last executing test programs: 3.49072767s ago: executing program 3 (id=2675): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="d80000001b0001"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, &(0x7f00000035c0)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x60840, 0x0) unshare(0x62040200) syz_usb_disconnect(0xffffffffffffffff) r4 = socket$inet(0x2, 0x80001, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, 0x0, 0x0) 2.552565945s ago: executing program 2 (id=2680): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00\x00\x00'], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xfffffffb}, 0x48, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e671ab4912f9f6a31854ec98e950cf8caa52dd8d39af14c31ed56a13d900"}, 0x48, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000240), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x37, 0x65, 0x34, 0x39, 0x31, 0x33, 0x38, 0x66, 0x36, 0x5c, 0x33, 0x30, 0x61, 0x65, 0x61]}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r5, r4, r4, 0x0) keyctl$KEYCTL_MOVE(0x4, r3, r3, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018f2f56514fbfd8f39438f02110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x10007ffffffff}, 0x18) r7 = gettid() r8 = socket(0x40000000015, 0x5, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) recvmmsg(r8, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000300)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000080)={0xe4, 0x80000002, 0x1, 'queue0\x00', 0x8}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r10, 0x408c5333, &(0x7f0000000580)={0x0, 0x9e, 0x0, 'queue0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 2.340086367s ago: executing program 4 (id=2682): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000040)='wlan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvTDY/mrzvm7S8vK+92IBIC9qkSVspItjitZT64+YpNmmpTZvSRDS1YAr1oogXD4InD9b/QgtePXj14MWDSCGI9GCl2pXZzKa72Wyy+bG7SfbzgUmemcnO852Eb55nn31mJoCONZx9SSMORsT1JGKwYl8h8p3DSz/34PdbF7IliWLx9d+SuPVBslB5rCT/PpC/+O/BSH5IIw501dY7O3/zysT09NSNfH107ur10dn5m0cvX524NHVp6tr4C+OnTp44eWrs2JbOr1BRPnvn7XcHPzr35ldfPErGvv7pXBKn43EeW3ZeK1/bu6Was9/ZcBSXPHyyNS19PbXFY+8UfwxW/44zycoN7FgXI6I7X/4fg9FV8dccjA9fbWtwQFMVkyi3UUDHSdbP/+7aTX3NCQZooXI/oPzefrX3wbXSJvdKgFZYPLM0SLaU+90RUc7/wtLYYPSVxgb6HyRV4zxJRGxtZG5JVsf33527ky1RZxwOaI6F2+VR7pXtf1LKzaHoK631P0ir8j+tWLLtr22y/uEV6/IfWmfhdkQ8lbf/PbHp/H9rk/XLfwAAAAAAANg+985ExPOrzf9Ll+f/9Kwy/2cgIk5vQ/3rf/6X3s8LyTZUB1RYPBPxUs38378qZwcPdeWf8/+7NB+gO714eXrqWET8JyKORHdvtj5WfdiqCcJHPznweb36K+f/ZUtWf3kuYH6o+4UVF+JOTsxNbM/ZQ2dbvB3xsDT/91C+pXr+T9b+JzXt/8evZAl+vcE6Djx793zVhl+e/HtYP/+BZil+GXF41et/nnS3k7XvzzFa6g+MlnsFtZ5+/9Nv6tUv/6F9sva/f+38700q79czu7Hj90TE8flCsd7+zfb/e5I3usrHz7w3MTd3YyyiJzlbu318YzHDXlXOh3K+ZPl/5Jm1x/+W+/8VebgvIhYarPN/jwd+rrdP+w/tk+X/5Nrt/1B1+7/RQl+M3x36Nr/FWI3zDbX/J0pt+pF8i/E/qFR7P45GE7Qt4QIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADALpdGxL8iSUeWy2k6MhIxEBH/jf50emZ27rmLM+9cm8z2VT//f3BpPSk//3+oYn18xfrxiNgfEZ917Sutj1yYmZ5s98kDAAAAAAAAAAAAAAAAAADADjFQuua/2Lvy+v/Mr13tjg5oukL+Xb5D5yls+pXF3m0NBGi5zec/sNs1nv/dTY0DaL36+f/wUbGkpeEALaT/D51rk/nv4wLYA7T/0KkaHNPra3YcQDs03P4vNjcOAAAAAABgW+w/dO/HJCIWXtxXWjI9+T6T/WFvS9sdANA25vBC5yrMtDsCoF28xweS5dKfq17sX3/2f9KcgAAAAAAAAAAAAACAGocPuv4fOlUascYjvM3th71sjev/V0t+twuAPaT+oz8aafsTPQTYxbzHB9Zrx13/DwAAAAAAAAAAAAA7QN/NKxPT01M3Zud3X+HlnRHGxgoLEzsijG0tPF7vZ8qPmd/YkbsjYmecYKsL5VtwtDGMNv5PAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqvwTAAD//9ywLb8=") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x85d2e1caca603495, 0x0, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5000000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 2.339319936s ago: executing program 1 (id=2692): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) pipe2$9p(0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000200), &(0x7f0000000340)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 2.167252287s ago: executing program 4 (id=2683): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f00000005c0), 0x3, 0x45d, &(0x7f0000001780)="$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") r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfc, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @local}}}, {{@in6=@private0}}}, &(0x7f0000000140)=0xe8) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x200}) syz_io_uring_setup(0x1ae2, &(0x7f0000000340)={0x0, 0xa582, 0x8000, 0x0, 0x2e7}, &(0x7f00000003c0), &(0x7f0000000480)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x9, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r0, r5, r4, r0, r0, r5, r4, r5], 0x8, 0x0, 0x1, {0x0, r9}}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 2.006578448s ago: executing program 3 (id=2684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x94) io_setup(0x9, &(0x7f0000000b80)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7ff}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaabb0806000122358169b16eb1f92f48754f81ec080006040001ffffffffffff"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x1000810, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) lseek(r3, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6, 0x0, 0x100000001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) faccessat2(r3, &(0x7f0000000040)='./file0\x00', 0x101, 0x1000) unshare(0x20000400) syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f0000000400)=0x0, &(0x7f0000000380)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 2.005777398s ago: executing program 4 (id=2685): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0xfea7, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf25040000002d000680000f45000200000008000400090000000800030002000000b3ea749590e77040a8a0f152c8a9836a14d79c97fa94ae1b4f238d7e3811ebc7c09dc707f0169fabf449291246f7ad6ba04881337f908adf3bebafe550811196ac6c0df99f0f1692778e94131bada27420afdd90b078cd"], 0x64}}, 0x800) 1.943962389s ago: executing program 4 (id=2686): quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='.\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x18) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) pipe2$9p(&(0x7f0000000240), 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffff", 0xc) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000001840), 0x3b, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000200), &(0x7f0000000340)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 1.66709222s ago: executing program 2 (id=2690): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) symlinkat(&(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00') unlinkat(r5, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, &(0x7f00000004c0)={@any, 0x3, 0x7f, 0x141, 0x7ff, 0x240, "a4d6bb81623f16ec3c96127a1acd4084bd981397eca3385dcd6402cb52d6d55195d7b516802711b7996eda1b3abf6867efc9b2da69dfcc2b620ed38c5fec7c30e7e6e54bee4e66e7beeae37e6519ef6c21d2c7fbfebcaa5a9113b3aac521e24eb9bf481726735b5c2a39c31ca030677d71449342866e8c3834152d1d21bd983a"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) writev(r8, &(0x7f0000000380)=[{&(0x7f00000000c0)="d113260161821aa51ea17ac5b4da165d5f5f0190e51d5c83e4223e469134d45527a4d1150f809d512cac689909a60ec2669026045f9f5fd8abfb111fc1256c27c6939097eec6675b294ff74f349ea4b48f2e72278b9df598021d9cb4cdb7795c052fc61c37c9dfe9a43581b9a3b0251257fd1044c2ce498ef94bbfef8919bad4d5cd9f027f510e0fb1c9ea3a5d3ed743571d6bca3148", 0x96}, {&(0x7f0000000000)="6dc5c7fd9d7d8caf863a10a0318cfe9294383ccf5141d3177406d9d0", 0x1c}, {&(0x7f0000000040)="ff39", 0x2}, {&(0x7f0000000180)="ee978e488a93b4e144dd57c7824944fa4620d2311dff3314ade6537a525d21eb3bc58bdd41abfbeaf937e5a9d63cd2921a60fa4dc9360d98757ff9ecfb2c15b42a14808632a06085f482a3c0ba", 0x4d}, {&(0x7f0000000400)}, {0x0}], 0x6) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="03000000040000000400000001000000", @ANYRES32=0x0, @ANYRES64, @ANYBLOB="19"], 0x48) 1.619370391s ago: executing program 2 (id=2691): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000080)=0x8b, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8982, &(0x7f0000004980)={0x7, 'vlan0\x00', {0x3}, 0x6}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.538815181s ago: executing program 0 (id=2693): bpf$MAP_CREATE(0x0, 0x0, 0x974c5d38a2df0c02) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = timerfd_create(0x0, 0x0) gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b70400000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) timerfd_settime(r1, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x80800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) chown(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f0000000680)={[], [{@uid_eq}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x38, 0x64, 0x0, 0x0, 0x38, 0x35, 0x9], 0x2d, [0x65, 0x37, 0xfd, 0x62], 0x2d, [0x30, 0x36, 0x65, 0x34], 0x2d, [0x34, 0x31, 0x33, 0x35], 0x2d, [0x38, 0x36, 0x53, 0x37, 0x34, 0x66, 0x32, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '+.@\\@&*/e-,@('}}, {@appraise_type}]}, 0x1, 0x571, &(0x7f0000000780)="$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") writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.504778171s ago: executing program 1 (id=2694): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x774, &(0x7f0000001180)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1908c81, &(0x7f00000002c0), 0x46, 0x78e, &(0x7f0000000940)="$eJzs3d9rW1UcAPDvTX93m60g6HwqCFqQpXbWTcGHiQ8iOBjo87aSxjKbNqNJx1oKbojgi6Dig6Ave/bHfPPVH6/6X/ggG1O74cQHqdw0WdM16dKtSeb2+cBtz7n3Jud8c8899yT3kATw0BpL/2QiDkbER0nESHV9EhF9lVRvxLGN/W6urebSJYn19Tf/SCr73FhbzUXdY1L7qpknIuLH9yOezWwvt7S8MjddKOQXq/mJ8vzZidLyyqEz89Oz+dn8wpHJqanDR184emTvYv3rl5X9Vz9+7Zlvjv3z3uOXP/wpiWOxv7qtPo69MhZj1dekL30Jt3h1rwvrsmTnzQ1aAPeD9MD0bJzlcTBGoqeSamKokzUDANrl3YhYb6an6RYA4H8taX79BwAeSLXPAW6sreZqS3c/keisa69ExOBG/LX7mxtbeqv37AYr90GHbyRb7owkETG6B+WPRcQX3538Kl2iTfchARq5cDEiTo+Obe//k21zFnbruRb2Gbstr/+Dzvk+Hf+82Gj8l9kypef28c9Ag3P3btz5/M9c2YNimkrHfy/XzW3bHP/dmrI02lPNHaiM+fqSt88U8mnf9khEjEffQJqf3KGM8ev/Xm+2rX789+cn73yZlp/+39wjc6V3YOtjZqbL0/cSc71rFyOe7G0Uf3Jr/Js0Gf+eaPSEI9tXvf7SB583Kz+NP423tmyPv73WL0U83fD4bzb/ZMf5iROV5jBRaxQNfPvrZ8PNyq8//umSll97L9AJ6fEf3jn+0SRO9kdU52uWdl/Gz5dGfmi27c7xN27//clblXR/dd356XJ5cTKiP3lj+/rDm4+t5Wv7p/GPP9X4/N+p/afvCU+3GH/v1d+/vvv42yuNf+aOx79uvu5dJC7fnOtpVn5rx3+qkhqvrmml/2u1gvfy2gEAAAAAAAAAAAAAAAAAAAAAAABAqzIRsT+STPZWOpPJZjd+w/uxGM4UiqXygYhYmInKb2WPRl+m9lWXI3XfhzpZ/T78Wv7wbfnnI+LRiPh0YKiSz+aKhZluBw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVfua/P5/6reBbtcOAGibwZ5u1wAA6LTB3m7XAADotMFd7T3UtnoAAJ2zu+s/APAgcP0HgIeP6z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABtduL48XRZ/3ttNZfmZ84tL80Vzx2ayZfmsvNLuWyuuHg2O1sszhby2VxxvukTXdj4VygWz07FwtL5iXK+VJ4oLa+cmi8uLZRPnZmfns2fyvd1LDIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaF1peWVuulDIL0pISOw6ERc2zqP7pT57l4j+zV5iqGv9EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD97r8AAAD//33jJL8=") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a5000000050000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) 1.403078262s ago: executing program 0 (id=2695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x11) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0xd4}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r2, 0x0, 0x4000800) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94) 1.402119982s ago: executing program 2 (id=2696): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000040)='wlan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x85d2e1caca603495, 0x0, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5000000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 1.017462574s ago: executing program 3 (id=2697): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f00000005c0), 0x3, 0x45d, &(0x7f0000001780)="$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") r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0xfc, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @local}}}, {{@in6=@private0}}}, &(0x7f0000000140)=0xe8) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x200}) syz_io_uring_setup(0x1ae2, &(0x7f0000000340)={0x0, 0xa582, 0x8000, 0x0, 0x2e7}, &(0x7f00000003c0), &(0x7f0000000480)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000500)=@IORING_OP_FILES_UPDATE={0x14, 0x9, 0x0, 0x0, 0x7, &(0x7f00000004c0)=[r0, r5, r4, r0, r0, r5, r4, r5], 0x8, 0x0, 0x1, {0x0, r9}}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 1.017151054s ago: executing program 4 (id=2698): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0xae6cf2044eafee5a, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=0x0, @ANYBLOB="c92d7148", @ANYRESDEC=r2, @ANYRES16=r1, @ANYRES64, @ANYRES8=r3, @ANYRES32=r5, @ANYRES32=r1], 0x0, 0x2, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xe, 0x0, 0x7ffc1ffb}]}) syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0xd0e1, 0x40, 0x0, 0x5}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) 1.016612484s ago: executing program 2 (id=2707): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000080)=0x8b, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000004980)={0x7, 'vlan0\x00', {0x3}, 0x6}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 712.281896ms ago: executing program 3 (id=2699): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) tkill(0xffffffffffffffff, 0x22) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r0, &(0x7f0000000140)=""/68, 0x44) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) 536.044807ms ago: executing program 3 (id=2700): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000080)=0x8b, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8982, &(0x7f0000004980)={0x7, 'vlan0\x00', {0x3}, 0x6}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 462.070407ms ago: executing program 0 (id=2701): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) preadv2(r2, &(0x7f0000000000)=[{&(0x7f0000001600)=""/70, 0x46}], 0x1, 0xb, 0x7fff, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) r4 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x81, 0x3, 0x6, 0xc, 0x0, 0x4, 0x800, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8}, 0x1005a4, 0x7, 0x7, 0x5, 0x5, 0x17174d57, 0x101, 0x0, 0x1, 0x0, 0x5b4}, r4, 0xa, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000200), &(0x7f00000003c0)=r1}, 0x20) r7 = socket(0xa, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x20000844) sendto$inet6(r7, &(0x7f0000000000)="d2", 0x1, 0x4054, &(0x7f0000000100)={0xa, 0x4e25, 0xb, @loopback, 0xc5f}, 0x1c) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x9d, &(0x7f0000000300)='trans=rdma,') connect$qrtr(r3, &(0x7f00000001c0)={0x2a, 0xffffffff, 0x4000}, 0xc) close_range(r2, r3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 444.954548ms ago: executing program 1 (id=2702): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB='\a\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x1006, 0x0, 0x4, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000004c0)='rxrpc_rtt_rx\x00', r0, 0x0, 0x10007ffffffff}, 0xffffff73) r1 = socket(0x1, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711233000000000b9500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='vcan0\x00', 0xfffffffffffffdba) write$cgroup_int(r3, &(0x7f0000000500)=0x9, 0x12) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffbf2, @empty, 0x3}}, 0x6, 0x31, 0xffff1896, 0x3, 0x67, 0x8, 0x1b}, 0x9c) close_range(r1, 0xffffffffffffffff, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) lstat(0x0, &(0x7f0000000580)) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) 403.967608ms ago: executing program 3 (id=2703): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000009b8977a30cbabaff20207025002000002dba513d7b1af8ff00000000bfa100000000000407010000f8ffffffb7020000080000008833000000008fd8850000000400000095"], &(0x7f0000001780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x38, 0x4, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xb, 0x5, 0x4, 0xa932, 0x9, 0xffffffffffffffff, 0x800008}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000009000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) tgkill(0x0, 0x0, 0x5) clock_gettime(0x5, &(0x7f0000000180)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x1}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x1, 0xd5e}, 0x0, 0x0, 0xfffffffc, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000340)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x4}}, 0x10, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x4000000}, 0x2000c041) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r8, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) close_range(r5, 0xffffffffffffffff, 0x100000000000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000001000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000900000004000000000000040100000006000000020000c204000000010000000001000006000000000000000061002e2e302e2e00"], 0x0, 0x49}, 0x28) 402.429718ms ago: executing program 1 (id=2704): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x288}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000400000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000200008385000000710000001801000002696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x18) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r6, r7+10000000}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090603000000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000f4d3c50c74cafbb48a0cbb060004400e1f0000050007008800"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x2008, 0x77}, {@remote, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0xc0100) ioctl$SNDRV_TIMER_IOCTL_INFO(r10, 0x80e85411, &(0x7f00000005c0)) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r9, 0x1) 379.493438ms ago: executing program 0 (id=2705): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x7800, 0x700, 0x400, 0xe815, {{0x13, 0x4, 0x0, 0x7, 0x4c, 0x68, 0x0, 0x5, 0x4, 0x0, @broadcast, @local, {[@end, @timestamp_addr={0x44, 0x4, 0x10, 0x1, 0x2}, @timestamp_addr={0x44, 0x24, 0x12, 0x1, 0x3, [{@private=0xa010100, 0x3}, {@multicast1, 0xfffffffb}, {@private=0xa010100, 0x6}, {@local, 0x1}]}, @timestamp={0x44, 0xc, 0x5a, 0x0, 0x4, [0x6, 0x5]}]}}}}}) r3 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x0) fallocate(r3, 0x0, 0x700, 0x80000000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xbc3a, '\x00', r2, r3, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r5 = syz_io_uring_setup(0x11d2, &(0x7f0000002100)={0x0, 0x7735, 0x80, 0x0, 0x351}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0) 326.407118ms ago: executing program 1 (id=2706): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x101001, 0x80) io_uring_register$IORING_REGISTER_RESIZE_RINGS(r3, 0x21, &(0x7f0000000340)={0x0, 0xac3a, 0x80, 0x3, 0x34e}, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0000000000000000000000ffff64010102ff020000000000000000000000000001010b900060e3b29500003afffe80000000220000000000000000001d20010000000000000000000000000001"], 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000300)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r6, 0x0, 0x0) 213.479439ms ago: executing program 0 (id=2708): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000040)='wlan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r7, 0x0, 0x4804}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00), &(0x7f0000001c40)=r3}, 0x20) r8 = socket$netlink(0x10, 0x3, 0x8000000004) socketpair$tipc(0x1e, 0x85d2e1caca603495, 0x0, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5000000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0xf) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 213.150409ms ago: executing program 2 (id=2709): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r3, 0x0, 0x1000000000000000}, 0x18) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) fadvise64(r2, 0x7f, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r6, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28000084}, 0xc081) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000500)=ANY=[], 0xfe37, 0x0) 212.912729ms ago: executing program 4 (id=2710): set_mempolicy(0x8006, &(0x7f0000000140)=0xfff, 0x5) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x5000) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r2}, 0x10) r3 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0x20000000000002, 0x2) cachestat(0xffffffffffffffff, &(0x7f0000001180)={0x10000, 0x100000000000004}, &(0x7f0000000280), 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r6 = socket$can_raw(0x1d, 0x3, 0x1) dup3(0xffffffffffffffff, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r7 = syz_io_uring_setup(0x5524, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x1, 0x80000261}, &(0x7f0000000400)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) 139.641059ms ago: executing program 0 (id=2711): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000080)=0x8b, 0x8) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8982, &(0x7f0000004980)={0x7, 'vlan0\x00', {0x3}, 0x6}) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2712): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0xa4000061) tkill(0xffffffffffffffff, 0x22) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) read(r0, &(0x7f0000000140)=""/68, 0x44) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r3, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): e from 0 to 2048 [ 295.814803][T11367] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 295.824645][T11367] EXT4-fs (loop4): group descriptors corrupted! [ 295.994872][T11375] netlink: 'syz.0.2088': attribute type 13 has an invalid length. [ 296.002993][T11374] loop4: detected capacity change from 0 to 2048 [ 296.020159][T11375] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2088'. [ 297.139554][T11410] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 297.224685][T11414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2097'. [ 297.247951][T11410] SELinux: failed to load policy [ 297.355392][T11421] tipc: Enabled bearer , priority 0 [ 297.443120][T11421] syzkaller0: entered promiscuous mode [ 297.448657][T11421] syzkaller0: entered allmulticast mode [ 297.455127][T11421] tipc: Resetting bearer [ 297.618711][T11434] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 297.808941][T11434] lo speed is unknown, defaulting to 1000 [ 298.024526][ T5516] net_ratelimit: 25 callbacks suppressed [ 298.024592][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 298.084865][T11439] loop2: detected capacity change from 0 to 128 [ 298.108382][T11439] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.121208][T11439] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2105'. [ 298.137352][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 298.212954][T11442] loop2: detected capacity change from 0 to 2048 [ 298.245198][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 298.272315][T11442] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 298.282202][T11442] EXT4-fs (loop2): group descriptors corrupted! [ 298.304162][T11447] netlink: 'syz.0.2107': attribute type 1 has an invalid length. [ 298.368465][T11448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2107'. [ 298.398576][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 298.436055][T11420] tipc: Resetting bearer [ 298.648541][T11420] tipc: Disabling bearer [ 298.748787][T11447] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.794126][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 298.909238][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 299.023302][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 299.033372][T11464] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2111'. [ 299.127582][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 299.242509][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 299.347093][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 299.723928][T11475] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2114'. [ 300.015083][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 300.015101][ T29] audit: type=1326 audit(303.909:25945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.107930][ T29] audit: type=1326 audit(303.941:25946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.131106][ T29] audit: type=1326 audit(303.941:25947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.154057][ T29] audit: type=1326 audit(303.941:25948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.177186][ T29] audit: type=1326 audit(303.941:25949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.200328][ T29] audit: type=1326 audit(303.941:25950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.223401][ T29] audit: type=1326 audit(303.941:25951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.246519][ T29] audit: type=1326 audit(303.941:25952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.269630][ T29] audit: type=1326 audit(303.962:25953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.292537][ T29] audit: type=1326 audit(303.962:25954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11480 comm="syz.3.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 300.708510][T11486] netlink: 'syz.2.2118': attribute type 27 has an invalid length. [ 301.263119][T11513] bond3: option lp_interval: invalid value (0) [ 301.269436][T11513] bond3: option lp_interval: allowed values 1 - 2147483647 [ 301.302487][T11513] bond3 (unregistering): Released all slaves [ 301.749451][T11526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 301.758803][T11526] netlink: 'syz.3.2130': attribute type 1 has an invalid length. [ 301.766625][T11526] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2130'. [ 301.790349][T11532] bond3: option lp_interval: invalid value (0) [ 301.796630][T11532] bond3: option lp_interval: allowed values 1 - 2147483647 [ 301.810691][T11532] bond3 (unregistering): Released all slaves [ 301.831307][T11534] bond3: option lp_interval: invalid value (0) [ 301.837637][T11534] bond3: option lp_interval: allowed values 1 - 2147483647 [ 301.862637][T11534] bond3 (unregistering): Released all slaves [ 301.951429][T11540] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 302.682446][T11546] xt_NFQUEUE: number of total queues is 0 [ 302.709217][T11550] loop4: detected capacity change from 0 to 128 [ 302.720319][T11550] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 302.748257][T11550] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 302.887598][ T5493] net_ratelimit: 28 callbacks suppressed [ 302.887619][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 302.931397][T11550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2137'. [ 302.967016][T11559] loop2: detected capacity change from 0 to 2048 [ 302.974677][T11559] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 302.985303][T11559] EXT4-fs (loop2): group descriptors corrupted! [ 303.014081][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 303.171043][T11556] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 303.373183][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 303.833881][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 303.936201][ T4321] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 303.945542][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 304.053517][ T5489] bond3: (slave macvlan2): failed to get link speed/duplex [ 304.073019][T11578] vlan2: entered allmulticast mode [ 304.078361][T11578] dummy0: entered allmulticast mode [ 304.097674][T11580] netlink: 'syz.0.2146': attribute type 3 has an invalid length. [ 304.105501][T11580] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2146'. [ 304.150589][T11578] vlan2: entered allmulticast mode [ 304.176414][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 304.281278][ T5489] bond3: (slave macvlan2): failed to get link speed/duplex [ 304.395396][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 304.446923][T11602] bond3: option lp_interval: invalid value (0) [ 304.453275][T11602] bond3: option lp_interval: allowed values 1 - 2147483647 [ 304.467920][T11602] bond3 (unregistering): Released all slaves [ 304.487763][T11605] pim6reg: entered allmulticast mode [ 304.526769][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2154'. [ 304.893717][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 304.893732][ T29] audit: type=1326 audit(309.022:26336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 304.923160][ T29] audit: type=1326 audit(309.022:26337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 304.946276][ T29] audit: type=1326 audit(309.022:26338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 304.969484][ T29] audit: type=1326 audit(309.022:26339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 304.993201][ T29] audit: type=1326 audit(309.022:26340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 305.016333][ T29] audit: type=1326 audit(309.022:26341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 305.039517][ T29] audit: type=1326 audit(309.022:26342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 305.203121][ T29] audit: type=1326 audit(309.022:26343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 305.226154][ T29] audit: type=1326 audit(309.022:26344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 305.249059][ T29] audit: type=1326 audit(309.022:26345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.3.2157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 305.619808][T11633] vlan0: entered allmulticast mode [ 305.625164][T11633] dummy0: entered allmulticast mode [ 305.664743][T11633] vlan0: entered allmulticast mode [ 306.033440][T11646] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(17) [ 306.040225][T11646] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 306.048393][T11646] vhci_hcd vhci_hcd.0: Device attached [ 306.275351][T11657] bond3: option lp_interval: invalid value (0) [ 306.281711][T11657] bond3: option lp_interval: allowed values 1 - 2147483647 [ 306.299822][T11657] bond3 (unregistering): Released all slaves [ 306.550578][T11647] vhci_hcd: connection closed [ 306.550762][ T5489] vhci_hcd: stop threads [ 306.559983][ T5489] vhci_hcd: release socket [ 306.564422][ T5489] vhci_hcd: disconnect device [ 306.593520][T11670] bond3: option lp_interval: invalid value (0) [ 306.599859][T11670] bond3: option lp_interval: allowed values 1 - 2147483647 [ 306.623835][T11670] bond3 (unregistering): Released all slaves [ 306.975441][T11685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2177'. [ 307.132604][T11690] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2175'. [ 307.757822][ T5493] net_ratelimit: 26 callbacks suppressed [ 307.757840][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 307.872393][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 307.885947][T11707] loop2: detected capacity change from 0 to 512 [ 307.906645][T11707] EXT4-fs: dax option not supported [ 307.977299][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 308.082239][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 308.188402][T11720] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 308.196143][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 308.310623][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 308.415043][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 308.594361][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 308.710419][ T5489] bond3: (slave macvlan2): failed to get link speed/duplex [ 308.968628][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2189'. [ 308.990911][ T5489] bond3: (slave macvlan2): failed to get link speed/duplex [ 309.528646][T11747] bond3: option lp_interval: invalid value (0) [ 309.534913][T11747] bond3: option lp_interval: allowed values 1 - 2147483647 [ 309.565726][T11747] bond3 (unregistering): Released all slaves [ 310.294000][T11779] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2204'. [ 310.330350][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 310.330392][ T29] audit: type=1400 audit(314.732:26571): avc: denied { read } for pid=11778 comm="syz.2.2204" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.408298][ T29] audit: type=1400 audit(314.732:26572): avc: denied { open } for pid=11778 comm="syz.2.2204" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.431105][ T29] audit: type=1400 audit(314.732:26573): avc: denied { ioctl } for pid=11778 comm="syz.2.2204" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 310.455506][ T29] audit: type=1400 audit(314.732:26574): avc: denied { ioctl } for pid=11778 comm="syz.2.2204" path="socket:[38952]" dev="sockfs" ino=38952 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 310.480315][ T29] audit: type=1400 audit(314.732:26575): avc: denied { bind } for pid=11778 comm="syz.2.2204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 310.617482][ T29] audit: type=1326 audit(314.963:26576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11786 comm="syz.4.2206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 310.723155][T11795] bond0: option lp_interval: invalid value (0) [ 310.729393][T11795] bond0: option lp_interval: allowed values 1 - 2147483647 [ 310.754377][T11795] bond0 (unregistering): Released all slaves [ 310.823569][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2211'. [ 310.885046][T11810] netlink: 'syz.3.2214': attribute type 3 has an invalid length. [ 310.892849][T11810] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2214'. [ 310.955929][ T29] audit: type=1400 audit(315.383:26577): avc: denied { compute_member } for pid=11811 comm="syz.2.2213" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 311.004001][ T29] audit: type=1400 audit(315.436:26578): avc: denied { write } for pid=11811 comm="syz.2.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 311.026062][ T29] audit: type=1400 audit(315.457:26579): avc: denied { read } for pid=11811 comm="syz.2.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 311.101538][T11819] loop4: detected capacity change from 0 to 256 [ 311.534553][ T29] audit: type=1400 audit(315.992:26580): avc: denied { mount } for pid=11827 comm="syz.1.2219" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 311.568201][T11830] loop4: detected capacity change from 0 to 2048 [ 311.579645][T11830] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 311.589468][T11830] EXT4-fs (loop4): group descriptors corrupted! [ 311.763939][T11838] loop4: detected capacity change from 0 to 2048 [ 311.982248][T11853] bond3: option lp_interval: invalid value (0) [ 311.988634][T11853] bond3: option lp_interval: allowed values 1 - 2147483647 [ 311.996612][T11853] bond3 (unregistering): Released all slaves [ 312.099550][T11859] bond0: option lp_interval: invalid value (0) [ 312.105910][T11859] bond0: option lp_interval: allowed values 1 - 2147483647 [ 312.114023][T11859] bond0 (unregistering): Released all slaves [ 312.213579][T11867] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 312.299867][T11867] lo speed is unknown, defaulting to 1000 [ 312.405833][T11871] loop4: detected capacity change from 0 to 128 [ 312.412886][T11871] msdos: Bad value for 'gid' [ 312.417550][T11871] msdos: Bad value for 'gid' [ 312.423302][T11871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2231'. [ 312.451064][T11871] loop4: detected capacity change from 0 to 1024 [ 312.457911][T11871] EXT4-fs: Ignoring removed bh option [ 312.487493][T11871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 312.510991][T11871] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.2231: inode has both inline data and extents flags [ 312.537839][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 312.546926][ T5489] net_ratelimit: 30 callbacks suppressed [ 312.546943][ T5489] bond3: (slave macvlan2): failed to get link speed/duplex [ 312.663459][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 312.768181][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 312.892231][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 312.997130][ T5489] bond3: (slave macvlan2): failed to get link speed/duplex [ 313.112170][T11901] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 313.297804][T11901] lo speed is unknown, defaulting to 1000 [ 313.392386][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 313.561063][T11903] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 313.583725][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 313.873803][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 313.987648][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 314.067547][T11907] loop2: detected capacity change from 0 to 512 [ 314.096866][ T3847] bond3: (slave macvlan2): failed to get link speed/duplex [ 314.272794][T11907] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 314.578685][T11907] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 314.635422][T11907] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 314.702332][T11907] EXT4-fs (loop2): 1 truncate cleaned up [ 314.708512][T11907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.092722][T11903] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 315.138292][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 315.138311][ T29] audit: type=1400 audit(319.771:26681): avc: denied { setopt } for pid=11920 comm="syz.4.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 315.225046][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.319310][T11926] vcan0: entered allmulticast mode [ 315.326818][ T29] audit: type=1400 audit(319.960:26682): avc: denied { ioctl } for pid=11925 comm="syz.2.2244" path="socket:[38381]" dev="sockfs" ino=38381 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.361945][T11926] vcan0: left allmulticast mode [ 315.388773][T11927] bond3: option lp_interval: invalid value (0) [ 315.394981][T11927] bond3: option lp_interval: allowed values 1 - 2147483647 [ 315.456159][T11927] bond3 (unregistering): Released all slaves [ 315.802131][T11942] loop2: detected capacity change from 0 to 512 [ 315.819513][T11942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 315.864932][T11942] EXT4-fs (loop2): 1 truncate cleaned up [ 315.871291][T11942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.887642][ T29] audit: type=1400 audit(320.559:26683): avc: denied { read write } for pid=11940 comm="syz.2.2251" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 315.909934][ T29] audit: type=1400 audit(320.559:26684): avc: denied { open } for pid=11940 comm="syz.2.2251" path="/432/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 316.026975][ T29] audit: type=1326 audit(320.716:26685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 316.050906][ T29] audit: type=1326 audit(320.716:26686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 316.074057][ T29] audit: type=1326 audit(320.716:26687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 316.097306][ T29] audit: type=1326 audit(320.716:26688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 316.120346][ T29] audit: type=1326 audit(320.716:26689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 316.143397][ T29] audit: type=1326 audit(320.716:26690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11951 comm="syz.3.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 316.195992][T11960] loop4: detected capacity change from 0 to 128 [ 316.487506][T11970] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 316.499557][T11960] bio_check_eod: 18665 callbacks suppressed [ 316.499572][T11960] syz.4.2256: attempt to access beyond end of device [ 316.499572][T11960] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 316.519072][T11960] buffer_io_error: 26 callbacks suppressed [ 316.519089][T11960] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 316.632319][T11960] syz.4.2256: attempt to access beyond end of device [ 316.632319][T11960] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 316.645818][T11960] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 316.664326][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.933116][T11975] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 317.315839][ T5493] net_ratelimit: 24 callbacks suppressed [ 317.315860][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.460971][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.474155][T11975] lo speed is unknown, defaulting to 1000 [ 317.531626][T11970] lo speed is unknown, defaulting to 1000 [ 317.634623][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 317.912088][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.016812][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.123382][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.226731][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.331357][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.445580][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.475669][T11998] bond3: option lp_interval: invalid value (0) [ 318.481926][T11998] bond3: option lp_interval: allowed values 1 - 2147483647 [ 318.539277][T11998] bond3 (unregistering): Released all slaves [ 318.617096][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 318.643365][T12006] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.713898][T12011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2270'. [ 319.400843][T12047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2279'. [ 319.435505][T12047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2279'. [ 319.504369][T12049] SELinux: Context system_u:object_r:udev_exec_t:s0 is not valid (left unmapped). [ 319.761039][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2283'. [ 319.940017][T12053] team0: entered promiscuous mode [ 319.945268][T12053] team0: entered allmulticast mode [ 320.175261][T12058] xt_hashlimit: max too large, truncated to 1048576 [ 320.213003][T12053] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.323721][T12064] bond3: option lp_interval: invalid value (0) [ 320.330093][T12064] bond3: option lp_interval: allowed values 1 - 2147483647 [ 320.344492][T12064] bond3 (unregistering): Released all slaves [ 320.445358][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 320.445374][ T29] audit: type=1326 audit(325.346:27001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.531225][ T29] audit: type=1326 audit(325.388:27002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.554368][ T29] audit: type=1326 audit(325.388:27003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.577358][ T29] audit: type=1326 audit(325.388:27004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.600437][ T29] audit: type=1326 audit(325.398:27005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.623626][ T29] audit: type=1326 audit(325.398:27006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.646776][ T29] audit: type=1326 audit(325.398:27007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.669959][ T29] audit: type=1326 audit(325.398:27008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.693023][ T29] audit: type=1326 audit(325.398:27009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 320.716139][ T29] audit: type=1326 audit(325.398:27010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12070 comm="syz.1.2288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 321.101704][T12080] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 321.269748][T12080] lo speed is unknown, defaulting to 1000 [ 321.636290][T12087] bond0: option lp_interval: invalid value (0) [ 321.642559][T12087] bond0: option lp_interval: allowed values 1 - 2147483647 [ 321.733682][T12087] bond0 (unregistering): Released all slaves [ 321.920374][T12104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2297'. [ 321.988835][T12106] loop4: detected capacity change from 0 to 128 [ 322.122694][ T1763] net_ratelimit: 22 callbacks suppressed [ 322.122712][ T1763] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.150753][T12106] syz.4.2297: attempt to access beyond end of device [ 322.150753][T12106] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 322.184727][T12106] syz.4.2297: attempt to access beyond end of device [ 322.184727][T12106] loop4: rw=2049, sector=161, nr_sectors = 16 limit=128 [ 322.218264][T12106] syz.4.2297: attempt to access beyond end of device [ 322.218264][T12106] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 322.246328][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.255290][T12106] syz.4.2297: attempt to access beyond end of device [ 322.255290][T12106] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 322.270148][T12106] syz.4.2297: attempt to access beyond end of device [ 322.270148][T12106] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 322.284006][T12106] syz.4.2297: attempt to access beyond end of device [ 322.284006][T12106] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 322.298295][T12106] syz.4.2297: attempt to access beyond end of device [ 322.298295][T12106] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 322.312150][T12106] syz.4.2297: attempt to access beyond end of device [ 322.312150][T12106] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 322.326203][T12106] syz.4.2297: attempt to access beyond end of device [ 322.326203][T12106] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 322.351041][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.358615][T12118] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 322.371608][T12106] syz.4.2297: attempt to access beyond end of device [ 322.371608][T12106] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 322.382903][T12120] xt_connbytes: Forcing CT accounting to be enabled [ 322.391832][T12120] Cannot find set identified by id 0 to match [ 322.455821][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.560719][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.575847][T12118] lo speed is unknown, defaulting to 1000 [ 322.618914][T12125] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2303'. [ 322.652303][T12125] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 322.733953][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.836786][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 322.861947][T12139] loop4: detected capacity change from 0 to 2048 [ 322.870446][T12139] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 322.880274][T12139] EXT4-fs (loop4): group descriptors corrupted! [ 322.942193][T12142] bond3: option lp_interval: invalid value (0) [ 322.948517][T12142] bond3: option lp_interval: allowed values 1 - 2147483647 [ 322.990311][T12142] bond3 (unregistering): Released all slaves [ 323.156584][T12150] loop4: detected capacity change from 0 to 2048 [ 323.275703][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 323.389352][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 323.509532][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 323.578095][T12125] lo speed is unknown, defaulting to 1000 [ 323.699171][T12164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2314'. [ 323.764078][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 323.828847][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'. [ 324.756499][T12199] loop2: detected capacity change from 0 to 512 [ 324.803981][T12199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.822983][T12208] bond3: option lp_interval: invalid value (0) [ 324.829311][T12208] bond3: option lp_interval: allowed values 1 - 2147483647 [ 324.840890][T12208] bond3 (unregistering): Released all slaves [ 324.908692][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.952369][T12223] loop2: detected capacity change from 0 to 512 [ 324.962695][T12223] EXT4-fs (loop2): 1 truncate cleaned up [ 324.969454][T12223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.121130][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.232830][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2334'. [ 325.267568][T12245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 325.386550][T12246] bond3: option lp_interval: invalid value (0) [ 325.392856][T12246] bond3: option lp_interval: allowed values 1 - 2147483647 [ 325.436048][T12246] bond3 (unregistering): Released all slaves [ 326.070919][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 326.070958][ T29] audit: type=1326 audit(587.252:27380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.116942][T12254] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2338'. [ 326.126183][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2338'. [ 326.209056][ T29] audit: type=1326 audit(587.294:27381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.232341][ T29] audit: type=1326 audit(587.294:27382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.255562][ T29] audit: type=1326 audit(587.294:27383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.278530][ T29] audit: type=1326 audit(587.294:27384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.301510][ T29] audit: type=1326 audit(587.294:27385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.324570][ T29] audit: type=1326 audit(587.294:27386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.347626][ T29] audit: type=1326 audit(587.304:27387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.370582][ T29] audit: type=1326 audit(587.304:27388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.393627][ T29] audit: type=1326 audit(587.304:27389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12253 comm="syz.0.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 326.503288][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 326.636917][T12268] netlink: 'syz.3.2343': attribute type 1 has an invalid length. [ 326.999510][ T5516] net_ratelimit: 22 callbacks suppressed [ 326.999525][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.113833][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.218697][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.327449][ T1763] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.413778][T12301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'. [ 327.437865][ T1763] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.471772][T12305] bond3: option lp_interval: invalid value (0) [ 327.478083][T12305] bond3: option lp_interval: allowed values 1 - 2147483647 [ 327.493089][T12305] bond3 (unregistering): Released all slaves [ 327.519225][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2354'. [ 327.542726][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.647283][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.674360][T12320] bond0: option lp_interval: invalid value (0) [ 327.680704][T12320] bond0: option lp_interval: allowed values 1 - 2147483647 [ 327.688888][T12320] bond0 (unregistering): Released all slaves [ 327.752075][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.856799][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 327.961546][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 328.473036][T12341] bond3: option lp_interval: invalid value (0) [ 328.479352][T12341] bond3: option lp_interval: allowed values 1 - 2147483647 [ 328.492928][T12341] bond3 (unregistering): Released all slaves [ 328.539391][T12348] loop4: detected capacity change from 0 to 1024 [ 328.553529][T12348] EXT4-fs: inline encryption not supported [ 328.573616][T12348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.631582][T12348] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.2363: Allocating blocks 449-513 which overlap fs metadata [ 328.645723][T12348] EXT4-fs (loop4): Remounting filesystem read-only [ 328.652497][T12348] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1602: inode #19: comm syz.4.2363: cleanup dec ref error -117 [ 328.687816][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.748435][T12362] loop4: detected capacity change from 0 to 128 [ 328.755086][T12362] vfat: Unknown parameter '/dev/net/tun' [ 328.947046][T12367] bond3: option lp_interval: invalid value (0) [ 328.953313][T12367] bond3: option lp_interval: allowed values 1 - 2147483647 [ 328.961283][T12367] bond3 (unregistering): Released all slaves [ 329.325678][T12376] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 329.492250][T12376] lo speed is unknown, defaulting to 1000 [ 329.636000][ T5498] nci: nci_rsp_packet: unknown rsp opcode 0x73a [ 329.758035][T12387] loop4: detected capacity change from 0 to 764 [ 329.764459][T12384] bond0: option lp_interval: invalid value (0) [ 329.770670][T12384] bond0: option lp_interval: allowed values 1 - 2147483647 [ 329.794452][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.803416][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.812334][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.829355][T12384] bond0 (unregistering): Released all slaves [ 329.854590][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.863528][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.872488][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.889984][T12392] rock: directory entry would overflow storage [ 329.896402][T12392] rock: sig=0x4f50, size=4, remaining=3 [ 329.902037][T12392] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 329.909680][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.918603][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 329.927563][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 330.103100][T12402] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 330.109670][T12402] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 330.117930][T12402] vhci_hcd vhci_hcd.0: Device attached [ 330.269271][T12403] vhci_hcd: connection closed [ 330.269764][ T4321] vhci_hcd: stop threads [ 330.278911][ T4321] vhci_hcd: release socket [ 330.283373][ T4321] vhci_hcd: disconnect device [ 330.629233][T12410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2381'. [ 330.639312][T12410] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 330.881833][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 330.881854][ T29] audit: type=1400 audit(592.291:28033): avc: denied { setopt } for pid=12412 comm="syz.3.2382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 331.623079][T12433] bond3: option lp_interval: invalid value (0) [ 331.629359][T12433] bond3: option lp_interval: allowed values 1 - 2147483647 [ 331.650002][T12433] bond3 (unregistering): Released all slaves [ 331.689080][ T29] audit: type=1326 audit(593.152:28034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.712201][ T29] audit: type=1326 audit(593.152:28035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.735385][ T29] audit: type=1326 audit(593.152:28036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.758476][ T29] audit: type=1326 audit(593.152:28037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.781452][ T29] audit: type=1326 audit(593.152:28038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.804458][ T29] audit: type=1326 audit(593.152:28039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.827464][ T29] audit: type=1326 audit(593.152:28040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.850514][ T29] audit: type=1326 audit(593.152:28041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.857532][ T4321] net_ratelimit: 24 callbacks suppressed [ 331.857562][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 331.873596][ T29] audit: type=1326 audit(593.152:28042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.0.2389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 331.916349][T12446] loop4: detected capacity change from 0 to 256 [ 331.952460][T12448] bond0: option lp_interval: invalid value (0) [ 331.958719][T12448] bond0: option lp_interval: allowed values 1 - 2147483647 [ 331.985868][T12446] FAT-fs (loop4): codepage cp932 not found [ 332.031286][T12448] bond0 (unregistering): Released all slaves [ 332.069012][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 332.208178][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 332.337443][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 332.469455][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 332.581528][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 332.696167][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 332.810070][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 332.930160][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 333.038944][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 333.659426][T12505] loop4: detected capacity change from 0 to 2048 [ 333.666657][T12505] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 333.676495][T12505] EXT4-fs (loop4): group descriptors corrupted! [ 333.916441][T12507] loop4: detected capacity change from 0 to 2048 [ 334.564615][T12528] loop2: detected capacity change from 0 to 2048 [ 334.663967][ T5025] Alternate GPT is invalid, using primary GPT. [ 334.670552][ T5025] loop2: p1 p2 p3 [ 334.699134][T12528] Alternate GPT is invalid, using primary GPT. [ 334.705516][T12528] loop2: p1 p2 p3 [ 334.926873][T12535] loop4: detected capacity change from 0 to 8192 [ 335.337971][T12554] 9pnet_fd: Insufficient options for proto=fd [ 335.397696][T12555] bond3: option lp_interval: invalid value (0) [ 335.403967][T12555] bond3: option lp_interval: allowed values 1 - 2147483647 [ 335.420423][T12555] bond3 (unregistering): Released all slaves [ 335.650054][ T29] kauditd_printk_skb: 644 callbacks suppressed [ 335.650072][ T29] audit: type=1326 audit(597.309:28687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5f3890f057 code=0x7ffc0000 [ 335.679429][ T29] audit: type=1326 audit(597.309:28688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f3890d810 code=0x7ffc0000 [ 335.702440][ T29] audit: type=1326 audit(597.309:28689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5f3890dc2a code=0x7ffc0000 [ 335.725729][ T29] audit: type=1326 audit(597.309:28690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 335.748804][ T29] audit: type=1326 audit(597.309:28691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 335.772024][ T29] audit: type=1326 audit(597.309:28692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 335.795126][ T29] audit: type=1326 audit(597.309:28693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 335.818145][ T29] audit: type=1326 audit(597.309:28694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 335.841113][ T29] audit: type=1326 audit(597.309:28695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 335.864112][ T29] audit: type=1326 audit(597.309:28696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12564 comm="syz.0.2429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f3890efc9 code=0x7ffc0000 [ 336.281661][T12578] loop2: detected capacity change from 0 to 4096 [ 336.305581][T12578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.356150][T12571] program syz.4.2432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 336.390529][T12583] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 336.401874][T12578] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 336.600501][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.603965][T12583] lo speed is unknown, defaulting to 1000 [ 336.649245][ T4321] net_ratelimit: 29 callbacks suppressed [ 336.649264][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 336.763398][ T1763] bond3: (slave macvlan2): failed to get link speed/duplex [ 336.859758][T12601] blktrace: Concurrent blktraces are not allowed on loop6 [ 336.877613][ T1763] bond3: (slave macvlan2): failed to get link speed/duplex [ 336.982280][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.211509][T12611] bond3: option lp_interval: invalid value (0) [ 337.217733][T12611] bond3: option lp_interval: allowed values 1 - 2147483647 [ 337.289688][T12611] bond3 (unregistering): Released all slaves [ 337.381573][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.412638][T12620] bond3: option lp_interval: invalid value (0) [ 337.418951][T12620] bond3: option lp_interval: allowed values 1 - 2147483647 [ 337.478690][T12620] bond3 (unregistering): Released all slaves [ 337.506285][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.649770][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.669720][T12609] syz.1.2441 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 337.683766][T12609] CPU: 0 UID: 0 PID: 12609 Comm: syz.1.2441 Not tainted syzkaller #0 PREEMPT(voluntary) [ 337.683793][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 337.683814][T12609] Call Trace: [ 337.683823][T12609] [ 337.683839][T12609] __dump_stack+0x1d/0x30 [ 337.683869][T12609] dump_stack_lvl+0xe8/0x140 [ 337.683956][T12609] dump_stack+0x15/0x1b [ 337.683991][T12609] dump_header+0x81/0x220 [ 337.684009][T12609] oom_kill_process+0x342/0x400 [ 337.684105][T12609] out_of_memory+0x979/0xb80 [ 337.684189][T12609] try_charge_memcg+0x610/0xa10 [ 337.684235][T12609] obj_cgroup_charge_pages+0xa6/0x150 [ 337.684258][T12609] __memcg_kmem_charge_page+0x9f/0x170 [ 337.684279][T12609] __alloc_frozen_pages_noprof+0x188/0x360 [ 337.684369][T12609] alloc_pages_mpol+0xb3/0x260 [ 337.684440][T12609] alloc_pages_noprof+0x90/0x130 [ 337.684468][T12609] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 337.684523][T12609] __kvmalloc_node_noprof+0x483/0x670 [ 337.684556][T12609] ? ip_set_alloc+0x24/0x30 [ 337.684635][T12609] ? ip_set_alloc+0x24/0x30 [ 337.684711][T12609] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 337.684744][T12609] ip_set_alloc+0x24/0x30 [ 337.684843][T12609] hash_netiface_create+0x282/0x740 [ 337.684903][T12609] ? __pfx_hash_netiface_create+0x10/0x10 [ 337.685013][T12609] ip_set_create+0x3cc/0x970 [ 337.685052][T12609] ? __nla_parse+0x40/0x60 [ 337.685141][T12609] nfnetlink_rcv_msg+0x4c6/0x590 [ 337.685207][T12609] netlink_rcv_skb+0x123/0x220 [ 337.685251][T12609] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 337.685350][T12609] nfnetlink_rcv+0x167/0x16c0 [ 337.685395][T12609] ? __list_del_entry_valid_or_report+0x65/0x130 [ 337.685452][T12609] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 337.685565][T12609] ? should_fail_ex+0x30/0x280 [ 337.685590][T12609] ? selinux_nlmsg_lookup+0x99/0x890 [ 337.685624][T12609] ? __rcu_read_unlock+0x34/0x70 [ 337.685658][T12609] ? __netlink_lookup+0x266/0x2a0 [ 337.685739][T12609] netlink_unicast+0x5c0/0x690 [ 337.685775][T12609] netlink_sendmsg+0x58b/0x6b0 [ 337.685798][T12609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.685884][T12609] __sock_sendmsg+0x145/0x180 [ 337.685918][T12609] ____sys_sendmsg+0x31e/0x4e0 [ 337.685974][T12609] ___sys_sendmsg+0x17b/0x1d0 [ 337.686067][T12609] __x64_sys_sendmsg+0xd4/0x160 [ 337.686170][T12609] x64_sys_call+0x191e/0x3000 [ 337.686193][T12609] do_syscall_64+0xd2/0x200 [ 337.686215][T12609] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 337.686302][T12609] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 337.686337][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.686364][T12609] RIP: 0033:0x7fae38f0efc9 [ 337.686382][T12609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.686430][T12609] RSP: 002b:00007fae3796f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.686455][T12609] RAX: ffffffffffffffda RBX: 00007fae39165fa0 RCX: 00007fae38f0efc9 [ 337.686470][T12609] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 337.686482][T12609] RBP: 00007fae38f91f91 R08: 0000000000000000 R09: 0000000000000000 [ 337.686494][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.686506][T12609] R13: 00007fae39166038 R14: 00007fae39165fa0 R15: 00007fffa50057f8 [ 337.686540][T12609] [ 337.686548][T12609] memory: usage 307200kB, limit 307200kB, failcnt 654 [ 337.755849][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.761543][T12609] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 337.761561][T12609] kmem: usage 239588kB, limit 9007199254740988kB, failcnt 0 [ 337.761577][T12609] Memory cgroup stats for [ 337.877719][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.882509][T12609] /syz1 [ 337.982782][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 337.990030][T12609] : [ 338.060247][T12609] cache 69230592 [ 338.066223][T12609] rss 0 [ 338.069082][T12609] shmem 0 [ 338.072057][T12609] mapped_file 0 [ 338.075613][T12609] dirty 0 [ 338.078628][T12609] writeback 0 [ 338.081946][T12609] workingset_refault_anon 8853 [ 338.086720][T12609] workingset_refault_file 1725 [ 338.091527][T12609] swap 552960 [ 338.094846][T12609] swapcached 4096 [ 338.098535][T12609] pgpgin 517649 [ 338.102028][T12609] pgpgout 500746 [ 338.105713][T12609] pgfault 502487 [ 338.109308][T12609] pgmajfault 1406 [ 338.113078][T12609] inactive_anon 4096 [ 338.117029][T12609] active_anon 0 [ 338.120572][T12609] inactive_file 0 [ 338.124204][T12609] active_file 0 [ 338.127705][T12609] unevictable 69230592 [ 338.131782][T12609] hierarchical_memory_limit 314572800 [ 338.137188][T12609] hierarchical_memsw_limit 9223372036854771712 [ 338.143445][T12609] total_cache 69230592 [ 338.147590][T12609] total_rss 0 [ 338.150892][T12609] total_shmem 0 [ 338.154395][T12609] total_mapped_file 0 [ 338.158430][T12609] total_dirty 0 [ 338.161913][T12609] total_writeback 0 [ 338.165765][T12609] total_workingset_refault_anon 8853 [ 338.171069][T12609] total_workingset_refault_file 1725 [ 338.176398][T12609] total_swap 552960 [ 338.180213][T12609] total_swapcached 4096 [ 338.184418][T12609] total_pgpgin 517649 [ 338.188405][T12609] total_pgpgout 500746 [ 338.192533][T12609] total_pgfault 502487 [ 338.196669][T12609] total_pgmajfault 1406 [ 338.200860][T12609] total_inactive_anon 4096 [ 338.205315][T12609] total_active_anon 0 [ 338.209391][T12609] total_inactive_file 0 [ 338.213574][T12609] total_active_file 0 [ 338.217558][T12609] total_unevictable 69230592 [ 338.222256][T12609] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2441,pid=12608,uid=0 [ 338.237456][T12609] Memory cgroup out of memory: Killed process 12608 (syz.1.2441) total-vm:93956kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 338.436784][T12628] loop2: detected capacity change from 0 to 512 [ 338.576057][T12628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.831114][T12637] bridge1: entered promiscuous mode [ 338.836437][T12637] bridge1: entered allmulticast mode [ 340.548021][ T29] kauditd_printk_skb: 2448 callbacks suppressed [ 340.548092][ T29] audit: type=1326 audit(602.453:31145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.646593][ T29] audit: type=1326 audit(602.485:31146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.669791][ T29] audit: type=1326 audit(602.485:31147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.692948][ T29] audit: type=1326 audit(602.485:31148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.715984][ T29] audit: type=1326 audit(602.495:31149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.739119][ T29] audit: type=1326 audit(602.495:31150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.762256][ T29] audit: type=1326 audit(602.495:31151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.785313][ T29] audit: type=1326 audit(602.495:31152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.808265][ T29] audit: type=1326 audit(602.506:31153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.831243][ T29] audit: type=1326 audit(602.506:31154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12654 comm="syz.1.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae38f0efc9 code=0x7ffc0000 [ 340.946670][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.159184][T12669] bond3: option lp_interval: invalid value (0) [ 341.165652][T12669] bond3: option lp_interval: allowed values 1 - 2147483647 [ 341.174517][T12669] bond3 (unregistering): Released all slaves [ 341.289485][T12678] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 341.459277][T12678] lo speed is unknown, defaulting to 1000 [ 341.509710][T12679] loop2: detected capacity change from 0 to 128 [ 341.571166][ T5498] net_ratelimit: 24 callbacks suppressed [ 341.571237][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 341.697410][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 341.802700][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 341.923365][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 341.954316][T12691] bond3: option lp_interval: invalid value (0) [ 341.960635][T12691] bond3: option lp_interval: allowed values 1 - 2147483647 [ 341.980332][T12691] bond3 (unregistering): Released all slaves [ 342.031391][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.077038][T12702] xt_bpf: check failed: parse error [ 342.135753][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.193937][T12708] bond3: option lp_interval: invalid value (0) [ 342.200159][T12708] bond3: option lp_interval: allowed values 1 - 2147483647 [ 342.212568][T12708] bond3 (unregistering): Released all slaves [ 342.240529][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.348707][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.491279][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.532903][T12721] bond3: option lp_interval: invalid value (0) [ 342.539164][T12721] bond3: option lp_interval: allowed values 1 - 2147483647 [ 342.565082][T12721] bond3 (unregistering): Released all slaves [ 342.602563][ T5498] bond3: (slave macvlan2): failed to get link speed/duplex [ 342.997544][T12720] syz.0.2471 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 343.008387][T12720] CPU: 0 UID: 0 PID: 12720 Comm: syz.0.2471 Not tainted syzkaller #0 PREEMPT(voluntary) [ 343.008503][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 343.008520][T12720] Call Trace: [ 343.008529][T12720] [ 343.008538][T12720] __dump_stack+0x1d/0x30 [ 343.008624][T12720] dump_stack_lvl+0xe8/0x140 [ 343.008646][T12720] dump_stack+0x15/0x1b [ 343.008733][T12720] dump_header+0x81/0x220 [ 343.008763][T12720] oom_kill_process+0x342/0x400 [ 343.008795][T12720] out_of_memory+0x979/0xb80 [ 343.008833][T12720] try_charge_memcg+0x610/0xa10 [ 343.008878][T12720] charge_memcg+0x51/0xc0 [ 343.008951][T12720] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 343.008984][T12720] __read_swap_cache_async+0x17b/0x2d0 [ 343.009009][T12720] swap_cluster_readahead+0x262/0x3c0 [ 343.009103][T12720] shmem_swapin_folio+0xa44/0x13f0 [ 343.009140][T12720] shmem_get_folio_gfp+0x26c/0xd60 [ 343.009185][T12720] shmem_fault+0xf6/0x250 [ 343.009247][T12720] __do_fault+0xbc/0x200 [ 343.009278][T12720] handle_mm_fault+0xf78/0x2be0 [ 343.009304][T12720] ? __rcu_read_lock+0x37/0x50 [ 343.009329][T12720] ? __pte_offset_map_lock+0x1d4/0x230 [ 343.009440][T12720] __get_user_pages+0x102a/0x1ed0 [ 343.009486][T12720] __mm_populate+0x243/0x3a0 [ 343.009520][T12720] __se_sys_remap_file_pages+0x38a/0x5e0 [ 343.009571][T12720] ? __se_sys_futex+0x2ed/0x360 [ 343.009607][T12720] ? xfd_validate_state+0x45/0xf0 [ 343.009632][T12720] ? restore_fpregs_from_fpstate+0x61/0x120 [ 343.009671][T12720] __x64_sys_remap_file_pages+0x67/0x80 [ 343.009729][T12720] x64_sys_call+0x23b3/0x3000 [ 343.009753][T12720] do_syscall_64+0xd2/0x200 [ 343.009772][T12720] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 343.009806][T12720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 343.009957][T12720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.009983][T12720] RIP: 0033:0x7f5f3890efc9 [ 343.010000][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.010020][T12720] RSP: 002b:00007f5f37377038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 343.010042][T12720] RAX: ffffffffffffffda RBX: 00007f5f38b65fa0 RCX: 00007f5f3890efc9 [ 343.010056][T12720] RDX: 0000000000000000 RSI: 0000000000400d00 RDI: 000020000051c000 [ 343.010069][T12720] RBP: 00007f5f38991f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.010115][T12720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.010206][T12720] R13: 00007f5f38b66038 R14: 00007f5f38b65fa0 R15: 00007ffceff30838 [ 343.010287][T12720] [ 343.010295][T12720] memory: usage 307200kB, limit 307200kB, failcnt 790 [ 343.270191][T12720] memory+swap: usage 307748kB, limit 9007199254740988kB, failcnt 0 [ 343.278108][T12720] kmem: usage 237792kB, limit 9007199254740988kB, failcnt 0 [ 343.285462][T12720] Memory cgroup stats for /syz1: [ 343.292217][T12720] cache 69230592 [ 343.300815][T12720] rss 1843200 [ 343.304114][T12720] shmem 0 [ 343.307130][T12720] mapped_file 0 [ 343.310612][T12720] dirty 0 [ 343.313622][T12720] writeback 0 [ 343.316979][T12720] workingset_refault_anon 8900 [ 343.321780][T12720] workingset_refault_file 1981 [ 343.326640][T12720] swap 561152 [ 343.330114][T12720] swapcached 0 [ 343.333653][T12720] pgpgin 522912 [ 343.337171][T12720] pgpgout 505560 [ 343.340727][T12720] pgfault 503788 [ 343.344278][T12720] pgmajfault 1425 [ 343.347973][T12720] inactive_anon 4096 [ 343.351874][T12720] active_anon 1445888 [ 343.355880][T12720] inactive_file 0 [ 343.359561][T12720] active_file 0 [ 343.363023][T12720] unevictable 69230592 [ 343.367117][T12720] hierarchical_memory_limit 314572800 [ 343.372498][T12720] hierarchical_memsw_limit 9223372036854771712 [ 343.378661][T12720] total_cache 69230592 [ 343.382735][T12720] total_rss 1843200 [ 343.386578][T12720] total_shmem 0 [ 343.390077][T12720] total_mapped_file 0 [ 343.394086][T12720] total_dirty 0 [ 343.397567][T12720] total_writeback 0 [ 343.401380][T12720] total_workingset_refault_anon 8900 [ 343.406749][T12720] total_workingset_refault_file 1981 [ 343.412112][T12720] total_swap 561152 [ 343.416015][T12720] total_swapcached 0 [ 343.419928][T12720] total_pgpgin 522912 [ 343.423942][T12720] total_pgpgout 505560 [ 343.428011][T12720] total_pgfault 503788 [ 343.432104][T12720] total_pgmajfault 1425 [ 343.436271][T12720] total_inactive_anon 4096 [ 343.440754][T12720] total_active_anon 1445888 [ 343.445293][T12720] total_inactive_file 0 [ 343.449545][T12720] total_active_file 0 [ 343.453574][T12720] total_unevictable 69230592 [ 343.458217][T12720] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2472,pid=12723,uid=0 [ 343.473253][T12720] Memory cgroup out of memory: Killed process 12723 (syz.1.2472) total-vm:93956kB, anon-rss:3184kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 343.636062][T12745] loop4: detected capacity change from 0 to 2048 [ 343.643430][T12745] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 343.653156][T12745] EXT4-fs (loop4): group descriptors corrupted! [ 344.664829][T12771] bond3: option lp_interval: invalid value (0) [ 344.671083][T12771] bond3: option lp_interval: allowed values 1 - 2147483647 [ 344.713239][T12771] bond3 (unregistering): Released all slaves [ 345.092778][T12785] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 345.263713][T12785] lo speed is unknown, defaulting to 1000 [ 345.593563][ T29] kauditd_printk_skb: 401 callbacks suppressed [ 345.593578][ T29] audit: type=1400 audit(607.755:31556): avc: denied { write } for pid=12791 comm="syz.4.2489" name="unix" dev="proc" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 345.635859][T12792] bond3: option lp_interval: invalid value (0) [ 345.642136][T12792] bond3: option lp_interval: allowed values 1 - 2147483647 [ 345.756240][T12792] bond3 (unregistering): Released all slaves [ 345.759168][ T29] audit: type=1326 audit(607.912:31557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 345.785287][ T29] audit: type=1326 audit(607.912:31558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 345.808280][ T29] audit: type=1326 audit(607.912:31559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 345.831288][ T29] audit: type=1326 audit(607.912:31560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 345.854400][ T29] audit: type=1326 audit(607.912:31561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 345.877305][ T29] audit: type=1326 audit(607.912:31562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 345.900326][ T29] audit: type=1326 audit(607.912:31563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 345.923510][ T29] audit: type=1326 audit(607.912:31564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 345.946510][ T29] audit: type=1326 audit(607.912:31565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12798 comm="syz.3.2490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 346.357360][ T5493] net_ratelimit: 23 callbacks suppressed [ 346.357380][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.420025][T12813] __nla_validate_parse: 2 callbacks suppressed [ 346.420043][T12813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2494'. [ 346.518189][ T1763] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.648809][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.751357][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 346.760334][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 346.878876][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 346.900696][T12822] bond3: option lp_interval: invalid value (0) [ 346.907004][T12822] bond3: option lp_interval: allowed values 1 - 2147483647 [ 346.917872][T12822] bond3 (unregistering): Released all slaves [ 346.919922][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 346.932921][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 346.945490][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 346.954529][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 346.983968][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 346.993183][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 347.004803][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 347.101653][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.213266][ T5482] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.317706][ T5493] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.422877][ T5516] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.527434][ T1763] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.550317][T12840] loop2: detected capacity change from 0 to 512 [ 347.612567][T12840] EXT4-fs: Ignoring removed bh option [ 347.633924][ T12] bond3: (slave macvlan2): failed to get link speed/duplex [ 347.673822][T12840] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 347.714400][T12840] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 347.722409][T12840] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 347.747966][T12840] EXT4-fs (loop2): orphan cleanup on readonly fs [ 347.754422][T12840] EXT4-fs error (device loop2): ext4_quota_enable:7132: comm syz.2.2499: Bad quota inum: 4294967291, type: 0 [ 347.784663][T12840] EXT4-fs (loop2): Remounting filesystem read-only [ 347.791316][T12840] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 347.806804][T12840] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 347.873058][T12840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 347.956840][T12848] bond3: option lp_interval: invalid value (0) [ 347.963090][T12848] bond3: option lp_interval: allowed values 1 - 2147483647 [ 347.970529][T12850] can: request_module (can-proto-5) failed. [ 347.978621][T12848] bond3 (unregistering): Released all slaves [ 347.996633][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.129866][T12857] 9pnet_fd: Insufficient options for proto=fd [ 348.305515][T12896] set match dimension is over the limit! [ 348.637178][T12912] macsec1: entered promiscuous mode [ 348.642580][T12912] bridge0: entered promiscuous mode [ 348.722097][T12917] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 348.909445][T12912] bridge0: port 1(macsec1) entered blocking state [ 348.915949][T12912] bridge0: port 1(macsec1) entered disabled state [ 348.922574][T12912] macsec1: entered allmulticast mode [ 348.927965][T12912] bridge0: entered allmulticast mode [ 349.036773][T12912] macsec1: left allmulticast mode [ 349.041986][T12912] bridge0: left allmulticast mode [ 349.057382][T12912] bridge0: left promiscuous mode [ 349.323819][T12967] bond0: option lp_interval: invalid value (0) [ 349.330118][T12967] bond0: option lp_interval: allowed values 1 - 2147483647 [ 349.495333][T12967] bond0 (unregistering): Released all slaves [ 350.102308][T12964] syz.4.2516 (12964) used greatest stack depth: 5080 bytes left [ 350.114513][T12993] tipc: Enabling of bearer rejected, failed to enable media [ 350.126505][T12991] netlink: 'syz.2.2521': attribute type 39 has an invalid length. [ 350.356300][T13007] bond3: option lp_interval: invalid value (0) [ 350.362612][T13007] bond3: option lp_interval: allowed values 1 - 2147483647 [ 350.484254][T13007] bond3 (unregistering): Released all slaves [ 351.214650][ T5518] net_ratelimit: 48 callbacks suppressed [ 351.214667][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.227732][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 351.337537][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.344807][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 351.352998][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 351.353013][ T29] audit: type=1326 audit(613.801:31906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.437560][ T29] audit: type=1326 audit(613.801:31907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.452097][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.460650][ T29] audit: type=1326 audit(613.822:31908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.467774][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 351.490838][ T29] audit: type=1326 audit(613.822:31909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.521130][ T29] audit: type=1326 audit(613.833:31910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.544149][ T29] audit: type=1326 audit(613.833:31911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.567140][ T29] audit: type=1326 audit(613.833:31912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.590359][ T29] audit: type=1326 audit(613.833:31913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.594759][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.613372][ T29] audit: type=1326 audit(613.833:31914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.613404][ T29] audit: type=1326 audit(613.833:31915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13019 comm="syz.3.2528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 351.620649][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 351.736321][T13031] bond0: option lp_interval: invalid value (0) [ 351.742572][T13031] bond0: option lp_interval: allowed values 1 - 2147483647 [ 351.751082][T13031] bond0 (unregistering): Released all slaves [ 351.788597][T13018] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=13018 comm=syz.4.2527 [ 351.803599][T13018] __nla_validate_parse: 3 callbacks suppressed [ 351.803612][T13018] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2527'. [ 351.832813][ T5490] bond3: (slave macvlan2): failed to get link speed/duplex [ 351.840150][ T5490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 352.303931][T13042] loop4: detected capacity change from 0 to 1024 [ 352.311328][T13042] ext4: Unknown parameter 'smackfsroot' [ 352.319319][T13044] loop2: detected capacity change from 0 to 512 [ 352.348995][T13044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 352.392397][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.412038][T13054] loop2: detected capacity change from 0 to 164 [ 352.422334][T13055] loop4: detected capacity change from 0 to 512 [ 352.429872][T13054] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 352.461081][T13054] ip6tnl1: entered promiscuous mode [ 352.466380][T13054] ip6tnl1: entered allmulticast mode [ 352.567840][T13054] $H˙: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 352.590482][T13055] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.2534: error while reading EA inode 32 err=-116 [ 352.695111][T13055] EXT4-fs (loop4): Remounting filesystem read-only [ 352.716488][T13054] $H˙: (slave ip6tnl1): Error -95 calling set_mac_address [ 352.759659][T13055] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 352.822809][T13057] netlink: 'syz.3.2544': attribute type 30 has an invalid length. [ 352.863600][T13062] bond0: option lp_interval: invalid value (0) [ 352.869904][T13062] bond0: option lp_interval: allowed values 1 - 2147483647 [ 352.894282][T13055] EXT4-fs (loop4): 1 orphan inode deleted [ 352.933282][T13055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.962535][T13062] bond0 (unregistering): Released all slaves [ 353.164867][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.221051][T13073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 353.284096][T13075] syz_tun: entered allmulticast mode [ 353.409140][T13079] loop2: detected capacity change from 0 to 128 [ 354.683773][T13101] bond3: option lp_interval: invalid value (0) [ 354.690030][T13101] bond3: option lp_interval: allowed values 1 - 2147483647 [ 354.726268][T13101] bond3 (unregistering): Released all slaves [ 354.810157][T13099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 354.819966][T13106] 9pnet_fd: Insufficient options for proto=fd [ 354.993911][T13130] loop2: detected capacity change from 0 to 1024 [ 355.013710][T13130] EXT4-fs: Ignoring removed nobh option [ 355.043959][T13130] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 355.140419][T13130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.167809][T13130] 9pnet_fd: Insufficient options for proto=fd [ 355.176101][T13130] ext4: Unknown parameter '˙˙184467440737095516150xffffffffffffffff˙˙˙˙˙˙˙˙˙˙˙˙˙˙' [ 355.249346][T13130] netlink: 'syz.2.2557': attribute type 7 has an invalid length. [ 355.257313][T13130] netlink: 'syz.2.2557': attribute type 8 has an invalid length. [ 355.265059][T13130] netlink: 'syz.2.2557': attribute type 13 has an invalid length. [ 355.283061][T13141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2559'. [ 355.323300][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2557'. [ 355.491763][T13144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2560'. [ 355.731217][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.735060][T13154] bond3: option lp_interval: invalid value (0) [ 355.746608][T13154] bond3: option lp_interval: allowed values 1 - 2147483647 [ 355.765403][T13154] bond3 (unregistering): Released all slaves [ 355.786364][T13155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2563'. [ 355.810721][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 355.819915][T13155] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2563'. [ 355.829055][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2563'. [ 355.894279][T13166] loop2: detected capacity change from 0 to 1024 [ 355.938683][T13166] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 355.942582][T13172] loop4: detected capacity change from 0 to 512 [ 355.973301][T13172] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 356.052885][ T5511] net_ratelimit: 44 callbacks suppressed [ 356.052899][ T5511] bond3: (slave macvlan2): failed to get link speed/duplex [ 356.065976][ T5511] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.227466][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 356.234965][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.289439][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 356.289452][ T29] audit: type=1400 audit(618.977:32704): avc: denied { setopt } for pid=13185 comm="syz.4.2575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 356.325458][T13186] loop4: detected capacity change from 0 to 1024 [ 356.332839][T13186] EXT4-fs: Ignoring removed orlov option [ 356.338761][T13186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 356.345721][ T29] audit: type=1326 audit(619.008:32705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 356.368804][ T29] audit: type=1326 audit(619.019:32706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 356.391819][ T29] audit: type=1326 audit(619.019:32707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 356.392602][ T5511] bond3: (slave macvlan2): failed to get link speed/duplex [ 356.414812][ T29] audit: type=1326 audit(619.019:32708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 356.422119][ T5511] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.445128][ T29] audit: type=1326 audit(619.019:32709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 356.475506][ T29] audit: type=1326 audit(619.019:32710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 356.498613][ T29] audit: type=1326 audit(619.019:32711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe09b7cf003 code=0x7ffc0000 [ 356.502467][T13186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.521812][ T29] audit: type=1326 audit(619.019:32712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe09b7cda7f code=0x7ffc0000 [ 356.556461][ T29] audit: type=1326 audit(619.019:32713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13185 comm="syz.4.2575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe09b7cf057 code=0x7ffc0000 [ 356.557475][ T5511] bond3: (slave macvlan2): failed to get link speed/duplex [ 356.586713][ T5511] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.615641][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.691031][ T5490] bond3: (slave macvlan2): failed to get link speed/duplex [ 356.698300][ T5490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.966444][T13199] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 356.981465][T13207] __nla_validate_parse: 1 callbacks suppressed [ 356.981557][T13207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'. [ 357.012360][T13195] 9pnet_fd: Insufficient options for proto=fd [ 357.187882][T13214] xt_connbytes: Forcing CT accounting to be enabled [ 357.203947][T13214] set match dimension is over the limit! [ 357.257197][T13199] lo speed is unknown, defaulting to 1000 [ 357.283623][T13220] loop2: detected capacity change from 0 to 128 [ 357.314506][T13218] bond0: option lp_interval: invalid value (0) [ 357.320927][T13218] bond0: option lp_interval: allowed values 1 - 2147483647 [ 357.329600][T13218] bond0 (unregistering): Released all slaves [ 357.400966][T13220] SELinux: failed to load policy [ 357.623185][T13237] netlink: 'syz.3.2587': attribute type 21 has an invalid length. [ 357.666965][T13237] xt_CT: No such helper "snmp_trap" [ 359.076659][T13266] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2595'. [ 359.097373][T13266] IPVS: Error connecting to the multicast addr [ 359.189632][T13266] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=13266 comm=syz.1.2595 [ 359.204994][T13271] macvtap2: entered allmulticast mode [ 359.210456][T13271] bridge0: entered allmulticast mode [ 359.229300][T13271] bridge0: left allmulticast mode [ 359.401841][T13278] bond3: option lp_interval: invalid value (0) [ 359.408340][T13278] bond3: option lp_interval: allowed values 1 - 2147483647 [ 359.437514][T13278] bond3 (unregistering): Released all slaves [ 360.323665][T13285] bond3: option lp_interval: invalid value (0) [ 360.329970][T13285] bond3: option lp_interval: allowed values 1 - 2147483647 [ 360.361679][T13285] bond3 (unregistering): Released all slaves [ 360.370123][T13295] netlink: 63 bytes leftover after parsing attributes in process `syz.2.2601'. [ 360.407707][T13287] 9pnet_fd: Insufficient options for proto=fd [ 360.556307][T13306] ref_ctr increment failed for inode: 0xc08 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811aa9ed40 [ 360.882287][ T4321] net_ratelimit: 57 callbacks suppressed [ 360.882307][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 360.895286][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 360.897199][T13286] syz.4.2600 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 360.916803][T13286] CPU: 1 UID: 0 PID: 13286 Comm: syz.4.2600 Not tainted syzkaller #0 PREEMPT(voluntary) [ 360.916872][T13286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 360.916885][T13286] Call Trace: [ 360.916891][T13286] [ 360.916899][T13286] __dump_stack+0x1d/0x30 [ 360.916929][T13286] dump_stack_lvl+0xe8/0x140 [ 360.916957][T13286] dump_stack+0x15/0x1b [ 360.917005][T13286] dump_header+0x81/0x220 [ 360.917026][T13286] oom_kill_process+0x342/0x400 [ 360.917058][T13286] out_of_memory+0x979/0xb80 [ 360.917108][T13286] try_charge_memcg+0x610/0xa10 [ 360.917154][T13286] obj_cgroup_charge_pages+0xa6/0x150 [ 360.917199][T13286] __memcg_kmem_charge_page+0x9f/0x170 [ 360.917229][T13286] __alloc_frozen_pages_noprof+0x188/0x360 [ 360.917297][T13286] alloc_pages_mpol+0xb3/0x260 [ 360.917323][T13286] ? alloc_pages_noprof+0x61/0x130 [ 360.917384][T13286] alloc_pages_noprof+0x90/0x130 [ 360.917413][T13286] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 360.917470][T13286] __kvmalloc_node_noprof+0x483/0x670 [ 360.917502][T13286] ? ip_set_alloc+0x24/0x30 [ 360.917613][T13286] ? ip_set_alloc+0x24/0x30 [ 360.917642][T13286] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 360.917679][T13286] ip_set_alloc+0x24/0x30 [ 360.917774][T13286] hash_netiface_create+0x282/0x740 [ 360.917808][T13286] ? __pfx_hash_netiface_create+0x10/0x10 [ 360.917843][T13286] ip_set_create+0x3cc/0x970 [ 360.917956][T13286] ? __nla_parse+0x40/0x60 [ 360.917987][T13286] nfnetlink_rcv_msg+0x4c6/0x590 [ 360.918041][T13286] netlink_rcv_skb+0x123/0x220 [ 360.918098][T13286] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 360.918135][T13286] nfnetlink_rcv+0x167/0x16c0 [ 360.918198][T13286] ? __list_del_entry_valid_or_report+0x65/0x130 [ 360.918241][T13286] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 360.918289][T13286] ? should_fail_ex+0x30/0x280 [ 360.918310][T13286] ? selinux_nlmsg_lookup+0x99/0x890 [ 360.918338][T13286] ? __rcu_read_unlock+0x34/0x70 [ 360.918441][T13286] ? __netlink_lookup+0x266/0x2a0 [ 360.918475][T13286] netlink_unicast+0x5c0/0x690 [ 360.918518][T13286] netlink_sendmsg+0x58b/0x6b0 [ 360.918544][T13286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.918614][T13286] __sock_sendmsg+0x145/0x180 [ 360.918642][T13286] ____sys_sendmsg+0x31e/0x4e0 [ 360.918689][T13286] ___sys_sendmsg+0x17b/0x1d0 [ 360.918799][T13286] __x64_sys_sendmsg+0xd4/0x160 [ 360.918875][T13286] x64_sys_call+0x191e/0x3000 [ 360.918903][T13286] do_syscall_64+0xd2/0x200 [ 360.918937][T13286] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 360.918969][T13286] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 360.919035][T13286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.919063][T13286] RIP: 0033:0x7fe09b7cefc9 [ 360.919154][T13286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.919178][T13286] RSP: 002b:00007fe09a237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.919220][T13286] RAX: ffffffffffffffda RBX: 00007fe09ba25fa0 RCX: 00007fe09b7cefc9 [ 360.919288][T13286] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 360.919304][T13286] RBP: 00007fe09b851f91 R08: 0000000000000000 R09: 0000000000000000 [ 360.919317][T13286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.919329][T13286] R13: 00007fe09ba26038 R14: 00007fe09ba25fa0 R15: 00007ffc670fd2d8 [ 360.919351][T13286] [ 360.919357][T13286] memory: usage 307200kB, limit 307200kB, failcnt 253 [ 361.015692][ T5511] bond3: (slave macvlan2): failed to get link speed/duplex [ 361.020311][T13286] memory+swap: usage 362240kB, limit 9007199254740988kB, failcnt 0 [ 361.024802][ T5511] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 361.029358][T13286] kmem: usage 291844kB, limit 9007199254740988kB, failcnt 0 [ 361.029378][T13286] Memory cgroup stats for [ 361.148936][ T5511] bond3: (slave macvlan2): failed to get link speed/duplex [ 361.149243][T13286] /syz4 [ 361.153717][ T5511] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 361.159916][T13286] : [ 361.160182][T13286] cache 12066816 [ 361.272652][ T5490] bond3: (slave macvlan2): failed to get link speed/duplex [ 361.276239][T13286] rss 2654208 [ 361.283541][ T5490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 361.287948][T13286] shmem 12066816 [ 361.287959][T13286] mapped_file 0 [ 361.336101][T13286] dirty 0 [ 361.339035][T13286] writeback 0 [ 361.342349][T13286] workingset_refault_anon 13176 [ 361.347259][T13286] workingset_refault_file 1843 [ 361.352127][T13286] swap 56360960 [ 361.355600][T13286] swapcached 987136 [ 361.359430][T13286] pgpgin 537715 [ 361.362891][T13286] pgpgout 533876 [ 361.366447][T13286] pgfault 536118 [ 361.370046][T13286] pgmajfault 2345 [ 361.373698][T13286] inactive_anon 3313664 [ 361.377979][T13286] active_anon 12394496 [ 361.382197][T13286] inactive_file 0 [ 361.385846][T13286] active_file 16384 [ 361.389761][T13286] unevictable 0 [ 361.393220][T13286] hierarchical_memory_limit 314572800 [ 361.398617][T13286] hierarchical_memsw_limit 9223372036854771712 [ 361.404827][T13286] total_cache 12066816 [ 361.405996][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 361.408942][T13286] total_rss 2654208 [ 361.416137][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 361.419929][T13286] total_shmem 12066816 [ 361.431460][T13286] total_mapped_file 0 [ 361.435584][T13286] total_dirty 0 [ 361.439052][T13286] total_writeback 0 [ 361.442855][T13286] total_workingset_refault_anon 13176 [ 361.448243][T13286] total_workingset_refault_file 1843 [ 361.453607][T13286] total_swap 56360960 [ 361.457626][T13286] total_swapcached 987136 [ 361.461964][T13286] total_pgpgin 537715 [ 361.465964][T13286] total_pgpgout 533876 [ 361.470026][T13286] total_pgfault 536118 [ 361.474138][T13286] total_pgmajfault 2345 [ 361.478293][T13286] total_inactive_anon 3313664 [ 361.483086][T13286] total_active_anon 12394496 [ 361.487679][T13286] total_inactive_file 0 [ 361.491835][T13286] total_active_file 16384 [ 361.496190][T13286] total_unevictable 0 [ 361.500187][T13286] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2600,pid=13282,uid=0 [ 361.515239][T13286] Memory cgroup out of memory: Killed process 13282 (syz.4.2600) total-vm:94088kB, anon-rss:3312kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 361.659102][T13288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2601'. [ 361.744670][T13324] loop2: detected capacity change from 0 to 512 [ 361.756391][T13321] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 361.763184][T13324] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.779154][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 361.779166][ T29] audit: type=1400 audit(368.747:33017): avc: denied { ioctl } for pid=13320 comm="syz.0.2610" path="socket:[41963]" dev="sockfs" ino=41963 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 361.860463][ T29] audit: type=1400 audit(368.821:33018): avc: denied { mounton } for pid=13326 comm="syz.4.2613" path="/proc/1595/task/1596/net/rpc" dev="proc" ino=4026532928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 361.884728][ T29] audit: type=1400 audit(368.821:33019): avc: denied { mount } for pid=13326 comm="syz.4.2613" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 361.982511][ T29] audit: type=1326 audit(368.947:33020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc2f3efc9 code=0x7ffc0000 [ 361.992708][T13321] lo speed is unknown, defaulting to 1000 [ 362.005828][ T29] audit: type=1326 audit(368.947:33021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc2f3efc9 code=0x7ffc0000 [ 362.034826][ T29] audit: type=1326 audit(368.947:33022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f2fc2f3efc9 code=0x7ffc0000 [ 362.063312][ T29] audit: type=1326 audit(369.031:33023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc2f3efc9 code=0x7ffc0000 [ 362.092131][ T29] audit: type=1326 audit(369.073:33024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc2f3efc9 code=0x7ffc0000 [ 362.115206][ T29] audit: type=1326 audit(369.073:33025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fc2f3efc9 code=0x7ffc0000 [ 362.138232][ T29] audit: type=1326 audit(369.073:33026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13339 comm="syz.2.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fc2f3efc9 code=0x7ffc0000 [ 362.246619][T13355] bond3: option lp_interval: invalid value (0) [ 362.252839][T13355] bond3: option lp_interval: allowed values 1 - 2147483647 [ 362.292592][T13355] bond3 (unregistering): Released all slaves [ 362.415560][T13370] bond3: option lp_interval: invalid value (0) [ 362.421876][T13370] bond3: option lp_interval: allowed values 1 - 2147483647 [ 362.451861][T13370] bond3 (unregistering): Released all slaves [ 362.937987][T13364] syz.1.2623 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 362.951988][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.1.2623 Not tainted syzkaller #0 PREEMPT(voluntary) [ 362.952022][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 362.952038][T13364] Call Trace: [ 362.952046][T13364] [ 362.952056][T13364] __dump_stack+0x1d/0x30 [ 362.952145][T13364] dump_stack_lvl+0xe8/0x140 [ 362.952168][T13364] dump_stack+0x15/0x1b [ 362.952206][T13364] dump_header+0x81/0x220 [ 362.952222][T13364] oom_kill_process+0x342/0x400 [ 362.952320][T13364] out_of_memory+0x979/0xb80 [ 362.952367][T13364] try_charge_memcg+0x610/0xa10 [ 362.952399][T13364] obj_cgroup_charge_pages+0xa6/0x150 [ 362.952420][T13364] __memcg_kmem_charge_page+0x9f/0x170 [ 362.952447][T13364] __alloc_frozen_pages_noprof+0x188/0x360 [ 362.952484][T13364] alloc_pages_mpol+0xb3/0x260 [ 362.952503][T13364] ? alloc_pages_noprof+0x61/0x130 [ 362.952585][T13364] alloc_pages_noprof+0x90/0x130 [ 362.952729][T13364] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 362.952792][T13364] __kvmalloc_node_noprof+0x483/0x670 [ 362.952823][T13364] ? ip_set_alloc+0x24/0x30 [ 362.952879][T13364] ? ip_set_alloc+0x24/0x30 [ 362.952906][T13364] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 362.952973][T13364] ip_set_alloc+0x24/0x30 [ 362.953013][T13364] hash_netiface_create+0x282/0x740 [ 362.953108][T13364] ? __pfx_hash_netiface_create+0x10/0x10 [ 362.953173][T13364] ip_set_create+0x3cc/0x970 [ 362.953200][T13364] ? __nla_parse+0x40/0x60 [ 362.953221][T13364] nfnetlink_rcv_msg+0x4c6/0x590 [ 362.953299][T13364] netlink_rcv_skb+0x123/0x220 [ 362.953328][T13364] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 362.953359][T13364] nfnetlink_rcv+0x167/0x16c0 [ 362.953448][T13364] ? __list_del_entry_valid_or_report+0x65/0x130 [ 362.953502][T13364] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 362.953552][T13364] ? should_fail_ex+0x30/0x280 [ 362.953569][T13364] ? selinux_nlmsg_lookup+0x99/0x890 [ 362.953592][T13364] ? __rcu_read_unlock+0x34/0x70 [ 362.953639][T13364] ? __netlink_lookup+0x266/0x2a0 [ 362.953704][T13364] netlink_unicast+0x5c0/0x690 [ 362.953733][T13364] netlink_sendmsg+0x58b/0x6b0 [ 362.953751][T13364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.953787][T13364] __sock_sendmsg+0x145/0x180 [ 362.953809][T13364] ____sys_sendmsg+0x31e/0x4e0 [ 362.953915][T13364] ___sys_sendmsg+0x17b/0x1d0 [ 362.954009][T13364] __x64_sys_sendmsg+0xd4/0x160 [ 362.954119][T13364] x64_sys_call+0x191e/0x3000 [ 362.954216][T13364] do_syscall_64+0xd2/0x200 [ 362.954245][T13364] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 362.954376][T13364] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 362.954406][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.954471][T13364] RIP: 0033:0x7fae38f0efc9 [ 362.954609][T13364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.954625][T13364] RSP: 002b:00007fae3796f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.954646][T13364] RAX: ffffffffffffffda RBX: 00007fae39165fa0 RCX: 00007fae38f0efc9 [ 362.954657][T13364] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 362.954668][T13364] RBP: 00007fae38f91f91 R08: 0000000000000000 R09: 0000000000000000 [ 362.954679][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.954723][T13364] R13: 00007fae39166038 R14: 00007fae39165fa0 R15: 00007fffa50057f8 [ 362.954741][T13364] [ 362.954747][T13364] memory: usage 307200kB, limit 307200kB, failcnt 997 [ 363.289685][T13364] memory+swap: usage 307456kB, limit 9007199254740988kB, failcnt 0 [ 363.297735][T13364] kmem: usage 304860kB, limit 9007199254740988kB, failcnt 0 [ 363.305125][T13364] Memory cgroup stats for /syz1: [ 363.305584][T13364] cache 0 [ 363.313503][T13364] rss 2293760 [ 363.316849][T13364] shmem 0 [ 363.319862][T13364] mapped_file 0 [ 363.323368][T13364] dirty 0 [ 363.326314][T13364] writeback 0 [ 363.329611][T13364] workingset_refault_anon 10447 [ 363.334506][T13364] workingset_refault_file 2494 [ 363.339279][T13364] swap 262144 [ 363.342598][T13364] swapcached 110592 [ 363.346460][T13364] pgpgin 546660 [ 363.349972][T13364] pgpgout 546075 [ 363.353520][T13364] pgfault 530021 [ 363.357100][T13364] pgmajfault 1655 [ 363.360777][T13364] inactive_anon 2252800 [ 363.364972][T13364] active_anon 143360 [ 363.369134][T13364] inactive_file 0 [ 363.372807][T13364] active_file 0 [ 363.376281][T13364] unevictable 0 [ 363.379774][T13364] hierarchical_memory_limit 314572800 [ 363.385159][T13364] hierarchical_memsw_limit 9223372036854771712 [ 363.391352][T13364] total_cache 0 [ 363.394816][T13364] total_rss 2293760 [ 363.398664][T13364] total_shmem 0 [ 363.402144][T13364] total_mapped_file 0 [ 363.406129][T13364] total_dirty 0 [ 363.409694][T13364] total_writeback 0 [ 363.413513][T13364] total_workingset_refault_anon 10447 [ 363.418935][T13364] total_workingset_refault_file 2494 [ 363.424248][T13364] total_swap 262144 [ 363.428167][T13364] total_swapcached 110592 [ 363.432550][T13364] total_pgpgin 546660 [ 363.436703][T13364] total_pgpgout 546075 [ 363.440788][T13364] total_pgfault 530021 [ 363.444901][T13364] total_pgmajfault 1655 [ 363.449098][T13364] total_inactive_anon 2252800 [ 363.453783][T13364] total_active_anon 143360 [ 363.458322][T13364] total_inactive_file 0 [ 363.462494][T13364] total_active_file 0 [ 363.466556][T13364] total_unevictable 0 [ 363.470565][T13364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2623,pid=13363,uid=0 [ 363.485744][T13364] Memory cgroup out of memory: Killed process 13363 (syz.1.2623) total-vm:93956kB, anon-rss:3312kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:0 [ 363.583153][T13389] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 363.661112][T13393] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 363.731565][T13389] lo speed is unknown, defaulting to 1000 [ 363.800954][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'. [ 363.883390][T13405] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 364.183594][T13405] lo speed is unknown, defaulting to 1000 [ 364.391113][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2634'. [ 364.400279][T13407] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2634'. [ 364.412291][T13407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2634'. [ 364.422155][T13407] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2634'. [ 364.431266][T13407] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2634'. [ 364.454207][T13393] lo speed is unknown, defaulting to 1000 [ 364.504281][T13407] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 364.800027][T13418] xt_NFQUEUE: number of total queues is 0 [ 364.873249][T13419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2638'. [ 365.077622][T13407] lo speed is unknown, defaulting to 1000 [ 365.483587][T13429] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 365.657660][T13429] lo speed is unknown, defaulting to 1000 [ 365.755977][ T5503] net_ratelimit: 56 callbacks suppressed [ 365.756021][ T5503] bond3: (slave macvlan2): failed to get link speed/duplex [ 365.769062][ T5503] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 365.792684][T13428] loop2: detected capacity change from 0 to 512 [ 365.867074][T13428] EXT4-fs (loop2): filesystem is read-only [ 365.937633][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 365.944946][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 365.969353][T13428] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 366.008098][T13428] EXT4-fs (loop2): filesystem is read-only [ 366.014051][T13428] EXT4-fs (loop2): orphan cleanup on readonly fs [ 366.102570][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 366.109826][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 366.112761][T13428] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.2641: iget: bad i_size value: 648518346341360424 [ 366.151951][T13428] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2641: couldn't read orphan inode 16 (err -117) [ 366.228424][T13428] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 366.255378][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 366.262640][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 366.279636][T13428] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2641'. [ 366.296008][T13428] $H˙ (unregistering): Released all slaves [ 366.378447][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 366.385748][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 366.470619][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.600756][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 366.600774][ T29] audit: type=1326 audit(373.807:33327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.650423][ T29] audit: type=1326 audit(373.839:33328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.673559][ T29] audit: type=1326 audit(373.839:33329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.696841][ T29] audit: type=1326 audit(373.839:33330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.719929][ T29] audit: type=1326 audit(373.839:33331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.742931][ T29] audit: type=1326 audit(373.839:33332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.766063][ T29] audit: type=1326 audit(373.839:33333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.789195][ T29] audit: type=1326 audit(373.839:33334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.812211][ T29] audit: type=1326 audit(373.839:33335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.835424][ T29] audit: type=1326 audit(373.839:33336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13457 comm="syz.3.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fbbf32defc9 code=0x7ffc0000 [ 366.877471][T13462] ref_ctr_offset mismatch. inode: 0xc4c offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 367.151159][T13476] loop2: detected capacity change from 0 to 512 [ 367.165288][T13476] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 367.183559][T13476] EXT4-fs (loop2): 1 truncate cleaned up [ 367.214512][T13476] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.268879][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.402847][T13489] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 367.409416][T13489] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 367.417654][T13489] vhci_hcd vhci_hcd.0: Device attached [ 367.443007][T13489] vhci_hcd vhci_hcd.0: port 0 already used [ 367.457187][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2659'. [ 367.526788][T13492] vhci_hcd: connection closed [ 367.526914][ T3847] vhci_hcd: stop threads [ 367.536026][ T3847] vhci_hcd: release socket [ 367.540706][ T3847] vhci_hcd: disconnect device [ 367.555427][T13505] bond0: option lp_interval: invalid value (0) [ 367.561650][T13505] bond0: option lp_interval: allowed values 1 - 2147483647 [ 367.570062][T13505] bond0 (unregistering): Released all slaves [ 368.091054][T13521] IPv6: NLM_F_CREATE should be specified when creating new route [ 368.120470][T13508] syz.4.2662 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 368.124008][T13521] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 368.134455][T13508] CPU: 1 UID: 0 PID: 13508 Comm: syz.4.2662 Not tainted syzkaller #0 PREEMPT(voluntary) [ 368.134521][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 368.134538][T13508] Call Trace: [ 368.134547][T13508] [ 368.134558][T13508] __dump_stack+0x1d/0x30 [ 368.134597][T13508] dump_stack_lvl+0xe8/0x140 [ 368.134628][T13508] dump_stack+0x15/0x1b [ 368.134729][T13508] dump_header+0x81/0x220 [ 368.134754][T13508] oom_kill_process+0x342/0x400 [ 368.134799][T13508] out_of_memory+0x979/0xb80 [ 368.134845][T13508] try_charge_memcg+0x610/0xa10 [ 368.134952][T13508] obj_cgroup_charge_pages+0xa6/0x150 [ 368.134982][T13508] __memcg_kmem_charge_page+0x9f/0x170 [ 368.135013][T13508] __alloc_frozen_pages_noprof+0x188/0x360 [ 368.135066][T13508] alloc_pages_mpol+0xb3/0x260 [ 368.135102][T13508] ? alloc_pages_noprof+0x61/0x130 [ 368.135132][T13508] alloc_pages_noprof+0x90/0x130 [ 368.135231][T13508] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 368.135296][T13508] __kvmalloc_node_noprof+0x483/0x670 [ 368.135341][T13508] ? ip_set_alloc+0x24/0x30 [ 368.135381][T13508] ? ip_set_alloc+0x24/0x30 [ 368.135424][T13508] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 368.135468][T13508] ip_set_alloc+0x24/0x30 [ 368.135511][T13508] hash_netiface_create+0x282/0x740 [ 368.135572][T13508] ? __pfx_hash_netiface_create+0x10/0x10 [ 368.135624][T13508] ip_set_create+0x3cc/0x970 [ 368.135663][T13508] ? __nla_parse+0x40/0x60 [ 368.135695][T13508] nfnetlink_rcv_msg+0x4c6/0x590 [ 368.135842][T13508] netlink_rcv_skb+0x123/0x220 [ 368.135884][T13508] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 368.135934][T13508] nfnetlink_rcv+0x167/0x16c0 [ 368.136052][T13508] ? __list_del_entry_valid_or_report+0x65/0x130 [ 368.136091][T13508] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 368.136183][T13508] ? should_fail_ex+0x30/0x280 [ 368.136208][T13508] ? selinux_nlmsg_lookup+0x99/0x890 [ 368.136286][T13508] ? __rcu_read_unlock+0x34/0x70 [ 368.136322][T13508] ? __netlink_lookup+0x266/0x2a0 [ 368.136353][T13508] netlink_unicast+0x5c0/0x690 [ 368.136397][T13508] netlink_sendmsg+0x58b/0x6b0 [ 368.136427][T13508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.136458][T13508] __sock_sendmsg+0x145/0x180 [ 368.136493][T13508] ____sys_sendmsg+0x31e/0x4e0 [ 368.136543][T13508] ___sys_sendmsg+0x17b/0x1d0 [ 368.136716][T13508] __x64_sys_sendmsg+0xd4/0x160 [ 368.136769][T13508] x64_sys_call+0x191e/0x3000 [ 368.136799][T13508] do_syscall_64+0xd2/0x200 [ 368.136822][T13508] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 368.136940][T13508] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 368.136983][T13508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.137012][T13508] RIP: 0033:0x7fe09b7cefc9 [ 368.137033][T13508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.137086][T13508] RSP: 002b:00007fe09a237038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.137111][T13508] RAX: ffffffffffffffda RBX: 00007fe09ba25fa0 RCX: 00007fe09b7cefc9 [ 368.137129][T13508] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 368.137145][T13508] RBP: 00007fe09b851f91 R08: 0000000000000000 R09: 0000000000000000 [ 368.137162][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.137178][T13508] R13: 00007fe09ba26038 R14: 00007fe09ba25fa0 R15: 00007ffc670fd2d8 [ 368.137264][T13508] [ 368.137273][T13508] memory: usage 307200kB, limit 307200kB, failcnt 693 [ 368.364596][T13521] lo speed is unknown, defaulting to 1000 [ 368.365511][T13508] memory+swap: usage 362216kB, limit 9007199254740988kB, failcnt 0 [ 368.488566][T13508] kmem: usage 291828kB, limit 9007199254740988kB, failcnt 0 [ 368.495917][T13508] Memory cgroup stats for /syz4: [ 368.496451][T13508] cache 12066816 [ 368.505033][T13508] rss 2646016 [ 368.508373][T13508] shmem 12066816 [ 368.511931][T13508] mapped_file 0 [ 368.515498][T13508] dirty 0 [ 368.518514][T13508] writeback 0 [ 368.521915][T13508] workingset_refault_anon 13182 [ 368.526763][T13508] workingset_refault_file 2101 [ 368.531530][T13508] swap 56336384 [ 368.535138][T13508] swapcached 1011712 [ 368.539081][T13508] pgpgin 543859 [ 368.542579][T13508] pgpgout 540016 [ 368.546126][T13508] pgfault 542733 [ 368.549742][T13508] pgmajfault 2349 [ 368.553401][T13508] inactive_anon 11059200 [ 368.557703][T13508] active_anon 4665344 [ 368.561729][T13508] inactive_file 4096 [ 368.565734][T13508] active_file 12288 [ 368.569589][T13508] unevictable 0 [ 368.573062][T13508] hierarchical_memory_limit 314572800 [ 368.578491][T13508] hierarchical_memsw_limit 9223372036854771712 [ 368.584705][T13508] total_cache 12066816 [ 368.588878][T13508] total_rss 2646016 [ 368.592702][T13508] total_shmem 12066816 [ 368.596776][T13508] total_mapped_file 0 [ 368.600890][T13508] total_dirty 0 [ 368.604370][T13508] total_writeback 0 [ 368.608223][T13508] total_workingset_refault_anon 13182 [ 368.613691][T13508] total_workingset_refault_file 2101 [ 368.619032][T13508] total_swap 56336384 [ 368.623034][T13508] total_swapcached 1011712 [ 368.627503][T13508] total_pgpgin 543859 [ 368.631499][T13508] total_pgpgout 540016 [ 368.635583][T13508] total_pgfault 542733 [ 368.639818][T13508] total_pgmajfault 2349 [ 368.644037][T13508] total_inactive_anon 11059200 [ 368.648947][T13508] total_active_anon 4665344 [ 368.653507][T13508] total_inactive_file 4096 [ 368.658033][T13508] total_active_file 12288 [ 368.662369][T13508] total_unevictable 0 [ 368.666422][T13508] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1639,pid=9777,uid=0 [ 368.681406][T13508] Memory cgroup out of memory: Killed process 9777 (syz.4.1639) total-vm:95872kB, anon-rss:1304kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 368.796611][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2670'. [ 368.853488][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2670'. [ 368.877214][T13541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2670'. [ 368.976864][T13539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2670'. [ 369.065636][T13551] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2673'. [ 369.096448][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2673'. [ 369.105501][T13551] netlink: 'syz.2.2673': attribute type 1 has an invalid length. [ 369.113330][T13551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2673'. [ 369.131438][T13557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2675'. [ 369.164129][T13557] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 369.219639][T13564] x_tables: duplicate entry at hook 3 [ 369.341114][T13557] lo speed is unknown, defaulting to 1000 [ 369.539246][T13573] 9pnet_fd: Insufficient options for proto=fd [ 369.568219][T13573] ˙˙˙˙ speed is unknown, defaulting to 1000 [ 369.741197][T13573] lo speed is unknown, defaulting to 1000 [ 370.108610][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2681'. [ 370.203536][T13584] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2681'. [ 370.284495][T13581] bond3: entered allmulticast mode [ 370.345959][T13581] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.386190][T13591] IPVS: Unknown mcast interface: ipvlan1 [ 370.423562][T13589] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=13589 comm=syz.4.2682 [ 370.453644][T13592] bond0: option lp_interval: invalid value (0) [ 370.459983][T13592] bond0: option lp_interval: allowed values 1 - 2147483647 [ 370.507674][T13592] bond0 (unregistering): Released all slaves [ 370.563126][ T4321] net_ratelimit: 58 callbacks suppressed [ 370.563141][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 370.576190][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 370.683962][ T5490] bond3: (slave macvlan2): failed to get link speed/duplex [ 370.691266][ T5490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 370.706601][T13605] bond3: option lp_interval: invalid value (0) [ 370.712915][T13605] bond3: option lp_interval: allowed values 1 - 2147483647 [ 370.740470][T13605] bond3 (unregistering): Released all slaves [ 370.798423][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 370.805844][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 370.922105][ T5490] bond3: (slave macvlan2): failed to get link speed/duplex [ 370.929517][ T5490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 371.036545][ T5490] bond3: (slave macvlan2): failed to get link speed/duplex [ 371.043889][ T5490] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 371.265126][T13630] IPVS: Unknown mcast interface: ipvlan1 [ 371.278985][T13630] loop2: detected capacity change from 0 to 1024 [ 371.297302][T13630] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 371.371691][T13630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 371.382529][T13630] EXT4-fs (loop2): failed to initialize system zone (-117) [ 371.390536][T13630] EXT4-fs (loop2): mount failed [ 371.451000][T13630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=13630 comm=syz.2.2696 [ 371.659941][ T29] kauditd_printk_skb: 599 callbacks suppressed [ 371.659956][ T29] audit: type=1326 audit(379.116:33936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 371.918466][ T29] audit: type=1326 audit(379.147:33937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 371.941547][ T29] audit: type=1326 audit(379.147:33938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 371.964565][ T29] audit: type=1326 audit(379.147:33939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe09b7cf003 code=0x7ffc0000 [ 371.987412][ T29] audit: type=1326 audit(379.315:33940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe09b7cda7f code=0x7ffc0000 [ 372.010525][ T29] audit: type=1326 audit(379.410:33941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fe09b7cf057 code=0x7ffc0000 [ 372.033510][ T29] audit: type=1326 audit(379.410:33942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe09b7cd810 code=0x7ffc0000 [ 372.056733][ T29] audit: type=1326 audit(379.410:33943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe09b7cdc2a code=0x7ffc0000 [ 372.079618][ T29] audit: type=1326 audit(379.441:33944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 372.102655][ T29] audit: type=1326 audit(379.441:33945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13634 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09b7cefc9 code=0x7ffc0000 [ 372.422426][T13667] IPVS: Unknown mcast interface: ipvlan1 [ 372.445312][T13667] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=13667 comm=syz.0.2708 [ 372.461822][T13669] loop2: detected capacity change from 0 to 2048 [ 372.486740][T13669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.574298][T13676] ================================================================== [ 372.582422][T13676] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 372.589635][T13676] [ 372.591982][T13676] read-write to 0xffff888119c33d88 of 8 bytes by task 13669 on cpu 0: [ 372.600151][T13676] __xa_set_mark+0xd2/0x1a0 [ 372.604679][T13676] __folio_mark_dirty+0x384/0x4a0 [ 372.609736][T13676] mark_buffer_dirty+0x11e/0x210 [ 372.614710][T13676] folio_zero_new_buffers+0x28c/0x2e0 [ 372.620119][T13676] block_write_end+0x200/0x210 [ 372.625005][T13676] ext4_da_write_end+0x1d3/0x800 [ 372.629976][T13676] generic_perform_write+0x312/0x490 [ 372.635269][T13676] ext4_buffered_write_iter+0x1ee/0x3c0 [ 372.640821][T13676] ext4_file_write_iter+0x387/0xf60 [ 372.646028][T13676] vfs_write+0x52a/0x960 [ 372.650282][T13676] ksys_write+0xda/0x1a0 [ 372.654537][T13676] __x64_sys_write+0x40/0x50 [ 372.659138][T13676] x64_sys_call+0x2802/0x3000 [ 372.663825][T13676] do_syscall_64+0xd2/0x200 [ 372.668336][T13676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.674238][T13676] [ 372.676566][T13676] read to 0xffff888119c33d88 of 8 bytes by task 13676 on cpu 1: [ 372.684198][T13676] xas_find_marked+0x218/0x620 [ 372.688965][T13676] find_get_entry+0x5d/0x380 [ 372.693568][T13676] filemap_get_folios_tag+0x13b/0x210 [ 372.698959][T13676] mpage_prepare_extent_to_map+0x320/0xc00 [ 372.704775][T13676] ext4_do_writepages+0xa05/0x2750 [ 372.709897][T13676] ext4_writepages+0x176/0x300 [ 372.714673][T13676] do_writepages+0x1c6/0x310 [ 372.719274][T13676] __filemap_fdatawrite_range+0xfb/0x140 [ 372.724916][T13676] generic_fadvise+0x312/0x430 [ 372.729694][T13676] __x64_sys_fadvise64+0xcb/0x110 [ 372.734720][T13676] x64_sys_call+0x29c5/0x3000 [ 372.739402][T13676] do_syscall_64+0xd2/0x200 [ 372.743928][T13676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.749828][T13676] [ 372.752156][T13676] value changed: 0x00003fffffffffff -> 0x0000ffffffffffff [ 372.759259][T13676] [ 372.761578][T13676] Reported by Kernel Concurrency Sanitizer on: [ 372.767727][T13676] CPU: 1 UID: 0 PID: 13676 Comm: syz.2.2709 Not tainted syzkaller #0 PREEMPT(voluntary) [ 372.777538][T13676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 372.787605][T13676] ================================================================== [ 372.832764][T13676] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2709: bg 0: block 345: padding at end of block bitmap is not set [ 372.868307][T13676] EXT4-fs (loop2): Remounting filesystem read-only [ 372.874970][ T5490] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 372.985559][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.418622][ T3847] net_ratelimit: 78 callbacks suppressed [ 375.418644][ T3847] bond3: (slave macvlan2): failed to get link speed/duplex [ 375.431511][ T3847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 375.542452][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 375.549665][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 375.656758][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 375.664009][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 375.770630][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 375.777863][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 375.885364][ T3847] bond3: (slave macvlan2): failed to get link speed/duplex [ 375.892612][ T3847] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 380.219537][ T5518] net_ratelimit: 80 callbacks suppressed [ 380.219556][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 380.232509][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 380.343384][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 380.350613][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 380.457703][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 380.464938][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 380.581045][ T5518] bond3: (slave macvlan2): failed to get link speed/duplex [ 380.588327][ T5518] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 380.695845][ T4321] bond3: (slave macvlan2): failed to get link speed/duplex [ 380.703163][ T4321] bond3: (slave ip6gretap1): failed to get link speed/duplex