last executing test programs: 4m37.077175572s ago: executing program 4 (id=145): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x1000, 0xfffffffe, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 4m36.761489567s ago: executing program 4 (id=148): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 4m35.533237957s ago: executing program 4 (id=174): bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = dup2(r0, r0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 4m35.376934309s ago: executing program 4 (id=180): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) 4m35.376545339s ago: executing program 4 (id=181): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='kmem_cache_free\x00', r2, 0x0, 0x80001}, 0x18) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x40000) 4m35.171468376s ago: executing program 4 (id=188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 4m35.171225636s ago: executing program 32 (id=188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 6.215175236s ago: executing program 5 (id=2612): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b700000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@FILEID_UDF_WITH_PARENT={0x14, 0x52, {{0x40000000, 0x1, 0xa, 0x7}, 0x6, 0x8001}}, &(0x7f0000000980), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x1, 0x20539, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x10000, 0xfffffffc, 0x3, 0x9, 0x1c, 0xb, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='rxrpc_rx_data\x00'}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000012cc226984964dae79073700001f00000000000900000000000000", @ANYRES32=r6, @ANYBLOB="000100"/20, @ANYRES32=r8, @ANYRES32, @ANYBLOB="04000000020000000500"/28], 0x50) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0xa0, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8002}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x205, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x8c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}]}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xf85a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffff, 0xa3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0xa0}}, 0x40050) 5.985630145s ago: executing program 5 (id=2616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r3, &(0x7f0000000300), 0x10) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000306030000000000000000000a80000305000100070000000500010007000000050001000700000005000100070000002b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) 5.277971872s ago: executing program 5 (id=2620): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r5, 0x0, 0x40001) sendfile(r6, 0xffffffffffffffff, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 4.982532866s ago: executing program 3 (id=2621): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x7}, 0x4100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x20) r7 = open$dir(0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r8 = open$dir(&(0x7f0000000040)='./file0\x00', 0x500, 0xa8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r8, 0x0) keyctl$unlink(0x9, r4, r4) pwritev(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) 4.80670377s ago: executing program 3 (id=2622): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 4.639459834s ago: executing program 0 (id=2623): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 4.261090824s ago: executing program 1 (id=2627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a8, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x372, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1b, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200fe8000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 4.260520875s ago: executing program 2 (id=2628): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/image_size', 0x1a1081, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) r4 = add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x2, 0x7}, 0x4100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x3, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf}, 0x94) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {r3}}, './file0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r7, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(0x0, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000000c0)) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = open$dir(&(0x7f0000000040)='./file0\x00', 0x500, 0xa8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r9, 0x0) keyctl$unlink(0x9, r4, r4) pwritev(r0, &(0x7f0000000180), 0x0, 0x0, 0x0) 3.991675577s ago: executing program 2 (id=2629): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000015a, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESOCT, @ANYBLOB='f']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x50a, &(0x7f0000000940)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) 3.867393766s ago: executing program 5 (id=2630): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 3.314943371s ago: executing program 1 (id=2631): socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002b40)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) unshare(0x20060400) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x1}, 0x6e) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xfffffbb1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@bloom_filter={0x1e, 0x4, 0x7fffffff, 0x9, 0xf99a47eecf5d5b05, r5, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5, 0xf}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x4a, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file1\x00', 0x0, 0x4000, r4}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="c6a800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) 3.038405513s ago: executing program 2 (id=2632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r3, &(0x7f0000000300), 0x10) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r5, 0x7006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000306030000000000000000000a80000305000100070000000500010007000000050001000700000005000100070000002b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) 2.398016415s ago: executing program 1 (id=2633): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a3100000000140007800500"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x9}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r9, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 2.317895612s ago: executing program 3 (id=2634): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = mq_open(0x0, 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.146246136s ago: executing program 3 (id=2635): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 2.144882386s ago: executing program 5 (id=2636): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x1000000, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x10) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_UDP_DST={0x6}]}}]}, 0x3c}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.132759407s ago: executing program 0 (id=2637): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000680), 0x0, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x9}, 0x18) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000200)}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r4, 0x40044591, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r6, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 2.128536257s ago: executing program 1 (id=2638): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x9}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r7, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 2.080983611s ago: executing program 0 (id=2639): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3a8, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x372, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1b, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200fe8000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 1.902423746s ago: executing program 1 (id=2640): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000002000008500000084000000b700000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) 1.766042757s ago: executing program 2 (id=2641): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x10) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x1, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0xe}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_UDP_DST={0x6}]}}]}, 0x3c}}, 0x4000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.201215462s ago: executing program 5 (id=2642): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 1.032122436s ago: executing program 0 (id=2643): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") 1.008064268s ago: executing program 1 (id=2644): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 928.469525ms ago: executing program 3 (id=2645): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001b80)=ANY=[]) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x121}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x44f, &(0x7f0000000880)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') 858.88291ms ago: executing program 2 (id=2646): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 773.079217ms ago: executing program 3 (id=2647): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x0, 0x88d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xb00000, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@acl}], [{@pcr={'pcr', 0x3d, 0x34}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_lt={'uid<', r1}}, {@fowner_lt={'fowner<', r1}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_eq={'uid', 0x3d, r2}}, {@subj_type}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) r3 = semget$private(0x0, 0x6, 0x3b9) semtimedop(r3, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r3, &(0x7f0000000180)=[{}, {}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 746.720529ms ago: executing program 2 (id=2648): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 80.152493ms ago: executing program 0 (id=2649): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000000680), 0x0, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0x9}, 0x18) r3 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r5, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 0s ago: executing program 0 (id=2650): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x9}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r7, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) kernel console output (not intermixed with test programs): 4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 169.531817][ T29] audit: type=1326 audit(1756496761.800:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 169.555252][ T29] audit: type=1326 audit(1756496761.800:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.5.1467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 170.067065][ T9394] Falling back ldisc for ttyS3. [ 170.244030][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1471'. [ 170.253088][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1471'. [ 170.262066][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1471'. [ 170.305373][ T9396] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1471'. [ 170.314467][ T9396] netlink: 'syz.5.1471': attribute type 6 has an invalid length. [ 170.322725][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 170.331807][ T9400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1473'. [ 170.340838][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1473'. [ 170.352021][ T9400] netlink: 'syz.1.1473': attribute type 6 has an invalid length. [ 170.360225][ T9402] tipc: Enabling of bearer rejected, failed to enable media [ 170.409684][ T9398] Falling back ldisc for ttyS3. [ 170.435748][ T9407] netlink: 'syz.5.1476': attribute type 6 has an invalid length. [ 170.472306][ T9413] netlink: 'syz.0.1479': attribute type 6 has an invalid length. [ 170.510530][ T9414] Falling back ldisc for ttyS3. [ 170.611417][ T9419] Falling back ldisc for ttyS3. [ 170.948247][ T9426] netlink: 'syz.3.1483': attribute type 6 has an invalid length. [ 171.002654][ T9428] netlink: 'syz.3.1484': attribute type 6 has an invalid length. [ 171.736933][ T9441] netlink: 'syz.5.1489': attribute type 6 has an invalid length. [ 171.800372][ T9442] Falling back ldisc for ttyS3. [ 171.881094][ T9446] Falling back ldisc for ttyS3. [ 171.968749][ T9448] netlink: 'syz.3.1491': attribute type 6 has an invalid length. [ 172.132670][ T9451] Falling back ldisc for ttyS3. [ 172.728903][ T9458] netlink: 'syz.0.1495': attribute type 6 has an invalid length. [ 172.752549][ T9460] netlink: 'syz.1.1496': attribute type 6 has an invalid length. [ 172.938240][ T9475] Falling back ldisc for ttyS3. [ 173.109463][ T9482] Falling back ldisc for ttyS3. [ 173.444152][ T9485] __nla_validate_parse: 44 callbacks suppressed [ 173.444168][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 173.459441][ T9485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'. [ 173.468461][ T9485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'. [ 173.552421][ T9485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1506'. [ 174.275531][ T9500] loop5: detected capacity change from 0 to 1024 [ 174.701277][ T9500] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 174.712210][ T9500] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 174.722743][ T9500] EXT4-fs (loop5): invalid journal inode [ 174.728401][ T9500] EXT4-fs (loop5): can't get journal size [ 174.744393][ T9500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.950127][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.001996][ T9513] tipc: Enabling of bearer rejected, failed to enable media [ 175.125533][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 175.134607][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1518'. [ 175.143669][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1518'. [ 175.948315][ T9517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1518'. [ 175.957321][ T9517] validate_nla: 3 callbacks suppressed [ 175.957332][ T9517] netlink: 'syz.0.1518': attribute type 6 has an invalid length. [ 176.090144][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1521'. [ 176.099177][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1521'. [ 176.108483][ T9528] netlink: 'syz.1.1521': attribute type 6 has an invalid length. [ 176.228615][ T9524] Falling back ldisc for ttyS3. [ 177.114741][ T9530] netlink: 'syz.1.1523': attribute type 6 has an invalid length. [ 177.495719][ T9547] Falling back ldisc for ttyS3. [ 177.655533][ T9554] tipc: Enabled bearer , priority 0 [ 177.679373][ T9553] tipc: Resetting bearer [ 177.693451][ T9553] tipc: Disabling bearer [ 177.734481][ T9558] netlink: 'syz.2.1529': attribute type 6 has an invalid length. [ 177.759526][ T9560] netlink: 'syz.2.1531': attribute type 6 has an invalid length. [ 177.907749][ T9567] Falling back ldisc for ttyS3. [ 178.172640][ T9574] netlink: 'syz.0.1536': attribute type 6 has an invalid length. [ 178.480566][ T9570] Falling back ldisc for ttyS3. [ 178.535068][ T9580] __nla_validate_parse: 18 callbacks suppressed [ 178.535085][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'. [ 178.550368][ T9580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'. [ 178.559392][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1538'. [ 178.580435][ T9580] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1538'. [ 178.589550][ T9580] netlink: 'syz.3.1538': attribute type 6 has an invalid length. [ 178.622363][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 178.631566][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1540'. [ 178.640516][ T9584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'. [ 178.681921][ T9584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1540'. [ 178.690900][ T9584] netlink: 'syz.3.1540': attribute type 6 has an invalid length. [ 178.703340][ T9582] Falling back ldisc for ttyS3. [ 178.866538][ T9593] tipc: Enabled bearer , priority 0 [ 178.883261][ T9592] tipc: Resetting bearer [ 178.906045][ T9592] tipc: Disabling bearer [ 178.912570][ T9591] Falling back ldisc for ttyS3. [ 179.093491][ T9602] Falling back ldisc for ttyS3. [ 179.234311][ T29] audit: type=1400 audit(1756496771.558:4303): avc: denied { create } for pid=9606 comm="syz.0.1549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 179.294524][ T9607] futex_wake_op: syz.0.1549 tries to shift op by -1; fix this program [ 179.331763][ T9609] futex_wake_op: syz.0.1550 tries to shift op by -1; fix this program [ 179.546148][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1552'. [ 179.555643][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1552'. [ 179.576226][ T9614] netlink: 'syz.1.1552': attribute type 6 has an invalid length. [ 179.663743][ T9617] netlink: 'syz.1.1553': attribute type 6 has an invalid length. [ 179.786968][ T29] audit: type=1326 audit(1756496772.115:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 179.810483][ T29] audit: type=1326 audit(1756496772.115:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 179.894794][ T29] audit: type=1326 audit(1756496772.165:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 179.918317][ T29] audit: type=1326 audit(1756496772.165:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 179.941774][ T29] audit: type=1326 audit(1756496772.165:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 179.965163][ T29] audit: type=1326 audit(1756496772.165:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 179.988665][ T29] audit: type=1326 audit(1756496772.165:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 180.012155][ T29] audit: type=1326 audit(1756496772.165:4311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 180.035699][ T29] audit: type=1326 audit(1756496772.165:4312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9625 comm="syz.5.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f037d4bd310 code=0x7ffc0000 [ 180.118148][ T9629] Falling back ldisc for ttyS3. [ 180.613539][ T9643] futex_wake_op: syz.2.1559 tries to shift op by -1; fix this program [ 180.648534][ T9643] bond0: (slave bond_slave_1): Releasing backup interface [ 180.769756][ T9651] futex_wake_op: syz.0.1563 tries to shift op by -1; fix this program [ 180.782449][ T9647] tipc: Enabled bearer , priority 0 [ 180.794797][ T9653] futex_wake_op: syz.0.1564 tries to shift op by -1; fix this program [ 180.803465][ T9646] tipc: Resetting bearer [ 180.807024][ T9655] futex_wake_op: syz.1.1565 tries to shift op by -1; fix this program [ 180.827977][ T9646] tipc: Disabling bearer [ 180.837337][ T9655] bond_slave_1: entered promiscuous mode [ 180.844792][ T9654] bond_slave_1: left promiscuous mode [ 180.855832][ T9658] bond_slave_1: entered promiscuous mode [ 180.880478][ T9658] bond_slave_1 (unregistering): left promiscuous mode [ 180.901421][ T9649] Falling back ldisc for ttyS3. [ 180.936042][ T9664] futex_wake_op: syz.2.1569 tries to shift op by -1; fix this program [ 180.937130][ T9666] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 180.996033][ T9671] futex_wake_op: syz.1.1571 tries to shift op by -1; fix this program [ 181.099468][ T9671] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 181.133884][ T9676] futex_wake_op: syz.2.1574 tries to shift op by -1; fix this program [ 181.226579][ T9683] validate_nla: 2 callbacks suppressed [ 181.226593][ T9683] netlink: 'syz.2.1576': attribute type 6 has an invalid length. [ 181.273227][ T9688] tipc: Enabled bearer , priority 0 [ 181.281194][ T9687] tipc: Resetting bearer [ 181.310776][ T9687] tipc: Disabling bearer [ 181.386591][ T9694] netlink: 'syz.2.1581': attribute type 6 has an invalid length. [ 181.441232][ T9698] netlink: 'syz.2.1582': attribute type 6 has an invalid length. [ 181.533770][ T9706] netlink: 'syz.1.1586': attribute type 6 has an invalid length. [ 181.703055][ T9713] futex_wake_op: syz.3.1589 tries to shift op by -1; fix this program [ 181.720724][ T9713] bond0: (slave bond_slave_1): Releasing backup interface [ 181.824284][ T9721] tmpfs: Bad value for 'mpol' [ 181.939797][ T9718] tipc: Enabled bearer , priority 0 [ 181.976200][ T9717] tipc: Resetting bearer [ 182.009099][ T9717] tipc: Disabling bearer [ 182.450298][ T9744] netlink: 'syz.2.1600': attribute type 6 has an invalid length. [ 182.568670][ T9749] Falling back ldisc for ttyS3. [ 182.583880][ T9751] tipc: Enabled bearer , priority 0 [ 182.600652][ T9750] tipc: Resetting bearer [ 182.622610][ T9750] tipc: Disabling bearer [ 182.840845][ T9762] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.295427][ T9782] tipc: Enabling of bearer rejected, failed to enable media [ 183.316392][ T9783] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 183.562231][ T9791] Falling back ldisc for ttyS3. [ 183.640802][ T9797] __nla_validate_parse: 50 callbacks suppressed [ 183.640817][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1619'. [ 183.719963][ T9803] tmpfs: Bad value for 'mpol' [ 183.842529][ T9808] loop5: detected capacity change from 0 to 512 [ 183.849649][ T9808] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 183.860501][ T9808] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.867764][ T9808] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1623: Block bitmap for bg 0 marked uninitialized [ 183.885667][ T9808] EXT4-fs (loop5): Remounting filesystem read-only [ 183.892245][ T9808] EXT4-fs (loop5): 1 orphan inode deleted [ 183.898529][ T9808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 183.914432][ T9808] bond_slave_1: entered promiscuous mode [ 183.920726][ T9807] bond_slave_1: left promiscuous mode [ 183.935974][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.959899][ T9811] loop5: detected capacity change from 0 to 512 [ 183.968009][ T9811] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 183.978446][ T9811] EXT4-fs (loop5): orphan cleanup on readonly fs [ 183.985126][ T9811] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1624: Block bitmap for bg 0 marked uninitialized [ 183.998580][ T9811] EXT4-fs (loop5): Remounting filesystem read-only [ 184.005265][ T9811] EXT4-fs (loop5): 1 orphan inode deleted [ 184.011448][ T9811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 184.026375][ T9811] bond_slave_1: entered promiscuous mode [ 184.032533][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1624'. [ 184.042536][ T9811] bond0: (slave bond_slave_1): Releasing backup interface [ 184.050669][ T9811] bond_slave_1 (unregistering): left promiscuous mode [ 184.125139][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 184.134179][ T9814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1625'. [ 184.143141][ T9814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'. [ 184.152516][ T9814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1625'. [ 184.152625][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.161560][ T9814] netlink: 'syz.3.1625': attribute type 6 has an invalid length. [ 184.380499][ T9824] syz!: rxe_newlink: already configured on team_slave_0 [ 184.435401][ T9827] Falling back ldisc for ttyS3. [ 184.442474][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 184.442518][ T29] audit: type=1326 audit(1756496776.746:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9825 comm="syz.2.1630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x0 [ 184.544234][ T9828] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 184.739244][ T9832] futex_atomic_op_inuser: 11 callbacks suppressed [ 184.739261][ T9832] futex_wake_op: syz.1.1632 tries to shift op by -1; fix this program [ 184.799248][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 184.937029][ T9839] Falling back ldisc for ttyS3. [ 185.152710][ T9842] futex_wake_op: syz.5.1635 tries to shift op by -1; fix this program [ 185.174683][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 185.183740][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1636'. [ 185.185313][ T9842] loop5: detected capacity change from 0 to 512 [ 185.192716][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1636'. [ 185.230235][ T9842] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 185.243781][ T9844] netlink: 'syz.0.1636': attribute type 6 has an invalid length. [ 185.260019][ T9842] EXT4-fs (loop5): orphan cleanup on readonly fs [ 185.286972][ T9842] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1635: Block bitmap for bg 0 marked uninitialized [ 185.304521][ T9842] EXT4-fs (loop5): Remounting filesystem read-only [ 185.321707][ T9842] EXT4-fs (loop5): 1 orphan inode deleted [ 185.330490][ T9849] futex_wake_op: syz.0.1638 tries to shift op by -1; fix this program [ 185.339201][ T9842] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 185.404937][ T9857] futex_wake_op: syz.3.1641 tries to shift op by -1; fix this program [ 185.416683][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.419982][ T9859] netlink: 'syz.2.1640': attribute type 6 has an invalid length. [ 185.456796][ T9862] netlink: 'syz.5.1642': attribute type 6 has an invalid length. [ 185.464548][ T9864] futex_wake_op: syz.3.1643 tries to shift op by -1; fix this program [ 185.496619][ T9866] netlink: 'syz.2.1644': attribute type 6 has an invalid length. [ 185.543740][ T29] audit: type=1326 audit(1756496777.843:4352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9867 comm="syz.0.1645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x0 [ 185.571741][ T29] audit: type=1326 audit(1756496777.843:4353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9873 comm="syz.5.1648" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x0 [ 185.596083][ T9877] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.654538][ T9884] syz!: rxe_newlink: already configured on team_slave_0 [ 185.680310][ T9887] futex_wake_op: syz.2.1653 tries to shift op by -1; fix this program [ 185.740064][ T29] audit: type=1326 audit(1756496778.032:4354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.3.1654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x0 [ 185.780867][ T29] audit: type=1326 audit(1756496778.082:4355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9895 comm="syz.2.1656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x0 [ 185.807206][ T9898] futex_wake_op: syz.1.1657 tries to shift op by -1; fix this program [ 185.856114][ T9901] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.883796][ T9904] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 185.898570][ T29] audit: type=1326 audit(1756496778.202:4356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9905 comm="syz.1.1660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x0 [ 186.000671][ T9907] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 186.341239][ T9909] futex_wake_op: syz.0.1661 tries to shift op by -1; fix this program [ 186.512190][ T9920] futex_wake_op: syz.0.1665 tries to shift op by -1; fix this program [ 186.562764][ T9923] loop5: detected capacity change from 0 to 512 [ 186.573202][ T9923] EXT4-fs (loop5): orphan cleanup on readonly fs [ 186.580058][ T9923] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1662: bg 0: block 248: padding at end of block bitmap is not set [ 186.595424][ T9923] Quota error (device loop5): write_blk: dquota write failed [ 186.603089][ T9923] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 186.613007][ T9923] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1662: Failed to acquire dquot type 1 [ 186.633045][ T9923] EXT4-fs (loop5): 1 truncate cleaned up [ 186.649239][ T9927] netlink: 'syz.3.1667': attribute type 6 has an invalid length. [ 186.691792][ T9929] tipc: Enabled bearer , priority 0 [ 186.699444][ T9928] tipc: Resetting bearer [ 186.714896][ T9928] tipc: Disabling bearer [ 186.751344][ T29] audit: type=1326 audit(1756496779.049:4357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9925 comm="syz.0.1666" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x0 [ 186.817076][ T29] audit: type=1326 audit(1756496779.089:4358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9931 comm="syz.1.1669" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x0 [ 186.840819][ T9923] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.857284][ T9937] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 186.905527][ T9940] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 186.966759][ T9942] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 187.290422][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.378657][ T9946] netlink: 'syz.5.1674': attribute type 6 has an invalid length. [ 187.576233][ T9951] futex_wake_op: syz.0.1676 tries to shift op by -1; fix this program [ 187.612298][ T9952] loop5: detected capacity change from 0 to 1024 [ 187.639728][ T9952] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 187.650672][ T9952] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 187.664646][ T9958] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 187.698666][ T9952] EXT4-fs (loop5): invalid journal inode [ 187.704354][ T9952] EXT4-fs (loop5): can't get journal size [ 187.712821][ T9952] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 187.806336][ T9967] Falling back ldisc for ttyS3. [ 187.855720][ T9978] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 187.980427][ T9986] netlink: 'syz.2.1686': attribute type 6 has an invalid length. [ 188.239065][T10000] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.314662][T10003] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.360327][T10005] netlink: 'syz.0.1693': attribute type 6 has an invalid length. [ 188.404561][T10007] tipc: Enabling of bearer rejected, failed to enable media [ 188.564793][T10010] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.635630][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.846883][T10038] __nla_validate_parse: 41 callbacks suppressed [ 188.846897][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 188.862297][T10038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1709'. [ 188.871355][T10038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 188.880500][T10038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1709'. [ 188.889491][T10038] netlink: 'syz.1.1709': attribute type 6 has an invalid length. [ 188.890985][T10043] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 188.904029][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1711'. [ 188.913179][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1711'. [ 188.922165][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1711'. [ 188.931431][T10042] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1711'. [ 188.940519][T10042] netlink: 'syz.5.1711': attribute type 6 has an invalid length. [ 188.948366][T10045] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1712'. [ 188.957418][T10045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1712'. [ 188.967468][T10045] netlink: 'syz.1.1712': attribute type 6 has an invalid length. [ 189.130580][T10053] tipc: Enabled bearer , priority 0 [ 189.138088][T10052] tipc: Resetting bearer [ 189.151093][T10052] tipc: Disabling bearer [ 189.274935][T10073] loop5: detected capacity change from 0 to 512 [ 189.282008][T10073] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 189.292290][T10073] EXT4-fs (loop5): orphan cleanup on readonly fs [ 189.298872][T10073] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1726: Block bitmap for bg 0 marked uninitialized [ 189.312692][T10073] EXT4-fs (loop5): Remounting filesystem read-only [ 189.319268][T10073] EXT4-fs (loop5): 1 orphan inode deleted [ 189.325728][T10073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 189.374764][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.467749][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 189.467829][ T29] audit: type=1326 audit(1756496781.761:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10095 comm="syz.0.1735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x0 [ 189.499609][T10098] tipc: Enabled bearer , priority 0 [ 189.511567][T10097] tipc: Resetting bearer [ 189.528492][T10097] tipc: Disabling bearer [ 189.609254][T10111] netlink: 'syz.5.1741': attribute type 6 has an invalid length. [ 189.650076][ T29] audit: type=1326 audit(1756496781.941:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10113 comm="syz.5.1743" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x0 [ 189.699148][T10117] tipc: Enabling of bearer rejected, failed to enable media [ 189.753830][T10136] syz!: rxe_newlink: already configured on team_slave_0 [ 189.769998][T10134] tipc: Enabled bearer , priority 0 [ 189.784714][T10133] tipc: Resetting bearer [ 189.797847][T10133] tipc: Disabling bearer [ 189.814609][T10142] futex_atomic_op_inuser: 14 callbacks suppressed [ 189.814682][T10142] futex_wake_op: syz.3.1753 tries to shift op by -1; fix this program [ 189.849052][ T29] audit: type=1326 audit(1756496782.140:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10143 comm="syz.3.1754" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x0 [ 189.891143][ T29] audit: type=1326 audit(1756496782.180:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10147 comm="syz.2.1756" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x0 [ 190.066038][T10156] futex_wake_op: syz.1.1759 tries to shift op by -1; fix this program [ 190.105157][ T29] audit: type=1326 audit(1756496782.399:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.1.1760" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x0 [ 190.326279][ T29] audit: type=1326 audit(1756496782.619:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10164 comm="syz.0.1762" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x0 [ 190.486850][T10168] futex_wake_op: syz.5.1763 tries to shift op by -1; fix this program [ 190.508299][T10170] futex_wake_op: syz.5.1764 tries to shift op by -1; fix this program [ 190.518905][T10170] loop5: detected capacity change from 0 to 512 [ 190.525680][T10170] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 190.536084][T10170] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.542629][T10170] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1764: Block bitmap for bg 0 marked uninitialized [ 190.556099][T10170] EXT4-fs (loop5): Remounting filesystem read-only [ 190.562611][T10170] EXT4-fs (loop5): 1 orphan inode deleted [ 190.568742][T10170] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.602806][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.618968][T10175] futex_wake_op: syz.5.1765 tries to shift op by -1; fix this program [ 190.629117][T10175] loop5: detected capacity change from 0 to 512 [ 190.636248][T10175] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 190.646530][T10175] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.653085][T10175] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1765: Block bitmap for bg 0 marked uninitialized [ 190.666710][T10175] EXT4-fs (loop5): Remounting filesystem read-only [ 190.673214][T10175] EXT4-fs (loop5): 1 orphan inode deleted [ 190.679695][T10175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.720358][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.741615][T10182] futex_wake_op: syz.5.1767 tries to shift op by -1; fix this program [ 190.745142][T10184] futex_wake_op: syz.2.1768 tries to shift op by -1; fix this program [ 190.760018][ T29] audit: type=1400 audit(1756496783.038:4373): avc: denied { mount } for pid=10178 comm="syz.3.1766" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 190.786632][T10182] loop5: detected capacity change from 0 to 512 [ 190.796012][T10182] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 190.809761][ T29] audit: type=1400 audit(1756496783.088:4374): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 190.824734][T10193] futex_wake_op: syz.2.1771 tries to shift op by -1; fix this program [ 190.838932][T10182] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.846109][T10182] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1767: Block bitmap for bg 0 marked uninitialized [ 190.864853][T10182] EXT4-fs (loop5): Remounting filesystem read-only [ 190.872839][ T29] audit: type=1326 audit(1756496783.157:4375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.3.1773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x0 [ 190.881745][T10182] EXT4-fs (loop5): 1 orphan inode deleted [ 190.902083][T10182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 190.904607][T10199] futex_wake_op: syz.2.1774 tries to shift op by -1; fix this program [ 190.958613][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.975601][T10205] futex_wake_op: syz.1.1775 tries to shift op by -1; fix this program [ 191.210645][ T29] audit: type=1326 audit(1756496783.497:4376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10237 comm="syz.2.1789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x0 [ 191.384679][T10255] rxe_newlink: 6 callbacks suppressed [ 191.384692][T10255] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 192.162667][T10274] tipc: Enabling of bearer rejected, failed to enable media [ 192.179550][T10279] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 192.374883][T10292] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 192.407686][T10295] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 192.424987][T10299] loop5: detected capacity change from 0 to 512 [ 192.431854][T10299] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 192.442055][T10299] EXT4-fs (loop5): orphan cleanup on readonly fs [ 192.448802][T10299] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1814: Block bitmap for bg 0 marked uninitialized [ 192.462275][T10299] EXT4-fs (loop5): Remounting filesystem read-only [ 192.468804][T10299] EXT4-fs (loop5): 1 orphan inode deleted [ 192.474982][T10299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.509494][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.659013][T10311] loop5: detected capacity change from 0 to 512 [ 192.665998][T10311] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 192.676243][T10311] EXT4-fs (loop5): orphan cleanup on readonly fs [ 192.683026][T10311] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1817: Block bitmap for bg 0 marked uninitialized [ 192.696445][T10311] EXT4-fs (loop5): Remounting filesystem read-only [ 192.703077][T10311] EXT4-fs (loop5): 1 orphan inode deleted [ 192.709335][T10311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.743446][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.919467][T10322] loop5: detected capacity change from 0 to 512 [ 193.425509][T10341] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 193.911932][T10348] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 193.946465][T10349] syz!: rxe_newlink: already configured on team_slave_0 [ 193.985383][T10351] __nla_validate_parse: 26 callbacks suppressed [ 193.985394][T10351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 194.172036][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1835'. [ 194.212008][T10370] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 194.263074][T10371] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 194.387541][T10374] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 194.710403][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 194.710418][ T29] audit: type=1326 audit(1756496786.989:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.740797][ T29] audit: type=1326 audit(1756496786.989:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.764425][ T29] audit: type=1326 audit(1756496786.989:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.787847][ T29] audit: type=1326 audit(1756496786.989:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.811397][ T29] audit: type=1326 audit(1756496786.989:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.834913][ T29] audit: type=1326 audit(1756496786.989:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.855381][T10384] syz!: rxe_newlink: already configured on team_slave_0 [ 194.858469][ T29] audit: type=1326 audit(1756496786.989:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.888919][ T29] audit: type=1326 audit(1756496786.989:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.912472][ T29] audit: type=1326 audit(1756496786.989:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 194.936078][ T29] audit: type=1326 audit(1756496786.989:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10377 comm="syz.2.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 195.005702][T10391] tipc: Enabling of bearer rejected, failed to enable media [ 195.266974][T10404] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 195.672168][T10406] loop5: detected capacity change from 0 to 512 [ 195.980949][T10417] futex_atomic_op_inuser: 8 callbacks suppressed [ 195.980963][T10417] futex_wake_op: syz.2.1854 tries to shift op by -1; fix this program [ 196.042321][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 196.149376][T10437] tmpfs: Bad value for 'mpol' [ 196.964115][T10467] futex_wake_op: syz.2.1872 tries to shift op by -1; fix this program [ 196.990666][T10467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 197.100465][T10480] tipc: Enabled bearer , priority 0 [ 197.107698][T10479] tipc: Resetting bearer [ 197.122874][T10479] tipc: Disabling bearer [ 197.319918][T10485] futex_wake_op: syz.3.1879 tries to shift op by -1; fix this program [ 197.350389][T10485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1879'. [ 197.558602][T10500] Falling back ldisc for ttyS3. [ 198.842117][T10549] futex_wake_op: syz.2.1903 tries to shift op by -1; fix this program [ 198.871268][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1903'. [ 198.972350][T10557] tipc: Enabled bearer , priority 0 [ 198.979919][T10556] tipc: Resetting bearer [ 199.007193][T10556] tipc: Disabling bearer [ 199.141883][T10569] futex_wake_op: syz.5.1911 tries to shift op by -1; fix this program [ 199.155118][T10569] loop5: detected capacity change from 0 to 512 [ 199.162305][T10569] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 199.172525][T10569] EXT4-fs (loop5): orphan cleanup on readonly fs [ 199.179007][T10569] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.1911: Block bitmap for bg 0 marked uninitialized [ 199.196791][T10569] EXT4-fs (loop5): Remounting filesystem read-only [ 199.203550][T10569] EXT4-fs (loop5): 1 orphan inode deleted [ 199.209642][T10569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 199.255917][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1911'. [ 199.284749][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.467032][T10591] tipc: Enabled bearer , priority 0 [ 199.478601][T10590] tipc: Resetting bearer [ 199.497194][T10590] tipc: Disabling bearer [ 199.524271][T10594] syz!: rxe_newlink: already configured on team_slave_0 [ 199.556128][T10601] futex_wake_op: syz.3.1924 tries to shift op by -1; fix this program [ 199.580203][T10601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 199.603313][T10605] futex_wake_op: syz.3.1925 tries to shift op by -1; fix this program [ 199.628184][T10605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 199.902525][T10618] Falling back ldisc for ttyS3. [ 200.176413][T10627] futex_wake_op: syz.1.1934 tries to shift op by -1; fix this program [ 200.207413][T10627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 200.234730][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 200.234743][ T29] audit: type=1326 audit(1756496792.509:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10630 comm="syz.1.1935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x0 [ 200.342207][T10636] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 200.427445][ T29] audit: type=1326 audit(1756496792.698:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10637 comm="syz.5.1938" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x0 [ 200.515434][T10641] tmpfs: Bad value for 'mpol' [ 200.984309][ T29] audit: type=1326 audit(1756496793.257:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 201.088048][ T29] audit: type=1326 audit(1756496793.257:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 201.111576][ T29] audit: type=1326 audit(1756496793.257:4606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 201.135212][ T29] audit: type=1326 audit(1756496793.257:4607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 201.158747][ T29] audit: type=1326 audit(1756496793.257:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 201.175481][T10651] tipc: Enabled bearer , priority 0 [ 201.182277][ T29] audit: type=1326 audit(1756496793.257:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10647 comm="syz.2.1941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 201.225659][T10650] tipc: Resetting bearer [ 201.240883][T10650] tipc: Disabling bearer [ 201.266518][T10655] loop5: detected capacity change from 0 to 512 [ 201.276905][ T29] audit: type=1326 audit(1756496793.547:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 201.300473][ T29] audit: type=1326 audit(1756496793.547:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.5.1944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 201.318262][T10659] futex_wake_op: syz.1.1946 tries to shift op by -1; fix this program [ 201.361214][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1946'. [ 201.436716][T10672] futex_wake_op: syz.0.1950 tries to shift op by -1; fix this program [ 201.465743][T10672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'. [ 201.476597][T10678] futex_wake_op: syz.3.1952 tries to shift op by -1; fix this program [ 201.505527][T10678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1952'. [ 201.634186][T10690] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 201.699633][T10691] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 201.824991][T10693] tipc: Enabled bearer , priority 0 [ 201.832370][T10692] tipc: Resetting bearer [ 201.845102][T10692] tipc: Disabling bearer [ 202.091995][T10703] tmpfs: Bad value for 'mpol' [ 202.128624][T10705] loop5: detected capacity change from 0 to 512 [ 202.153839][T10705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.167375][T10705] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.184788][T10705] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 202.199399][T10705] EXT4-fs (loop5): Remounting filesystem read-only [ 202.214488][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.591645][T10725] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 202.680280][T10724] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 203.224100][T10739] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 203.250626][T10741] loop5: detected capacity change from 0 to 512 [ 203.437837][T10747] Falling back ldisc for ttyS3. [ 203.600975][T10751] tipc: Enabled bearer , priority 0 [ 203.610346][T10750] tipc: Resetting bearer [ 203.625894][T10750] tipc: Disabling bearer [ 203.807871][T10767] futex_wake_op: syz.0.1985 tries to shift op by -1; fix this program [ 203.897884][T10774] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 204.068670][T10780] Falling back ldisc for ttyS3. [ 204.219691][T10786] Falling back ldisc for ttyS3. [ 205.130062][T10810] Falling back ldisc for ttyS3. [ 205.404305][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 205.404318][ T29] audit: type=1326 audit(1756496797.671:4663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10820 comm="syz.0.2004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x0 [ 205.435732][T10822] Falling back ldisc for ttyS3. [ 205.508072][T10825] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 205.738345][ T29] audit: type=1326 audit(1756496798.001:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10837 comm="syz.3.2011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x0 [ 205.840056][T10840] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 205.946922][ T29] audit: type=1326 audit(1756496798.211:4665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 205.970533][ T29] audit: type=1326 audit(1756496798.211:4666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 205.996880][ T29] audit: type=1326 audit(1756496798.261:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 206.020419][ T29] audit: type=1326 audit(1756496798.261:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 206.044128][ T29] audit: type=1326 audit(1756496798.261:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 206.067698][ T29] audit: type=1326 audit(1756496798.261:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 206.091183][ T29] audit: type=1326 audit(1756496798.261:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 206.115230][ T29] audit: type=1326 audit(1756496798.261:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10843 comm="syz.1.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 206.345011][T10856] tipc: Enabled bearer , priority 0 [ 206.352889][T10855] tipc: Resetting bearer [ 206.365818][T10855] tipc: Disabling bearer [ 206.522544][T10866] syz!: rxe_newlink: already configured on team_slave_0 [ 206.875135][T10879] futex_wake_op: syz.1.2028 tries to shift op by -1; fix this program [ 207.022461][T10883] Falling back ldisc for ttyS3. [ 207.108822][T10888] tipc: Enabled bearer , priority 0 [ 207.116909][T10887] tipc: Resetting bearer [ 207.130492][T10887] tipc: Disabling bearer [ 207.443605][T10904] loop5: detected capacity change from 0 to 512 [ 207.559467][T10908] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 207.932644][T10914] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 208.270338][T10918] loop5: detected capacity change from 0 to 512 [ 208.397923][T10928] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 208.864769][T10937] Falling back ldisc for ttyS3. [ 209.387347][T10952] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 209.615693][T10965] Falling back ldisc for ttyS3. [ 209.824661][T10983] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 209.902313][T10989] loop5: detected capacity change from 0 to 512 [ 210.258177][T10997] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 210.506461][T11000] Falling back ldisc for ttyS3. [ 210.618799][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 210.618813][ T29] audit: type=1326 audit(1756496802.875:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 210.649302][ T29] audit: type=1326 audit(1756496802.905:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 210.672706][ T29] audit: type=1326 audit(1756496802.905:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 210.696259][ T29] audit: type=1326 audit(1756496802.905:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 210.719895][ T29] audit: type=1326 audit(1756496802.905:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 210.743407][ T29] audit: type=1326 audit(1756496802.905:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 210.766880][ T29] audit: type=1326 audit(1756496802.905:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 210.790512][ T29] audit: type=1326 audit(1756496802.905:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11003 comm="syz.0.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 210.818306][T11007] loop5: detected capacity change from 0 to 512 [ 210.826764][ T29] audit: type=1326 audit(1756496803.085:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 210.850304][ T29] audit: type=1326 audit(1756496803.085:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.5.2076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 211.383446][T11030] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 211.426383][T11033] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 211.652524][T11042] tipc: Enabled bearer , priority 0 [ 211.660976][T11041] tipc: Resetting bearer [ 211.673618][T11041] tipc: Disabling bearer [ 211.844891][T11050] tipc: Enabled bearer , priority 0 [ 211.852406][T11049] tipc: Resetting bearer [ 211.863154][T11049] tipc: Disabling bearer [ 211.892955][T11051] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 212.169948][T11057] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 212.492716][T11090] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 213.053843][T11125] syz!: rxe_newlink: already configured on team_slave_0 [ 213.065917][T11126] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 213.475653][T11136] tipc: Enabled bearer , priority 0 [ 213.483175][T11135] tipc: Resetting bearer [ 213.495888][T11135] tipc: Disabling bearer [ 213.874507][T11155] tipc: Enabled bearer , priority 0 [ 213.898345][T11154] tipc: Resetting bearer [ 213.916990][T11154] tipc: Disabling bearer [ 214.042759][T11164] loop5: detected capacity change from 0 to 512 [ 214.268857][T11175] tipc: Enabled bearer , priority 0 [ 214.276524][T11174] tipc: Resetting bearer [ 214.291943][T11174] tipc: Disabling bearer [ 214.527446][T11187] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 215.344294][T11203] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 215.441543][T11217] syz!: rxe_newlink: already configured on team_slave_0 [ 215.568300][T11227] netlink: 356 bytes leftover after parsing attributes in process `syz.2.2151'. [ 215.652320][ T29] kauditd_printk_skb: 493 callbacks suppressed [ 215.652334][ T29] audit: type=1326 audit(1756496807.910:5263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11224 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 215.682205][ T29] audit: type=1326 audit(1756496807.910:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11224 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 215.706265][ T29] audit: type=1326 audit(1756496807.920:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.2.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 215.711257][T11234] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 215.729880][ T29] audit: type=1326 audit(1756496807.920:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.2.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 215.729906][ T29] audit: type=1326 audit(1756496807.920:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.2.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 215.783475][ T29] audit: type=1326 audit(1756496807.920:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.2.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 215.806962][ T29] audit: type=1326 audit(1756496807.920:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.2.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 215.830601][ T29] audit: type=1326 audit(1756496807.920:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11232 comm="syz.2.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 215.860709][T11225] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 216.013218][ T29] audit: type=1326 audit(1756496808.270:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 216.037693][ T29] audit: type=1326 audit(1756496808.270:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.1.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 216.193861][T11241] tipc: Enabled bearer , priority 0 [ 216.211874][T11240] tipc: Resetting bearer [ 216.223629][T11240] tipc: Disabling bearer [ 216.230824][T11243] tipc: Enabled bearer , priority 0 [ 216.238091][T11242] tipc: Resetting bearer [ 216.248177][T11242] tipc: Disabling bearer [ 216.400177][T11255] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 216.453279][T11251] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 216.655278][T11265] loop5: detected capacity change from 0 to 512 [ 216.666967][T11260] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 217.177591][T11272] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 217.195283][T11275] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 217.394965][T11285] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 217.553666][T11287] tipc: Enabled bearer , priority 0 [ 217.573938][T11286] tipc: Resetting bearer [ 217.586952][T11286] tipc: Disabling bearer [ 217.683297][T11289] tipc: Enabled bearer , priority 0 [ 217.704687][T11288] tipc: Resetting bearer [ 217.723508][T11288] tipc: Disabling bearer [ 217.787313][T11291] netlink: 356 bytes leftover after parsing attributes in process `syz.0.2173'. [ 217.979454][T11301] loop5: detected capacity change from 0 to 512 [ 218.498040][T11322] tipc: Enabling of bearer rejected, failed to enable media [ 218.662101][T11328] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 218.788166][T11333] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.2188'. [ 218.820177][T11337] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.2190'. [ 218.849081][T11339] loop5: detected capacity change from 0 to 512 [ 218.941510][T11343] tipc: Enabled bearer , priority 0 [ 218.948854][T11342] tipc: Resetting bearer [ 218.959812][T11342] tipc: Disabling bearer [ 219.064760][T11349] tipc: Enabled bearer , priority 0 [ 219.072121][T11348] tipc: Resetting bearer [ 219.082849][T11348] tipc: Disabling bearer [ 219.187648][T11358] netlink: 6040 bytes leftover after parsing attributes in process `syz.1.2198'. [ 219.299659][T11367] tmpfs: Bad value for 'mpol' [ 219.355289][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 219.364356][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 219.418823][T11369] tipc: Enabled bearer , priority 0 [ 219.429572][T11368] tipc: Resetting bearer [ 219.453107][T11368] tipc: Disabling bearer [ 219.615227][T11381] tipc: Enabling of bearer rejected, failed to enable media [ 219.649271][T11383] tmpfs: Bad value for 'mpol' [ 219.799765][T11384] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 219.827777][T11386] netlink: 'syz.0.2209': attribute type 21 has an invalid length. [ 220.314666][T11390] loop5: detected capacity change from 0 to 128 [ 220.327670][T11390] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.340522][T11390] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.419198][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.429416][T11386] netlink: 'syz.0.2209': attribute type 1 has an invalid length. [ 220.437219][T11386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2209'. [ 220.449410][T11396] netlink: 'syz.5.2211': attribute type 21 has an invalid length. [ 220.465005][T11396] netlink: 'syz.5.2211': attribute type 1 has an invalid length. [ 220.472889][T11396] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2211'. [ 220.672201][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 220.672218][ T29] audit: type=1326 audit(1756496812.916:5586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11395 comm="syz.5.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 220.735630][ T29] audit: type=1326 audit(1756496812.956:5587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11395 comm="syz.5.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 220.759240][ T29] audit: type=1326 audit(1756496812.956:5588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11395 comm="syz.5.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 221.153427][ T29] audit: type=1326 audit(1756496813.376:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.2.2217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x0 [ 221.240399][T11413] tipc: Enabled bearer , priority 0 [ 221.248289][ T29] audit: type=1326 audit(1756496813.436:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.2.2217" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7f05ab2de9a9 code=0x0 [ 221.399746][T11410] tipc: Resetting bearer [ 221.409138][T11422] netlink: 'syz.1.2219': attribute type 21 has an invalid length. [ 221.431332][T11410] tipc: Disabling bearer [ 221.449114][T11422] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 221.456899][T11422] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2219'. [ 221.491583][T11418] tipc: Enabled bearer , priority 0 [ 221.504799][T11422] sd 0:0:1:0: device reset [ 221.510042][ T29] audit: type=1326 audit(1756496813.745:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 221.533579][ T29] audit: type=1326 audit(1756496813.745:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 221.557122][ T29] audit: type=1326 audit(1756496813.745:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11420 comm="syz.1.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff817bd310 code=0x7ffc0000 [ 221.580761][ T29] audit: type=1400 audit(1756496813.745:5594): avc: denied { read } for pid=11420 comm="syz.1.2219" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.604391][ T29] audit: type=1400 audit(1756496813.745:5595): avc: denied { open } for pid=11420 comm="syz.1.2219" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 221.635515][T11417] tipc: Resetting bearer [ 221.677291][T11417] tipc: Disabling bearer [ 221.684126][T11431] syz!: rxe_newlink: already configured on team_slave_0 [ 221.787841][T11435] netlink: 'syz.3.2224': attribute type 21 has an invalid length. [ 221.795838][T11435] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 221.803656][T11435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2224'. [ 221.944232][T11442] netlink: 'syz.0.2226': attribute type 21 has an invalid length. [ 221.957964][T11440] sd 0:0:1:0: device reset [ 221.968385][T11442] netlink: 'syz.0.2226': attribute type 1 has an invalid length. [ 221.976291][T11442] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2226'. [ 222.138723][T11445] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2227'. [ 222.211111][T11445] sd 0:0:1:0: device reset [ 222.402668][T11447] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2229'. [ 222.751693][T11459] tipc: Enabling of bearer rejected, failed to enable media [ 222.772298][T11465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2235'. [ 222.788402][T11465] sd 0:0:1:0: device reset [ 222.802015][T11467] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2236'. [ 222.823717][T11469] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2237'. [ 222.843470][T11469] sd 0:0:1:0: device reset [ 222.885558][T11475] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 223.014508][T11484] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2241'. [ 223.028224][T11486] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2242'. [ 223.042432][T11484] sd 0:0:1:0: device reset [ 223.124528][T11494] tipc: Enabled bearer , priority 0 [ 223.132681][T11493] tipc: Resetting bearer [ 223.158374][T11493] tipc: Disabling bearer [ 223.454004][T11503] sd 0:0:1:0: device reset [ 223.694804][T11507] sd 0:0:1:0: device reset [ 223.896302][T11511] sd 0:0:1:0: device reset [ 224.180072][T11518] tipc: Enabled bearer , priority 0 [ 224.216545][T11516] tipc: Resetting bearer [ 224.243788][T11516] tipc: Disabling bearer [ 224.255552][T11527] tipc: Enabled bearer , priority 0 [ 224.264640][T11525] tipc: Resetting bearer [ 224.280540][T11525] tipc: Disabling bearer [ 224.844288][T11557] validate_nla: 30 callbacks suppressed [ 224.844339][T11557] netlink: 'syz.2.2272': attribute type 21 has an invalid length. [ 224.871485][T11557] netlink: 'syz.2.2272': attribute type 1 has an invalid length. [ 224.940499][T11557] sd 0:0:1:0: device reset [ 225.274681][T11575] netlink: 'syz.0.2280': attribute type 21 has an invalid length. [ 225.311633][T11575] netlink: 'syz.0.2280': attribute type 1 has an invalid length. [ 225.319645][T11571] tipc: Enabled bearer , priority 0 [ 225.328524][T11569] tipc: Enabled bearer , priority 0 [ 225.336279][T11570] tipc: Resetting bearer [ 225.355130][T11570] tipc: Disabling bearer [ 225.363351][T11568] tipc: Resetting bearer [ 225.384906][T11568] tipc: Disabling bearer [ 225.562953][T11594] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 225.640416][T11597] netlink: 'syz.1.2287': attribute type 21 has an invalid length. [ 225.649518][T11597] netlink: 'syz.1.2287': attribute type 1 has an invalid length. [ 225.710414][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 225.710429][ T29] audit: type=1326 audit(1756496817.942:6019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 225.751159][T11597] sd 0:0:1:0: device reset [ 225.840362][ T29] audit: type=1326 audit(1756496817.992:6020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff817bd310 code=0x7ffc0000 [ 225.863955][ T29] audit: type=1326 audit(1756496817.992:6021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 225.888120][ T29] audit: type=1326 audit(1756496817.992:6022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 225.911649][ T29] audit: type=1326 audit(1756496817.992:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 225.935187][ T29] audit: type=1326 audit(1756496817.992:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 225.958679][ T29] audit: type=1326 audit(1756496818.002:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 225.982230][ T29] audit: type=1326 audit(1756496818.012:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 226.005616][ T29] audit: type=1326 audit(1756496818.012:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 226.029180][ T29] audit: type=1326 audit(1756496818.012:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11596 comm="syz.1.2287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 226.243397][T11600] netlink: 'syz.5.2288': attribute type 21 has an invalid length. [ 226.253372][T11600] netlink: 'syz.5.2288': attribute type 1 has an invalid length. [ 226.360237][T11601] netlink: 'syz.1.2289': attribute type 21 has an invalid length. [ 226.371205][T11602] sd 0:0:1:0: device reset [ 226.384408][T11601] netlink: 'syz.1.2289': attribute type 1 has an invalid length. [ 226.437314][T11604] sd 0:0:1:0: device reset [ 226.532083][T11601] sd 0:0:1:0: device reset [ 226.714145][T11613] __nla_validate_parse: 16 callbacks suppressed [ 226.714207][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 226.736002][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 226.765180][T11614] tipc: Enabled bearer , priority 0 [ 226.894160][T11609] tipc: Resetting bearer [ 226.929709][T11609] tipc: Disabling bearer [ 227.731409][T11626] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2298'. [ 227.746745][T11626] sd 0:0:1:0: device reset [ 230.938347][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 230.938363][ T29] audit: type=1326 audit(1756496823.179:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11632 comm="syz.1.2301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7eff817b5967 code=0x0 [ 231.009462][T11634] loop5: detected capacity change from 0 to 128 [ 231.019462][T11638] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 231.028970][T11640] validate_nla: 4 callbacks suppressed [ 231.028984][T11640] netlink: 'syz.2.2303': attribute type 21 has an invalid length. [ 231.033460][T11634] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.036876][T11640] netlink: 'syz.2.2303': attribute type 1 has an invalid length. [ 231.052844][T11634] ext4 filesystem being mounted at /389/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.054324][T11640] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2303'. [ 231.089378][ T29] audit: type=1326 audit(1756496823.329:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.2.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05ab2d5967 code=0x7ffc0000 [ 231.112854][ T29] audit: type=1326 audit(1756496823.329:6104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.2.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ab27ab89 code=0x7ffc0000 [ 231.136371][ T29] audit: type=1326 audit(1756496823.329:6105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.2.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05ab2d5967 code=0x7ffc0000 [ 231.159805][ T29] audit: type=1326 audit(1756496823.329:6106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.2.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ab27ab89 code=0x7ffc0000 [ 231.183207][ T29] audit: type=1326 audit(1756496823.329:6107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.2.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 231.206711][ T29] audit: type=1326 audit(1756496823.329:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.2.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05ab2dd310 code=0x7ffc0000 [ 231.209040][T11640] sd 0:0:1:0: device reset [ 231.230248][ T29] audit: type=1326 audit(1756496823.329:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.2.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 231.239464][T11647] netlink: 'syz.0.2304': attribute type 21 has an invalid length. [ 231.258189][ T29] audit: type=1326 audit(1756496823.329:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11637 comm="syz.2.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 231.261478][ T29] audit: type=1326 audit(1756496823.499:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11636 comm="syz.3.2302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39cf635967 code=0x7ffc0000 [ 231.325440][T11647] netlink: 'syz.0.2304': attribute type 1 has an invalid length. [ 231.333251][T11647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2304'. [ 231.356671][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.377588][T11650] netlink: 'syz.2.2306': attribute type 21 has an invalid length. [ 231.400763][T11650] netlink: 'syz.2.2306': attribute type 1 has an invalid length. [ 231.408616][T11650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2306'. [ 231.423789][T11654] netlink: 'syz.0.2307': attribute type 21 has an invalid length. [ 231.432051][T11654] netlink: 'syz.0.2307': attribute type 1 has an invalid length. [ 231.439812][T11654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2307'. [ 231.513150][T11650] sd 0:0:1:0: device reset [ 232.427604][T11664] netlink: 'syz.2.2309': attribute type 21 has an invalid length. [ 233.400484][T11664] netlink: 'syz.2.2309': attribute type 1 has an invalid length. [ 233.408326][T11664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2309'. [ 234.512512][T11672] loop5: detected capacity change from 0 to 128 [ 234.547099][T11672] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.582025][T11664] sd 0:0:1:0: device reset [ 234.630235][T11672] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.685015][T11679] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2314'. [ 234.772949][T11682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2315'. [ 234.839819][T11684] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2316'. [ 234.888181][T11679] sd 0:0:1:0: device reset [ 234.930722][T11682] sd 0:0:1:0: device reset [ 235.073088][T11684] sd 0:0:1:0: device reset [ 235.181976][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.368193][T11688] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2317'. [ 235.384950][T11694] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2318'. [ 235.430587][T11688] sd 0:0:1:0: device reset [ 236.325854][T11701] sd 0:0:1:0: device reset [ 236.372328][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 236.372344][ T29] audit: type=1326 audit(1756496828.555:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f39cf6408c7 code=0x7ffc0000 [ 236.401941][ T29] audit: type=1326 audit(1756496828.555:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f39cf64083c code=0x7ffc0000 [ 236.425551][ T29] audit: type=1326 audit(1756496828.555:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f39cf640774 code=0x7ffc0000 [ 236.449111][ T29] audit: type=1326 audit(1756496828.555:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f39cf640774 code=0x7ffc0000 [ 236.472494][ T29] audit: type=1326 audit(1756496828.555:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11687 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f39cf63d60a code=0x7ffc0000 [ 236.495913][ T29] audit: type=1326 audit(1756496828.555:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.5.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 236.519468][ T29] audit: type=1326 audit(1756496828.555:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.5.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 236.542934][ T29] audit: type=1326 audit(1756496828.555:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.5.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f037d4bd310 code=0x7ffc0000 [ 236.566447][ T29] audit: type=1326 audit(1756496828.555:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.5.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 236.589903][ T29] audit: type=1326 audit(1756496828.555:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11689 comm="syz.5.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 239.396812][T11710] sd 0:0:1:0: device reset [ 239.405693][T11716] validate_nla: 10 callbacks suppressed [ 239.405779][T11716] netlink: 'syz.1.2326': attribute type 21 has an invalid length. [ 239.441439][T11715] loop5: detected capacity change from 0 to 128 [ 239.479180][T11716] netlink: 'syz.1.2326': attribute type 1 has an invalid length. [ 239.486952][T11716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2326'. [ 239.499218][T11715] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 239.539495][T11715] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.584719][T11716] sd 0:0:1:0: device reset [ 242.694649][T11737] netlink: 'syz.1.2333': attribute type 21 has an invalid length. [ 242.710051][T11737] netlink: 'syz.1.2333': attribute type 1 has an invalid length. [ 242.717811][T11737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2333'. [ 242.750685][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 242.762928][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 242.762942][ T29] audit: type=1326 audit(1756496835.002:6359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 242.795527][T11737] sd 0:0:1:0: device reset [ 242.812741][ T29] audit: type=1326 audit(1756496835.032:6360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff817bd310 code=0x7ffc0000 [ 242.836293][ T29] audit: type=1326 audit(1756496835.032:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 242.859923][ T29] audit: type=1326 audit(1756496835.032:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 242.883403][ T29] audit: type=1326 audit(1756496835.032:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 242.891720][T11747] loop5: detected capacity change from 0 to 128 [ 242.906805][ T29] audit: type=1326 audit(1756496835.042:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 242.920978][T11750] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 242.936523][ T29] audit: type=1326 audit(1756496835.042:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 242.966749][ T29] audit: type=1326 audit(1756496835.042:6366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 242.990324][ T29] audit: type=1326 audit(1756496835.042:6367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 243.013834][ T29] audit: type=1326 audit(1756496835.042:6368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 243.039344][T11747] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.061976][T11747] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.053674][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.109185][T11768] sd 0:0:1:0: device reset [ 248.098276][T11779] syz!: rxe_newlink: already configured on team_slave_0 [ 248.115813][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 248.115895][ T29] audit: type=1326 audit(1756496840.339:6439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11776 comm="syz.0.2350" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x0 [ 249.104673][T11775] sd 0:0:1:0: device reset [ 249.109401][ T29] audit: type=1326 audit(1756496841.338:6440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 249.132935][ T29] audit: type=1326 audit(1756496841.338:6441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 249.156485][ T29] audit: type=1326 audit(1756496841.338:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff817bd310 code=0x7ffc0000 [ 249.180094][ T29] audit: type=1326 audit(1756496841.338:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 249.203643][ T29] audit: type=1326 audit(1756496841.338:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 249.227136][ T29] audit: type=1326 audit(1756496841.338:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 250.100731][ T29] audit: type=1326 audit(1756496842.328:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 250.124305][ T29] audit: type=1326 audit(1756496842.328:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 250.133405][T11778] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 250.156775][ T29] audit: type=1326 audit(1756496842.328:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11772 comm="syz.1.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 250.225340][T11786] loop5: detected capacity change from 0 to 128 [ 250.337459][T11792] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 250.346271][T11786] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.359277][T11786] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.250913][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 254.250929][ T29] audit: type=1326 audit(1756496846.475:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11800 comm="syz.2.2356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x0 [ 254.270250][T11807] sd 0:0:1:0: device reset [ 254.284796][ T29] audit: type=1326 audit(1756496846.485:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x7ffc0000 [ 254.308423][ T29] audit: type=1326 audit(1756496846.485:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f39cf63d310 code=0x7ffc0000 [ 254.331924][ T29] audit: type=1326 audit(1756496846.485:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x7ffc0000 [ 254.355559][ T29] audit: type=1326 audit(1756496846.485:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39cf63e9a9 code=0x7ffc0000 [ 254.452268][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.495458][T11812] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 254.753520][ T29] audit: type=1326 audit(1756496846.535:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x7ffc0000 [ 254.777086][ T29] audit: type=1326 audit(1756496846.535:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x7ffc0000 [ 254.800633][ T29] audit: type=1326 audit(1756496846.545:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f39cf63e9a9 code=0x7ffc0000 [ 254.824190][ T29] audit: type=1326 audit(1756496846.545:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x7ffc0000 [ 254.847697][ T29] audit: type=1326 audit(1756496846.545:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11806 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39cf63e9a9 code=0x7ffc0000 [ 255.459848][T11820] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 255.494258][T11822] sd 0:0:1:0: device reset [ 256.937634][T11826] netlink: 'syz.5.2367': attribute type 21 has an invalid length. [ 256.973641][T11824] sd 0:0:1:0: device reset [ 256.983009][T11826] netlink: 'syz.5.2367': attribute type 1 has an invalid length. [ 256.990814][T11826] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2367'. [ 257.066080][T11829] sd 0:0:1:0: device reset [ 258.366773][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2374'. [ 258.499959][T11851] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 258.514239][T11853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2376'. [ 258.531938][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 258.587804][T11856] syz!: rxe_newlink: already configured on team_slave_0 [ 258.771864][T11865] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2381'. [ 259.051274][T11869] sd 0:0:1:0: device reset [ 259.089630][T11874] netlink: 'syz.2.2385': attribute type 21 has an invalid length. [ 259.097714][T11874] netlink: 'syz.2.2385': attribute type 1 has an invalid length. [ 259.105516][T11874] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2385'. [ 259.120046][T11874] sd 0:0:1:0: device reset [ 259.139921][T11875] sd 0:0:1:0: device reset [ 261.228515][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 261.228530][ T29] audit: type=1326 audit(1756496853.452:6618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 261.260482][T11888] sd 0:0:1:0: device reset [ 262.126300][ T29] audit: type=1326 audit(1756496853.482:6619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 262.149914][ T29] audit: type=1326 audit(1756496853.482:6620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f037d4bd310 code=0x7ffc0000 [ 262.173488][ T29] audit: type=1326 audit(1756496853.482:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 262.196989][ T29] audit: type=1326 audit(1756496853.482:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 262.220534][ T29] audit: type=1326 audit(1756496853.492:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 262.243972][ T29] audit: type=1326 audit(1756496853.492:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 262.267516][ T29] audit: type=1326 audit(1756496853.492:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 262.291038][ T29] audit: type=1326 audit(1756496853.502:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 262.314423][ T29] audit: type=1326 audit(1756496853.502:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11886 comm="syz.5.2390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f037d4be9a9 code=0x7ffc0000 [ 264.470133][T11907] sd 0:0:1:0: device reset [ 264.618338][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2398'. [ 264.651638][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2399'. [ 264.837658][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2401'. [ 265.035699][T11924] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 265.108391][T11926] netlink: 'syz.0.2403': attribute type 21 has an invalid length. [ 265.116760][T11926] netlink: 'syz.0.2403': attribute type 1 has an invalid length. [ 265.124512][T11926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2403'. [ 265.373572][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2404'. [ 265.480748][T11936] syz!: rxe_newlink: already configured on team_slave_0 [ 265.483431][T11938] sd 0:0:1:0: device reset [ 265.520115][T11942] sd 0:0:1:0: device reset [ 265.549774][T11944] sd 0:0:1:0: device reset [ 265.590036][T11947] sd 0:0:1:0: device reset [ 265.619555][T11951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2414'. [ 265.671316][T11955] sd 0:0:1:0: device reset [ 265.696972][T11957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2417'. [ 265.763765][T11960] sd 0:0:1:0: device reset [ 268.785105][T11967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2421'. [ 268.829360][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 268.829374][ T29] audit: type=1326 audit(1756496861.048:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 268.861427][T11969] sd 0:0:1:0: device reset [ 268.866172][ T29] audit: type=1326 audit(1756496861.078:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05ab2dd310 code=0x7ffc0000 [ 268.889885][ T29] audit: type=1326 audit(1756496861.078:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 268.913473][ T29] audit: type=1326 audit(1756496861.078:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 268.937319][ T29] audit: type=1326 audit(1756496861.078:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 268.962074][ T29] audit: type=1326 audit(1756496861.108:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 268.985646][ T29] audit: type=1326 audit(1756496861.108:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 269.009198][ T29] audit: type=1326 audit(1756496861.188:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 269.066900][T11975] sd 0:0:1:0: device reset [ 269.074387][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2426'. [ 269.085210][ T29] audit: type=1326 audit(1756496861.258:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 269.108817][ T29] audit: type=1326 audit(1756496861.258:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11968 comm="syz.2.2422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 269.137420][T11983] sd 0:0:1:0: device reset [ 269.198078][T11988] sd 0:0:1:0: device reset [ 269.278560][T11993] loop5: detected capacity change from 0 to 128 [ 269.297503][T11993] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.329907][T11993] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.454723][T12000] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 269.477067][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.540046][T12002] loop5: detected capacity change from 0 to 512 [ 269.589170][T12002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.944352][T12010] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 271.520976][T12031] sd 0:0:1:0: device reset [ 271.566558][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2444'. [ 271.631254][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.786651][T12040] sd 0:0:1:0: device reset [ 272.279338][T12046] loop5: detected capacity change from 0 to 128 [ 272.297778][T12046] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 272.313128][T12046] ext4 filesystem being mounted at /410/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.362311][ T4213] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 272.563716][T12064] loop5: detected capacity change from 0 to 512 [ 272.576686][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2451'. [ 272.592248][T12064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.038026][T12089] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'. [ 276.350874][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2463'. [ 276.425933][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.456935][T12100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2466'. [ 278.080467][T12126] loop5: detected capacity change from 0 to 512 [ 278.219648][T12126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.456192][T12133] netlink: 'syz.0.2475': attribute type 21 has an invalid length. [ 278.470441][T12133] netlink: 'syz.0.2475': attribute type 1 has an invalid length. [ 278.478214][T12133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2475'. [ 278.510432][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 278.510487][ T29] audit: type=1326 audit(1756496870.723:6964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8719445967 code=0x7ffc0000 [ 278.609341][ T29] audit: type=1326 audit(1756496870.753:6965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87193eab89 code=0x7ffc0000 [ 278.632920][ T29] audit: type=1326 audit(1756496870.753:6966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8719445967 code=0x7ffc0000 [ 278.656581][ T29] audit: type=1326 audit(1756496870.753:6967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f87193eab89 code=0x7ffc0000 [ 278.680126][ T29] audit: type=1326 audit(1756496870.753:6968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 278.703736][ T29] audit: type=1326 audit(1756496870.753:6969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12132 comm="syz.0.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 279.267927][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.382987][ T29] audit: type=1326 audit(1756496871.592:6970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12156 comm="syz.1.2481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x0 [ 279.568187][T12161] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 281.141160][ T29] audit: type=1326 audit(1756496873.361:6971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12186 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 281.146137][T12189] sd 0:0:1:0: device reset [ 281.310837][ T29] audit: type=1326 audit(1756496873.361:6972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12186 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 281.334421][ T29] audit: type=1326 audit(1756496873.361:6973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12186 comm="syz.2.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05ab2dd310 code=0x7ffc0000 [ 282.456946][T12203] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 282.853734][T12226] loop5: detected capacity change from 0 to 512 [ 282.925367][T12226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.134522][T12235] sd 0:0:1:0: device reset [ 284.195515][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.293785][T12248] loop5: detected capacity change from 0 to 512 [ 284.317128][T12248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.824290][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 284.824312][ T29] audit: type=1326 audit(1756496877.040:7002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 284.856081][T12266] sd 0:0:1:0: device reset [ 285.020685][ T29] audit: type=1326 audit(1756496877.070:7003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05ab2dd310 code=0x7ffc0000 [ 285.044413][ T29] audit: type=1326 audit(1756496877.070:7004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 285.067918][ T29] audit: type=1326 audit(1756496877.070:7005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 285.091492][ T29] audit: type=1326 audit(1756496877.070:7006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 285.115042][ T29] audit: type=1326 audit(1756496877.090:7007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 285.138590][ T29] audit: type=1326 audit(1756496877.090:7008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 285.162111][ T29] audit: type=1326 audit(1756496877.090:7009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 285.185505][ T29] audit: type=1326 audit(1756496877.090:7010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 285.209058][ T29] audit: type=1326 audit(1756496877.090:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12265 comm="syz.2.2506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x7ffc0000 [ 286.374293][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.973725][T12311] sd 0:0:1:0: device reset [ 288.095234][T12315] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2515'. [ 289.747030][T12345] loop5: detected capacity change from 0 to 512 [ 289.825018][T12345] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.835859][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 289.835873][ T29] audit: type=1326 audit(1756496882.047:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 289.866664][ T29] audit: type=1326 audit(1756496882.047:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 290.062199][ T29] audit: type=1326 audit(1756496882.107:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 290.085656][ T29] audit: type=1326 audit(1756496882.107:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 290.109239][ T29] audit: type=1326 audit(1756496882.107:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 290.133004][ T29] audit: type=1326 audit(1756496882.117:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 290.156593][ T29] audit: type=1326 audit(1756496882.117:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 290.180151][ T29] audit: type=1326 audit(1756496882.117:7050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 290.203741][ T29] audit: type=1326 audit(1756496882.117:7051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12346 comm="syz.0.2524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 290.666207][ T29] audit: type=1326 audit(1756496882.867:7052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12373 comm="syz.0.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 291.358941][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.615943][T12388] tipc: Enabled bearer , priority 0 [ 291.672777][T12387] tipc: Resetting bearer [ 291.736605][T12387] tipc: Disabling bearer [ 291.797445][T12393] sd 0:0:1:0: device reset [ 291.893549][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2541'. [ 292.652844][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2542'. [ 293.066671][T12414] sd 0:0:1:0: device reset [ 293.391925][T12428] loop5: detected capacity change from 0 to 512 [ 293.479254][T12428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.505415][T12428] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.535682][T12428] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 293.596968][T12428] EXT4-fs (loop5): Remounting filesystem read-only [ 293.653280][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.915207][T12438] loop5: detected capacity change from 0 to 512 [ 294.226655][T12440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2549'. [ 294.349723][T12438] EXT4-fs (loop5): orphan cleanup on readonly fs [ 294.387050][T12438] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2548: bg 0: block 248: padding at end of block bitmap is not set [ 294.401584][T12438] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2548: Failed to acquire dquot type 1 [ 294.417022][T12438] EXT4-fs (loop5): 1 truncate cleaned up [ 294.498983][T12438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.624950][T12447] tipc: Enabling of bearer rejected, failed to enable media [ 294.716948][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.907187][T12457] tmpfs: Bad value for 'mpol' [ 296.690838][T12464] loop5: detected capacity change from 0 to 512 [ 298.061683][T12464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.481191][T12496] tipc: Enabled bearer , priority 0 [ 298.550655][T12495] tipc: Resetting bearer [ 298.576203][T12495] tipc: Disabling bearer [ 298.858336][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.903460][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 298.903473][ T29] audit: type=1326 audit(1756496891.102:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12502 comm="syz.2.2566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05ab2de9a9 code=0x0 [ 298.982191][T12505] loop5: detected capacity change from 0 to 512 [ 299.070696][T12506] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 299.109779][T12505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.460150][T12514] netlink: 'syz.1.2569': attribute type 21 has an invalid length. [ 299.475122][T12514] netlink: 'syz.1.2569': attribute type 1 has an invalid length. [ 299.482942][T12514] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2569'. [ 299.500038][ T29] audit: type=1326 audit(1756496891.702:7115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 299.526429][T12514] sd 0:0:1:0: device reset [ 299.561640][ T29] audit: type=1326 audit(1756496891.732:7116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff817bd310 code=0x7ffc0000 [ 299.585326][ T29] audit: type=1326 audit(1756496891.732:7117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 299.608828][ T29] audit: type=1326 audit(1756496891.732:7118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 299.632459][ T29] audit: type=1326 audit(1756496891.732:7119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 299.655988][ T29] audit: type=1326 audit(1756496891.742:7120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 299.679514][ T29] audit: type=1326 audit(1756496891.742:7121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12513 comm="syz.1.2569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 299.714177][T12522] netlink: 'syz.1.2571': attribute type 21 has an invalid length. [ 299.742387][T12522] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 299.750278][T12522] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2571'. [ 300.013565][ T29] audit: type=1326 audit(1756496892.212:7122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12521 comm="syz.1.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 300.037195][ T29] audit: type=1326 audit(1756496892.212:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12521 comm="syz.1.2571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff817bd310 code=0x7ffc0000 [ 300.079131][T12530] sd 0:0:1:0: device reset [ 300.590320][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.647252][T12551] loop5: detected capacity change from 0 to 512 [ 300.680840][T12551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.744316][T12556] netlink: 'syz.3.2579': attribute type 21 has an invalid length. [ 300.752402][T12556] netlink: 'syz.3.2579': attribute type 1 has an invalid length. [ 300.760181][T12556] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2579'. [ 300.773652][T12556] sd 0:0:1:0: device reset [ 301.784096][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.603620][T12581] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2585'. [ 303.474629][T12609] loop5: detected capacity change from 0 to 512 [ 303.532024][T12609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.510466][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 304.510481][ T29] audit: type=1326 audit(1756496896.710:7150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.540206][ T29] audit: type=1326 audit(1756496896.710:7151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.563738][ T29] audit: type=1326 audit(1756496896.710:7152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f871944d310 code=0x7ffc0000 [ 304.587340][ T29] audit: type=1326 audit(1756496896.710:7153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.610947][ T29] audit: type=1326 audit(1756496896.710:7154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.634496][ T29] audit: type=1326 audit(1756496896.710:7155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.658076][ T29] audit: type=1326 audit(1756496896.710:7156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.681616][ T29] audit: type=1326 audit(1756496896.710:7157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.705203][ T29] audit: type=1326 audit(1756496896.710:7158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.728697][ T29] audit: type=1326 audit(1756496896.710:7159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12617 comm="syz.0.2594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f871944e9a9 code=0x7ffc0000 [ 304.832640][T12622] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.2596'. [ 305.067080][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.164413][T12642] loop5: detected capacity change from 0 to 512 [ 305.203326][T12642] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.475191][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.548062][T12659] sd 0:0:1:0: device reset [ 306.631906][T12666] loop5: detected capacity change from 0 to 512 [ 306.673555][T12666] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.008947][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.224923][T12700] netlink: 6040 bytes leftover after parsing attributes in process `syz.2.2615'. [ 308.285102][T12702] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2616'. [ 308.512951][T12707] sd 0:0:1:0: device reset [ 308.988253][T12714] loop5: detected capacity change from 0 to 512 [ 309.053141][T12714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.769521][T12735] netlink: 'syz.1.2625': attribute type 21 has an invalid length. [ 309.811557][T12735] netlink: 'syz.1.2625': attribute type 1 has an invalid length. [ 309.819393][T12735] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2625'. [ 309.842026][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 309.842058][ T29] audit: type=1326 audit(1756496902.037:7210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.1.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 309.871712][ T29] audit: type=1326 audit(1756496902.037:7211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.1.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 310.087206][ T29] audit: type=1326 audit(1756496902.097:7212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.1.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 310.110698][ T29] audit: type=1326 audit(1756496902.097:7213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.1.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 310.134198][ T29] audit: type=1326 audit(1756496902.097:7214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12733 comm="syz.1.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 310.157858][ T29] audit: type=1326 audit(1756496902.257:7215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12743 comm="syz.1.2627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x0 [ 310.194542][T12746] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 310.246114][T12748] tmpfs: Bad value for 'mpol' [ 310.357029][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.898529][T12751] loop5: detected capacity change from 0 to 512 [ 310.944839][T12751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.856098][T12768] netlink: 'syz.1.2633': attribute type 21 has an invalid length. [ 311.879662][T12768] netlink: 'syz.1.2633': attribute type 1 has an invalid length. [ 311.887963][T12768] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2633'. [ 311.908301][T12769] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2633'. [ 311.930096][T12769] sd 0:0:1:0: device reset [ 311.934858][ T29] audit: type=1326 audit(1756496904.126:7216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 311.958464][ T29] audit: type=1326 audit(1756496904.126:7217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 311.982086][ T29] audit: type=1326 audit(1756496904.126:7218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff817bd310 code=0x7ffc0000 [ 312.005614][ T29] audit: type=1326 audit(1756496904.126:7219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12767 comm="syz.1.2633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff817be9a9 code=0x7ffc0000 [ 312.078903][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.105538][T12778] netlink: 'syz.1.2638': attribute type 21 has an invalid length. [ 312.123733][T12778] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 312.131577][T12778] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2638'. [ 312.378004][T12791] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 313.061993][T12798] loop5: detected capacity change from 0 to 512 [ 313.108207][T12798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.227008][T12818] ================================================================== [ 314.235138][T12818] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 314.242448][T12818] [ 314.244783][T12818] write to 0xffff88814cc7cc90 of 4 bytes by task 12804 on cpu 0: [ 314.252506][T12818] touch_atime+0x1e8/0x340 [ 314.256935][T12818] shmem_file_splice_read+0x5b1/0x600 [ 314.262330][T12818] splice_direct_to_actor+0x26c/0x680 [ 314.267726][T12818] do_splice_direct+0xda/0x150 [ 314.272511][T12818] do_sendfile+0x380/0x650 [ 314.276937][T12818] __x64_sys_sendfile64+0x105/0x150 [ 314.282143][T12818] x64_sys_call+0x2bb0/0x2ff0 [ 314.286828][T12818] do_syscall_64+0xd2/0x200 [ 314.291385][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.297289][T12818] [ 314.299609][T12818] read to 0xffff88814cc7cc90 of 4 bytes by task 12818 on cpu 1: [ 314.307240][T12818] atime_needs_update+0x25f/0x3e0 [ 314.312276][T12818] touch_atime+0x4a/0x340 [ 314.316643][T12818] shmem_file_splice_read+0x5b1/0x600 [ 314.322032][T12818] splice_direct_to_actor+0x26c/0x680 [ 314.327416][T12818] do_splice_direct+0xda/0x150 [ 314.332199][T12818] do_sendfile+0x380/0x650 [ 314.336632][T12818] __x64_sys_sendfile64+0x105/0x150 [ 314.341842][T12818] x64_sys_call+0x2bb0/0x2ff0 [ 314.346532][T12818] do_syscall_64+0xd2/0x200 [ 314.351055][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.356958][T12818] [ 314.359285][T12818] value changed: 0x18c09f9a -> 0x1959228b [ 314.365008][T12818] [ 314.367331][T12818] Reported by Kernel Concurrency Sanitizer on: [ 314.373500][T12818] CPU: 1 UID: 0 PID: 12818 Comm: syz.1.2644 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(voluntary) [ 314.385662][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.395726][T12818] ================================================================== [ 314.439086][T12830] netlink: 'syz.0.2650': attribute type 21 has an invalid length. [ 314.446985][T12830] netlink: 'syz.0.2650': attribute type 1 has an invalid length. [ 314.454722][T12830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2650'. [ 314.598293][ T4213] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.