last executing test programs: 2m10.118277003s ago: executing program 2 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = geteuid() syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1166b780, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000240)={'trans=virtio,', {[{@cache_readahead}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@subj_role={'subj_role', 0x3d, '&-@'}}, {@appraise}, {@uid_gt={'uid>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x64, 0x66, 0x31, 0x36, 0x0, 0x66], 0x2d, [0x39, 0x35, 0x33, 0x36], 0x2d, [0x36, 0x62, 0x30, 0x33], 0x2d, [0xc9d718f3df894acd, 0x0, 0x53, 0xd642aadc12f57a82], 0x2d, [0x63, 0x64, 0x66, 0x62, 0x6b, 0x65, 0x32, 0x36]}}}, {@audit}]}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdnA=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 2m9.853944027s ago: executing program 2 (id=789): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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") 2m9.327279315s ago: executing program 2 (id=793): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f40)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db46}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x264, 0x7}, 0x3, 0x8, 0xf09}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0x6, 0xfff, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x403, 0x255, 0x6, 0x9, 0xd81, 0x8, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x4080, 0x90000010, 0x3800000, 0x0, 0xfffff309, 0x0, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x1, 0x3, 0x6, 0x9, 0x0, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x4000000, 0x5, 0xd5, 0x4, 0x6, 0x8, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x40, 0x80, 0xffbf7ffc, 0x0, 0x8, 0x7, 0x1, 0x2, 0x8008, 0xffffffff, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x81, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x6, 0x7fffffff, 0xfffffff7, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0xfffffff5, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x0, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0x3, 0x0, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x6, 0x1, 0x3, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x8001, 0x9, 0x401, 0x2, 0x8cc5, 0x8, 0x157, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x20000005, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x74, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x20000040) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x14cf, &(0x7f0000000080)={0x0, 0x2118}) io_uring_register$IORING_REGISTER_FILES2(r5, 0xf, &(0x7f0000000040)={0x46, 0x1, 0x0, 0x0, 0x0}, 0x20) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x340}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x6796, &(0x7f0000000180)={0x0, 0xfffffffb, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRESHEX, @ANYRESDEC=r6, @ANYRESHEX=r7, @ANYRESDEC=r6, @ANYRES32=r5, @ANYRES16=r9], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 2m9.113533762s ago: executing program 2 (id=796): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") setfsgid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x80042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tgkill(0x0, 0x0, 0x21) unshare(0x22020600) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fadvise64(r1, 0x7f, 0x0, 0x4) 2m8.108291452s ago: executing program 2 (id=810): socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x84) mknod(0x0, 0x1ffa, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6c75) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xd, 0xc}, {0xf, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) 2m7.534866656s ago: executing program 2 (id=812): r0 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r3], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x521, &(0x7f0000000980)="$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") io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb0c9fa2cdd4cf720}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r8 = fspick(r7, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) io_uring_setup(0x2fbb, &(0x7f00000002c0)={0x0, 0xac11, 0x4000, 0x1, 0x1a2, 0x0, r7}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffe}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 2m7.474876734s ago: executing program 32 (id=812): r0 = syz_io_uring_setup(0x5c4, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r3], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x521, &(0x7f0000000980)="$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") io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xb0c9fa2cdd4cf720}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r8 = fspick(r7, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) io_uring_setup(0x2fbb, &(0x7f00000002c0)={0x0, 0xac11, 0x4000, 0x1, 0x1a2, 0x0, r7}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc1ffe}]}) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 4.020099701s ago: executing program 3 (id=1978): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x80, 0x0, 0x0, 0x0, 0x9, 0x200b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x8000}, 0x0, 0x31, 0x6, 0x7, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffff32ac69b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgget$private(0x0, 0x4f2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x4000c00) 3.401645181s ago: executing program 4 (id=1991): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) io_setup(0xd6, &(0x7f0000000200)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x2020}]) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) fcntl$setpipe(r4, 0x408, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x100, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) io_cancel(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 3.104269749s ago: executing program 3 (id=1993): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.980134515s ago: executing program 1 (id=1994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x800, 0x800, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r2, &(0x7f0000000640)=""/4110, 0x100e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x4) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a00"/180]) linkat(r1, &(0x7f0000000280)='./file2\x00', r1, &(0x7f0000000140)='./file2\x00', 0x1400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}, {@version_L}, {@nodevmap}, {@uname={'uname', 0x3d, 'errors=remount-ro'}}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_fscache}, {@ignoreqv}, {@cachetag={'cachetag', 0x3d, 'trusted.overlay.upper\x00'}}], [{@dont_appraise}]}}) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0xe01, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgid(0xee00) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) unshare(0x10040480) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006e080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 2.71097383s ago: executing program 1 (id=1995): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r10], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x884) 2.534618573s ago: executing program 0 (id=1996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = geteuid() syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1166b780, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@version_9p2000}]}}) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x800000, &(0x7f0000000240)={'trans=virtio,', {[{@cache_readahead}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@subj_role={'subj_role', 0x3d, '&-@'}}, {@appraise}, {@uid_gt={'uid>', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x31, 0x64, 0x66, 0x31, 0x36, 0x0, 0x66], 0x2d, [0x39, 0x35, 0x33, 0x36], 0x2d, [0x36, 0x62, 0x30, 0x33], 0x2d, [0xc9d718f3df894acd, 0x0, 0x53, 0xd642aadc12f57a82], 0x2d, [0x63, 0x64, 0x66, 0x62, 0x6b, 0x65, 0x32, 0x36]}}}, {@audit}]}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdnA=', @ANYRESHEX=r8, @ANYBLOB=',\x00']) 2.500500167s ago: executing program 0 (id=1997): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 2.462241112s ago: executing program 1 (id=1998): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x18, 0x0, 0xfffffffffe000001}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 2.426694296s ago: executing program 4 (id=1999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb45040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000380)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x8) fallocate(r1, 0x0, 0x0, 0x1000f4) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x0, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e21, @rand_addr=0x64010100}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 2.358286155s ago: executing program 0 (id=2000): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b00010067726574617000002400028008000700", @ANYRES32=r9], 0x5c}}, 0x40) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x30}}, 0x884) 2.180847138s ago: executing program 0 (id=2002): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x1003ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2.114901037s ago: executing program 5 (id=2003): socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x3ff, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000780)={r4, &(0x7f00000006c0), 0xf0107ff0780000}, 0x20) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r6, 0x0, 0x39000, 0x0) r7 = memfd_create(&(0x7f0000000080), 0x0) splice(r5, 0x0, r7, 0x0, 0x1ea9, 0x9) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r8 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000000)={&(0x7f000006b000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/238, 0xee, 0x0, &(0x7f0000000180)=""/79, 0x4f}, &(0x7f0000000200)=0x40) write$eventfd(r1, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) 2.044574496s ago: executing program 3 (id=2004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000004800010024bd7000fcdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0a000000140001000000000000000000000000000000054f184dde9204b475b1"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x20040000) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x18) umount2(0x0, 0x8) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.928948761s ago: executing program 1 (id=2005): shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x7f36, 0x0, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, 0x0) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7, 0x0, 0x20}, 0x18) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.928088731s ago: executing program 3 (id=2006): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x1003ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.648141117s ago: executing program 1 (id=2007): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x18, r6, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1.54586054s ago: executing program 4 (id=2008): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r5, 0xb) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 1.385177241s ago: executing program 4 (id=2009): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, 0x0, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 1.265613006s ago: executing program 0 (id=2010): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffa}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x80000000) mlockall(0x2) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r6, 0xb) shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x7000) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0xa, 0x0, 0x3, 0x1, 0xfe}, 0x8) 1.091623029s ago: executing program 5 (id=2011): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0xc, 0x63, 0x9, 0x2d, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_key={0x1a, 0x8, 0x628, 0x0, "07ada4a737b66b8d4dc7b264efbd5402465aa9b2a63edf85968f4ee201877575039479f5af400c6928ee4a2e57f31119bdbb21fe41b48a03d51ce424af5de2c5e852378e4d366ebe0c0e687cc3aaba7e39afaf4fc0dffaaef6b1d93b30d82c6e817ee2f98e4a8a28b73502d633493e562bf69d01cddb019e8dbd73e69edf143bd17c58cbca0f9cea19b5bef8edb2b1c5ac76bf22340bab69354fd94f6b41bbfa2ded426123a54b5ce59c3f5874421ffb0bc7b18490607988864e9e39ec54202d4dfd19ddc6"}, @sadb_x_sa2={0x2, 0x13, 0x4, 0x0, 0x0, 0x70bd25, 0x3}, @sadb_x_sa2={0x2, 0x13, 0xff, 0x0, 0x0, 0x70bd25}, @sadb_x_nat_t_type={0x1, 0x14, 0xa}, @sadb_x_policy={0x8, 0x12, 0x4, 0x2, 0x0, 0x0, 0x5, {0x6, 0x32, 0x3, 0x9, 0x0, 0x1c0, 0x0, @in=@remote, @in6=@remote}}, @sadb_lifetime={0x4, 0x4, 0x4, 0x4, 0x9, 0x7}]}, 0x168}}, 0x0) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff}, {0x0, 0xffffffffffffff04}, &(0x7f00000001c0)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x783}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = epoll_create(0x3ff) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000440)={0x2000000}) 1.020433998s ago: executing program 3 (id=2012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001", @ANYRES32=0x0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000001f0000850000001b000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.019814818s ago: executing program 0 (id=2013): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a01"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4ef, &(0x7f0000000c40)="$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") getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) kexec_load(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sigaltstack(&(0x7f0000000400)={0x0, 0x80000000}, &(0x7f0000000740)={&(0x7f00000006c0)=""/121, 0x0, 0x79}) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) read(0xffffffffffffffff, &(0x7f0000000440)=""/247, 0x26) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x28}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000080)=@sr0, 0x0, &(0x7f00000001c0)='./file0\x00') mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x810004, &(0x7f0000000ac0)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x04\xc3\x00\x00\x00\x00\x00\x00\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000007c0)=0xe8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0xb81, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) setxattr$incfs_id(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_FS_INFO(r6, 0x8400941f, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000080)='./file1/file0\x00', 0x131a047, &(0x7f0000000900)={[{@jqfmt_vfsv1}, {@nombcache}, {@bsdgroups}, {@nouser_xattr}, {@nomblk_io_submit}, {@nomblk_io_submit}, {@init_itable}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20}}], [{@smackfshat={'smackfshat', 0x3d, 'tls'}}, {@measure}, {@uid_gt={'uid>', r0}}]}, 0x3, 0x59e, &(0x7f0000000100)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r7, 0x20, 0x0, 0x8000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSERGETLSR(r9, 0x5459, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000040), 0x1e) 765.574291ms ago: executing program 4 (id=2016): unlinkat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) eventfd2(0x1, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000200)={{0xa, 0x4e23, 0x5, @mcast2, 0x3}, {0xa, 0x4e24, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x0, {[0x5, 0x51, 0xe835, 0xbb, 0x0, 0xc0000000, 0x6]}}, 0x5c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 750.736723ms ago: executing program 5 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x800, 0x800, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r2, &(0x7f0000000640)=""/4110, 0x100e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x4) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a00"/180]) linkat(r1, &(0x7f0000000280)='./file2\x00', r1, &(0x7f0000000140)='./file2\x00', 0x1400) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x8, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}, {@version_L}, {@nodevmap}, {@uname={'uname', 0x3d, 'errors=remount-ro'}}, {@access_client}, {@dfltgid={'dfltgid', 0x3d, 0xee00}}, {@cache_fscache}, {@ignoreqv}, {@cachetag={'cachetag', 0x3d, 'trusted.overlay.upper\x00'}}], [{@dont_appraise}]}}) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000040)=ANY=[], 0xe01, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setgid(0xee00) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) unshare(0x10040480) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000006e080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 637.837168ms ago: executing program 1 (id=2018): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6367726f75705f743a7330202f7573722f6c69622f74656c6570617468792f6d697373698f6e2d636f6e74726f6c2d3520303030303030303030303030010030333237363700"], 0x58) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c00)=ANY=[@ANYBLOB="280000d9", @ANYRES16=0x0, @ANYBLOB="000828bd7000fedbdf250800000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x400c}, 0x0) sendfile(r4, r5, 0x0, 0x8000002b) futimesat(r5, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000200)="d8048479bdf38c944132cdfd62a3ccf8acf4ef673848942ae98f269e796522d61b2ed7450904682b331d2fc39be1e7db45121339e9d6b7205fdd679c776a0932757f863f4d268550a6755cc01d4d9b21a3be1d0e45d5cda267a2f297582f66447bb2b8e1d9bd9d46577dfbd7bcba6ea4dabed13564327123f002f9a4bf54570d411a1eccfc4fb26ae3b6c6963eccb165d9", 0x91) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000680001ed020000000000008000000000000000000c000200010000000600000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20004080) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000300)={0xffffffffffffffff, 0x9, 0x4, 0x1, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 573.380106ms ago: executing program 5 (id=2019): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x80, 0xfffffffc, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x29}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0xfffffffc}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110280000000000bf1a0000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x58) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x14, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_procfs(0x0, &(0x7f0000000640)='mountinfo\x00') io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r8, 0x1, 0x6, &(0x7f0000000000), 0x0) io_submit(r8, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, r7, 0x0, 0x0, 0xbd7, 0x0, 0x0, r7}]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="8b332ebd700000000000150000000c009900040000003a000000"], 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) syz_emit_ethernet(0x56, &(0x7f0000000880)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "01044a", 0x20, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, '\x00\x00\x00\x00\x00\x00'}]}}}}}}, 0x0) statfs(0x0, 0x0) 320.831628ms ago: executing program 5 (id=2020): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x1003ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 0s ago: executing program 3 (id=2021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000004280)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r0, 0x2000, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40040) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, 0x0, 0x20008001) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) kernel console output (not intermixed with test programs): .395:17382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 217.482618][ T29] audit: type=1326 audit(1768431572.395:17383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 217.512657][ T8316] IPv6: addrconf: prefix option has invalid lifetime [ 217.534095][ T8318] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 217.575713][ T8318] bond18: (slave bridge2): making interface the new active one [ 217.589471][ T8318] bond18: (slave bridge2): Enslaving as an active interface with an up link [ 217.610292][ T29] audit: type=1326 audit(1768431572.475:17384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f450ef3e1ff code=0x7ffc0000 [ 217.634058][ T29] audit: type=1326 audit(1768431572.495:17385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 217.657790][ T29] audit: type=1326 audit(1768431572.495:17386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 217.681428][ T29] audit: type=1326 audit(1768431572.515:17387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f450ef3e3aa code=0x7ffc0000 [ 217.705127][ T29] audit: type=1326 audit(1768431572.515:17388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f450ef72005 code=0x7ffc0000 [ 217.744186][ T8318] macvlan5: entered promiscuous mode [ 217.749762][ T8318] macvlan5: entered allmulticast mode [ 217.756429][ T8318] bond18: entered promiscuous mode [ 217.761752][ T8318] bridge2: entered promiscuous mode [ 217.788363][ T8318] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 217.813682][ T8318] bond18: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 217.829856][ T29] audit: type=1326 audit(1768431572.715:17389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8315 comm="syz.4.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 217.860877][ T8318] bond18: left promiscuous mode [ 217.865885][ T8318] bridge2: left promiscuous mode [ 217.989202][ T8327] netlink: 'syz.5.1296': attribute type 39 has an invalid length. [ 218.116489][ T8335] lo speed is unknown, defaulting to 1000 [ 218.221591][ T8335] lo speed is unknown, defaulting to 1000 [ 218.286346][ T8341] loop5: detected capacity change from 0 to 1024 [ 218.320420][ T8341] EXT4-fs: Ignoring removed orlov option [ 218.387774][ T8341] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.625765][ T8349] netlink: 'syz.4.1302': attribute type 1 has an invalid length. [ 218.717342][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1302'. [ 218.726298][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1302'. [ 218.934161][ T8349] macvlan2: entered promiscuous mode [ 218.939633][ T8349] macvlan2: entered allmulticast mode [ 218.976693][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.019844][ T8349] bond17: entered promiscuous mode [ 219.025237][ T8349] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.118984][ T8349] bond17: left promiscuous mode [ 219.177404][ T8360] 9p: Unknown access argument 18446744073709551615: -34 [ 219.234584][ T8361] 9pnet_fd: Insufficient options for proto=fd [ 219.396142][ T8365] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 219.422562][ T8367] loop5: detected capacity change from 0 to 128 [ 219.456462][ T8365] bond18: (slave bridge4): making interface the new active one [ 219.516117][ T8365] bond18: (slave bridge4): Enslaving as an active interface with an up link [ 219.541843][ T8369] macvlan2: entered promiscuous mode [ 219.547203][ T8369] macvlan2: entered allmulticast mode [ 219.588544][ T8369] bond18: entered promiscuous mode [ 219.593788][ T8369] bridge4: entered promiscuous mode [ 219.635005][ T8369] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 219.664538][ T8369] bond18: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 219.731544][ T8373] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 219.739553][ T8373] FAT-fs (loop5): Filesystem has been set read-only [ 219.743014][ T8369] bond18: left promiscuous mode [ 219.751437][ T8369] bridge4: left promiscuous mode [ 219.767736][ T8373] syz.5.1306: attempt to access beyond end of device [ 219.767736][ T8373] loop5: rw=8912896, sector=2065, nr_sectors = 8 limit=128 [ 219.830050][ T8373] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 219.837924][ T8373] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 219.898998][ T8373] syz.5.1306: attempt to access beyond end of device [ 219.898998][ T8373] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 219.946037][ T8373] syz.5.1306: attempt to access beyond end of device [ 219.946037][ T8373] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 219.999038][ T8373] syz.5.1306: attempt to access beyond end of device [ 219.999038][ T8373] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 220.056372][ T8373] syz.5.1306: attempt to access beyond end of device [ 220.056372][ T8373] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 220.080534][ T8377] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.088051][ T8380] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20000 [ 220.122380][ T8373] syz.5.1306: attempt to access beyond end of device [ 220.122380][ T8373] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 220.181571][ T8373] syz.5.1306: attempt to access beyond end of device [ 220.181571][ T8373] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 220.240751][ T8373] syz.5.1306: attempt to access beyond end of device [ 220.240751][ T8373] loop5: rw=8388608, sector=2065, nr_sectors = 8 limit=128 [ 220.318689][ T8385] loop4: detected capacity change from 0 to 512 [ 220.325395][ T8385] EXT4-fs: Ignoring removed nobh option [ 220.383839][ T8385] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1311: iget: bad i_size value: 38620345925642 [ 220.407538][ T8385] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1311: couldn't read orphan inode 15 (err -117) [ 220.429568][ T8385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.513307][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.526458][ T8391] IPVS: Error connecting to the multicast addr [ 220.541275][ T8391] IPv6: Can't replace route, no match found [ 220.578149][ T8393] loop4: detected capacity change from 0 to 1024 [ 220.594334][ T8393] EXT4-fs: Ignoring removed orlov option [ 220.617084][ T8393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.657275][ T8398] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 220.729411][ T8403] 9p: Unknown access argument 18446744073709551615: -34 [ 220.737491][ T8398] macvlan5: entered promiscuous mode [ 220.742955][ T8398] macvlan5: entered allmulticast mode [ 220.752008][ T8403] 9pnet_fd: Insufficient options for proto=fd [ 220.760226][ T8398] bond19: entered promiscuous mode [ 220.765724][ T8398] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 220.785197][ T8398] bond19: left promiscuous mode [ 220.888478][ T8406] tipc: Enabling of bearer rejected, failed to enable media [ 220.912199][ T8410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8410 comm=syz.1.1319 [ 220.966285][ T8414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.976428][ T8414] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 220.989277][ T8414] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 221.073138][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.167900][ T8436] tipc: Enabled bearer , priority 0 [ 221.191275][ T8435] tipc: Disabling bearer [ 221.471557][ T8465] netlink: 'syz.5.1329': attribute type 1 has an invalid length. [ 221.490210][ T8466] 9p: Unknown access argument 18446744073709551615: -34 [ 221.508129][ T8466] 9pnet_fd: Insufficient options for proto=fd [ 221.578860][ T8465] macvlan2: entered promiscuous mode [ 221.584495][ T8465] macvlan2: entered allmulticast mode [ 221.612988][ T8465] bond3: entered promiscuous mode [ 221.618446][ T8465] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 221.628097][ T8465] bond3: left promiscuous mode [ 221.663148][ T8478] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.751941][ T8478] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.830555][ T8478] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.891743][ T8478] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.977198][ T5389] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.016788][ T5389] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.047761][ T8492] tipc: Enabling of bearer rejected, failed to enable media [ 222.056794][ T5389] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.099096][ T5389] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.373548][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 222.373567][ T29] audit: type=1400 audit(1768431577.335:18035): avc: denied { execute } for pid=8511 comm="syz.5.1340" dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.407822][ T29] audit: type=1400 audit(1768431577.335:18036): avc: denied { execute_no_trans } for pid=8511 comm="syz.5.1340" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=317 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 222.454754][ T29] audit: type=1326 audit(1768431577.415:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 222.479596][ T29] audit: type=1326 audit(1768431577.415:18038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 222.503242][ T29] audit: type=1326 audit(1768431577.415:18039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 222.526946][ T29] audit: type=1326 audit(1768431577.415:18040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 222.550761][ T29] audit: type=1326 audit(1768431577.415:18041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 222.574548][ T29] audit: type=1326 audit(1768431577.415:18042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 222.598155][ T29] audit: type=1326 audit(1768431577.415:18043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 222.623906][ T29] audit: type=1326 audit(1768431577.595:18044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8516 comm="syz.0.1342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 222.669316][ T8521] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 222.677215][ T8514] random: crng reseeded on system resumption [ 222.694315][ T8514] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 222.703871][ T8521] __nla_validate_parse: 5 callbacks suppressed [ 222.703888][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1343'. [ 222.723496][ T8521] macvlan3: entered promiscuous mode [ 222.728945][ T8521] macvlan3: entered allmulticast mode [ 222.735930][ T8521] bond12: entered promiscuous mode [ 222.742123][ T8521] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 222.751276][ T8521] bond12: left promiscuous mode [ 222.869772][ T8529] tipc: Enabling of bearer rejected, failed to enable media [ 222.912799][ T8536] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1347'. [ 222.951095][ T8541] loop4: detected capacity change from 0 to 1024 [ 222.970387][ T8541] EXT4-fs: Ignoring removed orlov option [ 222.984617][ T8541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.518892][ T8555] lo speed is unknown, defaulting to 1000 [ 223.563925][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.634347][ T8555] lo speed is unknown, defaulting to 1000 [ 223.639045][ T8569] netlink: 'syz.4.1355': attribute type 1 has an invalid length. [ 223.680470][ T8571] netlink: 'syz.3.1357': attribute type 1 has an invalid length. [ 223.711901][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1355'. [ 223.743000][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1357'. [ 223.771829][ T8569] macvlan2: entered promiscuous mode [ 223.777287][ T8569] macvlan2: entered allmulticast mode [ 223.794037][ T8569] bond19: entered promiscuous mode [ 223.808962][ T8569] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 223.827457][ T8569] bond19: left promiscuous mode [ 223.863035][ T8575] macvlan1: entered promiscuous mode [ 223.868439][ T8575] macvlan1: entered allmulticast mode [ 223.883479][ T8575] bond22: entered promiscuous mode [ 223.889200][ T8575] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 223.897478][ T8575] bond22: left promiscuous mode [ 223.995181][ T8577] tipc: Enabling of bearer rejected, failed to enable media [ 224.035172][ T8588] tipc: Enabled bearer , priority 0 [ 224.066999][ T8587] tipc: Disabling bearer [ 224.137410][ T8589] lo speed is unknown, defaulting to 1000 [ 224.204648][ T8589] lo speed is unknown, defaulting to 1000 [ 225.225279][ T8619] netlink: 'syz.5.1370': attribute type 1 has an invalid length. [ 225.242406][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1370'. [ 225.259359][ T8619] macvlan2: entered promiscuous mode [ 225.264787][ T8619] macvlan2: entered allmulticast mode [ 225.270920][ T8619] bond4: entered promiscuous mode [ 225.276304][ T8619] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 225.289155][ T8619] bond4: left promiscuous mode [ 225.377859][ T8622] lo speed is unknown, defaulting to 1000 [ 225.409220][ T8624] netlink: 'syz.1.1373': attribute type 39 has an invalid length. [ 225.434753][ T8622] lo speed is unknown, defaulting to 1000 [ 225.444837][ T8628] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1371'. [ 225.725427][ T8633] lo speed is unknown, defaulting to 1000 [ 225.754816][ T8585] loop4: detected capacity change from 0 to 2048 [ 225.771003][ T8633] lo speed is unknown, defaulting to 1000 [ 225.789478][ T8640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.828555][ T8585] EXT4-fs (loop4): unsupported inode size: 84 [ 225.835981][ T8585] EXT4-fs (loop4): blocksize: 4096 [ 226.216562][ T8652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 226.236327][ T8652] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1380'. [ 226.288466][ T8652] atomic_op ffff888132c76928 conn xmit_atomic 0000000000000000 [ 226.681265][ T8666] lo speed is unknown, defaulting to 1000 [ 226.742645][ T8666] lo speed is unknown, defaulting to 1000 [ 227.524413][ T29] kauditd_printk_skb: 833 callbacks suppressed [ 227.524431][ T29] audit: type=1400 audit(1768431582.485:18878): avc: denied { create } for pid=8675 comm="syz.4.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.576027][ T8677] veth1_to_bond: entered allmulticast mode [ 227.578777][ T29] audit: type=1400 audit(1768431582.485:18879): avc: denied { ioctl } for pid=8675 comm="syz.4.1388" path="socket:[24997]" dev="sockfs" ino=24997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.607187][ T29] audit: type=1400 audit(1768431582.535:18880): avc: denied { setopt } for pid=8675 comm="syz.4.1388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 227.627626][ T8677] veth1_to_bond: left allmulticast mode [ 227.980972][ T29] audit: type=1400 audit(1768431582.945:18881): avc: denied { create } for pid=8680 comm="syz.5.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 228.018939][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1390'. [ 228.065950][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.078717][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.101243][ T29] audit: type=1400 audit(1768431583.065:18882): avc: denied { create } for pid=8680 comm="syz.5.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.129185][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.153648][ T8692] block device autoloading is deprecated and will be removed. [ 228.156154][ T29] audit: type=1400 audit(1768431583.085:18883): avc: denied { connect } for pid=8680 comm="syz.5.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 228.180942][ T29] audit: type=1400 audit(1768431583.085:18884): avc: denied { create } for pid=8684 comm="syz.0.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.200604][ T29] audit: type=1400 audit(1768431583.085:18885): avc: denied { setopt } for pid=8684 comm="syz.0.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 228.220118][ T29] audit: type=1400 audit(1768431583.105:18886): avc: denied { create } for pid=8690 comm="syz.1.1393" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.241227][ T29] audit: type=1400 audit(1768431583.105:18887): avc: denied { write } for pid=8690 comm="syz.1.1393" name="file0" dev="tmpfs" ino=1612 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 228.281458][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.292205][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.309989][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.374600][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.385901][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.397239][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 228.413736][ T8700] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 228.425430][ T8700] loop4: detected capacity change from 0 to 512 [ 228.439828][ T8700] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 228.480238][ T8700] EXT4-fs (loop4): orphan cleanup on readonly fs [ 228.489798][ T8700] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1394: Allocating blocks 41-42 which overlap fs metadata [ 228.504197][ T8700] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1394: Allocating blocks 41-42 which overlap fs metadata [ 228.518349][ T8700] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1394: Failed to acquire dquot type 1 [ 228.548948][ T8700] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 228.575649][ T8700] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1394: corrupted inode contents [ 228.610664][ T8687] loop3: detected capacity change from 0 to 2048 [ 228.633139][ T8700] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.1394: mark_inode_dirty error [ 228.647345][ T8700] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1394: corrupted inode contents [ 228.659387][ T8687] EXT4-fs (loop3): unsupported inode size: 84 [ 228.666147][ T8687] EXT4-fs (loop3): blocksize: 4096 [ 228.696509][ T8707] lo speed is unknown, defaulting to 1000 [ 228.702681][ T8700] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.1394: mark_inode_dirty error [ 228.736355][ T8700] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1394: corrupted inode contents [ 228.771631][ T8700] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 228.798080][ T8700] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.1394: corrupted inode contents [ 228.831847][ T8707] lo speed is unknown, defaulting to 1000 [ 228.841498][ T8700] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.1394: mark_inode_dirty error [ 228.876365][ T8700] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 228.921162][ T8700] EXT4-fs (loop4): 1 truncate cleaned up [ 228.943185][ T8700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 229.014116][ T8718] loop3: detected capacity change from 0 to 128 [ 229.036399][ T8718] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.071962][ T8718] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.091919][ T8718] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 229.110165][ T5415] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.234803][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.397241][ T8727] lo speed is unknown, defaulting to 1000 [ 229.456703][ T8727] lo speed is unknown, defaulting to 1000 [ 229.890313][ T8730] lo speed is unknown, defaulting to 1000 [ 230.023510][ T8744] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 230.043959][ T8745] IPVS: stopping master sync thread 8746 ... [ 230.043957][ T8746] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 230.107258][ T8750] macvlan3: entered promiscuous mode [ 230.112740][ T8750] macvlan3: entered allmulticast mode [ 230.119178][ T8750] bond13: entered promiscuous mode [ 230.124676][ T8750] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 230.133354][ T8750] bond13: left promiscuous mode [ 230.154678][ T8730] lo speed is unknown, defaulting to 1000 [ 230.178276][ T8755] loop4: detected capacity change from 0 to 1024 [ 230.186632][ T8755] EXT4-fs: inline encryption not supported [ 230.192581][ T8755] EXT4-fs: Ignoring removed orlov option [ 230.206973][ T8755] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 230.233544][ T8755] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.303443][ T8763] loop3: detected capacity change from 0 to 2048 [ 230.317428][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.349772][ T3306] loop3: p2 < > p4 [ 230.372341][ T3306] loop3: p4 size 262144 extends beyond EOD, truncated [ 230.401639][ T8763] loop3: p2 < > p4 [ 230.419133][ T8763] loop3: p4 size 262144 extends beyond EOD, truncated [ 231.094002][ T8795] netlink: 'syz.3.1424': attribute type 1 has an invalid length. [ 231.600663][ T8800] lo speed is unknown, defaulting to 1000 [ 231.659051][ T8801] macvlan1: entered promiscuous mode [ 231.664405][ T8801] macvlan1: entered allmulticast mode [ 231.679430][ T8801] bond23: entered promiscuous mode [ 231.693789][ T8801] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 231.714116][ T8801] bond23: left promiscuous mode [ 231.722656][ T8800] lo speed is unknown, defaulting to 1000 [ 231.777488][ T8807] netlink: zone id is out of range [ 231.782747][ T8807] netlink: zone id is out of range [ 231.795847][ T8807] netlink: zone id is out of range [ 231.801238][ T8807] netlink: zone id is out of range [ 231.806578][ T8807] netlink: zone id is out of range [ 231.811861][ T8807] netlink: zone id is out of range [ 231.817035][ T8807] netlink: zone id is out of range [ 231.822208][ T8807] netlink: zone id is out of range [ 231.827405][ T8807] netlink: zone id is out of range [ 231.832626][ T8807] netlink: zone id is out of range [ 231.978063][ T8809] lo speed is unknown, defaulting to 1000 [ 232.079056][ T8809] lo speed is unknown, defaulting to 1000 [ 232.136205][ T8829] tipc: Enabled bearer , priority 10 [ 232.194584][ T8821] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 232.225540][ T8833] binfmt_misc: register: failed to install interpreter file ./file0 [ 232.352763][ T8834] lo speed is unknown, defaulting to 1000 [ 232.413321][ T8834] lo speed is unknown, defaulting to 1000 [ 232.616457][ T29] kauditd_printk_skb: 906 callbacks suppressed [ 232.616475][ T29] audit: type=1400 audit(1768431587.575:19790): avc: denied { bind } for pid=8838 comm="syz.1.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.806948][ T29] audit: type=1400 audit(1768431587.615:19791): avc: denied { write } for pid=8838 comm="syz.1.1436" path="socket:[25331]" dev="sockfs" ino=25331 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.989357][ T8843] lo speed is unknown, defaulting to 1000 [ 233.051947][ T8843] lo speed is unknown, defaulting to 1000 [ 233.290199][ T8846] loop3: detected capacity change from 0 to 512 [ 233.321336][ T8846] EXT4-fs error (device loop3): __ext4_iget:5426: inode #11: block 1: comm syz.3.1437: invalid block [ 233.369027][ T8846] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1437: couldn't read orphan inode 11 (err -117) [ 233.489243][ T8846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.569055][ T29] audit: type=1400 audit(1768431588.525:19792): avc: denied { create } for pid=8845 comm="syz.3.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.660636][ T8858] lo speed is unknown, defaulting to 1000 [ 233.721498][ T8858] lo speed is unknown, defaulting to 1000 [ 233.809875][ T29] audit: type=1326 audit(1768431588.755:19793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 233.833565][ T29] audit: type=1326 audit(1768431588.765:19794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 233.857176][ T29] audit: type=1326 audit(1768431588.765:19795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 233.881139][ T29] audit: type=1326 audit(1768431588.765:19796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 233.904677][ T29] audit: type=1326 audit(1768431588.765:19797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 233.928510][ T29] audit: type=1326 audit(1768431588.765:19798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 233.952119][ T29] audit: type=1326 audit(1768431588.765:19799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8856 comm="syz.4.1441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f450ef3f749 code=0x7ffc0000 [ 234.085577][ T8869] 9p: Unknown access argument 18446744073709551615: -34 [ 234.144402][ T8863] 9pnet_fd: Insufficient options for proto=fd [ 234.187427][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.201603][ T8876] __nla_validate_parse: 5 callbacks suppressed [ 234.201628][ T8876] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 234.258321][ T8880] netlink: 'syz.1.1449': attribute type 1 has an invalid length. [ 234.292069][ T8877] loop4: detected capacity change from 0 to 2048 [ 234.329185][ T8877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.384404][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 234.400976][ T8880] macvlan5: entered promiscuous mode [ 234.406329][ T8880] macvlan5: entered allmulticast mode [ 234.406547][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.413545][ T8880] bond20: entered promiscuous mode [ 234.427010][ T8880] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 234.437386][ T8880] bond20: left promiscuous mode [ 234.473439][ T8872] lo speed is unknown, defaulting to 1000 [ 234.508698][ T36] IPVS: starting estimator thread 0... [ 234.565158][ T8893] fido_id[8893]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 234.598907][ T8897] IPVS: using max 2256 ests per chain, 112800 per kthread [ 234.685229][ T8908] 9p: Unknown access argument 18446744073709551615: -34 [ 234.698765][ T8872] lo speed is unknown, defaulting to 1000 [ 234.813557][ T8906] 9pnet_fd: Insufficient options for proto=fd [ 234.938246][ T8871] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 234.953537][ T8871] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 64 with max blocks 10 with error 28 [ 234.966002][ T8871] EXT4-fs (loop4): This should not happen!! Data will be lost [ 234.966002][ T8871] [ 234.975794][ T8871] EXT4-fs (loop4): Total free blocks count 0 [ 234.981850][ T8871] EXT4-fs (loop4): Free/Dirty block details [ 234.987777][ T8871] EXT4-fs (loop4): free_blocks=2415919504 [ 234.993569][ T8871] EXT4-fs (loop4): dirty_blocks=16 [ 234.998766][ T8871] EXT4-fs (loop4): Block reservation details [ 235.004879][ T8871] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 235.386816][ T8921] lo speed is unknown, defaulting to 1000 [ 235.431256][ T8921] lo speed is unknown, defaulting to 1000 [ 235.895548][ T8924] loop5: detected capacity change from 0 to 512 [ 235.921574][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.959813][ T8924] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 235.993414][ T8933] block device autoloading is deprecated and will be removed. [ 236.001249][ T8924] EXT4-fs (loop5): orphan cleanup on readonly fs [ 236.013029][ T8924] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.1461: corrupted inode contents [ 236.045956][ T8935] loop4: detected capacity change from 0 to 1024 [ 236.053135][ T8935] EXT4-fs: Ignoring removed orlov option [ 236.059931][ T8924] EXT4-fs (loop5): Remounting filesystem read-only [ 236.076369][ T8935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.094409][ T8924] EXT4-fs (loop5): 1 truncate cleaned up [ 236.100539][ T5336] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.111126][ T5336] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 236.136958][ T8940] netlink: 'syz.3.1466': attribute type 1 has an invalid length. [ 236.151954][ T5336] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 236.170893][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 236.187551][ T8940] macvlan1: entered promiscuous mode [ 236.192981][ T8940] macvlan1: entered allmulticast mode [ 236.199257][ T8940] bond24: entered promiscuous mode [ 236.204853][ T8940] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 236.214349][ T8940] bond24: left promiscuous mode [ 236.216421][ T8924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 236.266920][ T8924] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.348496][ T8924] tipc: New replicast peer: 255.255.255.255 [ 236.354792][ T8924] tipc: Enabled bearer , priority 10 [ 236.426172][ T8955] 9p: Unknown access argument 18446744073709551615: -34 [ 236.488343][ T8955] 9pnet_fd: Insufficient options for proto=fd [ 236.673955][ T8963] tipc: Enabled bearer , priority 0 [ 236.705863][ T8963] syzkaller0: entered promiscuous mode [ 236.711463][ T8963] syzkaller0: entered allmulticast mode [ 236.720689][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.767187][ T8963] tipc: Resetting bearer [ 236.783600][ T8962] tipc: Resetting bearer [ 236.820434][ T8962] tipc: Disabling bearer [ 236.862223][ T8971] loop4: detected capacity change from 0 to 1024 [ 236.889822][ T8971] EXT4-fs: Ignoring removed orlov option [ 236.942083][ T8971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.065851][ T8972] lo speed is unknown, defaulting to 1000 [ 237.102973][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 237.103311][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'. [ 237.103334][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1477'. [ 237.103415][ T8980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'. [ 237.103564][ T8980] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1477'. [ 237.106500][ T8977] loop5: detected capacity change from 0 to 2048 [ 237.123201][ T8977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.266717][ T8972] lo speed is unknown, defaulting to 1000 [ 237.648143][ T8992] bridge: RTM_NEWNEIGH with invalid ether address [ 237.738870][ T8758] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 238.161671][ T8970] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2 with error 28 [ 238.174099][ T8970] EXT4-fs (loop5): This should not happen!! Data will be lost [ 238.174099][ T8970] [ 238.183799][ T8970] EXT4-fs (loop5): Total free blocks count 0 [ 238.190029][ T8970] EXT4-fs (loop5): Free/Dirty block details [ 238.196044][ T8970] EXT4-fs (loop5): free_blocks=2415919504 [ 238.201833][ T8970] EXT4-fs (loop5): dirty_blocks=16 [ 238.206983][ T8970] EXT4-fs (loop5): Block reservation details [ 238.213020][ T8970] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 238.220465][ T8998] tipc: Enabling of bearer rejected, failed to enable media [ 238.257336][ T8992] loop3: detected capacity change from 0 to 8185 [ 238.270221][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.355047][ T9000] netlink: 'syz.4.1481': attribute type 4 has an invalid length. [ 238.413339][ T9003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=9003 comm=syz.4.1481 [ 238.449671][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.471548][ T29] kauditd_printk_skb: 614 callbacks suppressed [ 238.471647][ T29] audit: type=1400 audit(1768431593.435:20408): avc: denied { write } for pid=8999 comm="syz.4.1481" name="vlan1" dev="proc" ino=4026533276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 238.639780][ T9006] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 238.688406][ T9011] loop4: detected capacity change from 0 to 512 [ 238.694934][ T9012] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 238.705443][ T9008] IPVS: stopping master sync thread 9012 ... [ 238.736910][ T9011] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 238.763119][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1483'. [ 238.772168][ T9008] tipc: Disabling bearer [ 238.791118][ T9011] EXT4-fs (loop4): 1 truncate cleaned up [ 238.797476][ T9011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.839939][ T29] audit: type=1400 audit(1768431593.795:20409): avc: denied { setattr } for pid=9005 comm="syz.4.1484" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 238.930797][ T29] audit: type=1326 audit(1768431593.895:20410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 239.031147][ T29] audit: type=1326 audit(1768431593.895:20411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 239.055305][ T29] audit: type=1326 audit(1768431593.895:20412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 239.079543][ T29] audit: type=1326 audit(1768431593.925:20413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 239.103175][ T29] audit: type=1326 audit(1768431593.925:20414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 239.127016][ T29] audit: type=1326 audit(1768431593.925:20415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 239.151205][ T29] audit: type=1326 audit(1768431593.925:20416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 239.175109][ T29] audit: type=1326 audit(1768431593.925:20417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.5.1486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 239.472125][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.787854][ T9036] lo speed is unknown, defaulting to 1000 [ 239.824184][ T9036] lo speed is unknown, defaulting to 1000 [ 239.828929][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 240.025782][ T9045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1497'. [ 240.100774][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 240.111434][ T9049] loop5: detected capacity change from 0 to 1024 [ 240.122412][ T9049] EXT4-fs: Ignoring removed orlov option [ 240.133243][ T9049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.564307][ T9064] lo speed is unknown, defaulting to 1000 [ 240.624878][ T9064] lo speed is unknown, defaulting to 1000 [ 240.948855][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.270492][ T9084] lo speed is unknown, defaulting to 1000 [ 241.332617][ T9084] lo speed is unknown, defaulting to 1000 [ 241.610153][ T9086] loop3: detected capacity change from 0 to 512 [ 241.666286][ T9083] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.200089][ T9090] lo speed is unknown, defaulting to 1000 [ 242.259088][ T9090] lo speed is unknown, defaulting to 1000 [ 242.663007][ T9092] tipc: Enabled bearer , priority 0 [ 242.691716][ T9092] loop3: detected capacity change from 0 to 512 [ 242.718950][ T9092] EXT4-fs: Ignoring removed nobh option [ 242.728807][ T9092] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1509: iget: bad i_size value: 38620345925642 [ 242.745774][ T9092] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1509: couldn't read orphan inode 15 (err -117) [ 242.814775][ T9092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.873203][ T9091] tipc: Disabling bearer [ 243.003915][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.180186][ T9107] 9p: Unknown access argument 18446744073709551615: -34 [ 243.216882][ T9107] 9pnet_fd: Insufficient options for proto=fd [ 243.348776][ T10] page_pool_release_retry() stalled pool shutdown: id 43, 1 inflight 60 sec [ 243.440031][ T9115] loop3: detected capacity change from 0 to 1024 [ 243.448073][ T9118] loop5: detected capacity change from 0 to 512 [ 243.464770][ T9115] EXT4-fs: Ignoring removed orlov option [ 243.489467][ T9118] EXT4-fs error (device loop5): __ext4_iget:5426: inode #11: block 1: comm syz.5.1517: invalid block [ 243.502649][ T9115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.512673][ T29] kauditd_printk_skb: 1099 callbacks suppressed [ 243.512716][ T29] audit: type=1326 audit(1768431598.475:21517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.545127][ T29] audit: type=1326 audit(1768431598.475:21518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.568793][ T9118] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1517: couldn't read orphan inode 11 (err -117) [ 243.568727][ T29] audit: type=1326 audit(1768431598.475:21519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.568834][ T29] audit: type=1326 audit(1768431598.475:21520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.621414][ T9118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.627807][ T29] audit: type=1326 audit(1768431598.475:21521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.663565][ T29] audit: type=1326 audit(1768431598.495:21522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.687362][ T29] audit: type=1326 audit(1768431598.495:21523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.710910][ T29] audit: type=1326 audit(1768431598.495:21524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.734612][ T29] audit: type=1326 audit(1768431598.495:21525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.758206][ T29] audit: type=1326 audit(1768431598.495:21526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9119 comm="syz.0.1518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe70b22f749 code=0x7ffc0000 [ 243.865185][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.059436][ T9130] lo speed is unknown, defaulting to 1000 [ 244.148570][ T9130] lo speed is unknown, defaulting to 1000 [ 244.456736][ T9134] loop5: detected capacity change from 0 to 1024 [ 244.476354][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.477669][ T9134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 244.515846][ T9134] EXT4-fs (loop5): unable to read superblock [ 244.575648][ T9137] tipc: Enabled bearer , priority 0 [ 244.597536][ T9136] tipc: Disabling bearer [ 244.617798][ T9140] loop5: detected capacity change from 0 to 512 [ 244.636525][ T9140] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 244.747920][ T9140] EXT4-fs (loop5): 1 orphan inode deleted [ 244.754108][ T9140] EXT4-fs (loop5): 1 truncate cleaned up [ 244.807205][ T9140] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.843562][ T9146] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 244.848929][ T9145] IPVS: stopping master sync thread 9146 ... [ 244.914315][ T9145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 244.942835][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.713976][ T9168] 9p: Unknown access argument 18446744073709551615: -34 [ 245.721913][ T9168] 9pnet_fd: Insufficient options for proto=fd [ 245.913093][ T9173] tipc: Enabled bearer , priority 0 [ 245.930930][ T9172] tipc: Disabling bearer [ 245.961119][ T9176] bridge: RTM_NEWNEIGH with invalid ether address [ 246.055765][ T9176] loop5: detected capacity change from 0 to 8192 [ 246.062863][ T9180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 246.092250][ T9180] netlink: 'syz.4.1538': attribute type 1 has an invalid length. [ 246.102359][ T9182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 246.170202][ T9184] netlink: 'syz.4.1540': attribute type 10 has an invalid length. [ 246.333819][ T9189] bond20: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 246.348793][ T9189] bond20 (unregistering): Released all slaves [ 246.544004][ T9200] 9p: Unknown access argument 18446744073709551615: -34 [ 246.574568][ T9200] 9pnet_fd: Insufficient options for proto=fd [ 246.694823][ T9208] tipc: Enabled bearer , priority 0 [ 246.713540][ T9207] tipc: Disabling bearer [ 246.820358][ T9212] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 246.845345][ T9217] loop5: detected capacity change from 0 to 1024 [ 246.857656][ T9219] netlink: 'syz.4.1552': attribute type 1 has an invalid length. [ 246.876569][ T9217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 246.906558][ T9219] macvlan2: entered promiscuous mode [ 246.911992][ T9219] macvlan2: entered allmulticast mode [ 246.935821][ T9219] bond20: entered promiscuous mode [ 246.953852][ T9219] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 246.962419][ T9219] bond20: left promiscuous mode [ 247.138239][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 247.161833][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 247.181744][ T9237] bond25: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 247.192484][ T9239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1557'. [ 247.201596][ T9239] netlink: 'syz.4.1557': attribute type 1 has an invalid length. [ 247.212491][ T9237] bond25 (unregistering): Released all slaves [ 247.288977][ T9246] 9p: Unknown access argument 18446744073709551615: -34 [ 247.311368][ T9246] 9pnet_fd: Insufficient options for proto=fd [ 247.418315][ T9251] tipc: Enabling of bearer rejected, failed to enable media [ 247.441628][ T9256] tipc: Enabled bearer , priority 0 [ 247.462172][ T9251] loop5: detected capacity change from 0 to 512 [ 247.462424][ T9258] loop4: detected capacity change from 0 to 1024 [ 247.477277][ T9255] tipc: Disabling bearer [ 247.485052][ T9251] EXT4-fs: Ignoring removed nobh option [ 247.485883][ T9258] EXT4-fs: Ignoring removed orlov option [ 247.506775][ T9251] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1561: iget: bad i_size value: 38620345925642 [ 247.537026][ T9258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.550013][ T9251] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1561: couldn't read orphan inode 15 (err -117) [ 247.579084][ T9251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.597361][ T9265] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 247.626240][ T9265] macvlan5: entered promiscuous mode [ 247.631721][ T9265] macvlan5: entered allmulticast mode [ 247.668903][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.677705][ T9265] bond21: entered promiscuous mode [ 247.718183][ T9265] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 247.744346][ T9265] bond21: left promiscuous mode [ 247.816600][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.894999][ T9284] 9p: Unknown access argument 18446744073709551615: -34 [ 247.915626][ T9284] 9pnet_fd: Insufficient options for proto=fd [ 247.966994][ T9289] loop5: detected capacity change from 0 to 1024 [ 247.973904][ T9289] EXT4-fs: inline encryption not supported [ 248.382520][ T9293] lo speed is unknown, defaulting to 1000 [ 248.426142][ T9293] lo speed is unknown, defaulting to 1000 [ 248.499074][ T9289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.633746][ T9300] netlink: 'syz.3.1576': attribute type 1 has an invalid length. [ 248.689707][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.699791][ T29] kauditd_printk_skb: 839 callbacks suppressed [ 248.699805][ T29] audit: type=1400 audit(1768431603.615:22366): avc: denied { ioctl } for pid=9285 comm=77DEA305FF07 path="/134/file1/file1" dev="loop5" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 248.796813][ T9300] bond25: (slave bridge2): making interface the new active one [ 248.807304][ T9300] bond25: (slave bridge2): Enslaving as an active interface with an up link [ 248.819426][ T9302] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1576'. [ 248.902798][ T29] audit: type=1326 audit(1768431603.845:22367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 248.926458][ T29] audit: type=1326 audit(1768431603.845:22368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 248.949168][ T3479] page_pool_release_retry() stalled pool shutdown: id 45, 1 inflight 60 sec [ 248.950257][ T29] audit: type=1326 audit(1768431603.845:22369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 248.982830][ T29] audit: type=1326 audit(1768431603.845:22370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 249.006531][ T29] audit: type=1326 audit(1768431603.845:22371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 249.030350][ T29] audit: type=1326 audit(1768431603.845:22372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 249.054401][ T29] audit: type=1326 audit(1768431603.845:22373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 249.078021][ T29] audit: type=1326 audit(1768431603.845:22374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 249.101835][ T29] audit: type=1326 audit(1768431603.845:22375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.1.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 249.153732][ T9300] macvlan1: entered promiscuous mode [ 249.159277][ T9300] macvlan1: entered allmulticast mode [ 249.165287][ T9300] bond25: entered promiscuous mode [ 249.170692][ T9300] bridge2: entered promiscuous mode [ 249.176386][ T9300] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 249.188392][ T9300] bond25: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 249.210570][ T9300] bond25: left promiscuous mode [ 249.215547][ T9300] bridge2: left promiscuous mode [ 249.230168][ T9308] tipc: Enabling of bearer rejected, failed to enable media [ 249.319254][ T9320] netlink: 'syz.4.1583': attribute type 1 has an invalid length. [ 249.383205][ T9320] macvlan2: entered promiscuous mode [ 249.388559][ T9320] macvlan2: entered allmulticast mode [ 249.420002][ T9320] bond21: entered promiscuous mode [ 249.425548][ T9320] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 249.437858][ T9320] bond21: left promiscuous mode [ 249.508295][ T9334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.551434][ T9337] 9p: Unknown access argument 18446744073709551615: -34 [ 249.559229][ T9337] 9pnet_fd: Insufficient options for proto=fd [ 249.659530][ T9347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1592'. [ 249.668598][ T9347] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1592'. [ 249.703990][ T9349] loop3: detected capacity change from 0 to 1024 [ 249.712530][ T9349] EXT4-fs: Ignoring removed orlov option [ 249.807502][ T9351] lo speed is unknown, defaulting to 1000 [ 249.875032][ T9351] lo speed is unknown, defaulting to 1000 [ 250.033661][ T9349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.210493][ T9358] tipc: Enabled bearer , priority 0 [ 250.226416][ T9360] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 250.234869][ T9358] loop5: detected capacity change from 0 to 512 [ 250.236822][ T5389] tipc: Resetting bearer [ 250.248880][ T9358] EXT4-fs: Ignoring removed nobh option [ 250.264575][ T9358] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1594: iget: bad i_size value: 38620345925642 [ 250.279911][ T9360] bond22: (slave bridge6): making interface the new active one [ 250.289472][ T9358] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1594: couldn't read orphan inode 15 (err -117) [ 250.295339][ T9360] bond22: (slave bridge6): Enslaving as an active interface with an up link [ 250.317061][ T9360] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1595'. [ 250.327051][ T9358] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.333653][ T9360] macvlan2: entered promiscuous mode [ 250.345768][ T9360] macvlan2: entered allmulticast mode [ 250.352773][ T9360] bond22: entered promiscuous mode [ 250.358088][ T9360] bridge6: entered promiscuous mode [ 250.411646][ T9360] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 250.420051][ T9360] bond22: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 250.436299][ T9360] bond22: left promiscuous mode [ 250.441312][ T9360] bridge6: left promiscuous mode [ 250.447679][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.463398][ T9357] tipc: Resetting bearer [ 250.476147][ T9357] tipc: Disabling bearer [ 250.623333][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.052752][ T9377] netlink: 'syz.5.1601': attribute type 1 has an invalid length. [ 251.145933][ T9384] macvlan2: entered promiscuous mode [ 251.151471][ T9384] macvlan2: entered allmulticast mode [ 251.163698][ T9384] bond5: entered promiscuous mode [ 251.169844][ T9384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 251.179327][ T9384] bond5: left promiscuous mode [ 251.188850][ T4080] page_pool_release_retry() stalled pool shutdown: id 46, 1 inflight 60 sec [ 251.293277][ T9379] lo speed is unknown, defaulting to 1000 [ 251.311466][ T9389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1605'. [ 251.395415][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 251.441389][ T9379] lo speed is unknown, defaulting to 1000 [ 251.592611][ T9405] netlink: 'syz.5.1609': attribute type 29 has an invalid length. [ 251.602366][ T9405] netlink: 'syz.5.1609': attribute type 29 has an invalid length. [ 251.610731][ T9399] lo speed is unknown, defaulting to 1000 [ 251.618024][ T9405] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1609'. [ 251.634348][ T9405] loop5: detected capacity change from 0 to 1024 [ 251.643641][ T9405] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.1609: bad orphan inode 134217728 [ 251.655537][ T9405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.666102][ T9399] lo speed is unknown, defaulting to 1000 [ 251.960588][ T9412] loop4: detected capacity change from 0 to 512 [ 251.990119][ T9413] loop3: detected capacity change from 0 to 1024 [ 252.014064][ T9413] EXT4-fs: Ignoring removed orlov option [ 252.359309][ T9413] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 252.419238][ T9412] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 252.427409][ T9412] EXT4-fs (loop4): orphan cleanup on readonly fs [ 252.435878][ T9412] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm )}Y": corrupted inode contents [ 252.447445][ T9412] EXT4-fs (loop4): Remounting filesystem read-only [ 252.454130][ T9412] EXT4-fs (loop4): 1 truncate cleaned up [ 252.490473][ T5389] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.501245][ T5389] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 252.545130][ T9411] loop3: detected capacity change from 0 to 128 [ 252.563007][ T9411] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 252.565575][ T5389] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 252.603781][ T9412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.679504][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.713466][ T9409] lo speed is unknown, defaulting to 1000 [ 252.756168][ T9409] lo speed is unknown, defaulting to 1000 [ 252.901352][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.041741][ T9442] tipc: Enabling of bearer rejected, failed to enable media [ 253.060333][ T9443] 9p: Unknown access argument 18446744073709551615: -34 [ 253.081712][ T9443] 9pnet_fd: Insufficient options for proto=fd [ 253.089470][ T9435] loop3: detected capacity change from 0 to 512 [ 253.118991][ T9435] EXT4-fs: Ignoring removed nobh option [ 253.172541][ T9435] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.1617: iget: bad i_size value: 38620345925642 [ 253.211398][ T9435] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1617: couldn't read orphan inode 15 (err -117) [ 253.224432][ T9435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.329410][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.464380][ T9460] netlink: 'syz.1.1624': attribute type 1 has an invalid length. [ 253.514782][ T9460] 8021q: adding VLAN 0 to HW filter on device bond22 [ 253.546312][ T9463] 8021q: adding VLAN 0 to HW filter on device bond22 [ 253.558541][ T9463] bond22: (slave vxcan3): The slave device specified does not support setting the MAC address [ 253.604579][ T9463] bond22: (slave vxcan3): Error -95 calling set_mac_address [ 253.643105][ T9453] lo speed is unknown, defaulting to 1000 [ 253.685372][ T9460] macvlan5: entered promiscuous mode [ 253.690786][ T9460] macvlan5: entered allmulticast mode [ 253.712396][ T9460] bond22: entered promiscuous mode [ 253.721994][ T29] kauditd_printk_skb: 771 callbacks suppressed [ 253.722012][ T29] audit: type=1400 audit(1768431608.685:23141): avc: denied { read } for pid=9452 comm="syz.0.1621" path="socket:[30089]" dev="sockfs" ino=30089 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.730828][ T9460] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 253.838504][ T29] audit: type=1326 audit(1768431608.785:23142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 253.862318][ T29] audit: type=1326 audit(1768431608.785:23143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 253.885938][ T29] audit: type=1326 audit(1768431608.795:23144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 253.909828][ T29] audit: type=1326 audit(1768431608.795:23145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 253.933357][ T29] audit: type=1326 audit(1768431608.795:23146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 253.957102][ T29] audit: type=1326 audit(1768431608.795:23147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 253.980707][ T29] audit: type=1326 audit(1768431608.795:23148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 254.004236][ T29] audit: type=1326 audit(1768431608.795:23149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 254.027856][ T29] audit: type=1326 audit(1768431608.795:23150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9468 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 254.052081][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1621'. [ 254.072058][ T9460] bond22: left promiscuous mode [ 254.125138][ T9453] lo speed is unknown, defaulting to 1000 [ 254.131153][ T9457] lo speed is unknown, defaulting to 1000 [ 254.181972][ T9457] lo speed is unknown, defaulting to 1000 [ 254.419590][ T9488] 9p: Unknown access argument 18446744073709551615: -34 [ 254.497769][ T9488] 9pnet_fd: Insufficient options for proto=fd [ 254.528858][ T9492] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 254.563813][ T9492] bond26: (slave bridge3): making interface the new active one [ 254.573031][ T9492] bond26: (slave bridge3): Enslaving as an active interface with an up link [ 254.586825][ T9492] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1633'. [ 254.608593][ T9492] macvlan1: entered promiscuous mode [ 254.613988][ T9492] macvlan1: entered allmulticast mode [ 254.623611][ T9492] bond26: entered promiscuous mode [ 254.628896][ T9492] bridge3: entered promiscuous mode [ 254.639871][ T9490] loop5: detected capacity change from 0 to 128 [ 254.709762][ T9492] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 254.733471][ T9492] bond26: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 254.869849][ T9492] bond26: left promiscuous mode [ 254.874884][ T9492] bridge3: left promiscuous mode [ 255.395940][ T9507] netlink: 'syz.4.1638': attribute type 1 has an invalid length. [ 255.421788][ T9508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1637'. [ 255.455463][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1638'. [ 255.473492][ T9502] lo speed is unknown, defaulting to 1000 [ 255.491230][ T9508] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1637'. [ 255.548966][ T9507] macvlan2: entered promiscuous mode [ 255.554387][ T9507] macvlan2: entered allmulticast mode [ 255.586249][ T9507] bond23: entered promiscuous mode [ 255.621624][ T9507] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 255.680379][ T9507] bond23: left promiscuous mode [ 255.712728][ T9502] lo speed is unknown, defaulting to 1000 [ 256.801402][ T9537] netlink: 'syz.3.1647': attribute type 1 has an invalid length. [ 256.862553][ T9539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1647'. [ 256.871703][ T9539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1647'. [ 257.303897][ T9546] loop5: detected capacity change from 0 to 512 [ 257.328503][ T9546] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 257.338673][ T9548] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 257.350347][ T9548] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 257.401333][ T9551] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1648'. [ 257.483518][ T9546] EXT4-fs (loop5): 1 orphan inode deleted [ 257.489350][ T9546] EXT4-fs (loop5): 1 truncate cleaned up [ 257.592928][ T9546] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.745078][ T9560] loop3: detected capacity change from 0 to 2048 [ 257.951319][ T9560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.980059][ T9560] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 258.009773][ T9560] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 258.022133][ T9560] EXT4-fs (loop3): This should not happen!! Data will be lost [ 258.022133][ T9560] [ 258.031817][ T9560] EXT4-fs (loop3): Total free blocks count 0 [ 258.037859][ T9560] EXT4-fs (loop3): Free/Dirty block details [ 258.043886][ T9560] EXT4-fs (loop3): free_blocks=2415919104 [ 258.049835][ T9560] EXT4-fs (loop3): dirty_blocks=16 [ 258.054972][ T9560] EXT4-fs (loop3): Block reservation details [ 258.061057][ T9560] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 258.081933][ T9563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1653'. [ 258.101123][ T9563] IPVS: Unknown mcast interface: ipvlan1 [ 258.170362][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.775034][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.807914][ T29] kauditd_printk_skb: 631 callbacks suppressed [ 258.807943][ T29] audit: type=1326 audit(1768431613.765:23782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 258.879886][ T29] audit: type=1326 audit(1768431613.805:23783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 258.903637][ T29] audit: type=1326 audit(1768431613.805:23784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 258.927224][ T29] audit: type=1326 audit(1768431613.805:23785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 258.950945][ T29] audit: type=1326 audit(1768431613.805:23786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 258.974553][ T29] audit: type=1326 audit(1768431613.805:23787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 258.998148][ T29] audit: type=1326 audit(1768431613.805:23788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 259.021803][ T29] audit: type=1326 audit(1768431613.805:23789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 259.045622][ T29] audit: type=1326 audit(1768431613.805:23790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 259.069300][ T29] audit: type=1326 audit(1768431613.805:23791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9572 comm="syz.5.1656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 259.340589][ T9585] netlink: 'syz.5.1660': attribute type 4 has an invalid length. [ 259.355369][ T9587] netlink: 'syz.1.1661': attribute type 1 has an invalid length. [ 259.392282][ T9583] SELinux: policydb magic number 0x18 does not match expected magic number 0xf97cff8c [ 259.404153][ T3479] lo speed is unknown, defaulting to 1000 [ 259.404424][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1661'. [ 259.410332][ T3479] syz2: Port: 1 Link DOWN [ 259.419014][ T9587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1661'. [ 259.446412][ T9583] SELinux: failed to load policy [ 259.556359][ T9594] loop5: detected capacity change from 0 to 1024 [ 259.588712][ T9594] EXT4-fs: Ignoring removed orlov option [ 259.603716][ T9598] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1665'. [ 259.633300][ T9594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.808779][ T9603] loop3: detected capacity change from 0 to 128 [ 260.165602][ T9618] 9p: Unknown access argument 18446744073709551615: -34 [ 260.198892][ T9618] 9pnet_fd: Insufficient options for proto=fd [ 260.553338][ T9601] loop4: detected capacity change from 0 to 512 [ 260.616296][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.684209][ T9601] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.710620][ T9631] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1676'. [ 261.549916][ T9646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1680'. [ 261.608221][ T9652] netlink: 'syz.0.1681': attribute type 29 has an invalid length. [ 261.620318][ T9652] netlink: 'syz.0.1681': attribute type 29 has an invalid length. [ 261.630975][ T9652] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1681'. [ 262.071751][ T9646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1680'. [ 262.248743][ T9661] siw: device registration error -23 [ 262.571174][ T9664] lo speed is unknown, defaulting to 1000 [ 262.633875][ T9664] lo speed is unknown, defaulting to 1000 [ 262.875967][ T9669] netlink: 'syz.1.1686': attribute type 27 has an invalid length. [ 262.888877][ T9669] tipc: Resetting bearer [ 262.919005][ T9669] veth0_to_team: left promiscuous mode [ 262.928302][ T9669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.943854][ T9669] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 262.957244][ T9669] ipvlan0: left allmulticast mode [ 262.962596][ T9669] veth0_vlan: left allmulticast mode [ 262.977382][ T9669] macvlan2: left promiscuous mode [ 262.982777][ T9669] macvlan2: left allmulticast mode [ 262.988156][ T9669] macvlan3: left promiscuous mode [ 262.993256][ T9669] macvlan3: left allmulticast mode [ 262.998903][ T9669] macvlan4: left promiscuous mode [ 263.004260][ T9669] macvlan4: left allmulticast mode [ 263.010725][ T9669] ip6gre1: left allmulticast mode [ 263.016756][ T9669] ip6gre2: left promiscuous mode [ 263.021863][ T9669] ip6gre2: left allmulticast mode [ 263.028096][ T9669] gretap2: left promiscuous mode [ 263.058546][ T5379] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.087471][ T9675] wireguard0: entered promiscuous mode [ 263.093103][ T9675] wireguard0: entered allmulticast mode [ 263.138870][ T5379] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.150755][ T5379] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.159964][ T9681] 9p: Unknown access argument 18446744073709551615: -34 [ 263.174466][ T5379] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.186680][ T9681] 9pnet_fd: Insufficient options for proto=fd [ 263.254674][ T9688] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 263.299271][ T9688] bond24: (slave bridge7): making interface the new active one [ 263.307750][ T9688] bond24: (slave bridge7): Enslaving as an active interface with an up link [ 263.318543][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 263.327651][ T9688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1693'. [ 263.346981][ T9688] macvlan2: entered promiscuous mode [ 263.352399][ T9688] macvlan2: entered allmulticast mode [ 263.365068][ T9688] bond24: entered promiscuous mode [ 263.370470][ T9688] bridge7: entered promiscuous mode [ 263.380458][ T9688] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.388707][ T9688] bond24: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 263.413514][ T9697] loop3: detected capacity change from 0 to 2048 [ 263.420184][ T9688] bond24: left promiscuous mode [ 263.425089][ T9688] bridge7: left promiscuous mode [ 263.440661][ T9697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.489729][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.525489][ T9703] netlink: 'syz.3.1697': attribute type 10 has an invalid length. [ 263.557144][ T9703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.565310][ T9703] team0: Port device bond0 added [ 263.602108][ T9705] tipc: Enabling of bearer rejected, failed to enable media [ 263.613918][ T9705] loop4: detected capacity change from 0 to 512 [ 263.620670][ T9705] EXT4-fs: Ignoring removed nobh option [ 263.637439][ T9705] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.1698: iget: bad i_size value: 38620345925642 [ 263.669007][ T9705] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1698: couldn't read orphan inode 15 (err -117) [ 263.682932][ T9712] team0: Port device bond0 removed [ 263.692258][ T9705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.735436][ T9712] bond20: (slave bridge0): Releasing active interface [ 263.768514][ T9712] bond25: (slave bridge2): Releasing active interface [ 263.829773][ T9712] bond26: (slave bridge3): Releasing active interface [ 263.851007][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 263.851025][ T29] audit: type=1400 audit(1768431618.815:24417): avc: denied { write } for pid=9716 comm="syz.5.1700" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 263.923201][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.949860][ T29] audit: type=1326 audit(1768431618.905:24418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 263.974096][ T29] audit: type=1326 audit(1768431618.905:24419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 263.997827][ T29] audit: type=1326 audit(1768431618.905:24420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 264.021660][ T29] audit: type=1326 audit(1768431618.905:24421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f642796df90 code=0x7ffc0000 [ 264.045357][ T29] audit: type=1326 audit(1768431618.905:24422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6427970f77 code=0x7ffc0000 [ 264.068997][ T29] audit: type=1326 audit(1768431618.905:24423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 264.092502][ T29] audit: type=1326 audit(1768431618.905:24424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f6427970f77 code=0x7ffc0000 [ 264.116049][ T29] audit: type=1326 audit(1768431618.905:24425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f642796e3aa code=0x7ffc0000 [ 264.139777][ T29] audit: type=1326 audit(1768431618.905:24426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9716 comm="syz.5.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 264.291762][ T9714] lo speed is unknown, defaulting to 1000 [ 264.612398][ T9732] 9p: Unknown access argument 18446744073709551615: -34 [ 264.654618][ T9732] 9pnet_fd: Insufficient options for proto=fd [ 264.893841][ T9714] lo speed is unknown, defaulting to 1000 [ 265.057698][ T9741] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 265.109580][ T9745] loop4: detected capacity change from 0 to 1024 [ 265.127243][ T9745] EXT4-fs: Ignoring removed orlov option [ 265.167468][ T9745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.382816][ T9753] tipc: Enabling of bearer rejected, failed to enable media [ 265.651051][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.729241][ T9739] loop5: detected capacity change from 0 to 512 [ 265.834949][ T9739] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.867194][ T9770] 9p: Unknown access argument 18446744073709551615: -34 [ 265.939909][ T9761] 9pnet_fd: Insufficient options for proto=fd [ 265.956269][ T9775] 9p: Unknown access argument 18446744073709551615: -34 [ 266.020539][ T9772] 9pnet_fd: Insufficient options for proto=fd [ 266.067502][ T9779] loop4: detected capacity change from 0 to 256 [ 266.101200][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1723'. [ 266.124561][ T9781] net_ratelimit: 55 callbacks suppressed [ 266.124581][ T9781] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 266.140506][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1723'. [ 266.156091][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 266.644230][ T9791] lo speed is unknown, defaulting to 1000 [ 266.746500][ T9791] lo speed is unknown, defaulting to 1000 [ 266.862325][ T9799] tipc: Enabling of bearer rejected, failed to enable media [ 266.901864][ T9802] netlink: 'syz.5.1729': attribute type 1 has an invalid length. [ 266.936133][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1729'. [ 266.945299][ T9802] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1729'. [ 267.104051][ T9815] 9p: Unknown access argument 18446744073709551615: -34 [ 267.113978][ T9816] netlink: 'syz.5.1735': attribute type 1 has an invalid length. [ 267.125278][ T9815] 9pnet_fd: Insufficient options for proto=fd [ 267.145134][ T9820] 9p: Unknown access argument 18446744073709551615: -34 [ 267.159013][ T9816] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.183408][ T9809] 9pnet_fd: Insufficient options for proto=fd [ 267.198446][ T9821] 8021q: adding VLAN 0 to HW filter on device bond7 [ 267.212920][ T9821] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 267.240930][ T9821] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 267.280428][ T9816] gretap3: entered promiscuous mode [ 267.299999][ T9816] bond7: (slave gretap3): making interface the new active one [ 267.317757][ T9816] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 267.333807][ T9829] macvlan2: entered promiscuous mode [ 267.339204][ T9829] macvlan2: entered allmulticast mode [ 267.361389][ T9829] bond7: entered promiscuous mode [ 267.366888][ T9829] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 267.381326][ T9829] bond7: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 267.393986][ T9829] bond7: left promiscuous mode [ 267.469208][ T9834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1740'. [ 267.520880][ T9840] lo speed is unknown, defaulting to 1000 [ 267.556945][ T9840] lo speed is unknown, defaulting to 1000 [ 267.822457][ T9854] loop4: detected capacity change from 0 to 1024 [ 267.829791][ T9854] EXT4-fs: Ignoring removed orlov option [ 267.838145][ T9854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.170320][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1748'. [ 268.221664][ T9864] 9p: Bad value for 'port' [ 268.230472][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.236456][ T9864] blktrace: Concurrent blktraces are not allowed on loop2 [ 268.463204][ T9871] loop5: detected capacity change from 0 to 164 [ 268.481379][ T9873] loop4: detected capacity change from 0 to 128 [ 268.569282][ T9875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1753'. [ 268.607585][ T9877] bridge5: entered promiscuous mode [ 268.612891][ T9877] bridge5: entered allmulticast mode [ 268.680690][ T9877] team0: Port device bridge5 added [ 268.823930][ T9888] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 269.160708][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 269.160724][ T29] audit: type=1326 audit(1768431624.125:25215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.240953][ T29] audit: type=1326 audit(1768431624.125:25216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.264946][ T29] audit: type=1326 audit(1768431624.125:25217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.288667][ T29] audit: type=1326 audit(1768431624.125:25218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.312228][ T29] audit: type=1326 audit(1768431624.125:25219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.336094][ T29] audit: type=1326 audit(1768431624.125:25220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.359855][ T29] audit: type=1326 audit(1768431624.125:25221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.383646][ T29] audit: type=1326 audit(1768431624.125:25222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.407344][ T29] audit: type=1326 audit(1768431624.125:25223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.426312][ T9893] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1758'. [ 269.430986][ T29] audit: type=1326 audit(1768431624.125:25224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9883 comm="syz.1.1755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 269.529840][ T9892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1758'. [ 269.541621][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 269.640463][ T9893] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1758'. [ 269.769512][ T9903] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1763'. [ 269.826782][ T9909] loop4: detected capacity change from 0 to 1024 [ 269.849216][ T9909] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.862335][ T9909] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 269.879039][ T9909] System zones: 0-1, 3-36 [ 269.892370][ T9909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.912333][ T9912] lo speed is unknown, defaulting to 1000 [ 269.918245][ T9912] lo speed is unknown, defaulting to 1000 [ 269.936305][ T9909] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 269.945639][ T9912] lo speed is unknown, defaulting to 1000 [ 269.961618][ T9912] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 269.976792][ T9912] lo speed is unknown, defaulting to 1000 [ 269.982956][ T9912] lo speed is unknown, defaulting to 1000 [ 269.998833][ T9912] lo speed is unknown, defaulting to 1000 [ 270.000779][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.005568][ T9912] lo speed is unknown, defaulting to 1000 [ 270.050379][ T9912] lo speed is unknown, defaulting to 1000 [ 270.075805][ T9912] lo speed is unknown, defaulting to 1000 [ 270.092121][ T9912] lo speed is unknown, defaulting to 1000 [ 270.218424][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1767'. [ 270.240180][ T9929] netlink: 'syz.5.1767': attribute type 1 has an invalid length. [ 270.247973][ T9929] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1767'. [ 270.721564][ T9935] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 270.991912][ T9945] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 271.017549][ T9948] 9p: Unknown access argument 18446744073709551615: -34 [ 271.052988][ T9948] 9pnet_fd: Insufficient options for proto=fd [ 271.070496][ T9949] loop5: detected capacity change from 0 to 512 [ 271.123870][ T9949] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 271.333300][ T9949] EXT4-fs (loop5): 1 truncate cleaned up [ 271.347765][ T9949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.446256][ T9954] lo speed is unknown, defaulting to 1000 [ 271.511185][ T9954] lo speed is unknown, defaulting to 1000 [ 271.523916][ T9954] lo speed is unknown, defaulting to 1000 [ 271.536691][ T9962] lo speed is unknown, defaulting to 1000 [ 271.597388][ T9962] lo speed is unknown, defaulting to 1000 [ 271.620519][ T9962] lo speed is unknown, defaulting to 1000 [ 271.885643][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.895929][ T9962] syz.4.1780 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 271.908054][ T9962] Invalid ELF header magic: != ELF [ 271.953302][ T9972] loop5: detected capacity change from 0 to 1024 [ 271.974319][ T9972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.982541][ T9973] 9p: Unknown access argument 18446744073709551615: -34 [ 271.995528][ T9972] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 272.007541][ T9973] 9pnet_fd: Insufficient options for proto=fd [ 272.018528][ T9972] System zones: 0-1, 3-36 [ 272.029772][ T9972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.113455][ T6632] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.125193][ T9982] siw: device registration error -23 [ 272.134769][ T9982] syz!: rxe_newlink: already configured on team_slave_0 [ 272.281889][ T9989] lo speed is unknown, defaulting to 1000 [ 272.318691][ T9989] lo speed is unknown, defaulting to 1000 [ 272.325057][ T9989] lo speed is unknown, defaulting to 1000 [ 272.434981][ T9977] delete_channel: no stack [ 272.582784][ T9999] netlink: 'syz.3.1795': attribute type 1 has an invalid length. [ 272.636910][ T9999] __nla_validate_parse: 4 callbacks suppressed [ 272.636925][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1795'. [ 272.652213][ T9999] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1795'. [ 272.728366][T10016] netlink: 'syz.5.1802': attribute type 1 has an invalid length. [ 272.752013][T10016] bond8: (slave bridge6): making interface the new active one [ 272.760752][T10016] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 272.783822][T10016] macvlan2: entered promiscuous mode [ 272.789742][T10016] macvlan2: entered allmulticast mode [ 272.798158][T10016] bond8: entered promiscuous mode [ 272.803339][T10016] bridge6: entered promiscuous mode [ 272.809486][T10016] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 272.817636][T10016] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 272.834269][T10016] bond8: left promiscuous mode [ 272.839188][T10016] bridge6: left promiscuous mode [ 272.917840][T10017] lo speed is unknown, defaulting to 1000 [ 272.956700][T10017] lo speed is unknown, defaulting to 1000 [ 272.962892][T10017] lo speed is unknown, defaulting to 1000 [ 273.040840][T10021] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1801'. [ 273.050606][T10014] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1801'. [ 273.487927][T10032] serio: Serial port ptm1 [ 273.736438][T10047] netlink: 'syz.1.1811': attribute type 1 has an invalid length. [ 273.805479][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1811'. [ 273.814599][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1811'. [ 273.953183][T10043] lo speed is unknown, defaulting to 1000 [ 274.066231][T10043] lo speed is unknown, defaulting to 1000 [ 274.083686][T10043] lo speed is unknown, defaulting to 1000 [ 274.171373][ T29] kauditd_printk_skb: 1609 callbacks suppressed [ 274.171392][ T29] audit: type=1326 audit(1768431629.125:26834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f08949b65e7 code=0x7ffc0000 [ 274.261033][ T29] audit: type=1326 audit(1768431629.135:26835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f089495b829 code=0x7ffc0000 [ 274.284692][ T29] audit: type=1326 audit(1768431629.135:26836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 274.308452][ T29] audit: type=1326 audit(1768431629.135:26837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 274.332131][ T29] audit: type=1326 audit(1768431629.135:26838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 274.357707][ T29] audit: type=1326 audit(1768431629.135:26839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 274.381327][ T29] audit: type=1400 audit(1768431629.145:26840): avc: denied { mount } for pid=10064 comm="syz.5.1818" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=0 [ 274.403834][ T29] audit: type=1326 audit(1768431629.165:26841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 274.427535][ T29] audit: type=1326 audit(1768431629.165:26842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08949bf749 code=0x7ffc0000 [ 274.447690][T10068] lo speed is unknown, defaulting to 1000 [ 274.451303][ T29] audit: type=1326 audit(1768431629.175:26843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10073 comm="syz.3.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f08949f2005 code=0x7ffc0000 [ 274.634506][T10068] lo speed is unknown, defaulting to 1000 [ 274.650955][T10078] netlink: 'syz.0.1822': attribute type 39 has an invalid length. [ 274.659438][T10068] lo speed is unknown, defaulting to 1000 [ 274.744551][T10084] netlink: 'syz.0.1825': attribute type 1 has an invalid length. [ 274.797600][T10084] bond14: (slave bridge6): making interface the new active one [ 274.814788][T10084] bond14: (slave bridge6): Enslaving as an active interface with an up link [ 274.854001][T10089] macvlan3: entered promiscuous mode [ 274.859397][T10089] macvlan3: entered allmulticast mode [ 274.881726][T10089] bond14: entered promiscuous mode [ 274.887042][T10089] bridge6: entered promiscuous mode [ 274.933342][T10089] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 274.967980][T10089] bond14: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 275.021435][T10095] capability: warning: `syz.3.1828' uses 32-bit capabilities (legacy support in use) [ 275.031452][T10089] bond14: left promiscuous mode [ 275.036522][T10089] bridge6: left promiscuous mode [ 275.171974][T10102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1829'. [ 275.235526][T10093] lo speed is unknown, defaulting to 1000 [ 275.404259][T10093] lo speed is unknown, defaulting to 1000 [ 275.427104][T10093] lo speed is unknown, defaulting to 1000 [ 275.466724][T10105] lo speed is unknown, defaulting to 1000 [ 275.618912][T10111] lo speed is unknown, defaulting to 1000 [ 275.618909][T10105] lo speed is unknown, defaulting to 1000 [ 275.619830][T10105] lo speed is unknown, defaulting to 1000 [ 275.712842][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 275.776290][T10111] lo speed is unknown, defaulting to 1000 [ 275.802378][T10111] lo speed is unknown, defaulting to 1000 [ 275.832335][T10114] lo speed is unknown, defaulting to 1000 [ 275.968262][T10128] netlink: 'syz.3.1838': attribute type 1 has an invalid length. [ 275.978997][T10114] lo speed is unknown, defaulting to 1000 [ 275.985149][T10114] lo speed is unknown, defaulting to 1000 [ 276.049472][T10130] bond29: (slave bridge5): making interface the new active one [ 276.068128][T10130] bond29: (slave bridge5): Enslaving as an active interface with an up link [ 276.097920][T10128] macvlan1: entered promiscuous mode [ 276.103538][T10128] macvlan1: entered allmulticast mode [ 276.129123][T10128] bond29: entered promiscuous mode [ 276.134330][T10128] bridge5: entered promiscuous mode [ 276.144749][T10128] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 276.164771][T10128] bond29: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 276.199877][T10128] bond29: left promiscuous mode [ 276.204839][T10128] bridge5: left promiscuous mode [ 276.315017][T10137] netlink: 'syz.5.1841': attribute type 1 has an invalid length. [ 276.376659][T10144] bond9: (slave bridge7): making interface the new active one [ 276.387066][T10146] netlink: 'syz.4.1846': attribute type 1 has an invalid length. [ 276.395640][T10144] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 276.407942][T10147] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.426777][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1846'. [ 276.435931][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1846'. [ 276.447176][T10137] macvlan2: entered promiscuous mode [ 276.452604][T10137] macvlan2: entered allmulticast mode [ 276.458545][T10137] bond9: entered promiscuous mode [ 276.463685][T10137] bridge7: entered promiscuous mode [ 276.477161][T10137] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 276.492300][T10137] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 276.521852][T10137] bond9: left promiscuous mode [ 276.526686][T10137] bridge7: left promiscuous mode [ 276.711633][T10157] $Hÿ: renamed from bond0 (while UP) [ 276.721157][T10157] $Hÿ: entered promiscuous mode [ 276.726234][T10157] bond_slave_0: entered promiscuous mode [ 276.732033][T10157] bond_slave_1: entered promiscuous mode [ 276.737930][T10157] dummy0: entered promiscuous mode [ 276.797354][T10164] lo speed is unknown, defaulting to 1000 [ 276.835943][T10164] lo speed is unknown, defaulting to 1000 [ 276.842292][T10164] lo speed is unknown, defaulting to 1000 [ 276.882947][T10170] netlink: 'syz.5.1853': attribute type 33 has an invalid length. [ 276.928148][T10172] netlink: 'syz.4.1855': attribute type 1 has an invalid length. [ 276.969867][T10172] bond0: (slave bridge8): making interface the new active one [ 276.986648][T10172] bond0: (slave bridge8): Enslaving as an active interface with an up link [ 277.032492][T10172] macvlan2: entered promiscuous mode [ 277.037844][T10172] macvlan2: entered allmulticast mode [ 277.059206][T10172] bond0: entered promiscuous mode [ 277.064309][T10172] bridge8: entered promiscuous mode [ 277.080427][T10172] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 277.093968][T10172] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 277.127661][T10172] bond0: left promiscuous mode [ 277.132509][T10172] bridge8: left promiscuous mode [ 277.221129][T10179] all: renamed from bridge_slave_0 (while UP) [ 277.236676][T10176] lo speed is unknown, defaulting to 1000 [ 277.304653][T10185] netlink: 'syz.4.1859': attribute type 1 has an invalid length. [ 277.334015][T10176] lo speed is unknown, defaulting to 1000 [ 277.345495][T10189] netlink: 'syz.3.1861': attribute type 1 has an invalid length. [ 277.365542][T10176] lo speed is unknown, defaulting to 1000 [ 277.412002][T10189] bond30: (slave bridge6): making interface the new active one [ 277.429482][T10189] bond30: (slave bridge6): Enslaving as an active interface with an up link [ 277.474228][T10189] macvlan1: entered promiscuous mode [ 277.479614][T10189] macvlan1: entered allmulticast mode [ 277.501710][T10189] bond30: entered promiscuous mode [ 277.506947][T10189] bridge6: entered promiscuous mode [ 277.539678][T10189] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 277.554132][T10189] bond30: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 277.602176][T10189] bond30: left promiscuous mode [ 277.607169][T10189] bridge6: left promiscuous mode [ 277.675992][T10209] macsec0: entered promiscuous mode [ 277.688715][T10209] dummy0: entered promiscuous mode [ 277.694070][T10209] macsec0: entered allmulticast mode [ 277.713356][T10209] dummy0: entered allmulticast mode [ 277.723645][T10214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 277.984974][T10236] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 278.021199][T10236] bond31: (slave bridge7): making interface the new active one [ 278.038361][T10236] bond31: (slave bridge7): Enslaving as an active interface with an up link [ 278.079240][T10236] macvlan1: entered promiscuous mode [ 278.084694][T10236] macvlan1: entered allmulticast mode [ 278.090972][T10236] bond31: entered promiscuous mode [ 278.096265][T10236] bridge7: entered promiscuous mode [ 278.103950][T10236] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 278.112185][T10236] bond31: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 278.128781][T10236] bond31: left promiscuous mode [ 278.133686][T10236] bridge7: left promiscuous mode [ 278.205014][T10238] lo speed is unknown, defaulting to 1000 [ 278.305639][T10238] lo speed is unknown, defaulting to 1000 [ 278.324301][T10238] lo speed is unknown, defaulting to 1000 [ 278.569507][T10256] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 279.132082][T10272] lo speed is unknown, defaulting to 1000 [ 279.309993][T10272] lo speed is unknown, defaulting to 1000 [ 279.326160][T10272] lo speed is unknown, defaulting to 1000 [ 279.340637][ T29] kauditd_printk_skb: 1152 callbacks suppressed [ 279.340655][ T29] audit: type=1400 audit(1768431634.305:27996): avc: denied { create } for pid=10276 comm="syz.4.1892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 279.520954][T10281] netlink: 'syz.3.1893': attribute type 1 has an invalid length. [ 279.571484][T10281] bond32: (slave bridge8): making interface the new active one [ 279.580254][T10281] bond32: (slave bridge8): Enslaving as an active interface with an up link [ 279.590561][ T29] audit: type=1400 audit(1768431634.555:27997): avc: denied { create } for pid=10280 comm="syz.3.1893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=0 [ 279.614773][T10281] macvlan1: entered promiscuous mode [ 279.620253][T10281] macvlan1: entered allmulticast mode [ 279.626568][T10281] bond32: entered promiscuous mode [ 279.631857][T10281] bridge8: entered promiscuous mode [ 279.637546][T10281] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 279.644558][ T29] audit: type=1400 audit(1768431634.575:27998): avc: denied { read write } for pid=6632 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 279.673393][T10281] bond32: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 279.689743][T10281] bond32: left promiscuous mode [ 279.694713][T10281] bridge8: left promiscuous mode [ 279.700845][ T29] audit: type=1326 audit(1768431634.665:27999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10283 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 279.765952][ T29] audit: type=1326 audit(1768431634.685:28000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10283 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 279.789605][ T29] audit: type=1400 audit(1768431634.685:28001): avc: denied { prog_load } for pid=10283 comm="syz.5.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 279.809311][ T29] audit: type=1326 audit(1768431634.685:28002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10283 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 279.833106][ T29] audit: type=1326 audit(1768431634.685:28003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10283 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 279.856736][ T29] audit: type=1326 audit(1768431634.685:28004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10283 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 279.880610][ T29] audit: type=1326 audit(1768431634.685:28005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10283 comm="syz.5.1894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 280.043644][T10293] netlink: 'syz.1.1908': attribute type 1 has an invalid length. [ 280.178544][T10300] bond25: (slave bridge5): making interface the new active one [ 280.222106][T10300] bond25: (slave bridge5): Enslaving as an active interface with an up link [ 280.243533][T10303] macvlan5: entered promiscuous mode [ 280.248960][T10303] macvlan5: entered allmulticast mode [ 280.289825][T10303] bond25: entered promiscuous mode [ 280.295013][T10303] bridge5: entered promiscuous mode [ 280.322577][T10303] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 280.339872][T10303] bond25: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 280.395809][T10303] bond25: left promiscuous mode [ 280.400823][T10303] bridge5: left promiscuous mode [ 280.426425][T10298] lo speed is unknown, defaulting to 1000 [ 280.533477][T10304] __nla_validate_parse: 3 callbacks suppressed [ 280.533496][T10304] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1899'. [ 280.583669][T10297] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1899'. [ 280.626980][T10298] lo speed is unknown, defaulting to 1000 [ 280.653779][T10298] lo speed is unknown, defaulting to 1000 [ 281.254731][T10333] lo speed is unknown, defaulting to 1000 [ 281.265404][T10337] netlink: 'syz.0.1912': attribute type 1 has an invalid length. [ 281.343867][T10339] bond15: (slave bridge7): making interface the new active one [ 281.371909][T10339] bond15: (slave bridge7): Enslaving as an active interface with an up link [ 281.380803][T10333] lo speed is unknown, defaulting to 1000 [ 281.387138][T10333] lo speed is unknown, defaulting to 1000 [ 281.421292][T10337] macvlan3: entered promiscuous mode [ 281.426730][T10337] macvlan3: entered allmulticast mode [ 281.449905][T10337] bond15: entered promiscuous mode [ 281.455119][T10337] bridge7: entered promiscuous mode [ 281.478980][T10337] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 281.509304][T10337] bond15: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 281.542477][T10337] bond15: left promiscuous mode [ 281.547551][T10337] bridge7: left promiscuous mode [ 281.967624][T10357] lo speed is unknown, defaulting to 1000 [ 282.090261][T10358] lo speed is unknown, defaulting to 1000 [ 282.194401][ T9] lo speed is unknown, defaulting to 1000 [ 282.194436][T10357] lo speed is unknown, defaulting to 1000 [ 282.195328][T10357] lo speed is unknown, defaulting to 1000 [ 282.201038][ T9] syz1: Port: 1 Link DOWN [ 282.236892][ T5365] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.245632][T10358] lo speed is unknown, defaulting to 1000 [ 282.258881][ T5365] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.267535][ T10] lo speed is unknown, defaulting to 1000 [ 282.280864][T10358] lo speed is unknown, defaulting to 1000 [ 282.280872][ T5365] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.301791][ T5365] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.518907][T10380] bond16: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 282.531046][T10380] bond16 (unregistering): Released all slaves [ 282.832322][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1937'. [ 282.841523][T10405] netlink: 'syz.1.1937': attribute type 7 has an invalid length. [ 282.849480][T10405] netlink: 'syz.1.1937': attribute type 8 has an invalid length. [ 282.857291][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1937'. [ 282.901462][T10399] lo speed is unknown, defaulting to 1000 [ 283.022748][T10399] lo speed is unknown, defaulting to 1000 [ 283.060837][T10399] lo speed is unknown, defaulting to 1000 [ 283.145319][T10408] lo speed is unknown, defaulting to 1000 [ 283.265784][T10408] lo speed is unknown, defaulting to 1000 [ 283.289462][T10408] lo speed is unknown, defaulting to 1000 [ 283.546320][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 283.632900][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 283.647882][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 283.687115][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1947'. [ 283.768846][T10437] netlink: 'syz.4.1948': attribute type 1 has an invalid length. [ 283.887469][T10439] bond27: (slave bridge9): making interface the new active one [ 283.918329][T10439] bond27: (slave bridge9): Enslaving as an active interface with an up link [ 283.947920][T10437] macvlan2: entered promiscuous mode [ 283.953391][T10437] macvlan2: entered allmulticast mode [ 284.010895][T10437] bond27: entered promiscuous mode [ 284.016118][T10437] bridge9: entered promiscuous mode [ 284.052187][T10437] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 284.082493][T10437] bond27: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 284.141260][T10437] bond27: left promiscuous mode [ 284.146193][T10437] bridge9: left promiscuous mode [ 284.348856][ T29] kauditd_printk_skb: 1686 callbacks suppressed [ 284.348870][ T29] audit: type=1326 audit(1768431639.315:29692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 284.406966][T10453] lo speed is unknown, defaulting to 1000 [ 284.416342][T10467] audit: audit_backlog=65 > audit_backlog_limit=64 [ 284.418726][ T29] audit: type=1326 audit(1768431639.315:29693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 284.423218][T10467] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 284.446640][ T29] audit: type=1400 audit(1768431639.315:29694): avc: denied { prog_load } for pid=10461 comm="syz.1.1959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 284.454429][T10467] audit: backlog limit exceeded [ 284.473717][ T29] audit: type=1326 audit(1768431639.315:29695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 284.502392][ T29] audit: type=1326 audit(1768431639.315:29696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10461 comm="syz.1.1959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1ea1f749 code=0x7ffc0000 [ 284.526012][ T29] audit: type=1326 audit(1768431639.325:29697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 284.549888][ T29] audit: type=1326 audit(1768431639.325:29698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10454 comm="syz.5.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 284.579319][T10453] lo speed is unknown, defaulting to 1000 [ 284.642789][T10453] lo speed is unknown, defaulting to 1000 [ 284.719104][T10460] lo speed is unknown, defaulting to 1000 [ 284.727188][T10479] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=10479 comm=syz.3.1964 [ 284.941238][T10460] lo speed is unknown, defaulting to 1000 [ 284.964940][T10460] lo speed is unknown, defaulting to 1000 [ 284.983503][T10483] lo speed is unknown, defaulting to 1000 [ 285.131454][T10483] lo speed is unknown, defaulting to 1000 [ 285.159128][T10483] lo speed is unknown, defaulting to 1000 [ 285.353389][T10504] netlink: 'syz.5.1972': attribute type 1 has an invalid length. [ 285.418633][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1972'. [ 285.427630][T10504] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1972'. [ 285.768668][T10528] netlink: 'syz.3.1978': attribute type 13 has an invalid length. [ 286.073593][T10542] netlink: 'syz.0.1987': attribute type 1 has an invalid length. [ 286.099909][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1987'. [ 286.108872][T10542] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1987'. [ 286.682415][T10560] lo speed is unknown, defaulting to 1000 [ 286.807501][T10560] lo speed is unknown, defaulting to 1000 [ 286.814061][T10564] bond0: (slave bond_slave_0): Releasing backup interface [ 286.830971][T10564] bond0: (slave bond_slave_1): Releasing backup interface [ 286.848985][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.856662][T10564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.873150][T10560] lo speed is unknown, defaulting to 1000 [ 286.950313][T10566] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 286.992050][T10566] bond26: (slave bridge6): making interface the new active one [ 287.010523][T10566] bond26: (slave bridge6): Enslaving as an active interface with an up link [ 287.051900][T10566] macvlan5: entered promiscuous mode [ 287.057324][T10566] macvlan5: entered allmulticast mode [ 287.063723][T10566] bond26: entered promiscuous mode [ 287.068989][T10566] bridge6: entered promiscuous mode [ 287.075046][T10566] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 287.083510][T10566] bond26: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 287.102034][T10566] bond26: left promiscuous mode [ 287.106988][T10566] bridge6: left promiscuous mode [ 287.305459][T10580] netlink: 'syz.0.2000': attribute type 1 has an invalid length. [ 287.360330][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 287.369310][T10582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2000'. [ 287.626469][T10593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'. [ 288.293846][T10609] netlink: 'syz.4.2009': attribute type 1 has an invalid length. [ 288.367112][T10611] bond28: (slave bridge10): making interface the new active one [ 288.420238][T10611] bond28: (slave bridge10): Enslaving as an active interface with an up link [ 288.446534][T10609] macvlan2: entered promiscuous mode [ 288.451927][T10609] macvlan2: entered allmulticast mode [ 288.512243][T10609] bond28: entered promiscuous mode [ 288.517444][T10609] bridge10: entered promiscuous mode [ 288.561311][T10609] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 288.591513][T10609] bond28: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 288.638945][T10609] bond28: left promiscuous mode [ 288.643873][T10609] bridge10: left promiscuous mode [ 288.669882][T10619] bond11: option packets_per_slave: mode dependency failed, not supported in mode broadcast(3) [ 288.694027][T10619] bond11 (unregistering): Released all slaves [ 288.925536][T10625] lo speed is unknown, defaulting to 1000 [ 288.980893][T10633] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 289.076253][T10625] lo speed is unknown, defaulting to 1000 [ 289.111745][T10625] lo speed is unknown, defaulting to 1000 [ 289.176152][T10634] lo speed is unknown, defaulting to 1000 [ 289.191514][T10642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=10642 comm=syz.1.2018 [ 289.310561][T10634] lo speed is unknown, defaulting to 1000 [ 289.337461][T10634] lo speed is unknown, defaulting to 1000 [ 289.359432][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 289.359451][ T29] audit: type=1326 audit(1768431644.315:30670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f642796e3aa code=0x7ffc0000 [ 289.458690][ T29] audit: type=1326 audit(1768431644.355:30671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.482554][ T29] audit: type=1326 audit(1768431644.355:30672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.506267][ T29] audit: type=1326 audit(1768431644.355:30673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.530044][ T29] audit: type=1326 audit(1768431644.355:30674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.553710][ T29] audit: type=1326 audit(1768431644.355:30675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.577588][ T29] audit: type=1326 audit(1768431644.355:30676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.601314][ T29] audit: type=1326 audit(1768431644.355:30677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.625026][ T29] audit: type=1326 audit(1768431644.365:30678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.648655][ T29] audit: type=1326 audit(1768431644.365:30679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.5.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f642796f749 code=0x7ffc0000 [ 289.749156][T10644] ================================================================== [ 289.757472][T10644] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 289.764808][T10644] [ 289.767158][T10644] read to 0xffff8881199e5e00 of 4 bytes by task 10646 on cpu 0: [ 289.774818][T10644] atime_needs_update+0x25f/0x3e0 [ 289.779898][T10644] touch_atime+0x4a/0x340 [ 289.784352][T10644] shmem_file_read_iter+0x477/0x540 [ 289.789693][T10644] copy_splice_read+0x442/0x660 [ 289.794589][T10644] splice_direct_to_actor+0x290/0x680 [ 289.800006][T10644] do_splice_direct+0xda/0x150 [ 289.804818][T10644] do_sendfile+0x380/0x650 [ 289.809267][T10644] __x64_sys_sendfile64+0x105/0x150 [ 289.814520][T10644] x64_sys_call+0x2db1/0x3000 [ 289.819244][T10644] do_syscall_64+0xca/0x2b0 [ 289.823892][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.829914][T10644] [ 289.832353][T10644] write to 0xffff8881199e5e00 of 4 bytes by task 10644 on cpu 1: [ 289.840189][T10644] touch_atime+0x1e8/0x340 [ 289.844643][T10644] shmem_file_read_iter+0x477/0x540 [ 289.849986][T10644] copy_splice_read+0x442/0x660 [ 289.854889][T10644] splice_direct_to_actor+0x290/0x680 [ 289.860294][T10644] do_splice_direct+0xda/0x150 [ 289.865181][T10644] do_sendfile+0x380/0x650 [ 289.869636][T10644] __x64_sys_sendfile64+0x105/0x150 [ 289.874914][T10644] x64_sys_call+0x2db1/0x3000 [ 289.879818][T10644] do_syscall_64+0xca/0x2b0 [ 289.884386][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.890355][T10644] [ 289.892704][T10644] value changed: 0x2a12ce98 -> 0x2aab6518 [ 289.898487][T10644] [ 289.900831][T10644] Reported by Kernel Concurrency Sanitizer on: [ 289.907066][T10644] CPU: 1 UID: 0 PID: 10644 Comm: syz.5.2020 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.918577][T10644] Tainted: [W]=WARN [ 289.922399][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 289.932494][T10644] ==================================================================