last executing test programs: 5m45.109641859s ago: executing program 32 (id=305): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x5e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 4m34.886451345s ago: executing program 33 (id=2488): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) brk(0x200000001000) 4m30.244810049s ago: executing program 34 (id=2561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 4m24.007944102s ago: executing program 35 (id=2736): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl2\x00', r4, 0x40, 0x700, 0x9, 0x6, {{0x5, 0x4, 0x1, 0x37, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @empty, @empty}}}}) 4m21.264984093s ago: executing program 36 (id=2824): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4m15.576581342s ago: executing program 5 (id=2962): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000080000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='signal_generate\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4m15.547562244s ago: executing program 5 (id=2964): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) 4m15.409203205s ago: executing program 5 (id=2968): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_usb_disconnect(0xffffffffffffffff) read$rfkill(0xffffffffffffffff, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 4m14.648742616s ago: executing program 37 (id=2979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xd5, 0xffff, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48002000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m14.627019468s ago: executing program 5 (id=2982): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000600)={[{@usrjquota}, {@minixdf}, {@init_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 4m14.219019611s ago: executing program 5 (id=2988): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) setgid(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) 4m12.12429439s ago: executing program 5 (id=3043): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}]) 4m12.108969961s ago: executing program 38 (id=3043): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000000000)={[{@i_version}, {@init_itable}, {@noblock_validity}]}, 0x1, 0x71e, &(0x7f0000000f40)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x3000}]) 3m3.604121485s ago: executing program 7 (id=5400): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000aec345e6f88ec0022c1abb400000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 3m3.512236722s ago: executing program 7 (id=5411): socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 3m3.489896584s ago: executing program 7 (id=5403): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000, 0x100000000000}) 3m3.468700826s ago: executing program 7 (id=5404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 3m3.380837263s ago: executing program 7 (id=5406): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) fchdir(r0) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) 3m3.106586395s ago: executing program 7 (id=5413): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) write$ppp(r0, &(0x7f0000000200)='Av', 0x2) 3m3.105652485s ago: executing program 39 (id=5413): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) write$ppp(r0, &(0x7f0000000200)='Av', 0x2) 3m2.245271635s ago: executing program 9 (id=5437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) 3m1.999055644s ago: executing program 9 (id=5441): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3m1.957055998s ago: executing program 9 (id=5442): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) getpgrp(0xffffffffffffffff) 3m1.921198051s ago: executing program 9 (id=5444): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) 3m1.893956623s ago: executing program 9 (id=5445): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) close(0x4) 3m1.767497033s ago: executing program 9 (id=5448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 3m1.724901816s ago: executing program 40 (id=5448): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) 2m0.239766264s ago: executing program 0 (id=7451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) 2m0.133166993s ago: executing program 0 (id=7454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 2m0.061068909s ago: executing program 0 (id=7458): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m0.005535403s ago: executing program 0 (id=7460): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0xfc, 0x582, &(0x7f0000000b40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 1m59.441988128s ago: executing program 0 (id=7472): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r1, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r4, 0x4, 0x800, 0x1000}, 0x10) 1m59.138864003s ago: executing program 0 (id=7482): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m59.101849746s ago: executing program 41 (id=7482): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m35.807733814s ago: executing program 8 (id=8096): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 1m35.531058357s ago: executing program 8 (id=8103): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r0 = syz_io_uring_setup(0x7461, &(0x7f0000000580)={0x0, 0x8ad5, 0x10100, 0xffffffff, 0x1}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, r3, 0x0, 0x0, r3}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m35.462346052s ago: executing program 8 (id=8106): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 1m35.406278477s ago: executing program 8 (id=8110): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000180)={[{@nobh}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 1m34.977028941s ago: executing program 8 (id=8126): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m34.898843648s ago: executing program 8 (id=8121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b709000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) 1m34.804557185s ago: executing program 42 (id=8121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b709000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) 2.648982606s ago: executing program 2 (id=10888): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x9fe, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1200, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.610845659s ago: executing program 2 (id=10889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x2, 0x0, 0x0) 2.340969031s ago: executing program 2 (id=10892): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000400), 0x1, 0xbaf, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3ny2zftO+vIi1k0jIi2o07SSYotgKxU3LgTdCg3ppIRMP0giNWkWE/0HRF0LbgS1KF3YdTcKbt1o3VpcCEVioyCikTsfSWxmkrSd5Ibk94Mz95w5d+Z5nrlM7j0wNwHsWgPZQxpxICLOJhGF+vNpRHRXe70Rldp+C/OzI7/Pz44ksbj42i9JJBFxd352pPFeSX27rz7ojYhvX0zif++sjjs5PTM+XC6XJurjI1MXLh+ZnJ55ZuzC8PnS+dLFo8efGzo2dHzwxFDbav3jx1M3fnv85Z8qf37617Vf3/84iVPRV59bWUe7DMTA0meyUmdEDLc7WE466vWsrDPpXOdF6SYnBQBAS+mKa7hHohAdsXzxVoivvss1OQAAAKAtFjsiFgEAAIAdLrH+BwAAgB2u8TuAu/OzI42W7y8Sttad0xHRX6t/od5qM51RqW57oysi9t5NYuVtrUntZQ9tICJu/3Dii6zFJt2HvJbKXEQ82uz4J9X6+6t3ca+uP42IwTbEH7hnvN3qf7q7df2n2hA/7/oB2J1unq6dyFaf/9Kl659ocv7rbHLuehB5n/8a138Lq67/luvvaHH99+oGY1z95MMrreay+p+/8dLnjZbFz7YPVdR9uDMX8Vhns/qTpfqTFvWf3WCMwt9XSq3m8q5/8aOIQ9G8/oZk7f9PdGR0rFwarD02jTH3zdBnreLnXX92/Pe2qH+94395gzHeOHPmequ59etPf+5OXq/2uuvPvDU8NTVxNKI7eWX188fqN7S30Nin8R5Z/YefWPv736z+LESl/jlka4G5+jYbv31PzBeuXf1yrfqztV+ex//cAx7/dzcY48mv3zvcam7l+jdrWfzbSW0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANaUT0RZIWl/ppWixG7IuI/8fetHxpcuqp0UtvXjyXzUX0R1c6OlYuDUZEoTZOsvHRan95fOye8bMRsT8iPijsqY6LI5fK5/IuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCX7IqIvkrQYEWlELBTStFjMOysAAACg7frzTgAAAADYdNb/AAAAsPNZ/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDJ9h+8eSuJiMrJPdWW6a7PdeWaGbDZ0rwTAHLTkXcCQG46804AyM19rvFdLsAOlKwz39typqftuQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwfR06cPNWEhGVk3uqLdNdn+tq+oqDW5gdsJnSvBMActOx1mTn1uUBbD1fcdi9mq/xgd0kWWe+d3mfyr9nejYtJwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2n75qS9JiRKTVfpoWixH/iYj+6EpGx8qlwYj4b0R8X+jqycY9eScNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA201Oz4wPl8ulCR0dnXw7yfZIo9bJ+y8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5mJyeGR8ul0sTk3lnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORtcnpmfLhcLk1soHP9fnZe0cm7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vNPAAAA///5ZQ4Q") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) 1.992016109s ago: executing program 2 (id=10906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f0000000ac0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff, 0x3000}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.912184475s ago: executing program 2 (id=10912): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 1.280407606s ago: executing program 2 (id=10923): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) unshare(0x20000400) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000001080)=0x200, 0x4) sendto$inet(r0, &(0x7f0000001040)='v', 0x1, 0x4040, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x9}, 0x0, 0x0, 0x0) 620.50996ms ago: executing program 1 (id=10928): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) 620.03588ms ago: executing program 1 (id=10929): socket$kcm(0x29, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x7734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 504.678119ms ago: executing program 3 (id=10933): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) removexattr(&(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000)=@known='security.apparmor\x00') 504.468529ms ago: executing program 6 (id=10934): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x12, &(0x7f00000000c0)=ANY=[@ANYBLOB="18"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xce9d8d60ab13d530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') 480.428061ms ago: executing program 1 (id=10936): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, 0x0) 403.175827ms ago: executing program 6 (id=10938): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 402.560387ms ago: executing program 1 (id=10948): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 395.772397ms ago: executing program 3 (id=10939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 369.27042ms ago: executing program 4 (id=10940): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000003c0), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x1, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0) 354.188951ms ago: executing program 6 (id=10942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) 336.970642ms ago: executing program 4 (id=10943): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x11a) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0) 336.689602ms ago: executing program 1 (id=10944): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 334.877822ms ago: executing program 3 (id=10945): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 314.663154ms ago: executing program 6 (id=10946): unshare(0x2040400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r0, 0x1, 0x80) 307.882705ms ago: executing program 1 (id=10947): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000380)='kmem_cache_free\x00', r3, 0x0, 0x9a}, 0x18) pread64(r0, 0x0, 0x0, 0xd34) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file0/file0/file0\x00'}, 0x6e) 282.689667ms ago: executing program 3 (id=10949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 278.505527ms ago: executing program 4 (id=10950): r0 = io_uring_setup(0x28d5, &(0x7f0000000100)={0x0, 0x0, 0x40, 0x0, 0x214}) close(r0) r1 = msgget$private(0x0, 0x480) msgsnd(r1, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], 0x401, 0x800) msgrcv(r1, 0x0, 0x0, 0x1, 0x3000) msgsnd(r1, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x401, 0x0) msgctl$IPC_RMID(r1, 0x0) msgctl$IPC_RMID(r1, 0x0) 245.78404ms ago: executing program 6 (id=10951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 244.75314ms ago: executing program 3 (id=10952): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 212.042702ms ago: executing program 6 (id=10953): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x20}}, 0x0) 156.829227ms ago: executing program 3 (id=10954): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) tkill(r0, 0x1) tkill(r1, 0x14) 130.609599ms ago: executing program 4 (id=10955): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f00003f1000/0x4000)=nil, 0x4000, 0x8, 0x1010, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000206010800007c1400000000000000000c000780080008400000002a0500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x8000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180140002400000000000f5"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 97.874422ms ago: executing program 4 (id=10956): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x10000, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 0s ago: executing program 4 (id=10957): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_io_uring_setup(0x83d, &(0x7f0000000500)={0x0, 0x9770, 0x80, 0x2, 0x3cf}, &(0x7f0000000300)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400, 0x1}) io_uring_enter(r2, 0x3516, 0x8000000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) kernel console output (not intermixed with test programs): 0] type 2 family 0 port 6081 - 0 [ 293.810862][ T3675] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.822539][ T3675] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.841299][ T3675] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.184136][T24516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8165'. [ 294.261334][T24518] loop6: detected capacity change from 0 to 2048 [ 294.313085][T24538] netlink: 'syz.1.8169': attribute type 1 has an invalid length. [ 294.322857][T24518] loop6: p1 < > p4 [ 294.334835][T24518] loop6: p4 size 8388608 extends beyond EOD, truncated [ 294.362568][T24538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.382476][T24540] netlink: 'syz.3.8170': attribute type 13 has an invalid length. [ 294.390432][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8170'. [ 294.412041][T24538] 8021q: adding VLAN 0 to HW filter on device bond3 [ 294.451776][T24538] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.485501][T24538] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 294.506569][T24540] netlink: 'syz.3.8170': attribute type 13 has an invalid length. [ 294.514657][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8170'. [ 294.602590][T24606] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8177'. [ 294.698042][T24622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8185'. [ 294.789077][T24629] netlink: 'syz.1.8188': attribute type 10 has an invalid length. [ 295.039778][T24653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8199'. [ 295.103651][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 295.103670][ T29] audit: type=1326 audit(1755730180.707:12049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.133904][ T29] audit: type=1326 audit(1755730180.707:12050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.157830][ T29] audit: type=1326 audit(1755730180.707:12051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.181602][ T29] audit: type=1326 audit(1755730180.707:12052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.205587][ T29] audit: type=1326 audit(1755730180.707:12053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.229358][ T29] audit: type=1326 audit(1755730180.707:12054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.253207][ T29] audit: type=1326 audit(1755730180.707:12055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.277386][ T29] audit: type=1326 audit(1755730180.707:12056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.301957][ T29] audit: type=1326 audit(1755730180.707:12057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.325776][ T29] audit: type=1326 audit(1755730180.767:12058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24673 comm="syz.3.8202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 295.661867][T24713] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8213'. [ 295.876357][T24757] netlink: 'syz.3.8222': attribute type 1 has an invalid length. [ 295.911839][T24757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.961706][T24757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 295.975684][T24757] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 295.995086][T24757] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 296.140103][ T5030] dummy0: left promiscuous mode [ 296.217045][T24810] SELinux: failed to load policy [ 296.296242][T24818] loop6: detected capacity change from 0 to 2048 [ 296.360397][T24818] loop6: p1 < > p4 [ 296.366119][T24818] loop6: p4 size 8388608 extends beyond EOD, truncated [ 296.900061][T24886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24886 comm=syz.4.8251 [ 296.916369][T24886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8251'. [ 296.998700][T24930] bridge: RTM_NEWNEIGH with invalid ether address [ 297.047270][T24937] loop2: detected capacity change from 0 to 512 [ 297.076729][T24937] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.100432][T24937] EXT4-fs (loop2): mount failed [ 298.396810][T25052] __nla_validate_parse: 2 callbacks suppressed [ 298.396826][T25052] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.8305'. [ 298.427881][T25055] pimreg: entered allmulticast mode [ 298.458299][T25055] pimreg: left allmulticast mode [ 298.846665][T25086] loop6: detected capacity change from 0 to 8192 [ 298.881435][T25090] netlink: 'syz.1.8321': attribute type 30 has an invalid length. [ 299.086948][T25119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=25119 comm=syz.6.8329 [ 299.282881][T25128] loop2: detected capacity change from 0 to 8192 [ 299.411644][T25142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25142 comm=syz.2.8335 [ 299.425315][T25142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8335'. [ 299.507118][T25142] loop2: detected capacity change from 0 to 2048 [ 299.520607][T25142] EXT4-fs (loop2): failed to initialize system zone (-117) [ 299.528222][T25142] EXT4-fs (loop2): mount failed [ 300.133319][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 300.133338][ T29] audit: type=1326 audit(1755730185.737:12127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25228 comm="syz.4.8360" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7e3718ebe9 code=0x0 [ 300.168183][T25232] netlink: 'syz.6.8361': attribute type 2 has an invalid length. [ 300.176242][T25232] netlink: 'syz.6.8361': attribute type 1 has an invalid length. [ 300.184338][T25232] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.8361'. [ 300.195629][T25234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8360'. [ 300.205387][T25234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8360'. [ 300.267288][ T29] audit: type=1326 audit(1755730185.867:12128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.291066][ T29] audit: type=1326 audit(1755730185.867:12129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.315130][ T29] audit: type=1326 audit(1755730185.867:12130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.339644][ T29] audit: type=1326 audit(1755730185.867:12131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.363736][ T29] audit: type=1326 audit(1755730185.867:12132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.387927][ T29] audit: type=1326 audit(1755730185.867:12133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.411864][ T29] audit: type=1326 audit(1755730185.867:12134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.435616][ T29] audit: type=1326 audit(1755730185.867:12135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.459272][ T29] audit: type=1326 audit(1755730185.867:12136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25241 comm="syz.6.8366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 300.674111][T25236] Set syz1 is full, maxelem 65536 reached [ 300.960149][T25266] bridge0: port 3(macsec1) entered blocking state [ 300.966756][T25266] bridge0: port 3(macsec1) entered disabled state [ 300.975354][T25266] macsec1: entered allmulticast mode [ 300.980806][T25266] bridge0: entered allmulticast mode [ 300.997171][T25263] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 300.997185][T25266] macsec1: left allmulticast mode [ 300.997204][T25266] bridge0: left allmulticast mode [ 301.999971][T25332] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8402'. [ 302.073052][T25347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8409'. [ 302.084650][T25352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8410'. [ 302.101773][T25347] hsr_slave_1 (unregistering): left promiscuous mode [ 302.261381][T25389] netlink: 'syz.1.8422': attribute type 1 has an invalid length. [ 302.498908][T25422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8437'. [ 302.774579][T25446] Set syz1 is full, maxelem 65536 reached [ 302.824652][T25449] netlink: 2020 bytes leftover after parsing attributes in process `syz.3.8447'. [ 303.496591][T25496] vlan1: entered allmulticast mode [ 303.502069][T25496] macvtap0: entered allmulticast mode [ 303.507541][T25496] veth0_macvtap: entered allmulticast mode [ 303.623583][T25514] __nla_validate_parse: 2 callbacks suppressed [ 303.623603][T25514] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8464'. [ 303.691518][T25521] SELinux: Context @ is not valid (left unmapped). [ 303.746992][T25526] netlink: 'syz.6.8469': attribute type 13 has an invalid length. [ 303.876899][T25526] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.884213][T25526] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.924144][T25534] atomic_op ffff88814308e528 conn xmit_atomic 0000000000000000 [ 303.966575][T25526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.977938][T25526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.022606][T25540] ref_ctr increment failed for inode: 0xcac offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888120b4d640 [ 304.037294][T25539] uprobe: syz.3.8475:25539 failed to unregister, leaking uprobe [ 304.053992][T25526] veth0_macvtap: left allmulticast mode [ 304.090770][ T5040] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.109483][ T5040] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.126753][ T5040] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.138034][ T5040] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.417449][T25554] wg2: left promiscuous mode [ 304.422551][T25554] wg2: left allmulticast mode [ 305.096965][T25609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8502'. [ 305.192346][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 305.192361][ T29] audit: type=1400 audit(1755730190.797:12231): avc: denied { mounton } for pid=25626 comm="syz.2.8507" path="/control" dev="ramfs" ino=81136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 305.308559][T25648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8515'. [ 305.327830][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8515'. [ 305.347693][T25653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8516'. [ 305.390935][T25663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8521'. [ 305.417603][T25674] loop2: detected capacity change from 0 to 1024 [ 305.433010][T25674] EXT4-fs: Ignoring removed orlov option [ 305.438988][T25674] EXT4-fs: dax option not supported [ 305.522013][T25695] -1: renamed from syzkaller0 [ 305.611687][T25715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8533'. [ 305.621406][T25715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8533'. [ 305.677020][T25722] loop6: detected capacity change from 0 to 1024 [ 305.692220][T25722] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.715741][T25722] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.746962][ T29] audit: type=1400 audit(1755730191.347:12232): avc: denied { setattr } for pid=25721 comm="syz.6.8534" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 305.774961][T25736] serio: Serial port ptm0 [ 305.792737][T25739] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8541'. [ 305.805215][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.935675][T25755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8547'. [ 305.944837][T25755] bridge_slave_1: left allmulticast mode [ 305.950758][T25755] bridge_slave_1: left promiscuous mode [ 305.956810][T25755] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.968466][T25755] bridge_slave_0: left allmulticast mode [ 305.974625][T25755] bridge_slave_0: left promiscuous mode [ 305.980446][T25755] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.242834][T25777] loop2: detected capacity change from 0 to 128 [ 306.403880][ T29] audit: type=1326 audit(1755730192.007:12233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 306.427984][ T29] audit: type=1326 audit(1755730192.007:12234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 306.455558][ T29] audit: type=1326 audit(1755730192.037:12235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 306.479539][ T29] audit: type=1326 audit(1755730192.037:12236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 306.503273][ T29] audit: type=1326 audit(1755730192.037:12237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 306.504388][T25802] loop6: detected capacity change from 0 to 128 [ 306.527162][ T29] audit: type=1326 audit(1755730192.037:12238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 306.536493][T25802] EXT4-fs: Ignoring removed nobh option [ 306.558022][ T29] audit: type=1326 audit(1755730192.037:12239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 306.587618][ T29] audit: type=1326 audit(1755730192.037:12240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25801 comm="syz.3.8566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 306.594858][T25802] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 306.624359][T25802] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.663699][T25817] macvlan1: entered promiscuous mode [ 306.663750][T23979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 306.683263][T25817] ipvlan0: entered promiscuous mode [ 306.692756][T25817] ipvlan0: left promiscuous mode [ 306.700777][T25817] macvlan1: left promiscuous mode [ 306.884732][T25840] tipc: Enabling of bearer rejected, failed to enable media [ 307.668216][T25925] wireguard0: entered promiscuous mode [ 307.673920][T25925] wireguard0: entered allmulticast mode [ 308.019641][T25948] vhci_hcd: invalid port number 96 [ 308.025314][T25948] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 308.370368][T25972] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 308.523273][T25982] loop2: detected capacity change from 0 to 8192 [ 308.530613][T25982] msdos: Unknown parameter '' [ 308.651987][T25993] __nla_validate_parse: 2 callbacks suppressed [ 308.652004][T25993] netlink: 96 bytes leftover after parsing attributes in process `syz.6.8640'. [ 308.803870][T26009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8647'. [ 308.844980][T26009] hsr_slave_0 (unregistering): left promiscuous mode [ 309.337741][T26054] loop6: detected capacity change from 0 to 1024 [ 309.352001][T26054] EXT4-fs: Ignoring removed orlov option [ 309.369741][T26059] tipc: Enabled bearer , priority 0 [ 309.386171][T26054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.399284][T26059] tipc: Disabling bearer [ 309.546751][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.382258][T26094] wireguard0: entered promiscuous mode [ 310.387981][T26094] wireguard0: entered allmulticast mode [ 310.444105][T26103] netlink: 'syz.6.8681': attribute type 30 has an invalid length. [ 310.660341][T26115] loop6: detected capacity change from 0 to 2048 [ 310.681461][T26115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.735982][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 310.735997][ T29] audit: type=1326 audit(1755730196.337:12411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa765ba7 code=0x7ffc0000 [ 310.766206][ T29] audit: type=1326 audit(1755730196.337:12412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4aa70add9 code=0x7ffc0000 [ 310.789862][ T29] audit: type=1326 audit(1755730196.337:12413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa765ba7 code=0x7ffc0000 [ 310.813533][ T29] audit: type=1326 audit(1755730196.337:12414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4aa70add9 code=0x7ffc0000 [ 310.837370][ T29] audit: type=1326 audit(1755730196.337:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 310.863043][ T29] audit: type=1326 audit(1755730196.467:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 310.886946][ T29] audit: type=1326 audit(1755730196.467:12417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa765ba7 code=0x7ffc0000 [ 310.910761][ T29] audit: type=1326 audit(1755730196.467:12418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4aa70add9 code=0x7ffc0000 [ 310.934414][ T29] audit: type=1326 audit(1755730196.467:12419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa765ba7 code=0x7ffc0000 [ 310.958119][ T29] audit: type=1326 audit(1755730196.467:12420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26121 comm="syz.1.8686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4aa70add9 code=0x7ffc0000 [ 311.026204][T23979] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 311.072994][T23979] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 311.100824][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.379448][T26154] wireguard0: entered promiscuous mode [ 311.385122][T26154] wireguard0: entered allmulticast mode [ 311.712288][T26185] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26185 comm=syz.1.8711 [ 311.743320][T26187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8713'. [ 311.765033][T26187] hsr_slave_0 (unregistering): left promiscuous mode [ 312.535285][T26227] Set syz1 is full, maxelem 65536 reached [ 313.377913][T26270] loop2: detected capacity change from 0 to 512 [ 313.389363][T26270] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 313.410111][T26270] EXT4-fs (loop2): 1 truncate cleaned up [ 313.417544][T26270] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.482243][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.513926][T26283] bridge0: entered promiscuous mode [ 313.520052][T26283] bridge0: port 3(macsec1) entered blocking state [ 313.526807][T26283] bridge0: port 3(macsec1) entered disabled state [ 313.547785][T26283] macsec1: entered allmulticast mode [ 313.553249][T26283] bridge0: entered allmulticast mode [ 313.561350][T26283] macsec1: left allmulticast mode [ 313.566475][T26283] bridge0: left allmulticast mode [ 313.576820][T26283] bridge0: left promiscuous mode [ 313.622259][T26291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8746'. [ 313.635161][T26291] hsr_slave_1 (unregistering): left promiscuous mode [ 313.667544][T26299] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8748'. [ 313.685600][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8747'. [ 313.694796][T26300] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8747'. [ 313.735878][T26304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26304 comm=syz.4.8750 [ 314.337816][T26340] bridge0: port 1(macsec1) entered blocking state [ 314.344463][T26340] bridge0: port 1(macsec1) entered disabled state [ 314.354011][T26340] macsec1: entered allmulticast mode [ 314.359406][T26340] bridge0: entered allmulticast mode [ 314.369456][T26340] macsec1: left allmulticast mode [ 314.374545][T26340] bridge0: left allmulticast mode [ 314.551551][T26357] loop6: detected capacity change from 0 to 512 [ 314.561680][T26357] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 314.597176][T26357] EXT4-fs (loop6): 1 truncate cleaned up [ 314.606632][T26357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.642807][T26362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8768'. [ 314.663876][T26363] loop2: detected capacity change from 0 to 1024 [ 314.713005][T26363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.725781][T26362] hsr_slave_1 (unregistering): left promiscuous mode [ 314.733843][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.759280][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.824087][T26380] netlink: 'syz.2.8770': attribute type 30 has an invalid length. [ 314.930966][T26393] netlink: 'syz.4.8774': attribute type 3 has an invalid length. [ 315.101682][T26410] pim6reg: entered allmulticast mode [ 315.119145][T26410] pim6reg: left allmulticast mode [ 315.230588][T26422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8787'. [ 315.286577][T26432] netlink: 'syz.1.8790': attribute type 13 has an invalid length. [ 315.713464][T26468] vlan2: entered allmulticast mode [ 315.718718][T26468] macvtap0: entered allmulticast mode [ 315.845529][T26486] bridge0: port 1(macsec1) entered blocking state [ 315.852152][T26486] bridge0: port 1(macsec1) entered disabled state [ 315.869404][T26486] macsec1: entered allmulticast mode [ 315.874836][T26486] bridge0: entered allmulticast mode [ 315.932197][T26486] macsec1: left allmulticast mode [ 315.937341][T26486] bridge0: left allmulticast mode [ 316.059968][ T29] kauditd_printk_skb: 252 callbacks suppressed [ 316.059986][ T29] audit: type=1326 audit(1755730201.647:12673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 316.089839][ T29] audit: type=1326 audit(1755730201.647:12674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 316.113768][ T29] audit: type=1326 audit(1755730201.647:12675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 316.137526][ T29] audit: type=1326 audit(1755730201.647:12676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 316.161254][ T29] audit: type=1326 audit(1755730201.647:12677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 316.184958][ T29] audit: type=1326 audit(1755730201.647:12678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 316.208778][ T29] audit: type=1326 audit(1755730201.647:12679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 316.232404][ T29] audit: type=1326 audit(1755730201.657:12680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 316.404540][ T29] audit: type=1326 audit(1755730201.997:12681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4aa76ec23 code=0x7ffc0000 [ 316.428285][ T29] audit: type=1326 audit(1755730201.997:12682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26499 comm="syz.1.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb4aa76ec23 code=0x7ffc0000 [ 316.542609][T26509] pim6reg: entered allmulticast mode [ 316.562828][T26517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8818'. [ 316.569619][T26509] pim6reg: left allmulticast mode [ 316.670062][T26531] ref_ctr increment failed for inode: 0x542 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888120b4c500 [ 316.693394][T26529] uprobe: syz.2.8823:26529 failed to unregister, leaking uprobe [ 316.781488][T26550] netlink: 'syz.6.8827': attribute type 3 has an invalid length. [ 317.154837][T26548] Set syz1 is full, maxelem 65536 reached [ 317.223166][T26572] netlink: 'syz.3.8848': attribute type 3 has an invalid length. [ 317.289139][T26582] ref_ctr increment failed for inode: 0x1624 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888120b48b80 [ 317.303483][T26581] uprobe: syz.4.8841:26581 failed to unregister, leaking uprobe [ 317.338021][T26584] loop2: detected capacity change from 0 to 8192 [ 317.700603][T26608] tipc: Started in network mode [ 317.705543][T26608] tipc: Node identity 4, cluster identity 4711 [ 317.711760][T26608] tipc: Node number set to 4 [ 317.919011][T26628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8852'. [ 317.963106][T26630] Set syz1 is full, maxelem 65536 reached [ 318.043830][T26636] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8856'. [ 318.085424][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8858'. [ 318.109803][T26647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8858'. [ 318.197891][T26665] -1: renamed from syzkaller0 [ 318.326340][T26691] loop6: detected capacity change from 0 to 128 [ 318.381396][T26691] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.403250][T26691] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.566262][T23979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.724156][T26770] __nla_validate_parse: 5 callbacks suppressed [ 318.724175][T26770] netlink: 168 bytes leftover after parsing attributes in process `syz.4.8891'. [ 319.281493][T26814] tipc: Can't bind to reserved service type 0 [ 321.614014][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 321.614030][ T29] audit: type=1326 audit(1755730207.217:12803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26849 comm="syz.2.8917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 321.680395][ T29] audit: type=1326 audit(1755730207.247:12804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26852 comm="syz.6.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 321.704562][ T29] audit: type=1326 audit(1755730207.247:12805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26852 comm="syz.6.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 321.728108][ T29] audit: type=1326 audit(1755730207.247:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26852 comm="syz.6.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 321.751812][ T29] audit: type=1326 audit(1755730207.247:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26852 comm="syz.6.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 321.775370][ T29] audit: type=1326 audit(1755730207.247:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26852 comm="syz.6.8921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 321.799010][ T29] audit: type=1326 audit(1755730207.247:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26849 comm="syz.2.8917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 321.822752][ T29] audit: type=1326 audit(1755730207.247:12810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26849 comm="syz.2.8917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 321.846336][ T29] audit: type=1326 audit(1755730207.257:12811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26849 comm="syz.2.8917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 321.870090][ T29] audit: type=1326 audit(1755730207.257:12812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26849 comm="syz.2.8917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 322.134647][T26890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8935'. [ 322.447200][T26915] loop6: detected capacity change from 0 to 512 [ 322.454815][T26915] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 322.473961][T26915] EXT4-fs (loop6): 1 truncate cleaned up [ 322.484662][T26915] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.497968][T26915] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.590568][T26941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8944'. [ 322.599788][T26941] netlink: 'syz.4.8944': attribute type 11 has an invalid length. [ 322.608008][T26941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8944'. [ 322.617081][T26941] netlink: 'syz.4.8944': attribute type 11 has an invalid length. [ 322.686300][T26952] bridge0: port 1(macvtap1) entered blocking state [ 322.693233][T26952] bridge0: port 1(macvtap1) entered disabled state [ 322.702245][T26952] macvtap1: entered allmulticast mode [ 322.707653][T26952] bridge0: entered allmulticast mode [ 322.713681][T26952] macvtap1: left allmulticast mode [ 322.718887][T26952] bridge0: left allmulticast mode [ 322.982538][T26989] loop6: detected capacity change from 0 to 512 [ 322.996872][T26989] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.8961: corrupted in-inode xattr: invalid ea_ino [ 323.013981][T26989] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8961: couldn't read orphan inode 15 (err -117) [ 323.026890][T26989] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.161213][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.379874][T27030] netlink: 'syz.3.8978': attribute type 27 has an invalid length. [ 323.445923][T27027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.464388][T27032] loop6: detected capacity change from 0 to 1024 [ 323.481443][T27027] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.492758][T27032] EXT4-fs: Ignoring removed nobh option [ 323.507619][T27032] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.523218][T27027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.551805][T27032] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.8968: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 323.663593][T27032] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8968: couldn't read orphan inode 11 (err -117) [ 323.690303][T27032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.743528][T27032] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.8968: Invalid block bitmap block 0 in block_group 0 [ 323.785908][T27032] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.8968: Failed to acquire dquot type 0 [ 323.812250][T27041] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8970'. [ 323.842777][ T5057] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm kworker/u8:43: Invalid inode table block 8589934593 in block_group 0 [ 323.867596][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.089006][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8985'. [ 324.532171][T27133] netlink: 'syz.6.9000': attribute type 27 has an invalid length. [ 324.563579][T27133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.572073][T27133] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.582173][T27133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.657545][T27135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9001'. [ 325.341105][T27169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9013'. [ 325.801083][T27195] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9027'. [ 325.819280][T27195] netem: change failed [ 326.122333][T27240] loop6: detected capacity change from 0 to 1024 [ 326.129863][T27240] EXT4-fs: Ignoring removed oldalloc option [ 326.136042][T27240] EXT4-fs: Ignoring removed bh option [ 326.150962][T27240] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.203649][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.365373][T27266] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9053'. [ 326.377570][T27267] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -2561, delta: 1 [ 326.386535][T27267] ref_ctr increment failed for inode: 0xece offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff888120b4cac0 [ 326.522083][T27292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9068'. [ 326.539167][T27292] netem: change failed [ 326.755425][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 326.755445][ T29] audit: type=1326 audit(1755730212.357:12957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 326.800709][T27316] loop2: detected capacity change from 0 to 512 [ 326.808064][T27316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 326.829611][ T29] audit: type=1326 audit(1755730212.357:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 326.834760][T27320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9081'. [ 326.853632][ T29] audit: type=1326 audit(1755730212.357:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 326.886300][ T29] audit: type=1326 audit(1755730212.357:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 326.910008][ T29] audit: type=1326 audit(1755730212.357:12961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 326.933926][ T29] audit: type=1326 audit(1755730212.357:12962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 326.957633][ T29] audit: type=1326 audit(1755730212.357:12963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 326.981351][ T29] audit: type=1326 audit(1755730212.357:12964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 327.005021][ T29] audit: type=1326 audit(1755730212.357:12965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 327.028873][ T29] audit: type=1326 audit(1755730212.357:12966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27313 comm="syz.4.9079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 327.054389][T27316] EXT4-fs (loop2): 1 truncate cleaned up [ 327.062413][T27316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.109449][T27328] IPVS: Error connecting to the multicast addr [ 327.160003][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.303845][T27353] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.9090'. [ 327.373350][T27355] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9091'. [ 327.631405][T27383] netlink: 'syz.2.9102': attribute type 27 has an invalid length. [ 327.756209][T27383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.766154][T27383] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.794356][T27383] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.113964][T27419] IPVS: Error connecting to the multicast addr [ 328.332214][T27432] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.953891][T27472] sctp: [Deprecated]: syz.4.9142 (pid 27472) Use of int in max_burst socket option deprecated. [ 328.953891][T27472] Use struct sctp_assoc_value instead [ 330.248790][T27551] __nla_validate_parse: 3 callbacks suppressed [ 330.248885][T27551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9177'. [ 331.413403][T27633] pim6reg: entered allmulticast mode [ 331.432720][T27642] netlink: 'syz.2.9216': attribute type 1 has an invalid length. [ 331.445224][T27643] pim6reg: left allmulticast mode [ 331.505930][T27657] bridge0: port 1(syz_tun) entered blocking state [ 331.512613][T27657] bridge0: port 1(syz_tun) entered disabled state [ 331.519577][T27657] syz_tun: entered allmulticast mode [ 331.525778][T27657] syz_tun: entered promiscuous mode [ 331.537440][T27657] syz_tun: left allmulticast mode [ 331.542856][T27657] syz_tun: left promiscuous mode [ 331.547958][T27657] bridge0: port 1(syz_tun) entered disabled state [ 331.577977][T27657] bond0: (slave bond_slave_0): Releasing backup interface [ 331.588958][T27657] bond0: (slave bond_slave_1): Releasing backup interface [ 331.599646][T27657] team0: Port device team_slave_0 removed [ 331.606982][T27657] team0: Port device team_slave_1 removed [ 331.623307][T27665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9225'. [ 331.667563][T27671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9227'. [ 331.788581][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 331.788601][ T29] audit: type=1326 audit(1755730217.387:13055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 331.846866][ T29] audit: type=1326 audit(1755730217.407:13056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 331.870688][ T29] audit: type=1326 audit(1755730217.407:13057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 331.894901][ T29] audit: type=1326 audit(1755730217.407:13058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 331.918758][ T29] audit: type=1326 audit(1755730217.407:13059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 331.942843][ T29] audit: type=1326 audit(1755730217.407:13060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 331.966577][ T29] audit: type=1326 audit(1755730217.407:13061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 331.990351][ T29] audit: type=1326 audit(1755730217.407:13062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 332.013976][ T29] audit: type=1326 audit(1755730217.407:13063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 332.037576][ T29] audit: type=1326 audit(1755730217.407:13064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27703 comm="syz.3.9235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf56a6ebe9 code=0x7ffc0000 [ 332.072695][T27709] netlink: 'syz.6.9241': attribute type 5 has an invalid length. [ 332.100794][T27721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9243'. [ 332.195122][T27747] loop2: detected capacity change from 0 to 164 [ 332.205207][T27747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9251'. [ 332.218946][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9252'. [ 332.296459][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9256'. [ 332.307884][T27760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9256'. [ 332.361872][T27749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9252'. [ 332.571708][T27788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9266'. [ 333.154889][T27827] loop6: detected capacity change from 0 to 512 [ 333.185808][T27827] EXT4-fs: Ignoring removed bh option [ 333.205647][T19758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=19758 comm=kworker/0:12 [ 333.222213][T27834] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 333.234610][T27827] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 333.243784][T27827] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 333.265717][T27827] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 333.288013][T27827] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 333.298364][T27839] pim6reg: entered allmulticast mode [ 333.312205][T27827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.331071][T27839] pim6reg: left allmulticast mode [ 333.391254][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.510900][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 333.525868][T27882] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 335.154392][T28031] wg2: entered promiscuous mode [ 335.159404][T28031] wg2: entered allmulticast mode [ 335.183483][T28035] 9pnet: p9_errstr2errno: server reported unknown error [ 335.510070][T28072] __nla_validate_parse: 8 callbacks suppressed [ 335.510091][T28072] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9371'. [ 335.597498][T28080] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9375'. [ 335.696695][T28106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28106 comm=syz.2.9380 [ 335.709408][T28106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28106 comm=syz.2.9380 [ 335.916483][T28143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9390'. [ 335.959161][T28149] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9393'. [ 336.409102][T28212] IPv4: Oversized IP packet from 127.202.26.0 [ 336.493892][T28221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9414'. [ 336.789572][T28244] IPv4: Oversized IP packet from 127.202.26.0 [ 336.889780][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 336.889797][ T29] audit: type=1326 audit(1755730222.497:13198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 336.927191][ T29] audit: type=1326 audit(1755730222.507:13199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 336.951086][ T29] audit: type=1326 audit(1755730222.507:13200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 336.974899][ T29] audit: type=1326 audit(1755730222.507:13201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 336.998639][ T29] audit: type=1326 audit(1755730222.507:13202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 337.022358][ T29] audit: type=1326 audit(1755730222.507:13203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 337.046079][ T29] audit: type=1326 audit(1755730222.507:13204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 337.069778][ T29] audit: type=1326 audit(1755730222.507:13205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 337.093420][ T29] audit: type=1326 audit(1755730222.527:13206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 337.117307][ T29] audit: type=1326 audit(1755730222.527:13207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28252 comm="syz.4.9427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 337.212735][T28263] netlink: 'syz.6.9432': attribute type 10 has an invalid length. [ 337.223136][T28264] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=28264 comm=syz.4.9433 [ 337.225762][T28263] team0: Port device dummy0 added [ 337.235766][T28264] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=28264 comm=syz.4.9433 [ 337.276502][T28263] netlink: 'syz.6.9432': attribute type 10 has an invalid length. [ 337.287991][T28263] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 337.307598][T28263] team0: Failed to send options change via netlink (err -105) [ 337.319880][T28263] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 337.331392][T28263] team0: Port device dummy0 removed [ 337.341922][T28263] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 337.592309][T28293] rdma_rxe: rxe_newlink: failed to add syz_tun [ 337.629393][T28296] loop6: detected capacity change from 0 to 4096 [ 337.644150][T28296] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.726240][T28303] 9pnet: p9_errstr2errno: server reported unknown error [ 337.784109][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.839491][T28325] pim6reg: entered allmulticast mode [ 337.847041][T28325] pim6reg: left allmulticast mode [ 338.626344][T28439] pim6reg: entered allmulticast mode [ 338.641054][T28439] pim6reg: left allmulticast mode [ 338.880887][T28483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9494'. [ 338.895654][T28483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9494'. [ 339.392263][T28502] pim6reg: entered allmulticast mode [ 339.409799][T28502] pim6reg: left allmulticast mode [ 339.753612][T28536] loop6: detected capacity change from 0 to 128 [ 339.775048][T28536] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 339.790094][T28536] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.819606][T28547] loop2: detected capacity change from 0 to 4096 [ 339.860505][T23979] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 339.871788][T28547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.160146][T28585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9523'. [ 340.165566][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.208745][T28585] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9523'. [ 340.493002][T28599] loop2: detected capacity change from 0 to 128 [ 340.502226][T28600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9525'. [ 340.569677][T28600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9525'. [ 340.649946][T28599] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 340.665241][T28599] ext4 filesystem being mounted at /385/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.799948][T21871] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.210860][T28646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9544'. [ 341.520818][T28672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9548'. [ 341.584189][T28672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9548'. [ 341.837231][T28689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9554'. [ 341.886056][T28705] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 341.906602][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 341.906618][ T29] audit: type=1326 audit(1755730227.507:13579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa765ba7 code=0x7ffc0000 [ 341.995734][ T29] audit: type=1326 audit(1755730227.557:13580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4aa70add9 code=0x7ffc0000 [ 342.019681][ T29] audit: type=1326 audit(1755730227.557:13581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa765ba7 code=0x7ffc0000 [ 342.043392][ T29] audit: type=1326 audit(1755730227.557:13582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4aa70add9 code=0x7ffc0000 [ 342.067132][ T29] audit: type=1326 audit(1755730227.557:13583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 342.090945][ T29] audit: type=1326 audit(1755730227.557:13584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa765ba7 code=0x7ffc0000 [ 342.114468][ T29] audit: type=1326 audit(1755730227.557:13585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4aa70add9 code=0x7ffc0000 [ 342.138244][ T29] audit: type=1326 audit(1755730227.557:13586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 342.162100][ T29] audit: type=1326 audit(1755730227.567:13587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa765ba7 code=0x7ffc0000 [ 342.185768][ T29] audit: type=1326 audit(1755730227.567:13588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28667 comm="syz.1.9558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4aa70add9 code=0x7ffc0000 [ 342.211573][T28715] loop6: detected capacity change from 0 to 128 [ 342.263904][T28724] netlink: 'syz.3.9565': attribute type 3 has an invalid length. [ 342.268770][T28723] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9566'. [ 342.272045][T28724] netlink: 'syz.3.9565': attribute type 3 has an invalid length. [ 342.432156][T28762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9575'. [ 342.553468][T28798] atomic_op ffff888119ab9128 conn xmit_atomic 0000000000000000 [ 342.562474][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9583'. [ 342.609041][T28796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9583'. [ 342.822775][T19758] kernel write not supported for file [eventfd] (pid: 19758 comm: kworker/0:12) [ 342.978121][T28832] macsec0: left allmulticast mode [ 343.159456][ T3388] Process accounting resumed [ 343.203792][T28852] syz.6.9608: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 343.218560][T28852] CPU: 0 UID: 0 PID: 28852 Comm: syz.6.9608 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 343.218600][T28852] Tainted: [W]=WARN [ 343.218608][T28852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.218624][T28852] Call Trace: [ 343.218633][T28852] [ 343.218642][T28852] __dump_stack+0x1d/0x30 [ 343.218754][T28852] dump_stack_lvl+0xe8/0x140 [ 343.218781][T28852] dump_stack+0x15/0x1b [ 343.218803][T28852] warn_alloc+0x12b/0x1a0 [ 343.218901][T28852] __vmalloc_node_range_noprof+0x9c/0xe00 [ 343.218984][T28852] ? __futex_wait+0x1ff/0x260 [ 343.219025][T28852] ? __pfx_futex_wake_mark+0x10/0x10 [ 343.219062][T28852] ? __rcu_read_unlock+0x4f/0x70 [ 343.219114][T28852] ? avc_has_perm_noaudit+0x1b1/0x200 [ 343.219243][T28852] ? should_fail_ex+0x30/0x280 [ 343.219268][T28852] ? xskq_create+0x36/0xe0 [ 343.219299][T28852] vmalloc_user_noprof+0x7d/0xb0 [ 343.219440][T28852] ? xskq_create+0x80/0xe0 [ 343.219531][T28852] xskq_create+0x80/0xe0 [ 343.219568][T28852] xsk_init_queue+0x95/0xf0 [ 343.219640][T28852] xsk_setsockopt+0x477/0x640 [ 343.219676][T28852] ? __pfx_xsk_setsockopt+0x10/0x10 [ 343.219712][T28852] __sys_setsockopt+0x181/0x200 [ 343.219738][T28852] __x64_sys_setsockopt+0x64/0x80 [ 343.219796][T28852] x64_sys_call+0x20ec/0x2ff0 [ 343.219823][T28852] do_syscall_64+0xd2/0x200 [ 343.219857][T28852] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 343.219889][T28852] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 343.219954][T28852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.219981][T28852] RIP: 0033:0x7fe9c8e2ebe9 [ 343.220001][T28852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.220023][T28852] RSP: 002b:00007fe9c7897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 343.220047][T28852] RAX: ffffffffffffffda RBX: 00007fe9c9055fa0 RCX: 00007fe9c8e2ebe9 [ 343.220124][T28852] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 343.220141][T28852] RBP: 00007fe9c8eb1e19 R08: 0000000000000004 R09: 0000000000000000 [ 343.220157][T28852] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 343.220173][T28852] R13: 00007fe9c9056038 R14: 00007fe9c9055fa0 R15: 00007ffd2b53ce88 [ 343.220201][T28852] [ 343.445778][T28852] Mem-Info: [ 343.449264][T28852] active_anon:50175 inactive_anon:10085 isolated_anon:0 [ 343.449264][T28852] active_file:16585 inactive_file:13441 isolated_file:0 [ 343.449264][T28852] unevictable:0 dirty:223 writeback:0 [ 343.449264][T28852] slab_reclaimable:4019 slab_unreclaimable:251292 [ 343.449264][T28852] mapped:30044 shmem:48907 pagetables:1158 [ 343.449264][T28852] sec_pagetables:0 bounce:0 [ 343.449264][T28852] kernel_misc_reclaimable:0 [ 343.449264][T28852] free:1583486 free_pcp:13267 free_cma:0 [ 343.495272][T28852] Node 0 active_anon:200700kB inactive_anon:40340kB active_file:66340kB inactive_file:53764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120176kB dirty:892kB writeback:0kB shmem:195628kB kernel_stack:5280kB pagetables:4632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.523522][T28852] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.552587][T28852] lowmem_reserve[]: 0 2883 7862 7862 [ 343.557955][T28852] Node 0 DMA32 free:2949208kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 343.588364][T28852] lowmem_reserve[]: 0 0 4978 4978 [ 343.593484][T28852] Node 0 Normal free:3364272kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:206848kB inactive_anon:40340kB active_file:66340kB inactive_file:53764kB unevictable:0kB writepending:892kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:48236kB local_pcp:40552kB free_cma:0kB [ 343.626187][T28852] lowmem_reserve[]: 0 0 0 0 [ 343.630827][T28852] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 343.644039][T28852] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949208kB [ 343.660406][T28852] Node 0 Normal: 2657*4kB (UM) 1481*8kB (UM) 266*16kB (UME) 134*32kB (UM) 154*64kB (UM) 138*128kB (UM) 105*256kB (UME) 150*512kB (UME) 137*1024kB (UM) 57*2048kB (UME) 719*4096kB (M) = 3364268kB [ 343.680228][T28852] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 343.689582][T28852] 79905 total pagecache pages [ 343.694273][T28852] 94 pages in swap cache [ 343.698540][T28852] Free swap = 97248kB [ 343.702811][T28852] Total swap = 124996kB [ 343.707000][T28852] 2097051 pages RAM [ 343.710864][T28852] 0 pages HighMem/MovableOnly [ 343.715556][T28852] 80441 pages reserved [ 343.764532][T28863] netlink: 8 bytes leftover after parsing attributes in process `¬í'. [ 343.934658][T28879] serio: Serial port ptm0 [ 344.126984][T28917] loop6: detected capacity change from 0 to 1024 [ 344.140792][T28917] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.214248][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.394837][T28961] bridge0: port 1(macvtap1) entered blocking state [ 344.401547][T28961] bridge0: port 1(macvtap1) entered disabled state [ 344.419245][T28961] macvtap1: entered allmulticast mode [ 344.424824][T28961] bridge0: entered allmulticast mode [ 344.446001][T28961] macvtap1: left allmulticast mode [ 344.451355][T28961] bridge0: left allmulticast mode [ 344.683764][T28998] netem: incorrect ge model size [ 344.689196][T28998] netem: change failed [ 344.864640][T29021] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 345.098042][T29061] netlink: 'syz.1.9684': attribute type 7 has an invalid length. [ 345.712596][T29155] netlink: 'syz.4.9705': attribute type 12 has an invalid length. [ 345.881842][T29167] __nla_validate_parse: 6 callbacks suppressed [ 345.881860][T29167] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9711'. [ 345.900251][T29167] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9711'. [ 346.153434][T29201] bridge: RTM_NEWNEIGH with invalid ether address [ 346.299643][T29214] loop6: detected capacity change from 0 to 1024 [ 346.307494][T29214] EXT4-fs: Ignoring removed orlov option [ 346.316670][T29214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.357053][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.506302][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9737'. [ 346.517392][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9737'. [ 346.527177][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9737'. [ 346.538308][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9737'. [ 346.551073][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9737'. [ 346.560491][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9737'. [ 346.918025][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 346.918124][ T29] audit: type=1326 audit(1755730232.517:13902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9c8e25ba7 code=0x7ffc0000 [ 346.948204][ T29] audit: type=1326 audit(1755730232.517:13903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe9c8dcadd9 code=0x7ffc0000 [ 346.971941][ T29] audit: type=1326 audit(1755730232.517:13904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 346.996083][ T29] audit: type=1326 audit(1755730232.537:13905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9c8e25ba7 code=0x7ffc0000 [ 347.019850][ T29] audit: type=1326 audit(1755730232.537:13906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe9c8dcadd9 code=0x7ffc0000 [ 347.043561][ T29] audit: type=1326 audit(1755730232.537:13907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 347.079745][ T29] audit: type=1326 audit(1755730232.557:13908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9c8e25ba7 code=0x7ffc0000 [ 347.103472][ T29] audit: type=1326 audit(1755730232.557:13909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe9c8dcadd9 code=0x7ffc0000 [ 347.127144][ T29] audit: type=1326 audit(1755730232.557:13910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 347.151305][ T29] audit: type=1326 audit(1755730232.557:13911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29222 comm="syz.6.9729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe9c8e25ba7 code=0x7ffc0000 [ 347.256332][T29266] sctp: [Deprecated]: syz.6.9750 (pid 29266) Use of int in maxseg socket option. [ 347.256332][T29266] Use struct sctp_assoc_value instead [ 347.822643][T29313] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9766'. [ 348.341369][T29346] pimreg: entered allmulticast mode [ 348.351798][T29346] pimreg: left allmulticast mode [ 349.186370][T29399] netlink: 'syz.4.9800': attribute type 10 has an invalid length. [ 349.194872][T29399] bond3: (slave dummy0): Releasing active interface [ 349.204002][T29399] team0: Failed to send options change via netlink (err -105) [ 349.211528][T29399] team0: Port device dummy0 added [ 349.219550][T29399] netlink: 'syz.4.9800': attribute type 10 has an invalid length. [ 349.228395][T29399] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 349.245947][T29399] team0: Failed to send options change via netlink (err -105) [ 349.254062][T29399] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 349.263469][T29399] team0: Port device dummy0 removed [ 349.798353][T29443] netlink: 'syz.3.9812': attribute type 10 has an invalid length. [ 349.814524][T29443] team0: Port device dummy0 added [ 349.824901][T29443] netlink: 'syz.3.9812': attribute type 10 has an invalid length. [ 349.833496][T29443] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 349.857826][T29443] team0: Failed to send options change via netlink (err -105) [ 349.865633][T29443] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 349.874856][T29443] team0: Port device dummy0 removed [ 349.883115][T29443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 350.162248][ T3388] Process accounting resumed [ 350.229457][T29475] netlink: zone id is out of range [ 350.234932][T29475] netlink: zone id is out of range [ 350.240858][T29475] netlink: zone id is out of range [ 350.246382][T29475] netlink: zone id is out of range [ 350.347913][T29487] $Hÿ: renamed from bond0 (while UP) [ 350.355777][T29487] $Hÿ: entered promiscuous mode [ 350.361274][T29487] dummy0: entered promiscuous mode [ 350.372943][T29489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9834'. [ 350.610658][T29521] infiniband syz!: set down [ 350.615224][T29521] infiniband syz!: added team_slave_0 [ 350.629760][T29521] RDS/IB: syz!: added [ 350.642444][T29521] smc: adding ib device syz! with port count 1 [ 350.649380][T29521] smc: ib device syz! port 1 has pnetid [ 350.664350][T29533] pim6reg1: entered promiscuous mode [ 350.669895][T29533] pim6reg1: entered allmulticast mode [ 350.742133][T29546] netlink: 'syz.1.9849': attribute type 10 has an invalid length. [ 350.751979][T29546] bond0: (slave dummy0): Releasing backup interface [ 350.760652][T29546] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 350.769711][T29546] team0: Failed to send options change via netlink (err -105) [ 350.777256][T29546] team0: Port device dummy0 added [ 350.792127][T29546] netlink: 'syz.1.9849': attribute type 10 has an invalid length. [ 350.806749][T29546] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 350.818179][T29546] team0: Failed to send options change via netlink (err -105) [ 350.825882][T29546] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 350.834992][T29546] team0: Port device dummy0 removed [ 350.841522][T29546] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 351.261432][T29574] netlink: 'syz.4.9860': attribute type 12 has an invalid length. [ 351.293623][T29578] tipc: Enabling of bearer rejected, failed to enable media [ 351.510596][T29598] netlink: 'syz.2.9862': attribute type 10 has an invalid length. [ 351.533378][T29598] team0: Port device dummy0 added [ 351.548193][T29598] netlink: 'syz.2.9862': attribute type 10 has an invalid length. [ 351.557063][T29598] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 351.582323][T29598] team0: Failed to send options change via netlink (err -105) [ 351.592192][T29598] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 351.601495][T29598] team0: Port device dummy0 removed [ 351.609717][T29598] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 351.892286][T29605] __nla_validate_parse: 4 callbacks suppressed [ 351.892309][T29605] netlink: 76 bytes leftover after parsing attributes in process `syz.2.9865'. [ 351.944155][T29607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9866'. [ 352.246988][T29633] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9880'. [ 352.445016][T29666] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 352.496506][T29662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.9885'. [ 352.556124][T29688] geneve0: entered allmulticast mode [ 352.712556][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 352.712571][ T29] audit: type=1400 audit(1755730238.317:14000): avc: denied { create } for pid=29726 comm="syz.1.9903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 352.742164][T29729] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9901'. [ 352.770709][T29718] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9901'. [ 352.834867][ T29] audit: type=1400 audit(1755730238.347:14001): avc: denied { bind } for pid=29726 comm="syz.1.9903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 352.885409][T29744] netlink: 'syz.3.9907': attribute type 1 has an invalid length. [ 352.893303][T29744] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9907'. [ 352.903248][T29744] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.9907'. [ 353.019335][T29769] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9910'. [ 353.029305][T29769] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9910'. [ 353.676468][T29884] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.700126][T29884] vlan1: entered allmulticast mode [ 353.705409][T29884] bond1: entered allmulticast mode [ 353.796535][ T29] audit: type=1326 audit(1755730239.398:14002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.4.9932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 353.820441][ T29] audit: type=1326 audit(1755730239.398:14003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.4.9932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 353.844187][ T29] audit: type=1326 audit(1755730239.398:14004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.4.9932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 353.867911][ T29] audit: type=1326 audit(1755730239.398:14005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.4.9932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 353.891532][ T29] audit: type=1326 audit(1755730239.398:14006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.4.9932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 353.915358][ T29] audit: type=1326 audit(1755730239.398:14007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.4.9932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 353.958444][ T29] audit: type=1326 audit(1755730239.398:14008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.4.9932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 353.982336][ T29] audit: type=1326 audit(1755730239.398:14009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29937 comm="syz.4.9932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e3718ebe9 code=0x7ffc0000 [ 354.352490][T29970] loop6: detected capacity change from 0 to 512 [ 354.367297][T29970] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 354.429791][T29970] EXT4-fs (loop6): 1 truncate cleaned up [ 354.438113][T29970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.536391][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.558764][T29996] validate_nla: 3 callbacks suppressed [ 354.558780][T29996] netlink: 'syz.2.9957': attribute type 1 has an invalid length. [ 354.572294][T29996] netlink: 'syz.2.9957': attribute type 4 has an invalid length. [ 354.589110][T29996] netlink: 'syz.2.9957': attribute type 1 has an invalid length. [ 354.597065][T29996] netlink: 'syz.2.9957': attribute type 4 has an invalid length. [ 355.114681][T30092] loop6: detected capacity change from 0 to 1024 [ 355.163793][T30092] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.283030][T30092] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.9993: Allocating blocks 449-513 which overlap fs metadata [ 355.306226][T30090] EXT4-fs (loop6): pa ffff88810726e4d0: logic 48, phys. 177, len 21 [ 355.314594][T30090] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 355.355638][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.356348][T30144] pimreg: entered allmulticast mode [ 355.374768][T30144] pimreg: left allmulticast mode [ 355.560369][T30187] vlan0: entered allmulticast mode [ 356.226953][T30307] openvswitch: netlink: Message has 6 unknown bytes. [ 357.564826][T30418] __nla_validate_parse: 18 callbacks suppressed [ 357.564925][T30418] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10104'. [ 357.632130][T30423] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10106'. [ 357.883647][T30457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10114'. [ 357.916034][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 357.916049][ T29] audit: type=1326 audit(1755730243.518:14178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 357.955271][ T29] audit: type=1326 audit(1755730243.558:14179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 357.979211][ T29] audit: type=1326 audit(1755730243.558:14180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 358.003171][ T29] audit: type=1326 audit(1755730243.558:14181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 358.026942][ T29] audit: type=1326 audit(1755730243.558:14182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 358.050861][ T29] audit: type=1326 audit(1755730243.558:14183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 358.074957][ T29] audit: type=1326 audit(1755730243.558:14184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 358.098894][ T29] audit: type=1326 audit(1755730243.558:14185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 358.122715][ T29] audit: type=1326 audit(1755730243.558:14186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 358.146564][ T29] audit: type=1326 audit(1755730243.558:14187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30460 comm="syz.6.10119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 358.307146][T30495] netlink: 'syz.2.10126': attribute type 10 has an invalid length. [ 358.315203][T30495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10126'. [ 358.324816][T30495] dummy0: entered promiscuous mode [ 358.339473][T30495] bond0: (slave dummy0): Releasing backup interface [ 358.475360][T16467] Process accounting resumed [ 358.644127][T30547] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10147'. [ 358.830190][T30559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10154'. [ 358.906367][T30559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10154'. [ 358.927227][T30567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10158'. [ 359.189772][T30549] serio: Serial port ptm0 [ 359.335930][T30597] syz.4.10167: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 359.350678][T30597] CPU: 0 UID: 0 PID: 30597 Comm: syz.4.10167 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 359.350731][T30597] Tainted: [W]=WARN [ 359.350738][T30597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.350751][T30597] Call Trace: [ 359.350760][T30597] [ 359.350769][T30597] __dump_stack+0x1d/0x30 [ 359.350872][T30597] dump_stack_lvl+0xe8/0x140 [ 359.350893][T30597] dump_stack+0x15/0x1b [ 359.350916][T30597] warn_alloc+0x12b/0x1a0 [ 359.351016][T30597] __vmalloc_node_range_noprof+0x9c/0xe00 [ 359.351058][T30597] ? __futex_wait+0x1ff/0x260 [ 359.351100][T30597] ? __pfx_futex_wake_mark+0x10/0x10 [ 359.351137][T30597] ? __rcu_read_unlock+0x4f/0x70 [ 359.351262][T30597] ? avc_has_perm_noaudit+0x1b1/0x200 [ 359.351302][T30597] ? should_fail_ex+0x30/0x280 [ 359.351329][T30597] ? xskq_create+0x36/0xe0 [ 359.351416][T30597] vmalloc_user_noprof+0x7d/0xb0 [ 359.351449][T30597] ? xskq_create+0x80/0xe0 [ 359.351483][T30597] xskq_create+0x80/0xe0 [ 359.351557][T30597] xsk_init_queue+0x95/0xf0 [ 359.351592][T30597] xsk_setsockopt+0x477/0x640 [ 359.351679][T30597] ? __pfx_xsk_setsockopt+0x10/0x10 [ 359.351707][T30597] __sys_setsockopt+0x181/0x200 [ 359.351737][T30597] __x64_sys_setsockopt+0x64/0x80 [ 359.351809][T30597] x64_sys_call+0x20ec/0x2ff0 [ 359.351830][T30597] do_syscall_64+0xd2/0x200 [ 359.351869][T30597] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 359.351906][T30597] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 359.351990][T30597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.352018][T30597] RIP: 0033:0x7f7e3718ebe9 [ 359.352037][T30597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.352058][T30597] RSP: 002b:00007f7e35bef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 359.352156][T30597] RAX: ffffffffffffffda RBX: 00007f7e373b5fa0 RCX: 00007f7e3718ebe9 [ 359.352172][T30597] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 359.352188][T30597] RBP: 00007f7e37211e19 R08: 0000000000000004 R09: 0000000000000000 [ 359.352203][T30597] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 359.352276][T30597] R13: 00007f7e373b6038 R14: 00007f7e373b5fa0 R15: 00007ffd26ae26d8 [ 359.352359][T30597] [ 359.352367][T30597] Mem-Info: [ 359.582645][T30597] active_anon:41320 inactive_anon:10258 isolated_anon:0 [ 359.582645][T30597] active_file:16712 inactive_file:14491 isolated_file:0 [ 359.582645][T30597] unevictable:0 dirty:265 writeback:0 [ 359.582645][T30597] slab_reclaimable:4116 slab_unreclaimable:253750 [ 359.582645][T30597] mapped:28832 shmem:39511 pagetables:1186 [ 359.582645][T30597] sec_pagetables:0 bounce:0 [ 359.582645][T30597] kernel_misc_reclaimable:0 [ 359.582645][T30597] free:1585148 free_pcp:16533 free_cma:0 [ 359.628541][T30597] Node 0 active_anon:163192kB inactive_anon:41032kB active_file:66848kB inactive_file:53788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115328kB dirty:1060kB writeback:0kB shmem:158044kB kernel_stack:5312kB pagetables:4744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 359.656808][T30597] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 359.685574][T30597] lowmem_reserve[]: 0 2883 7862 7862 [ 359.691063][T30597] Node 0 DMA32 free:2949208kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952840kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 359.721424][T30597] lowmem_reserve[]: 0 0 4978 4978 [ 359.726585][T30597] Node 0 Normal free:3378436kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:163128kB inactive_anon:41032kB active_file:66848kB inactive_file:53788kB unevictable:0kB writepending:1068kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:66196kB local_pcp:29544kB free_cma:0kB [ 359.759450][T30597] lowmem_reserve[]: 0 0 0 0 [ 359.764229][T30597] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 359.777037][T30597] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949208kB [ 359.793315][T30597] Node 0 Normal: 3083*4kB (UME) 1639*8kB (UME) 411*16kB (UME) 104*32kB (UME) 156*64kB (UME) 134*128kB (UME) 118*256kB (UME) 151*512kB (UME) 154*1024kB (UM) 58*2048kB (UME) 716*4096kB (UM) = 3379220kB [ 359.813519][T30597] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 359.823006][T30597] 69930 total pagecache pages [ 359.827724][T30597] 267 pages in swap cache [ 359.832221][T30597] Free swap = 96556kB [ 359.836304][T30597] Total swap = 124996kB [ 359.840578][T30597] 2097051 pages RAM [ 359.844469][T30597] 0 pages HighMem/MovableOnly [ 359.849242][T30597] 80441 pages reserved [ 360.012388][T30633] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 360.080537][T30639] netlink: 'syz.2.10181': attribute type 7 has an invalid length. [ 360.088455][T30639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10181'. [ 360.163896][T30653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10186'. [ 360.584198][T30698] $Hÿ: left promiscuous mode [ 360.589287][T30698] dummy0: left promiscuous mode [ 360.761151][T30707] vlan1: entered allmulticast mode [ 360.766491][T30707] bridge_slave_0: entered allmulticast mode [ 361.258066][T30742] bridge: RTM_NEWNEIGH with invalid ether address [ 361.262808][T30753] loop2: detected capacity change from 0 to 512 [ 361.292482][T30753] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 361.327991][T30753] EXT4-fs (loop2): 1 truncate cleaned up [ 361.345144][T30753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.398667][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.826164][T30780] dummy0: left promiscuous mode [ 361.835565][T30780] wg2: left promiscuous mode [ 361.840304][T30780] wg2: left allmulticast mode [ 362.280027][T30837] loop2: detected capacity change from 0 to 512 [ 362.339034][T30837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 362.412950][T30837] ext4 filesystem being mounted at /513/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.818293][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.925613][T30846] __nla_validate_parse: 9 callbacks suppressed [ 362.925635][T30846] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10238'. [ 363.650803][T30902] loop6: detected capacity change from 0 to 512 [ 363.669681][T30902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.682910][T30902] ext4 filesystem being mounted at /417/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 363.724802][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.806357][T30926] netlink: 180 bytes leftover after parsing attributes in process `syz.6.10256'. [ 363.835265][T30926] netlink: 180 bytes leftover after parsing attributes in process `syz.6.10256'. [ 364.465713][T30972] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10277'. [ 364.520385][T30977] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 364.573107][T30984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10281'. [ 364.657490][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 364.657504][ T29] audit: type=1326 audit(1755730250.258:14272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.687841][ T29] audit: type=1326 audit(1755730250.258:14273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.754864][ T29] audit: type=1326 audit(1755730250.258:14274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.778830][ T29] audit: type=1326 audit(1755730250.258:14275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.802674][ T29] audit: type=1326 audit(1755730250.258:14276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.826514][ T29] audit: type=1326 audit(1755730250.258:14277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.850409][ T29] audit: type=1326 audit(1755730250.258:14278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.874376][ T29] audit: type=1326 audit(1755730250.258:14279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.898259][ T29] audit: type=1326 audit(1755730250.258:14280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 364.922159][ T29] audit: type=1326 audit(1755730250.348:14281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31006 comm="syz.2.10287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 365.072207][T31026] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 365.122524][T31033] $Hÿ: renamed from bond0 [ 365.131583][T31033] $Hÿ: entered promiscuous mode [ 365.136687][T31033] bond_slave_0: entered promiscuous mode [ 365.142809][T31033] bond_slave_1: entered promiscuous mode [ 365.151309][T31033] dummy0: entered promiscuous mode [ 365.248227][T31040] random: crng reseeded on system resumption [ 365.279703][T31046] netlink: 'syz.1.10302': attribute type 1 has an invalid length. [ 365.287595][T31046] netlink: 'syz.1.10302': attribute type 4 has an invalid length. [ 365.295763][T31046] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10302'. [ 365.315955][T31046] netlink: 'syz.1.10302': attribute type 1 has an invalid length. [ 365.323955][T31046] netlink: 'syz.1.10302': attribute type 4 has an invalid length. [ 365.331922][T31046] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.10302'. [ 365.375063][T31056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10307'. [ 365.509442][T31058] loop2: detected capacity change from 0 to 8192 [ 365.601469][T31071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10312'. [ 365.634905][T31076] netlink: 100 bytes leftover after parsing attributes in process `syz.1.10313'. [ 365.661836][T31071] 8021q: adding VLAN 0 to HW filter on device bond6 [ 365.699368][T31071] vlan0: entered allmulticast mode [ 365.704570][T31071] bond6: entered allmulticast mode [ 366.135417][T31155] pimreg: entered allmulticast mode [ 366.148933][T31155] pimreg: left allmulticast mode [ 366.307957][T31168] vlan0: entered allmulticast mode [ 368.621051][T31347] sctp: [Deprecated]: syz.3.10354 (pid 31347) Use of int in maxseg socket option. [ 368.621051][T31347] Use struct sctp_assoc_value instead [ 368.890672][T31383] __nla_validate_parse: 4 callbacks suppressed [ 368.890692][T31383] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10357'. [ 369.093403][T31401] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10360'. [ 369.509908][T31447] netlink: 'syz.3.10374': attribute type 12 has an invalid length. [ 369.564159][T31454] pimreg: entered allmulticast mode [ 369.573207][T31454] pimreg: left allmulticast mode [ 369.694604][T31467] openvswitch: netlink: Message has 6 unknown bytes. [ 369.904549][T31483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10392'. [ 369.924447][T31483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10392'. [ 370.001009][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 370.001026][ T29] audit: type=1326 audit(1755730255.608:14317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 370.031252][ T29] audit: type=1326 audit(1755730255.608:14318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 370.122991][ T29] audit: type=1326 audit(1755730255.668:14319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 370.123109][ T29] audit: type=1326 audit(1755730255.668:14320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 370.123155][ T29] audit: type=1326 audit(1755730255.668:14321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 370.123185][ T29] audit: type=1326 audit(1755730255.668:14322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4aed20d550 code=0x7ffc0000 [ 370.123309][ T29] audit: type=1326 audit(1755730255.668:14323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 370.123345][ T29] audit: type=1326 audit(1755730255.668:14324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 370.123433][ T29] audit: type=1326 audit(1755730255.678:14325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31488 comm="syz.2.10393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 370.422163][ T29] audit: type=1326 audit(1755730256.008:14326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31502 comm="syz.1.10401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 370.473693][T31511] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10397'. [ 370.827843][T31556] loop2: detected capacity change from 0 to 1024 [ 370.846677][T31556] EXT4-fs: Ignoring removed orlov option [ 370.864799][T31556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.940202][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.988985][T31573] loop2: detected capacity change from 0 to 1024 [ 370.996325][T31573] ext4: Unknown parameter 'nouser_xattr' [ 371.009423][T31573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10416'. [ 371.053153][T31581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10432'. [ 371.766066][T31640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10435'. [ 371.813096][T31647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10437'. [ 372.231716][T31685] loop6: detected capacity change from 0 to 1024 [ 372.238539][T31685] EXT4-fs: Ignoring removed orlov option [ 372.246429][T31685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.283894][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.516609][T31705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10454'. [ 372.950677][T31751] loop2: detected capacity change from 0 to 512 [ 372.997502][T31751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.011999][T31751] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.097505][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.651721][T31794] loop6: detected capacity change from 0 to 164 [ 373.661580][T31794] Unable to read rock-ridge attributes [ 373.669505][T31794] Unable to read rock-ridge attributes [ 373.676378][T31794] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 373.812212][T31822] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 374.331893][T31896] __nla_validate_parse: 3 callbacks suppressed [ 374.331910][T31896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10507'. [ 374.350256][T31893] SELinux: failed to load policy [ 375.032366][T31919] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31919 comm=syz.4.10525 [ 375.045093][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 375.051396][ T29] audit: type=1400 audit(1755730260.639:14439): avc: denied { ioctl } for pid=31914 comm="syz.3.10517" path="socket:[96500]" dev="sockfs" ino=96500 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.479428][T31988] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10539'. [ 375.836993][T32068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10557'. [ 375.893268][ T29] audit: type=1326 audit(1755730261.499:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 375.951057][ T29] audit: type=1326 audit(1755730261.529:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 375.975042][ T29] audit: type=1326 audit(1755730261.529:14442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 375.998998][ T29] audit: type=1326 audit(1755730261.539:14443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 376.022858][ T29] audit: type=1326 audit(1755730261.539:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 376.046727][ T29] audit: type=1326 audit(1755730261.539:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 376.070417][ T29] audit: type=1326 audit(1755730261.539:14446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 376.094327][ T29] audit: type=1326 audit(1755730261.539:14447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 376.118171][ T29] audit: type=1326 audit(1755730261.539:14448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32073 comm="syz.6.10560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9c8e2ebe9 code=0x7ffc0000 [ 376.346008][T32106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10575'. [ 376.358911][T32106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.393927][T32116] macvtap0: refused to change device tx_queue_len [ 376.418607][T32122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10580'. [ 376.694267][T32152] netlink: 'syz.6.10591': attribute type 1 has an invalid length. [ 376.738335][T32161] atomic_op ffff888127020928 conn xmit_atomic 0000000000000000 [ 376.765311][T32167] ªªªªªª: renamed from bond_slave_0 [ 377.067368][T32215] vlan0: entered allmulticast mode [ 377.519847][T32279] netlink: 'syz.3.10626': attribute type 30 has an invalid length. [ 377.778363][T32308] tipc: Started in network mode [ 377.783288][T32308] tipc: Node identity ac14140f, cluster identity 4711 [ 377.792799][T32308] tipc: New replicast peer: 255.255.255.83 [ 377.798981][T32308] tipc: Enabled bearer , priority 10 [ 377.840644][T32315] bridge0: failed insert local address into bridge forwarding table [ 377.864657][T32317] loop6: detected capacity change from 0 to 128 [ 377.871290][T32315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10638'. [ 377.887881][T32317] FAT-fs (loop6): Directory bread(block 162) failed [ 377.894581][T32317] FAT-fs (loop6): Directory bread(block 163) failed [ 377.903247][T32317] FAT-fs (loop6): Directory bread(block 164) failed [ 377.911962][T32317] FAT-fs (loop6): Directory bread(block 165) failed [ 377.918752][T32317] FAT-fs (loop6): Directory bread(block 166) failed [ 377.925589][T32317] FAT-fs (loop6): Directory bread(block 167) failed [ 377.932354][T32317] FAT-fs (loop6): Directory bread(block 168) failed [ 377.939239][T32317] FAT-fs (loop6): Directory bread(block 169) failed [ 377.948638][T32317] FAT-fs (loop6): Directory bread(block 162) failed [ 377.958498][T32317] FAT-fs (loop6): Directory bread(block 163) failed [ 377.965684][T32317] bio_check_eod: 16 callbacks suppressed [ 377.965701][T32317] syz.6.10639: attempt to access beyond end of device [ 377.965701][T32317] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 377.989188][T32317] syz.6.10639: attempt to access beyond end of device [ 377.989188][T32317] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 378.075143][T32354] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 378.221506][T32376] bond2: entered allmulticast mode [ 378.231248][T32376] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.239001][T32376] bridge0: port 1(bond2) entered blocking state [ 378.245511][T32376] bridge0: port 1(bond2) entered disabled state [ 378.256840][T32376] bond2: entered promiscuous mode [ 378.529453][T32465] loop2: detected capacity change from 0 to 2048 [ 378.539953][T32465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.555594][T32465] ext4 filesystem being mounted at /600/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.570231][T32465] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.10667: bit already cleared for inode 15 [ 378.593499][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.647350][T32488] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.10672'. [ 378.672624][T32490] loop2: detected capacity change from 0 to 512 [ 378.681937][T32490] EXT4-fs: Ignoring removed mblk_io_submit option [ 378.691179][T32490] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 378.705492][T32490] EXT4-fs (loop2): 1 truncate cleaned up [ 378.711886][T32490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.916970][ T1044] tipc: Node number set to 2886997007 [ 378.974272][T32528] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10688'. [ 379.550195][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.186901][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 380.186921][ T29] audit: type=1326 audit(1755730265.779:14604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.217058][ T29] audit: type=1326 audit(1755730265.779:14605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.240969][ T29] audit: type=1326 audit(1755730265.779:14606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.264866][ T29] audit: type=1326 audit(1755730265.779:14607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.288674][ T29] audit: type=1326 audit(1755730265.779:14608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.312676][ T29] audit: type=1326 audit(1755730265.779:14609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.336669][ T29] audit: type=1326 audit(1755730265.779:14610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.360409][ T29] audit: type=1326 audit(1755730265.779:14611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.384432][ T29] audit: type=1326 audit(1755730265.779:14612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.408227][ T29] audit: type=1326 audit(1755730265.779:14613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32581 comm="syz.2.10710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aed20ebe9 code=0x7ffc0000 [ 380.828945][T32632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10731'. [ 380.838736][T32632] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10731'. [ 380.890939][T32636] netlink: 'syz.6.10732': attribute type 6 has an invalid length. [ 380.980968][T32649] netlink: 'syz.3.10738': attribute type 298 has an invalid length. [ 381.252594][T32688] pim6reg1: entered promiscuous mode [ 381.258104][T32688] pim6reg1: entered allmulticast mode [ 381.546614][T32710] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10761'. [ 381.559192][T32707] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10761'. [ 381.624850][T32715] loop2: detected capacity change from 0 to 1024 [ 381.659810][T32715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.675938][T32715] EXT4-fs error (device loop2): ext4_free_inode:354: comm syz.2.10764: bit already cleared for inode 14 [ 381.691728][T32720] gtp0: entered promiscuous mode [ 381.731825][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.809814][T32735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10770'. [ 381.819242][T32735] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10770'. [ 381.890430][T32735] bridge0: port 2(vlan1) entered blocking state [ 381.896878][T32735] bridge0: port 2(vlan1) entered disabled state [ 381.924158][T32735] vlan1: entered allmulticast mode [ 381.929469][T32735] bridge0: entered allmulticast mode [ 381.949160][T32735] vlan1: left allmulticast mode [ 381.954167][T32735] bridge0: left allmulticast mode [ 382.073281][T32760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10779'. [ 382.092364][T32760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10779'. [ 382.179847][ T308] loop6: detected capacity change from 0 to 4096 [ 382.193057][ T308] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.343623][ T324] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10787'. [ 382.355398][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.365404][ T319] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.10787'. [ 382.603733][ T380] loop6: detected capacity change from 0 to 512 [ 382.618149][ T380] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 382.728245][ T413] loop6: detected capacity change from 0 to 2048 [ 382.774577][ T413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.803230][ T413] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 102 with max blocks 1 with error 28 [ 382.815722][ T413] EXT4-fs (loop6): This should not happen!! Data will be lost [ 382.815722][ T413] [ 382.825410][ T413] EXT4-fs (loop6): Total free blocks count 0 [ 382.831682][ T413] EXT4-fs (loop6): Free/Dirty block details [ 382.837651][ T413] EXT4-fs (loop6): free_blocks=0 [ 382.842616][ T413] EXT4-fs (loop6): dirty_blocks=0 [ 382.847801][ T413] EXT4-fs (loop6): Block reservation details [ 382.853884][ T413] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 382.877034][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.048170][ T449] netlink: 'syz.3.10832': attribute type 298 has an invalid length. [ 383.212393][ T476] loop6: detected capacity change from 0 to 512 [ 383.244446][ T484] serio: Serial port ptm0 [ 383.259622][ T476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.272839][ T476] ext4 filesystem being mounted at /564/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.299226][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.615802][ T552] loop6: detected capacity change from 0 to 128 [ 384.527965][ T615] loop2: detected capacity change from 0 to 4096 [ 384.547454][ T615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.833028][T21871] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.976918][ T663] loop2: detected capacity change from 0 to 8192 [ 384.987122][ T663] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 385.073113][ T678] loop6: detected capacity change from 0 to 512 [ 385.099737][ T678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.122643][ T679] loop2: detected capacity change from 8192 to 0 [ 385.129465][ C1] I/O error, dev loop2, sector 1 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 385.138746][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 385.147287][ T663] syz.2.10912: attempt to access beyond end of device [ 385.147287][ T663] loop2: rw=0, sector=1, nr_sectors = 1 limit=0 [ 385.171227][ T663] FAT-fs (loop2): FAT read failed (blocknr 1) [ 385.183782][ T663] syz.2.10912: attempt to access beyond end of device [ 385.183782][ T663] loop2: rw=0, sector=65, nr_sectors = 1 limit=0 [ 385.199019][ T663] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 385.207506][ T663] syz.2.10912: attempt to access beyond end of device [ 385.207506][ T663] loop2: rw=2049, sector=85, nr_sectors = 1 limit=0 [ 385.220853][ T663] Buffer I/O error on dev loop2, logical block 85, lost async page write [ 385.229905][ T663] syz.2.10912: attempt to access beyond end of device [ 385.229905][ T663] loop2: rw=2049, sector=97, nr_sectors = 1 limit=0 [ 385.230441][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.243342][ T663] Buffer I/O error on dev loop2, logical block 97, lost async page write [ 385.243372][ T663] syz.2.10912: attempt to access beyond end of device [ 385.243372][ T663] loop2: rw=2049, sector=98, nr_sectors = 1 limit=0 [ 385.243397][ T663] Buffer I/O error on dev loop2, logical block 98, lost async page write [ 385.243418][ T663] syz.2.10912: attempt to access beyond end of device [ 385.243418][ T663] loop2: rw=2049, sector=99, nr_sectors = 1 limit=0 [ 385.296414][ T663] Buffer I/O error on dev loop2, logical block 99, lost async page write [ 385.316812][ T663] syz.2.10912: attempt to access beyond end of device [ 385.316812][ T663] loop2: rw=2049, sector=100, nr_sectors = 1 limit=0 [ 385.330404][ T663] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 385.339982][ T663] syz.2.10912: attempt to access beyond end of device [ 385.339982][ T663] loop2: rw=2049, sector=101, nr_sectors = 1 limit=0 [ 385.353454][ T663] Buffer I/O error on dev loop2, logical block 101, lost async page write [ 385.365054][ T663] syz.2.10912: attempt to access beyond end of device [ 385.365054][ T663] loop2: rw=2049, sector=102, nr_sectors = 1 limit=0 [ 385.378534][ T663] Buffer I/O error on dev loop2, logical block 102, lost async page write [ 385.393309][ T688] loop6: detected capacity change from 0 to 1024 [ 385.409476][ T688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.416613][ T663] syz.2.10912: attempt to access beyond end of device [ 385.416613][ T663] loop2: rw=2049, sector=103, nr_sectors = 1 limit=0 [ 385.434965][ T663] Buffer I/O error on dev loop2, logical block 103, lost async page write [ 385.484424][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.549945][T21871] FAT-fs (loop2): Directory bread(block 65) failed [ 385.562062][ T701] loop6: detected capacity change from 0 to 512 [ 385.564415][T21871] FAT-fs (loop2): Directory bread(block 66) failed [ 385.577182][ T701] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 385.589238][T21871] FAT-fs (loop2): Directory bread(block 67) failed [ 385.595973][T21871] FAT-fs (loop2): Directory bread(block 68) failed [ 385.604007][T21871] FAT-fs (loop2): Directory bread(block 69) failed [ 385.616384][ T701] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.10922: invalid indirect mapped block 4294967295 (level 0) [ 385.640813][T21871] FAT-fs (loop2): Directory bread(block 70) failed [ 385.651545][ T701] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.10922: invalid indirect mapped block 4294967295 (level 1) [ 385.677935][T21871] FAT-fs (loop2): Directory bread(block 71) failed [ 385.709668][ T701] EXT4-fs (loop6): 1 orphan inode deleted [ 385.715540][ T701] EXT4-fs (loop6): 1 truncate cleaned up [ 385.740231][ T5057] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 385.749411][T32738] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 385.768690][ T701] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.799978][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 385.799997][ T29] audit: type=1326 audit(385.770:14922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 385.829310][T32738] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050) [ 385.837674][T32738] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 385.866760][T23979] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.886324][ T29] audit: type=1326 audit(385.770:14923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 385.909358][ T29] audit: type=1326 audit(385.770:14924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 385.932496][ T29] audit: type=1326 audit(385.770:14925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 385.955543][ T29] audit: type=1326 audit(385.770:14926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 385.978577][ T29] audit: type=1326 audit(385.770:14927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 386.001646][ T29] audit: type=1326 audit(385.770:14928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 386.024610][ T29] audit: type=1326 audit(385.770:14929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 386.047640][ T29] audit: type=1326 audit(385.770:14930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=706 comm="syz.1.10925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 386.119303][ T715] __nla_validate_parse: 6 callbacks suppressed [ 386.119322][ T715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10927'. [ 386.196696][ T715] netem: change failed [ 386.365965][ T29] audit: type=1326 audit(386.330:14931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=739 comm="syz.1.10936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4aa76ebe9 code=0x7ffc0000 [ 386.448794][ T752] openvswitch: netlink: Message has 6 unknown bytes. [ 386.720725][ T729] chnl_net:caif_netlink_parms(): no params data found [ 386.799594][ T729] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.806899][ T729] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.826129][ T729] bridge_slave_0: entered allmulticast mode [ 386.840014][ T729] bridge_slave_0: entered promiscuous mode [ 386.861218][ T729] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.868491][ T729] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.884403][ T729] bridge_slave_1: entered allmulticast mode [ 386.896671][ T729] bridge_slave_1: entered promiscuous mode [ 386.940720][ T729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.054486][ T729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.102791][ T5046] ================================================================== [ 387.110932][ T5046] BUG: KCSAN: data-race in alloc_pid / copy_process [ 387.117628][ T5046] [ 387.119977][ T5046] read-write to 0xffffffff8685fc28 of 4 bytes by task 3680 on cpu 0: [ 387.128046][ T5046] alloc_pid+0x539/0x720 [ 387.132381][ T5046] copy_process+0xe25/0x2000 [ 387.136989][ T5046] kernel_clone+0x16c/0x5c0 [ 387.141592][ T5046] user_mode_thread+0x7d/0xb0 [ 387.146550][ T5046] call_usermodehelper_exec_work+0x41/0x160 [ 387.152465][ T5046] process_scheduled_works+0x4ce/0x9d0 [ 387.157943][ T5046] worker_thread+0x582/0x770 [ 387.162556][ T5046] kthread+0x486/0x510 [ 387.166668][ T5046] ret_from_fork+0xda/0x150 [ 387.171203][ T5046] ret_from_fork_asm+0x1a/0x30 [ 387.175979][ T5046] [ 387.178304][ T5046] read to 0xffffffff8685fc28 of 4 bytes by task 5046 on cpu 1: [ 387.185846][ T5046] copy_process+0x14a6/0x2000 [ 387.190539][ T5046] kernel_clone+0x16c/0x5c0 [ 387.195059][ T5046] user_mode_thread+0x7d/0xb0 [ 387.199753][ T5046] call_usermodehelper_exec_work+0x41/0x160 [ 387.205670][ T5046] process_scheduled_works+0x4ce/0x9d0 [ 387.211153][ T5046] worker_thread+0x582/0x770 [ 387.215767][ T5046] kthread+0x486/0x510 [ 387.219841][ T5046] ret_from_fork+0xda/0x150 [ 387.224353][ T5046] ret_from_fork_asm+0x1a/0x30 [ 387.229130][ T5046] [ 387.231453][ T5046] value changed: 0x80000163 -> 0x80000164 [ 387.237168][ T5046] [ 387.239503][ T5046] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 387.245675][ T5046] CPU: 1 UID: 0 PID: 5046 Comm: kworker/u8:32 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 387.257242][ T5046] Tainted: [W]=WARN [ 387.261054][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.271121][ T5046] Workqueue: events_unbound call_usermodehelper_exec_work [ 387.278259][ T5046] ================================================================== [ 387.354556][ T729] team0: Port device team_slave_0 added [ 387.367883][ T729] team0: Port device team_slave_1 added [ 388.228397][ T5046] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 388.237023][ T5046] $Hÿ (unregistering): Released all slaves [ 388.245414][ T5046] bond1 (unregistering): Released all slaves [ 388.253792][ T5046] bond2 (unregistering): Released all slaves [ 388.289971][ T5046] tipc: Left network mode [ 388.316246][ T5046] hsr_slave_0: left promiscuous mode [ 388.469182][ T5046] IPVS: stop unused estimator thread 0... [ 388.731494][ T5046] bridge_slave_1: left allmulticast mode [ 388.737237][ T5046] bridge_slave_1: left promiscuous mode [ 388.742939][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.750700][ T5046] bridge_slave_0: left allmulticast mode [ 388.756476][ T5046] bridge_slave_0: left promiscuous mode [ 388.762398][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.770965][ T5046] bond2: left promiscuous mode [ 388.776082][ T5046] bridge0: port 1(bond2) entered disabled state [ 388.818097][ T5046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.828077][ T5046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.838080][ T5046] bond0 (unregistering): Released all slaves [ 389.119283][ T5046] bond0 (unregistering): (slave ªªªªªª): Releasing backup interface [ 389.128186][ T5046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.137653][ T5046] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 389.146159][ T5046] bond0 (unregistering): Released all slaves [ 389.154742][ T5046] bond1 (unregistering): Released all slaves [ 389.162995][ T5046] bond2 (unregistering): Released all slaves [ 389.209057][ T5046] tipc: Disabling bearer [ 389.214038][ T5046] tipc: Left network mode [ 389.252805][ T5046] hsr_slave_0: left promiscuous mode [ 389.259485][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.267280][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.278732][ T5046] team0 (unregistering): Port device team_slave_1 removed [ 389.288886][ T5046] team0 (unregistering): Port device team_slave_0 removed [ 389.352786][ T5046] team0 (unregistering): Port device team_slave_1 removed [ 389.362933][ T5046] team0 (unregistering): Port device team_slave_0 removed