641398][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2794'. [ 225.759122][T14167] loop4: detected capacity change from 0 to 1024 [ 225.799896][T14167] EXT4-fs: inline encryption not supported [ 225.805785][T14167] EXT4-fs: Ignoring removed orlov option [ 225.864796][T14169] lo speed is unknown, defaulting to 1000 [ 225.875105][T14167] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 225.905425][T14167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.934596][T14169] lo speed is unknown, defaulting to 1000 [ 225.975545][T14167] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 226.050191][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.250314][T14185] lo speed is unknown, defaulting to 1000 [ 226.309710][T14185] lo speed is unknown, defaulting to 1000 [ 226.921718][T14200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2811'. [ 226.972831][T14205] netlink: 'syz.6.2813': attribute type 1 has an invalid length. [ 226.993727][T14205] bond2: entered promiscuous mode [ 226.999296][T14205] bond2: entered allmulticast mode [ 227.097883][T14205] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.321978][T14215] netlink: 'syz.1.2814': attribute type 3 has an invalid length. [ 228.840129][T14222] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2817'. [ 229.145382][T14227] loop5: detected capacity change from 0 to 512 [ 229.163336][T14227] ext4: Bad value for 'sb' [ 229.207938][T14235] loop5: detected capacity change from 0 to 128 [ 229.337110][T14239] lo speed is unknown, defaulting to 1000 [ 229.398866][T14239] lo speed is unknown, defaulting to 1000 [ 229.962887][T14247] veth12: entered promiscuous mode [ 229.968126][T14247] veth12: entered allmulticast mode [ 230.004286][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 230.004305][ T29] audit: type=1326 audit(229.980:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 230.050064][ T29] audit: type=1326 audit(229.980:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 230.073123][ T29] audit: type=1326 audit(229.980:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 230.096128][ T29] audit: type=1326 audit(230.000:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd5236f783 code=0x7ffc0000 [ 230.118963][ T29] audit: type=1326 audit(230.000:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbd5236f783 code=0x7ffc0000 [ 230.141848][ T29] audit: type=1326 audit(230.000:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 230.164928][ T29] audit: type=1326 audit(230.000:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 230.188325][ T29] audit: type=1326 audit(230.000:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 230.211468][ T29] audit: type=1326 audit(230.000:10965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 230.234593][ T29] audit: type=1326 audit(230.000:10966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14248 comm="syz.2.2826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 230.263247][ T4038] bio_check_eod: 10296 callbacks suppressed [ 230.263266][ T4038] kworker/u8:61: attempt to access beyond end of device [ 230.263266][ T4038] loop5: rw=1, sector=433, nr_sectors = 608 limit=128 [ 230.310356][T14255] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 230.328460][T14258] loop4: detected capacity change from 0 to 512 [ 230.378442][T14258] EXT4-fs (loop4): orphan cleanup on readonly fs [ 230.395399][T14258] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2830: bg 0: block 127: padding at end of block bitmap is not set [ 230.410202][T14258] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.2830: iget: bad extra_isize 512 (inode size 256) [ 230.429171][T14258] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2830: error while reading EA inode 11 err=-117 [ 230.448525][T14258] EXT4-fs (loop4): 1 orphan inode deleted [ 230.455014][T14258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 230.512912][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.032388][T14284] macvlan0: entered allmulticast mode [ 231.037911][T14284] syz_tun: entered allmulticast mode [ 231.049612][T14284] syz_tun: left allmulticast mode [ 231.059574][T14286] netlink: 'syz.4.2839': attribute type 30 has an invalid length. [ 231.100117][T14288] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2840'. [ 231.199312][T14296] netlink: 204 bytes leftover after parsing attributes in process `syz.6.2843'. [ 231.345994][T14309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 231.436021][T14311] loop4: detected capacity change from 0 to 512 [ 231.503520][T14311] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2850: error while reading EA inode 32 err=-116 [ 231.551942][T14311] EXT4-fs (loop4): Remounting filesystem read-only [ 231.582305][T14311] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 231.595350][T14311] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 231.693530][T14311] EXT4-fs (loop4): 1 orphan inode deleted [ 231.710092][T14311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.771618][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.803521][T14307] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.803942][T14324] netlink: 'syz.1.2865': attribute type 83 has an invalid length. [ 231.930566][T14325] netlink: 'syz.2.2856': attribute type 30 has an invalid length. [ 232.181371][T14307] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.204993][T14329] loop4: detected capacity change from 0 to 512 [ 232.242667][T14307] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.267511][T14338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2860'. [ 232.290923][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2860'. [ 232.312109][T14307] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.365009][ T3990] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.376722][ T3990] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.388729][ T3990] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.399965][ T3990] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.431497][T14347] loop6: detected capacity change from 0 to 1024 [ 232.442241][T14347] EXT4-fs: Ignoring removed nomblk_io_submit option [ 232.461024][T14347] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.954091][T13322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.531865][T14386] loop6: detected capacity change from 0 to 128 [ 234.131541][T14413] netlink: 664 bytes leftover after parsing attributes in process `syz.1.2887'. [ 234.507431][T14430] loop6: detected capacity change from 0 to 512 [ 234.538891][T14430] EXT4-fs (loop6): orphan cleanup on readonly fs [ 234.558125][T14430] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2894: bg 0: block 127: padding at end of block bitmap is not set [ 234.575400][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2895'. [ 234.584467][T14434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2895'. [ 234.598768][T14430] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 234.620774][T14430] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.2894: iget: bad extra_isize 512 (inode size 256) [ 234.658707][T14430] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2894: error while reading EA inode 11 err=-117 [ 234.701722][T14430] EXT4-fs (loop6): 1 orphan inode deleted [ 234.716430][T14441] loop5: detected capacity change from 0 to 512 [ 234.718470][T14438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2896'. [ 234.723652][T14430] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.775354][T14441] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.2897: error while reading EA inode 32 err=-116 [ 234.776198][T14452] syz_tun: entered allmulticast mode [ 234.798486][T14441] EXT4-fs (loop5): Remounting filesystem read-only [ 234.805121][T14441] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 234.818399][T14441] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 234.829338][T14441] EXT4-fs (loop5): 1 orphan inode deleted [ 234.835728][T14441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.839372][T14451] syz_tun: left allmulticast mode [ 234.886489][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.919762][T13322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.010598][T14465] syz.6.2904: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 235.025246][T14465] CPU: 1 UID: 0 PID: 14465 Comm: syz.6.2904 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.025375][T14465] Tainted: [W]=WARN [ 235.025383][T14465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.025417][T14465] Call Trace: [ 235.025424][T14465] [ 235.025450][T14465] __dump_stack+0x1d/0x30 [ 235.025527][T14465] dump_stack_lvl+0x95/0xd0 [ 235.025551][T14465] dump_stack+0x15/0x1b [ 235.025573][T14465] warn_alloc+0x12b/0x1a0 [ 235.025624][T14465] ? __schedule+0x85f/0xcd0 [ 235.025652][T14465] ? __rcu_read_unlock+0x4f/0x70 [ 235.025675][T14465] __vmalloc_node_range_noprof+0xa0/0x1310 [ 235.025780][T14465] ? __futex_wait+0x1fa/0x260 [ 235.025802][T14465] ? __pfx_futex_wake_mark+0x10/0x10 [ 235.025993][T14465] ? __rcu_read_unlock+0x4f/0x70 [ 235.026016][T14465] ? avc_has_perm_noaudit+0xab/0x130 [ 235.026053][T14465] ? should_fail_ex+0x30/0x280 [ 235.026075][T14465] ? should_failslab+0x8c/0xb0 [ 235.026119][T14465] vmalloc_user_noprof+0x7d/0xb0 [ 235.026147][T14465] ? xskq_create+0x80/0xe0 [ 235.026182][T14465] xskq_create+0x80/0xe0 [ 235.026212][T14465] xsk_init_queue+0x95/0xf0 [ 235.026290][T14465] xsk_setsockopt+0x477/0x640 [ 235.026317][T14465] ? __pfx_xsk_setsockopt+0x10/0x10 [ 235.026397][T14465] __sys_setsockopt+0x184/0x200 [ 235.026426][T14465] __x64_sys_setsockopt+0x64/0x80 [ 235.026501][T14465] x64_sys_call+0x21d5/0x3000 [ 235.026530][T14465] do_syscall_64+0xca/0x2b0 [ 235.026672][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.026697][T14465] RIP: 0033:0x7f198bb8f749 [ 235.026717][T14465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.026745][T14465] RSP: 002b:00007f198a5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.026822][T14465] RAX: ffffffffffffffda RBX: 00007f198bde5fa0 RCX: 00007f198bb8f749 [ 235.026838][T14465] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 235.026903][T14465] RBP: 00007f198bc13f91 R08: 0000000000000004 R09: 0000000000000000 [ 235.026915][T14465] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 235.026927][T14465] R13: 00007f198bde6038 R14: 00007f198bde5fa0 R15: 00007ffda9669658 [ 235.026944][T14465] [ 235.026952][T14465] Mem-Info: [ 235.253318][T14465] active_anon:56482 inactive_anon:138 isolated_anon:0 [ 235.253318][T14465] active_file:12668 inactive_file:9937 isolated_file:0 [ 235.253318][T14465] unevictable:16875 dirty:218 writeback:0 [ 235.253318][T14465] slab_reclaimable:3716 slab_unreclaimable:22271 [ 235.253318][T14465] mapped:29132 shmem:34076 pagetables:1556 [ 235.253318][T14465] sec_pagetables:0 bounce:0 [ 235.253318][T14465] kernel_misc_reclaimable:0 [ 235.253318][T14465] free:1724963 free_pcp:23667 free_cma:0 [ 235.275609][T14458] lo speed is unknown, defaulting to 1000 [ 235.302062][T14465] Node 0 active_anon:225928kB inactive_anon:552kB active_file:50672kB inactive_file:36384kB unevictable:67500kB isolated(anon):0kB isolated(file):0kB mapped:116528kB dirty:872kB writeback:0kB shmem:136304kB kernel_stack:5376kB pagetables:6224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 235.333065][T14465] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 235.362856][T14465] lowmem_reserve[]: 0 2880 7859 7859 [ 235.368280][T14465] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 235.399644][T14465] lowmem_reserve[]: 0 0 4978 4978 [ 235.404725][T14465] Node 0 Normal free:3936220kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:225928kB inactive_anon:552kB active_file:50672kB inactive_file:18752kB unevictable:67500kB writepending:872kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:91692kB local_pcp:48548kB free_cma:0kB [ 235.438644][T14465] lowmem_reserve[]: 0 0 0 0 [ 235.443289][T14465] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 235.456125][T14465] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 235.472462][T14465] Node 0 Normal: 1306*4kB (UME) 583*8kB (UME) 351*16kB (UME) 833*32kB (UME) 663*64kB (UME) 491*128kB (UM) 361*256kB (UME) 310*512kB (UME) 248*1024kB (UME) 112*2048kB (UME) 745*4096kB (UM) = 3933424kB [ 235.492379][T14465] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 235.501781][T14465] 66215 total pagecache pages [ 235.506504][T14465] 49 pages in swap cache [ 235.510818][T14465] Free swap = 124448kB [ 235.514987][T14465] Total swap = 124996kB [ 235.519289][T14465] 2097051 pages RAM [ 235.523109][T14465] 0 pages HighMem/MovableOnly [ 235.527879][T14465] 81272 pages reserved [ 235.537729][T14458] lo speed is unknown, defaulting to 1000 [ 235.675140][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 235.675155][ T29] audit: type=1326 audit(235.650:11405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.712870][ T29] audit: type=1326 audit(235.690:11406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.735951][ T29] audit: type=1326 audit(235.690:11407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.759005][ T29] audit: type=1326 audit(235.690:11408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.782214][ T29] audit: type=1326 audit(235.690:11409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.805220][ T29] audit: type=1326 audit(235.690:11410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.828208][ T29] audit: type=1326 audit(235.690:11411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.851267][ T29] audit: type=1326 audit(235.690:11412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.874287][ T29] audit: type=1326 audit(235.690:11413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 235.897313][ T29] audit: type=1326 audit(235.690:11414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14475 comm="syz.6.2905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 236.103831][T14489] veth7: entered allmulticast mode [ 236.112235][T14485] veth7: left allmulticast mode [ 236.531534][T14499] bridge: RTM_NEWNEIGH with invalid ether address [ 236.593407][T14509] tipc: Can't bind to reserved service type 1 [ 236.707936][T14514] syzkaller0: entered promiscuous mode [ 236.713637][T14514] syzkaller0: entered allmulticast mode [ 237.313838][T14527] syz_tun: entered allmulticast mode [ 237.332437][T14526] syz_tun: left allmulticast mode [ 237.563635][T14531] xt_hashlimit: max too large, truncated to 1048576 [ 237.611263][T14529] loop4: detected capacity change from 0 to 128 [ 237.661264][T14533] netlink: 'syz.6.2925': attribute type 10 has an invalid length. [ 237.674292][T14533] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 237.691188][T14531] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.779911][T14535] loop6: detected capacity change from 0 to 128 [ 237.791213][T14535] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2926'. [ 237.931159][T14537] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65535 sclass=netlink_xfrm_socket pid=14537 comm=syz.2.2928 [ 237.945314][T14537] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2928'. [ 238.467923][T14592] bridge0: port 1(batadv0) entered blocking state [ 238.474524][T14592] bridge0: port 1(batadv0) entered disabled state [ 238.485242][T14592] batadv0: entered allmulticast mode [ 238.492030][T14592] batadv0: entered promiscuous mode [ 238.511788][T14594] loop4: detected capacity change from 0 to 512 [ 238.523130][T14594] EXT4-fs (loop4): orphan cleanup on readonly fs [ 238.529969][T14594] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2935: bad orphan inode 13 [ 238.540993][T14594] ext4_test_bit(bit=12, block=18) = 1 [ 238.546412][T14594] is_bad_inode(inode)=0 [ 238.550653][T14594] NEXT_ORPHAN(inode)=2130706432 [ 238.555644][T14594] max_ino=32 [ 238.558909][T14594] i_nlink=1 [ 238.562528][T14594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.588023][T14598] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2936'. [ 238.609921][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.638921][T14604] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2940'. [ 238.667522][T14604] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 238.678321][T14604] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 238.718228][T14607] macvlan2: entered promiscuous mode [ 238.723599][T14607] macvlan2: entered allmulticast mode [ 238.729400][T14607] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 238.939190][T14615] netlink: 'syz.5.2944': attribute type 1 has an invalid length. [ 238.968819][ T3988] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 238.978057][ T3988] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 239.021903][T14615] 8021q: adding VLAN 0 to HW filter on device bond4 [ 239.034525][T14615] bond3: (slave bond4): making interface the new active one [ 239.042673][T14615] bond3: (slave bond4): Enslaving as an active interface with an up link [ 239.081051][T14615] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 239.179760][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2944'. [ 239.219033][T14615] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.358198][T14624] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.397815][T14625] loop5: detected capacity change from 0 to 128 [ 239.905750][T14624] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.163082][T14624] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.260304][T14624] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.316951][ T3993] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.356820][ T3993] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.378222][ T3993] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.402908][ T3993] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.543098][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 240.604133][T14651] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2955'. [ 240.840151][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'. [ 240.866124][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2959'. [ 240.988474][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 240.988523][ T29] audit: type=1326 audit(240.960:11683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.017877][ T29] audit: type=1326 audit(240.960:11684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.040891][ T29] audit: type=1326 audit(240.960:11685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.043315][T14657] lo speed is unknown, defaulting to 1000 [ 241.063871][ T29] audit: type=1326 audit(240.960:11686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.063903][ T29] audit: type=1326 audit(240.960:11687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.116017][ T29] audit: type=1326 audit(240.960:11688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.139144][ T29] audit: type=1326 audit(240.960:11689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.162110][ T29] audit: type=1326 audit(240.960:11690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.185112][ T29] audit: type=1326 audit(240.960:11691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.208215][ T29] audit: type=1326 audit(240.970:11692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14661 comm="syz.2.2961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5236f749 code=0x7ffc0000 [ 241.345631][T14657] lo speed is unknown, defaulting to 1000 [ 241.494184][T14657] netlink: 'syz.5.2958': attribute type 2 has an invalid length. [ 241.564640][T14677] loop4: detected capacity change from 0 to 1024 [ 241.572041][T14677] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 241.583030][T14677] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 241.593750][T14677] JBD2: no valid journal superblock found [ 241.599520][T14677] EXT4-fs (loop4): Could not load journal inode [ 241.726399][T14681] Cannot find set identified by id 0 to match [ 241.844278][T14658] loop5: detected capacity change from 0 to 8192 [ 241.888355][T14680] lo speed is unknown, defaulting to 1000 [ 241.898417][T14657] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2958'. [ 241.992946][T14680] lo speed is unknown, defaulting to 1000 [ 242.337607][T14700] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 242.349096][T14700] bond5: (slave vxcan1): Error -95 calling set_mac_address [ 242.383796][T14703] tipc: Enabling of bearer rejected, failed to enable media [ 242.398370][T14704] macvlan0: entered promiscuous mode [ 242.403721][T14704] macvlan0: entered allmulticast mode [ 242.409620][T14704] bond5: (slave macvlan0): Error -98 calling set_mac_address [ 242.450898][ T36] IPVS: starting estimator thread 0... [ 242.467733][T14706] IPVS: nq: FWM 3 0x00000003 - no destination available [ 242.548236][T14707] IPVS: using max 3360 ests per chain, 168000 per kthread [ 242.699712][T14718] bridge0: port 2(batadv2) entered blocking state [ 242.706232][T14718] bridge0: port 2(batadv2) entered disabled state [ 242.712912][T14718] batadv2: entered allmulticast mode [ 242.718879][T14718] batadv2: entered promiscuous mode [ 242.764253][T14724] netlink: 'syz.5.2983': attribute type 1 has an invalid length. [ 242.836317][T14724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 242.868113][T14727] bond5: entered allmulticast mode [ 242.916657][T14724] bond5: (slave ip6gretap0): making interface the new active one [ 242.924470][T14724] ip6gretap0: entered allmulticast mode [ 242.931310][T14724] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 243.198583][ T3988] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 243.207997][ T3988] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 243.226542][T14736] xt_hashlimit: max too large, truncated to 1048576 [ 243.239036][T14736] xt_CT: You must specify a L4 protocol and not use inversions on it [ 243.261309][T14736] netlink: 'syz.4.2987': attribute type 10 has an invalid length. [ 243.270208][T14736] team0: Port device dummy0 removed [ 243.281171][T14736] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 243.618649][T14765] __nla_validate_parse: 2 callbacks suppressed [ 243.618669][T14765] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2999'. [ 243.633860][T14765] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2999'. [ 243.643694][T14765] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2999'. [ 243.652694][T14765] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2999'. [ 244.073837][T14775] xt_hashlimit: max too large, truncated to 1048576 [ 244.081694][T14775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 244.094203][T14775] netlink: 'syz.2.3002': attribute type 10 has an invalid length. [ 244.104478][T14775] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.913290][T14799] tipc: Enabled bearer , priority 0 [ 244.923220][T14798] tipc: Resetting bearer [ 245.138799][T14798] tipc: Disabling bearer [ 245.371771][T14818] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.405138][T14820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3016'. [ 245.415982][T14823] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 245.558841][T14829] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3021'. [ 245.758413][T14839] loop6: detected capacity change from 0 to 1024 [ 245.776208][T14839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.798614][T14839] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 245.871411][T13322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.876640][T14852] netlink: 'syz.2.3030': attribute type 1 has an invalid length. [ 245.894876][T14852] 8021q: adding VLAN 0 to HW filter on device bond6 [ 245.922447][T14852] bond6: entered allmulticast mode [ 246.402259][T14870] syzkaller0: entered allmulticast mode [ 246.418242][T14870] syzkaller0: entered promiscuous mode [ 246.430205][T14869] syzkaller0: left promiscuous mode [ 246.439536][T14869] syzkaller0: left allmulticast mode [ 246.663393][T14887] netlink: 'syz.4.3040': attribute type 12 has an invalid length. [ 246.669244][T14888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=14888 comm=syz.5.3039 [ 246.780679][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 246.780696][ T29] audit: type=1400 audit(246.767:12010): avc: denied { write } for pid=14890 comm="syz.4.3041" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 246.964950][ T29] audit: type=1326 audit(246.947:12011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 246.988165][ T29] audit: type=1326 audit(246.947:12012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 247.071695][T14895] veth2: entered promiscuous mode [ 247.076806][T14895] veth2: entered allmulticast mode [ 247.092009][T14875] syz.1.3036 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 247.097690][ T29] audit: type=1326 audit(246.947:12013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 247.105908][T14875] CPU: 0 UID: 0 PID: 14875 Comm: syz.1.3036 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 247.105968][T14875] Tainted: [W]=WARN [ 247.105998][T14875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.106011][T14875] Call Trace: [ 247.106018][T14875] [ 247.106027][T14875] __dump_stack+0x1d/0x30 [ 247.106054][T14875] dump_stack_lvl+0x95/0xd0 [ 247.106082][T14875] dump_stack+0x15/0x1b [ 247.106102][T14875] dump_header+0x81/0x240 [ 247.106174][T14875] oom_kill_process+0x295/0x350 [ 247.106198][T14875] out_of_memory+0x97b/0xb80 [ 247.106222][T14875] try_charge_memcg+0x610/0xa10 [ 247.106261][T14875] obj_cgroup_charge_pages+0xa6/0x150 [ 247.106307][T14875] __memcg_kmem_charge_page+0x9f/0x170 [ 247.106351][T14875] __alloc_frozen_pages_noprof+0x18f/0x360 [ 247.106382][T14875] alloc_pages_mpol+0xb3/0x260 [ 247.106412][T14875] alloc_pages_noprof+0x90/0x130 [ 247.106518][T14875] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 247.106554][T14875] __kvmalloc_node_noprof+0x492/0x6b0 [ 247.106590][T14875] ? ip_set_alloc+0x24/0x30 [ 247.106619][T14875] ? ip_set_alloc+0x24/0x30 [ 247.106673][T14875] ip_set_alloc+0x24/0x30 [ 247.106700][T14875] hash_netiface_create+0x282/0x740 [ 247.106755][T14875] ? __pfx_hash_netiface_create+0x10/0x10 [ 247.106785][T14875] ip_set_create+0x3cc/0x970 [ 247.106823][T14875] ? __nla_parse+0x40/0x60 [ 247.106849][T14875] nfnetlink_rcv_msg+0x4c6/0x590 [ 247.106947][T14875] netlink_rcv_skb+0x123/0x220 [ 247.106976][T14875] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 247.107007][T14875] nfnetlink_rcv+0x167/0x16c0 [ 247.107032][T14875] ? free_frozen_page_commit+0x79/0x3b0 [ 247.107075][T14875] ? _raw_spin_unlock+0x26/0x50 [ 247.107097][T14875] ? __free_frozen_pages+0x288/0x510 [ 247.107123][T14875] ? bpf_check+0x9d67/0xc860 [ 247.107234][T14875] ? native_apic_msr_write+0x3d/0x60 [ 247.107303][T14875] ? x2apic_send_IPI_self+0x10/0x20 [ 247.107327][T14875] ? __irq_work_queue_local+0x10f/0x2c0 [ 247.107363][T14875] ? should_fail_ex+0x30/0x280 [ 247.107429][T14875] ? selinux_nlmsg_lookup+0x99/0x890 [ 247.107455][T14875] ? __rcu_read_unlock+0x34/0x70 [ 247.107476][T14875] ? __netlink_lookup+0x266/0x2a0 [ 247.107509][T14875] netlink_unicast+0x5c0/0x690 [ 247.107601][T14875] netlink_sendmsg+0x58b/0x6b0 [ 247.107669][T14875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.107700][T14875] __sock_sendmsg+0x145/0x180 [ 247.107720][T14875] ____sys_sendmsg+0x31e/0x4a0 [ 247.107753][T14875] ___sys_sendmsg+0x17b/0x1d0 [ 247.107791][T14875] __x64_sys_sendmsg+0xd4/0x160 [ 247.107822][T14875] x64_sys_call+0x17ba/0x3000 [ 247.107847][T14875] do_syscall_64+0xca/0x2b0 [ 247.107897][T14875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.107920][T14875] RIP: 0033:0x7f0f6344f749 [ 247.107937][T14875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.107956][T14875] RSP: 002b:00007f0f61eaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.108048][T14875] RAX: ffffffffffffffda RBX: 00007f0f636a5fa0 RCX: 00007f0f6344f749 [ 247.108062][T14875] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 247.108076][T14875] RBP: 00007f0f634d3f91 R08: 0000000000000000 R09: 0000000000000000 [ 247.108089][T14875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.108102][T14875] R13: 00007f0f636a6038 R14: 00007f0f636a5fa0 R15: 00007ffd399479e8 [ 247.108121][T14875] [ 247.108170][T14875] memory: usage 307200kB, limit 307200kB, failcnt 2019 [ 247.128946][ T29] audit: type=1326 audit(246.947:12014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 247.140245][T14875] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 247.140264][T14875] kmem: usage 239680kB, limit 9007199254740988kB, failcnt 0 [ 247.140280][T14875] Memory cgroup stats for [ 247.144074][ T29] audit: type=1326 audit(246.947:12015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 247.154149][T14875] /syz1 [ 247.157418][ T29] audit: type=1326 audit(246.947:12016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 247.160378][T14875] : [ 247.164692][ T29] audit: type=1326 audit(246.947:12017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 247.169530][T14875] cache 69124096 [ 247.173353][ T29] audit: type=1326 audit(246.947:12018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 247.177673][T14875] rss 4096 [ 247.177683][T14875] shmem 0 [ 247.177690][T14875] mapped_file 4096 [ 247.182661][ T29] audit: type=1326 audit(246.947:12019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14892 comm="syz.6.3042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f198bb8f749 code=0x7ffc0000 [ 247.187241][T14875] dirty 0 [ 247.187252][T14875] writeback 4096 [ 247.654308][T14875] workingset_refault_anon 2705 [ 247.659172][T14875] workingset_refault_file 1969 [ 247.664024][T14875] swap 188416 [ 247.667324][T14875] swapcached 16384 [ 247.671077][T14875] pgpgin 303688 [ 247.674549][T14875] pgpgout 286808 [ 247.678110][T14875] pgfault 310207 [ 247.681710][T14875] pgmajfault 559 [ 247.685361][T14875] inactive_anon 8192 [ 247.689673][T14875] active_anon 0 [ 247.693201][T14875] inactive_file 4096 [ 247.697100][T14875] active_file 0 [ 247.700596][T14875] unevictable 69120000 [ 247.704673][T14875] hierarchical_memory_limit 314572800 [ 247.710090][T14875] hierarchical_memsw_limit 9223372036854771712 [ 247.716379][T14875] total_cache 69124096 [ 247.720591][T14875] total_rss 4096 [ 247.724274][T14875] total_shmem 0 [ 247.727756][T14875] total_mapped_file 4096 [ 247.732042][T14875] total_dirty 0 [ 247.735516][T14875] total_writeback 4096 [ 247.739623][T14875] total_workingset_refault_anon 2705 [ 247.744920][T14875] total_workingset_refault_file 1969 [ 247.750237][T14875] total_swap 188416 [ 247.754099][T14875] total_swapcached 16384 [ 247.758462][T14875] total_pgpgin 303688 [ 247.762456][T14875] total_pgpgout 286808 [ 247.766534][T14875] total_pgfault 310207 [ 247.770643][T14875] total_pgmajfault 559 [ 247.774726][T14875] total_inactive_anon 8192 [ 247.779177][T14875] total_active_anon 0 [ 247.783165][T14875] total_inactive_file 4096 [ 247.787590][T14875] total_active_file 0 [ 247.791611][T14875] total_unevictable 69120000 [ 247.796205][T14875] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3036,pid=14874,uid=0 [ 247.810941][T14875] Memory cgroup out of memory: Killed process 14874 (syz.1.3036) total-vm:96016kB, anon-rss:1136kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 247.919463][T14906] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3048'. [ 247.956639][T14906] dummy0: Device is already in use. [ 247.969176][T14911] bond0: (slave dummy0): Releasing backup interface [ 247.997801][T14911] bridge_slave_0: left allmulticast mode [ 248.003559][T14911] bridge_slave_0: left promiscuous mode [ 248.009337][T14911] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.019658][T14914] netlink: 'syz.5.3049': attribute type 10 has an invalid length. [ 248.027601][T14914] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3049'. [ 248.043366][T14911] bridge_slave_1: left allmulticast mode [ 248.049171][T14911] bridge_slave_1: left promiscuous mode [ 248.054878][T14911] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.072140][T14911] bond0: (slave bond_slave_0): Releasing backup interface [ 248.093938][T14911] bond0: (slave bond_slave_1): Releasing backup interface [ 248.114075][T14911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.122196][T14911] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 248.138792][T14914] veth1_vlan: left promiscuous mode [ 248.152749][T14914] batman_adv: batadv0: Adding interface: veth1_vlan [ 248.159496][T14914] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.188668][T14914] batman_adv: batadv0: Interface activated: veth1_vlan [ 248.200902][T14924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3053'. [ 248.211750][T14921] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.270319][T14921] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.309563][T14932] loop4: detected capacity change from 0 to 2048 [ 248.337994][T14932] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 248.357095][T14921] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.380478][T14940] usb usb9: usbfs: process 14940 (syz.5.3059) did not claim interface 0 before use [ 248.392056][T14934] lo speed is unknown, defaulting to 1000 [ 248.439915][T14934] lo speed is unknown, defaulting to 1000 [ 248.501051][T14921] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.575755][T14932] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 248.635976][T14932] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 248.648619][T14932] EXT4-fs (loop4): This should not happen!! Data will be lost [ 248.648619][T14932] [ 248.658362][T14932] EXT4-fs (loop4): Total free blocks count 0 [ 248.664358][T14932] EXT4-fs (loop4): Free/Dirty block details [ 248.670331][T14932] EXT4-fs (loop4): free_blocks=2415919104 [ 248.676141][T14932] EXT4-fs (loop4): dirty_blocks=3440 [ 248.681494][T14932] EXT4-fs (loop4): Block reservation details [ 248.687494][T14932] EXT4-fs (loop4): i_reserved_data_blocks=215 [ 248.692990][T14959] vlan2: entered allmulticast mode [ 248.708357][T14959] dummy0: entered allmulticast mode [ 248.731686][ T4027] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.762276][ T2495] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.808235][ T2495] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.816633][ T2495] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.883190][T14967] loop5: detected capacity change from 0 to 128 [ 248.900343][T14967] msdos: Unknown parameter '' [ 248.921363][T14967] loop5: detected capacity change from 0 to 512 [ 248.931254][T14967] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.978873][T14967] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 248.991206][T14967] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.3063: attempt to clear invalid blocks 2 len 1 [ 249.004589][T14967] EXT4-fs (loop5): Remounting filesystem read-only [ 249.011576][T14967] EXT4-fs (loop5): 1 truncate cleaned up [ 249.027552][T14967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.045874][ T3997] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 249.074298][T14988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3066'. [ 249.143315][T14988] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14988 comm=syz.2.3066 [ 249.313994][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.327578][T15011] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3071'. [ 249.421118][T15019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3073'. [ 249.544422][T15017] loop5: detected capacity change from 0 to 512 [ 249.598264][T15023] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 249.754500][T15017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.890980][T15031] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.958516][T15017] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 249.993100][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.019473][T15034] loop5: detected capacity change from 0 to 2048 [ 250.032396][T15034] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 250.101666][T15034] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 250.116478][T15034] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1696 with error 28 [ 250.129057][T15034] EXT4-fs (loop5): This should not happen!! Data will be lost [ 250.129057][T15034] [ 250.138773][T15034] EXT4-fs (loop5): Total free blocks count 0 [ 250.144804][T15034] EXT4-fs (loop5): Free/Dirty block details [ 250.150831][T15034] EXT4-fs (loop5): free_blocks=2415919104 [ 250.156589][T15034] EXT4-fs (loop5): dirty_blocks=1696 [ 250.161940][T15034] EXT4-fs (loop5): Block reservation details [ 250.167917][T15034] EXT4-fs (loop5): i_reserved_data_blocks=106 [ 250.294124][T15043] openvswitch: netlink: Missing key (keys=40, expected=100) [ 250.374744][T15047] netlink: 'syz.4.3081': attribute type 1 has an invalid length. [ 250.389731][ T3997] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 250.432082][T15049] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3081'. [ 250.443683][T15051] netlink: 'syz.5.3082': attribute type 1 has an invalid length. [ 250.451510][T15051] netlink: 'syz.5.3082': attribute type 4 has an invalid length. [ 250.459305][T15051] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3082'. [ 250.478953][T15047] bond4: entered promiscuous mode [ 250.484424][T15047] 8021q: adding VLAN 0 to HW filter on device bond4 [ 250.492063][T15049] bond4: entered allmulticast mode [ 250.505737][T15049] bond4: (slave bridge4): making interface the new active one [ 250.513419][T15049] bridge4: entered promiscuous mode [ 250.518797][T15049] bridge4: entered allmulticast mode [ 250.526563][T15049] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 250.537034][T15051] netlink: 'syz.5.3082': attribute type 1 has an invalid length. [ 250.544827][T15051] netlink: 'syz.5.3082': attribute type 4 has an invalid length. [ 250.552609][T15051] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3082'. [ 250.655336][T15056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3083'. [ 250.799891][T15060] loop4: detected capacity change from 0 to 128 [ 250.887995][T15063] syz.4.3086: attempt to access beyond end of device [ 250.887995][T15063] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 251.108272][T15063] syz.4.3086: attempt to access beyond end of device [ 251.108272][T15063] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 251.136945][T15063] syz.4.3086: attempt to access beyond end of device [ 251.136945][T15063] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 251.165092][T15063] syz.4.3086: attempt to access beyond end of device [ 251.165092][T15063] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 251.193028][T15063] syz.4.3086: attempt to access beyond end of device [ 251.193028][T15063] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 251.221049][T15063] syz.4.3086: attempt to access beyond end of device [ 251.221049][T15063] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 251.250767][T15063] syz.4.3086: attempt to access beyond end of device [ 251.250767][T15063] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 251.278828][T15063] syz.4.3086: attempt to access beyond end of device [ 251.278828][T15063] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 251.308587][T15063] syz.4.3086: attempt to access beyond end of device [ 251.308587][T15063] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 251.337188][T15063] syz.4.3086: attempt to access beyond end of device [ 251.337188][T15063] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 251.394907][T15072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3090'. [ 251.406042][T15072] netlink: 'syz.2.3090': attribute type 13 has an invalid length. [ 251.615331][T15081] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3093'. [ 251.805811][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 251.805829][ T29] audit: type=1326 audit(251.787:12397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.812200][T15091] loop5: detected capacity change from 0 to 1024 [ 251.835636][ T29] audit: type=1326 audit(251.787:12398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.871718][ T29] audit: type=1326 audit(251.847:12399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.894767][ T29] audit: type=1326 audit(251.847:12400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.917811][ T29] audit: type=1326 audit(251.847:12401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.940867][ T29] audit: type=1326 audit(251.847:12402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.963963][ T29] audit: type=1326 audit(251.847:12403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.966967][T15091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 251.987067][ T29] audit: type=1326 audit(251.847:12404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.987108][ T29] audit: type=1326 audit(251.847:12405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 251.987137][ T29] audit: type=1326 audit(251.847:12406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15087 comm="syz.4.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc5283df749 code=0x7ffc0000 [ 252.119174][T15100] .`: (slave team0): Releasing backup interface [ 252.131225][T15100] team0: Port device dummy0 removed [ 252.137617][T15100] bond1: (slave veth5): Releasing active interface [ 252.144280][T15100] bond1: (slave veth5): the permanent HWaddr of slave - 8a:e2:28:56:01:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 252.161159][T15100] batadv1: entered promiscuous mode [ 252.169319][T15100] bond1: (slave batadv1): Releasing active interface [ 252.176520][T15100] batadv1: left promiscuous mode [ 252.183468][T15100] bond2: (slave bridge0): Releasing active interface [ 252.227560][T15103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3101'. [ 252.250121][T15091] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.3097: Freeing blocks not in datazone - block = 0, count = 16 [ 252.313524][ T3997] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:27: bg 0: block 112: padding at end of block bitmap is not set [ 252.329476][ T3997] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 252.341844][ T3997] EXT4-fs (loop5): This should not happen!! Data will be lost [ 252.341844][ T3997] [ 252.351677][ T3997] EXT4-fs (loop5): Total free blocks count 0 [ 252.357725][ T3997] EXT4-fs (loop5): Free/Dirty block details [ 252.363732][ T3997] EXT4-fs (loop5): free_blocks=16 [ 252.364178][T15107] 8021q: VLANs not supported on ip6tnl0 [ 252.368822][ T3997] EXT4-fs (loop5): dirty_blocks=16 [ 252.368841][ T3997] EXT4-fs (loop5): Block reservation details [ 252.368854][ T3997] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 252.404751][ T9817] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 252.426682][T15110] hsr_slave_0: left promiscuous mode [ 252.432723][T15110] hsr_slave_1: left promiscuous mode [ 252.818057][T15136] netlink: 'syz.1.3112': attribute type 10 has an invalid length. [ 252.829615][T15136] .`: (slave dummy0): Enslaving as an active interface with an up link [ 253.701348][T15116] syz.4.3105 (15116) used greatest stack depth: 6104 bytes left [ 253.765365][T15164] vlan0: entered allmulticast mode [ 253.788354][T15164] dummy0: entered allmulticast mode [ 254.009415][T15174] loop4: detected capacity change from 0 to 128 [ 254.016450][T15174] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 254.083323][ T3008] ================================================================== [ 254.091454][ T3008] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 254.099810][ T3008] [ 254.102137][ T3008] write to 0xffff8881051fbdf0 of 8 bytes by task 11670 on cpu 0: [ 254.109852][ T3008] inode_set_ctime_current+0x524/0x760 [ 254.115318][ T3008] simple_unlink+0x2d/0x80 [ 254.119744][ T3008] shmem_unlink+0x12d/0x140 [ 254.124262][ T3008] vfs_unlink+0x28b/0x440 [ 254.128598][ T3008] do_unlinkat+0x1cd/0x4b0 [ 254.133015][ T3008] __x64_sys_unlink+0x2e/0x40 [ 254.137697][ T3008] x64_sys_call+0x2f48/0x3000 [ 254.142380][ T3008] do_syscall_64+0xca/0x2b0 [ 254.146895][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.152794][ T3008] [ 254.155118][ T3008] read to 0xffff8881051fbdf0 of 8 bytes by task 3008 on cpu 1: [ 254.162663][ T3008] atime_needs_update+0x2ef/0x3e0 [ 254.167694][ T3008] touch_atime+0x4a/0x340 [ 254.172039][ T3008] do_readlinkat+0x134/0x320 [ 254.176634][ T3008] __x64_sys_readlink+0x47/0x60 [ 254.181495][ T3008] x64_sys_call+0x2af1/0x3000 [ 254.186193][ T3008] do_syscall_64+0xca/0x2b0 [ 254.190709][ T3008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.196608][ T3008] [ 254.198938][ T3008] value changed: 0x00000000000000fd -> 0x00000000000000fe [ 254.206044][ T3008] [ 254.208380][ T3008] Reported by Kernel Concurrency Sanitizer on: [ 254.214532][ T3008] CPU: 1 UID: 0 PID: 3008 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 254.225398][ T3008] Tainted: [W]=WARN [ 254.229203][ T3008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.239259][ T3008] ================================================================== [ 254.669939][T15185] lo speed is unknown, defaulting to 1000 [ 254.701176][T15185] lo speed is unknown, defaulting to 1000