last executing test programs: 6m8.316361713s ago: executing program 1 (id=2064): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000080), 0x20) read(r0, &(0x7f00000000c0)=""/66, 0x42) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r1, 0x0, 0x0) 6m8.138237167s ago: executing program 1 (id=2072): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, 0xffffffffffffffff) sendfile(r2, r2, 0x0, 0x24002deb) 6m8.084008291s ago: executing program 1 (id=2073): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 6m8.083475662s ago: executing program 1 (id=2074): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1e58d7, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10dc43, 0x0) 6m8.039850705s ago: executing program 1 (id=2079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 6m7.769844037s ago: executing program 1 (id=2090): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) io_uring_enter(r1, 0x567, 0x72, 0x0, 0x0, 0x0) 6m7.700488882s ago: executing program 32 (id=2090): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r1 = syz_io_uring_setup(0x73d3, &(0x7f0000000680)={0x0, 0x7d89, 0x10100, 0x3, 0x289}, &(0x7f0000000540)=0x0, &(0x7f0000000700)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) io_uring_enter(r1, 0x567, 0x72, 0x0, 0x0, 0x0) 6m3.599409305s ago: executing program 2 (id=2260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 6m3.491883134s ago: executing program 2 (id=2263): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 6m3.458980066s ago: executing program 2 (id=2265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x4) 6m3.438540918s ago: executing program 2 (id=2268): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f0000000300)='./file0/../file0\x00', 0x0) 6m3.345525296s ago: executing program 2 (id=2271): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fgetxattr(r0, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 6m2.79615549s ago: executing program 2 (id=2287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffa, 0x1007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x2, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfdfffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 6m2.732374485s ago: executing program 33 (id=2287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffa, 0x1007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x2, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x1, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfdfffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 5m11.62194673s ago: executing program 6 (id=4112): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x128) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0xe, 0x1001f0) fallocate(r0, 0x3, 0x9, 0x10000) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0xb51, 0x0) 5m11.49255523s ago: executing program 6 (id=4117): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000005c0)='F', 0x1}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r1, &(0x7f0000000100)={0x0, 0x24, &(0x7f0000000080)=[{&(0x7f0000000340)=""/251, 0x2}], 0x1}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)="d3", 0x1}], 0x1}, 0x0) 5m11.366268561s ago: executing program 6 (id=4119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 5m11.348261362s ago: executing program 6 (id=4120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f41e236ffc6234b02e86dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 5m11.138670029s ago: executing program 6 (id=4123): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) flock(0xffffffffffffffff, 0x6) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) 5m10.946793605s ago: executing program 6 (id=4131): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 5m10.910747678s ago: executing program 34 (id=4131): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 4m59.566485217s ago: executing program 7 (id=4506): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r0 = socket(0x2, 0x2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) clock_getres(0x5, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) 4m59.518778722s ago: executing program 7 (id=4511): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x10, 0x4) 4m59.466512986s ago: executing program 7 (id=4513): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000102) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 4m59.255582513s ago: executing program 7 (id=4522): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) 4m59.236572714s ago: executing program 7 (id=4524): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="180000ffffffef00000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4m59.057943349s ago: executing program 7 (id=4537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 4m59.050367529s ago: executing program 35 (id=4537): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 3.398534894s ago: executing program 8 (id=7311): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.330255819s ago: executing program 8 (id=7313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000015a, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESOCT, @ANYBLOB='f']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x50a, &(0x7f0000000940)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) 3.317500301s ago: executing program 3 (id=7314): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 3.241557717s ago: executing program 0 (id=7315): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x9}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r7, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 2.650218265s ago: executing program 0 (id=7319): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 2.58983475s ago: executing program 4 (id=7321): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) 2.501900777s ago: executing program 8 (id=7323): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 2.446460521s ago: executing program 4 (id=7324): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r3 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 1.959042151s ago: executing program 3 (id=7326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r3, &(0x7f0000000300), 0x10) r6 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r6, 0x7006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x8000000000000000}, 0x18) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000306030000000000000000000a80000305000100070000000500010007000000050001000700000005000100070000002b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) 1.821074762s ago: executing program 5 (id=7327): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r2, &(0x7f0000000300), 0x10) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r5, 0x7006) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 1.278716556s ago: executing program 0 (id=7328): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x0, 0x88d, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {0x2}, {}, @raw32={[0x0, 0x0, 0x3]}}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xb00000, &(0x7f00000002c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@init_itable_val={'init_itable', 0x3d, 0x80}}, {@acl}], [{@pcr={'pcr', 0x3d, 0x34}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', 0xee01}}, {@uid_lt={'uid<', r0}}, {@fowner_lt={'fowner<', r0}}, {@func={'func', 0x3d, 'FILE_MMAP'}}, {@uid_eq={'uid', 0x3d, r1}}, {@subj_type}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) r2 = semget$private(0x0, 0x6, 0x3b9) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x1}], 0x1, 0x0) semop(r2, &(0x7f0000000180)=[{}, {}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1.270912237s ago: executing program 8 (id=7329): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x9}, 0x18) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, &(0x7f0000000200)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r7, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 1.258718298s ago: executing program 3 (id=7330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001680)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x20000}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.23788625s ago: executing program 4 (id=7331): bpf$MAP_CREATE(0x0, 0x0, 0x48) semget$private(0x0, 0x1, 0x61) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) creat(0x0, 0x198) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.203475002s ago: executing program 4 (id=7332): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0000000400000004000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000015a, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESOCT, @ANYBLOB='f']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x50a, &(0x7f0000000940)="$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") lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) 1.146390877s ago: executing program 8 (id=7333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x200000000000015a, &(0x7f0000000d40)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=bind:', @ANYRESOCT, @ANYBLOB='f']) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x76) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}}, 0x24}}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0), 0x64, 0x50a, &(0x7f0000000940)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0xee01) 1.071737083s ago: executing program 5 (id=7334): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1.060998524s ago: executing program 3 (id=7335): bpf$MAP_CREATE(0x0, 0x0, 0x48) semget$private(0x0, 0x1, 0x61) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) creat(0x0, 0x198) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 1.054112074s ago: executing program 5 (id=7336): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001b80)=ANY=[]) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x121}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x44f, &(0x7f0000000880)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) 200.640313ms ago: executing program 5 (id=7337): bpf$MAP_CREATE(0x0, 0x0, 0x48) semget$private(0x0, 0x1, 0x61) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 187.799204ms ago: executing program 0 (id=7338): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x9}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r8, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r9, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 122.46441ms ago: executing program 5 (id=7339): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001b80)=ANY=[]) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x121}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x44f, &(0x7f0000000880)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) 99.740622ms ago: executing program 0 (id=7340): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001b80)=ANY=[]) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x121}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x44f, &(0x7f0000000880)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) unlink(&(0x7f0000000180)='./file1\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x48) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xff, 0x0, 0x7ffc1ffb}]}) 90.766732ms ago: executing program 5 (id=7341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r3, &(0x7f0000000300), 0x10) r6 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r6, 0x7006) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000100"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x8000000000000000}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000000306030000000000000000000a80000305000100070000000500010007000000050001000700000005000100070000002b"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x2000c000) 89.986093ms ago: executing program 4 (id=7342): bpf$MAP_CREATE(0x0, 0x0, 0x48) semget$private(0x0, 0x1, 0x61) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) creat(0x0, 0x198) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 84.744583ms ago: executing program 3 (id=7343): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5, 0x0, 0x9}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, &(0x7f0000000080)) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000100)={0x1c, r8, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) 57.798355ms ago: executing program 0 (id=7344): socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c004000dc212b25294b3703d42afe4e365ad4be83a6723295ca799d4f20d73c7d122bba54218c1d610811779d96a7162a340abc13d6c8e1444b2e03f2083fc4df00195bd7549359dc23760470", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2519000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xbb, 0x10000}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a00"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) bind$can_raw(r2, &(0x7f0000000300), 0x10) r5 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x40802) ioctl$RTC_PIE_OFF(r5, 0x7006) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bind(&(0x7f0000000700)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x11010, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x83, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010003020000de2505a1a440000102030109027100020109400b0904000001020d000005240600010524005c000d240f0106000000d90004000806241a0500101524120400a317a88b045e4f01a607c0ffcb7e392a0905810340000e05080904010000020d00000904010102020d000009058202000268b2740eeb5cd7ce84020401"], &(0x7f0000000580)={0x0, 0x0, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="050f050000b97c5d9ee86ddf28964a67a49dde8e4d40b304d8e4a77bd3f725ce41f26db3e0ae9ab1882c0167c7e8751704dbf1938f0fbf4fcc9b8a862c92b5750fa6fe88a5"]}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) 57.507995ms ago: executing program 4 (id=7345): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r4 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r7, r5, 0x0, 0x40001) sendfile(r7, r6, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) 518µs ago: executing program 8 (id=7346): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600a40003401c000100035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_retopts={{0x18, 0x0, 0x7, {[@rr={0x7, 0x3, 0x21}, @generic={0x7, 0x2}]}}}], 0x18}}], 0x1, 0x4044000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 0s ago: executing program 3 (id=7347): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) openat(r0, &(0x7f0000000100)='./bus/file0\x00', 0x4c4c01, 0x28) sync() setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000007c0), 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) flock(0xffffffffffffffff, 0x5) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x6) r3 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r6, r4, 0x0, 0x40001) sendfile(r6, r5, 0x0, 0x7ffff000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) kernel console output (not intermixed with test programs): nting filesystem 00000000-0000-0000-0000-000000000000. [ 297.847874][T20119] futex_atomic_op_inuser: 10 callbacks suppressed [ 297.847896][T20119] futex_wake_op: syz.8.6283 tries to shift op by -1; fix this program [ 297.866276][T20119] loop8: detected capacity change from 0 to 512 [ 297.873206][T20119] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 297.885826][T20119] EXT4-fs (loop8): orphan cleanup on readonly fs [ 297.892431][T20119] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.6283: Block bitmap for bg 0 marked uninitialized [ 297.905915][T20119] EXT4-fs (loop8): Remounting filesystem read-only [ 297.913017][T20119] EXT4-fs (loop8): 1 orphan inode deleted [ 297.919057][T20119] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 297.952480][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.955042][T20125] syz!: rxe_newlink: already configured on team_slave_0 [ 297.976771][T20127] futex_wake_op: syz.8.6285 tries to shift op by -1; fix this program [ 298.021365][T20131] futex_wake_op: syz.5.6287 tries to shift op by -1; fix this program [ 298.056958][T20139] futex_wake_op: syz.5.6290 tries to shift op by -1; fix this program [ 298.072341][T20141] rxe_newlink: 5 callbacks suppressed [ 298.072356][T20141] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 298.115177][T20145] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 298.192718][T20146] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 298.727362][T20150] tipc: Enabled bearer , priority 0 [ 298.734635][T20149] tipc: Resetting bearer [ 298.748280][T20149] tipc: Disabling bearer [ 298.822595][T20158] futex_wake_op: syz.3.6296 tries to shift op by -1; fix this program [ 298.848471][T20158] __nla_validate_parse: 52 callbacks suppressed [ 298.848484][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6296'. [ 298.868227][T20163] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 298.988598][T20177] syz!: rxe_newlink: already configured on team_slave_0 [ 299.151979][T20182] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 299.667872][T20192] futex_wake_op: syz.8.6308 tries to shift op by -1; fix this program [ 299.678837][T20192] loop8: detected capacity change from 0 to 512 [ 299.686540][T20192] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 299.699924][T20192] EXT4-fs (loop8): orphan cleanup on readonly fs [ 299.707637][T20192] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.6308: Block bitmap for bg 0 marked uninitialized [ 299.707961][T20198] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 299.721624][T20192] EXT4-fs (loop8): Remounting filesystem read-only [ 299.734109][T20192] EXT4-fs (loop8): 1 orphan inode deleted [ 299.740700][T20192] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 299.777078][T20192] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6308'. [ 299.793142][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.983737][T20215] loop8: detected capacity change from 0 to 512 [ 300.027307][T20215] EXT4-fs (loop8): orphan cleanup on readonly fs [ 300.034383][T20215] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6313: bg 0: block 248: padding at end of block bitmap is not set [ 300.049473][T20215] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.6313: Failed to acquire dquot type 1 [ 300.061431][T20215] EXT4-fs (loop8): 1 truncate cleaned up [ 300.068164][T20215] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.666122][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.709021][T20228] futex_wake_op: syz.8.6320 tries to shift op by -1; fix this program [ 300.767231][T20231] loop8: detected capacity change from 0 to 512 [ 300.784536][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 300.784547][ T29] audit: type=1326 audit(1754923926.029:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.8.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 300.787046][T20233] futex_wake_op: syz.5.6322 tries to shift op by -1; fix this program [ 300.790759][ T29] audit: type=1326 audit(1754923926.029:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.8.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 300.814602][ T29] audit: type=1326 audit(1754923926.061:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.8.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 300.869742][ T29] audit: type=1326 audit(1754923926.061:10686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.8.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 300.893330][ T29] audit: type=1326 audit(1754923926.061:10687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.8.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 300.942305][ T29] audit: type=1326 audit(1754923926.168:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20230 comm="syz.8.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 300.955476][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6322'. [ 301.232483][T20256] futex_wake_op: syz.3.6329 tries to shift op by -1; fix this program [ 301.259738][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6329'. [ 301.520622][ T29] audit: type=1326 audit(1754923926.812:10689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20269 comm="syz.0.6334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x0 [ 301.563586][T20275] loop8: detected capacity change from 0 to 512 [ 301.571591][ T29] audit: type=1326 audit(1754923926.876:10690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.8.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 301.595623][ T29] audit: type=1326 audit(1754923926.876:10691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.8.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 301.618712][T20276] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 301.619303][ T29] audit: type=1326 audit(1754923926.876:10692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20273 comm="syz.8.6335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 301.827493][T20284] syz!: rxe_newlink: already configured on team_slave_0 [ 302.109310][T20292] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 302.317774][T20296] futex_wake_op: syz.0.6344 tries to shift op by -1; fix this program [ 302.346014][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6344'. [ 302.423064][T20311] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 302.512632][T20312] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 302.758315][T20325] syz!: rxe_newlink: already configured on team_slave_0 [ 302.776051][T20326] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 303.225526][T20338] futex_wake_op: syz.0.6360 tries to shift op by -1; fix this program [ 303.253479][T20338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6360'. [ 303.297507][T20346] futex_wake_op: syz.0.6363 tries to shift op by -1; fix this program [ 303.327262][T20346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6363'. [ 303.486277][T20359] loop8: detected capacity change from 0 to 512 [ 303.780266][T20371] syz!: rxe_newlink: already configured on team_slave_0 [ 304.638487][T20380] syz!: rxe_newlink: already configured on team_slave_0 [ 304.784144][T20390] futex_wake_op: syz.5.6380 tries to shift op by -1; fix this program [ 304.821638][T20390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6380'. [ 304.837101][T20393] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 304.849347][T20395] futex_wake_op: syz.8.6381 tries to shift op by -1; fix this program [ 304.871513][T20395] loop8: detected capacity change from 0 to 512 [ 304.883148][T20395] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 304.895791][T20395] EXT4-fs (loop8): orphan cleanup on readonly fs [ 304.902484][T20395] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.6381: Block bitmap for bg 0 marked uninitialized [ 304.915916][T20395] EXT4-fs (loop8): Remounting filesystem read-only [ 304.922606][T20395] EXT4-fs (loop8): 1 orphan inode deleted [ 304.928833][T20395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 304.961323][T20395] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6381'. [ 304.982898][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.086322][T20405] futex_wake_op: syz.8.6385 tries to shift op by -1; fix this program [ 305.097713][T20405] loop8: detected capacity change from 0 to 512 [ 305.104676][T20405] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 305.115601][T20405] EXT4-fs (loop8): orphan cleanup on readonly fs [ 305.122241][T20405] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.6385: Block bitmap for bg 0 marked uninitialized [ 305.136305][T20405] EXT4-fs (loop8): Remounting filesystem read-only [ 305.142881][T20405] EXT4-fs (loop8): 1 orphan inode deleted [ 305.151040][T20405] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 305.183062][T20405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6385'. [ 305.203684][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.304964][T20423] futex_wake_op: syz.8.6391 tries to shift op by -1; fix this program [ 305.315284][T20423] loop8: detected capacity change from 0 to 512 [ 305.322024][T20423] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 305.332502][T20423] EXT4-fs (loop8): orphan cleanup on readonly fs [ 305.339049][T20423] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:517: comm syz.8.6391: Block bitmap for bg 0 marked uninitialized [ 305.352908][T20423] EXT4-fs (loop8): Remounting filesystem read-only [ 305.359770][T20423] EXT4-fs (loop8): 1 orphan inode deleted [ 305.365950][T20423] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 305.402825][T20423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6391'. [ 305.418733][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.631480][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 305.631494][ T29] audit: type=1326 audit(1754923931.222:10810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20449 comm="syz.4.6400" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x0 [ 305.670778][T20448] Falling back ldisc for ttyS3. [ 305.732761][T20455] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 306.126630][T20464] futex_wake_op: syz.3.6405 tries to shift op by -1; fix this program [ 306.192159][T20464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6405'. [ 306.315505][T20472] 9pnet_virtio: no channels available for device GPL [ 306.333560][ T29] audit: type=1326 audit(1754923931.973:10811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20471 comm="syz.0.6408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x0 [ 306.441541][T20477] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 306.460767][ T29] audit: type=1326 audit(1754923932.112:10812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20478 comm="syz.8.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 306.484442][ T29] audit: type=1326 audit(1754923932.112:10813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20478 comm="syz.8.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 306.508065][ T29] audit: type=1326 audit(1754923932.112:10814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20478 comm="syz.8.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 306.531609][ T29] audit: type=1326 audit(1754923932.112:10815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20478 comm="syz.8.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 306.555290][ T29] audit: type=1326 audit(1754923932.112:10816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20478 comm="syz.8.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 306.579118][ T29] audit: type=1326 audit(1754923932.112:10817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20478 comm="syz.8.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 306.602732][ T29] audit: type=1326 audit(1754923932.112:10818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20478 comm="syz.8.6411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 306.709705][T20486] Falling back ldisc for ttyS3. [ 306.807404][ T29] audit: type=1326 audit(1754923932.488:10819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20500 comm="syz.5.6419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 306.837334][T20503] futex_wake_op: syz.5.6420 tries to shift op by -1; fix this program [ 306.867339][T20503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6420'. [ 307.529978][T20520] futex_wake_op: syz.3.6425 tries to shift op by -1; fix this program [ 307.558532][T20520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6425'. [ 307.688441][T20527] Falling back ldisc for ttyS3. [ 307.820599][T20536] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 307.837620][T20537] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 308.197971][T20543] loop8: detected capacity change from 0 to 512 [ 308.451338][T20546] futex_wake_op: syz.3.6433 tries to shift op by -1; fix this program [ 308.479900][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6433'. [ 308.652615][T20562] tipc: Enabling of bearer rejected, failed to enable media [ 308.856582][T20575] futex_wake_op: syz.0.6444 tries to shift op by -1; fix this program [ 308.880273][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6444'. [ 308.901844][T20579] futex_wake_op: syz.0.6445 tries to shift op by -1; fix this program [ 308.925852][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6445'. [ 309.074381][T20589] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 309.321992][T20591] tipc: Enabling of bearer rejected, failed to enable media [ 309.868476][T20613] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 309.900334][T20615] loop8: detected capacity change from 0 to 512 [ 310.318549][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 310.318564][ T29] audit: type=1326 audit(1754923936.254:10930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20624 comm="syz.4.6461" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x0 [ 310.352488][ T29] audit: type=1326 audit(1754923936.286:10931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20626 comm="syz.3.6462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x0 [ 310.448934][T20630] syz!: rxe_newlink: already configured on team_slave_0 [ 310.770726][ T29] audit: type=1326 audit(1754923936.736:10932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20639 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 310.794386][ T29] audit: type=1326 audit(1754923936.736:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20639 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 310.820108][ T29] audit: type=1326 audit(1754923936.790:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20639 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 310.843652][ T29] audit: type=1326 audit(1754923936.790:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20639 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 310.867237][ T29] audit: type=1326 audit(1754923936.790:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20639 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 310.872529][T20642] loop8: detected capacity change from 0 to 512 [ 310.890864][ T29] audit: type=1326 audit(1754923936.790:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20639 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 310.890890][ T29] audit: type=1326 audit(1754923936.801:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20639 comm="syz.0.6467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 310.945974][ T29] audit: type=1326 audit(1754923936.930:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20641 comm="syz.8.6468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 311.157384][T20653] futex_wake_op: syz.3.6472 tries to shift op by -1; fix this program [ 311.171328][T20653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6472'. [ 311.197386][T20656] futex_wake_op: syz.3.6473 tries to shift op by -1; fix this program [ 311.225797][T20656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6473'. [ 311.266887][T20661] tipc: Enabled bearer , priority 0 [ 311.274421][T20660] tipc: Resetting bearer [ 311.295917][T20660] tipc: Disabling bearer [ 311.639526][T20672] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 312.536216][T20695] tipc: Enabled bearer , priority 0 [ 312.543478][T20694] tipc: Resetting bearer [ 312.556574][T20694] tipc: Disabling bearer [ 312.669887][T20700] loop8: detected capacity change from 0 to 512 [ 312.856630][T20710] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 313.339439][T20725] syz!: rxe_newlink: already configured on team_slave_0 [ 313.511601][T20729] loop8: detected capacity change from 0 to 512 [ 314.132991][T20744] futex_wake_op: syz.3.6504 tries to shift op by -1; fix this program [ 314.170706][T20749] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 314.324587][T20752] Falling back ldisc for ttyS3. [ 314.455798][T20761] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 314.494194][T20763] tipc: Enabled bearer , priority 0 [ 314.501638][T20762] tipc: Resetting bearer [ 314.519071][T20762] tipc: Disabling bearer [ 314.752388][T20776] tipc: Enabled bearer , priority 0 [ 314.760011][T20775] tipc: Resetting bearer [ 314.773061][T20775] tipc: Disabling bearer [ 314.906677][T20783] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 315.113991][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 315.114006][ T29] audit: type=1326 audit(1754923941.393:11065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20788 comm="syz.0.6522" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x0 [ 315.157922][T20793] tipc: Enabling of bearer rejected, failed to enable media [ 315.174541][T20794] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 315.202869][ T29] audit: type=1326 audit(1754923941.500:11066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20795 comm="syz.5.6525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x0 [ 315.237912][T20797] Falling back ldisc for ttyS3. [ 315.298846][T20802] tipc: Enabling of bearer rejected, failed to enable media [ 315.809571][T20810] loop8: detected capacity change from 0 to 512 [ 315.821070][ T29] audit: type=1326 audit(1754923942.155:11067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.8.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 315.844771][ T29] audit: type=1326 audit(1754923942.155:11068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.8.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 315.928684][ T29] audit: type=1326 audit(1754923942.155:11069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.8.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 315.952339][ T29] audit: type=1326 audit(1754923942.155:11070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.8.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 315.975935][ T29] audit: type=1326 audit(1754923942.155:11071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.8.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 315.999588][ T29] audit: type=1326 audit(1754923942.208:11072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.8.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 316.023418][ T29] audit: type=1326 audit(1754923942.208:11073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.8.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 316.047189][ T29] audit: type=1326 audit(1754923942.208:11074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20809 comm="syz.8.6530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 316.087084][T20818] tipc: Enabling of bearer rejected, failed to enable media [ 316.145974][T20822] tipc: Enabling of bearer rejected, failed to enable media [ 316.176701][T20828] tipc: Enabling of bearer rejected, failed to enable media [ 316.244618][T20824] Falling back ldisc for ttyS3. [ 316.338770][T20840] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 316.637067][T20843] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 316.992378][T20849] tipc: Enabling of bearer rejected, failed to enable media [ 317.077765][T20856] syz!: rxe_newlink: already configured on team_slave_0 [ 317.091246][T20858] tipc: Enabling of bearer rejected, failed to enable media [ 317.113197][T20860] tipc: Enabling of bearer rejected, failed to enable media [ 317.230752][T20863] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 317.469242][T20866] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 317.870138][T20874] syz!: rxe_newlink: already configured on team_slave_0 [ 317.899066][T20875] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 318.018138][T20878] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 318.172085][T20880] tipc: Enabled bearer , priority 0 [ 318.179581][T20879] tipc: Resetting bearer [ 318.191301][T20879] tipc: Disabling bearer [ 318.570863][T20895] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 318.650031][T20899] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 318.859865][T20905] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 319.215023][T20928] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 319.437714][T20937] loop8: detected capacity change from 0 to 512 [ 319.448668][T20938] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 319.498517][T20937] EXT4-fs (loop8): orphan cleanup on readonly fs [ 319.506119][T20937] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6576: bg 0: block 248: padding at end of block bitmap is not set [ 319.521301][T20937] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.6576: Failed to acquire dquot type 1 [ 319.534430][T20937] EXT4-fs (loop8): 1 truncate cleaned up [ 319.541213][T20937] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.777822][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 319.777834][ T29] audit: type=1326 audit(1754923946.403:11176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20934 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 319.830055][ T29] audit: type=1326 audit(1754923946.435:11177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20934 comm="syz.3.6578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 319.858205][T20943] tipc: Enabling of bearer rejected, failed to enable media [ 319.918931][T20950] tipc: Enabling of bearer rejected, failed to enable media [ 319.928241][ T29] audit: type=1326 audit(1754923946.553:11178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20949 comm="syz.4.6583" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x0 [ 319.971577][ T29] audit: type=1326 audit(1754923946.607:11179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.5.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 319.995296][ T29] audit: type=1326 audit(1754923946.607:11180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.5.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 320.019071][ T29] audit: type=1326 audit(1754923946.607:11181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.5.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 320.019357][T20958] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 320.042561][ T29] audit: type=1326 audit(1754923946.607:11182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.5.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 320.072773][ T29] audit: type=1326 audit(1754923946.607:11183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.5.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 320.096380][ T29] audit: type=1326 audit(1754923946.607:11184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.5.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 320.119995][ T29] audit: type=1326 audit(1754923946.607:11185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20954 comm="syz.5.6584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 320.228450][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.360221][T20974] tipc: Enabled bearer , priority 0 [ 320.367731][T20973] tipc: Resetting bearer [ 320.379299][T20973] tipc: Disabling bearer [ 320.885061][T21008] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 321.140595][T21013] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 321.436812][T21018] tipc: Enabled bearer , priority 0 [ 321.444256][T21017] tipc: Resetting bearer [ 321.455592][T21017] tipc: Disabling bearer [ 321.478388][T21020] loop8: detected capacity change from 0 to 512 [ 321.986696][T21053] tmpfs: Bad value for 'mpol' [ 322.033596][T21055] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 322.313644][T21059] loop8: detected capacity change from 0 to 512 [ 323.144040][T21077] tipc: Enabled bearer , priority 0 [ 323.269210][T21076] tipc: Resetting bearer [ 323.283922][T21076] tipc: Disabling bearer [ 323.551456][T21096] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 323.591308][T21101] netlink: 356 bytes leftover after parsing attributes in process `syz.5.6630'. [ 323.649043][T21113] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 323.872428][T21124] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 324.008056][T21130] loop8: detected capacity change from 0 to 512 [ 324.446765][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 324.446778][ T29] audit: type=1326 audit(1754923951.414:11474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21138 comm="syz.3.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.481443][ T29] audit: type=1326 audit(1754923951.446:11475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21140 comm="syz.3.6644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.505060][ T29] audit: type=1326 audit(1754923951.457:11476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.3.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.528809][ T29] audit: type=1326 audit(1754923951.457:11477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.3.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.552555][ T29] audit: type=1326 audit(1754923951.457:11478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.3.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.576164][ T29] audit: type=1326 audit(1754923951.457:11479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.3.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.599725][ T29] audit: type=1326 audit(1754923951.457:11480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.3.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.623312][ T29] audit: type=1326 audit(1754923951.457:11481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.3.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.646921][ T29] audit: type=1326 audit(1754923951.457:11482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.3.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.670499][ T29] audit: type=1326 audit(1754923951.467:11483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21141 comm="syz.3.6645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 324.711128][T21145] tipc: Enabling of bearer rejected, failed to enable media [ 324.792853][T21152] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 324.956661][T21162] netlink: 356 bytes leftover after parsing attributes in process `syz.5.6652'. [ 325.150211][T21172] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 325.233005][T21173] loop8: detected capacity change from 0 to 512 [ 325.267585][T21173] EXT4-fs (loop8): orphan cleanup on readonly fs [ 325.275279][T21173] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6655: bg 0: block 248: padding at end of block bitmap is not set [ 325.291221][T21173] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.6655: Failed to acquire dquot type 1 [ 325.303703][T21173] EXT4-fs (loop8): 1 truncate cleaned up [ 325.582150][T21184] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 325.645983][T21173] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 325.666202][T21187] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 325.868735][T21194] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 325.909738][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.041550][T21198] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 326.127097][T21209] netlink: 356 bytes leftover after parsing attributes in process `syz.3.6669'. [ 326.137525][T21210] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 326.160841][T21206] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 326.239418][T21218] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.6672'. [ 326.377785][T21233] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 326.417416][T21234] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 326.465531][T21235] syz!: rxe_newlink: already configured on team_slave_0 [ 326.919412][T21240] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 327.157913][T21244] validate_nla: 1 callbacks suppressed [ 327.157932][T21244] netlink: 'syz.5.6683': attribute type 21 has an invalid length. [ 327.171551][T21244] netlink: 'syz.5.6683': attribute type 1 has an invalid length. [ 327.179374][T21244] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6683'. [ 327.210567][T21247] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 327.390138][T21255] syz!: rxe_newlink: already configured on team_slave_0 [ 327.763657][T21266] loop8: detected capacity change from 0 to 128 [ 327.771738][T21266] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 327.784427][T21266] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.809296][T14580] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 327.837806][T21275] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 327.918751][T21279] netlink: 'syz.0.6695': attribute type 21 has an invalid length. [ 327.926814][T21279] netlink: 'syz.0.6695': attribute type 1 has an invalid length. [ 327.934581][T21279] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6695'. [ 328.079118][T21287] netlink: 'syz.3.6698': attribute type 21 has an invalid length. [ 328.087102][T21287] netlink: 'syz.3.6698': attribute type 1 has an invalid length. [ 328.094863][T21287] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6698'. [ 328.108235][T21287] sd 0:0:1:0: device reset [ 328.126765][T21289] tmpfs: Bad value for 'mpol' [ 328.688513][T21297] netlink: 'syz.4.6701': attribute type 21 has an invalid length. [ 328.696584][T21297] netlink: 'syz.4.6701': attribute type 1 has an invalid length. [ 328.704403][T21297] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6701'. [ 328.873064][T21304] rxe_newlink: 2 callbacks suppressed [ 328.873078][T21304] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 329.056976][T21308] netlink: 'syz.3.6705': attribute type 21 has an invalid length. [ 329.107314][T21308] netlink: 'syz.3.6705': attribute type 1 has an invalid length. [ 329.115118][T21308] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6705'. [ 329.149785][T21311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6706'. [ 329.159783][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 329.159798][ T29] audit: type=1326 audit(1754923956.446:11911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc94cc85967 code=0x7ffc0000 [ 329.189627][ T29] audit: type=1326 audit(1754923956.456:11912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc94cc2ab89 code=0x7ffc0000 [ 329.213156][ T29] audit: type=1326 audit(1754923956.456:11913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc94cc85967 code=0x7ffc0000 [ 329.236726][ T29] audit: type=1326 audit(1754923956.456:11914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc94cc2ab89 code=0x7ffc0000 [ 329.260324][ T29] audit: type=1326 audit(1754923956.456:11915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 329.283947][ T29] audit: type=1326 audit(1754923956.456:11916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 329.307802][ T29] audit: type=1326 audit(1754923956.456:11917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 329.331304][ T29] audit: type=1326 audit(1754923956.456:11918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 329.354836][ T29] audit: type=1326 audit(1754923956.456:11919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 329.378515][ T29] audit: type=1326 audit(1754923956.531:11920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21307 comm="syz.3.6705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 329.390470][T21315] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 329.438167][T21317] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6708'. [ 329.457475][T21319] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6709'. [ 331.433064][T21335] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6715'. [ 331.475040][T21335] sd 0:0:1:0: device reset [ 332.522833][T21345] validate_nla: 8 callbacks suppressed [ 332.522848][T21345] netlink: 'syz.0.6718': attribute type 21 has an invalid length. [ 332.547347][T21348] netlink: 'syz.8.6720': attribute type 21 has an invalid length. [ 332.572508][T21348] netlink: 'syz.8.6720': attribute type 1 has an invalid length. [ 332.580339][T21348] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6720'. [ 332.591571][T21345] netlink: 'syz.0.6718': attribute type 1 has an invalid length. [ 332.599357][T21345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6718'. [ 332.620784][T21348] sd 0:0:1:0: device reset [ 332.628795][T21357] netlink: 'syz.3.6722': attribute type 21 has an invalid length. [ 332.637573][T21357] netlink: 'syz.3.6722': attribute type 1 has an invalid length. [ 332.645454][T21357] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6722'. [ 332.690755][T21364] netlink: 'syz.0.6726': attribute type 21 has an invalid length. [ 332.700956][T21357] sd 0:0:1:0: device reset [ 332.705597][T21364] netlink: 'syz.0.6726': attribute type 1 has an invalid length. [ 332.711293][T21367] netlink: 'syz.8.6727': attribute type 21 has an invalid length. [ 332.713324][T21364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6726'. [ 332.730820][T21367] netlink: 'syz.8.6727': attribute type 1 has an invalid length. [ 332.770074][T21367] sd 0:0:1:0: device reset [ 333.174651][T21384] loop8: detected capacity change from 0 to 128 [ 333.208744][T21384] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.257778][T21384] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.379672][T21393] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 333.466101][T14580] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.626527][T21397] __nla_validate_parse: 2 callbacks suppressed [ 333.626551][T21397] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6736'. [ 333.642018][T21401] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6739'. [ 333.655457][T21401] sd 0:0:1:0: device reset [ 333.681374][T21404] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6740'. [ 333.696577][T21404] sd 0:0:1:0: device reset [ 333.789917][T21414] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6744'. [ 333.803984][T21414] sd 0:0:1:0: device reset [ 333.847478][T21417] loop8: detected capacity change from 0 to 512 [ 333.870879][T21417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.891735][T21417] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.910467][T21417] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 333.927195][T21417] EXT4-fs (loop8): Remounting filesystem read-only [ 334.005976][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.020670][ T6847] __quota_error: 267 callbacks suppressed [ 334.020687][ T6847] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 334.040873][ T6847] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 334.546422][T21432] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6749'. [ 334.564872][T21433] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6750'. [ 334.610288][ T29] audit: type=1326 audit(1754923962.314:12188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21431 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 334.676866][ T29] audit: type=1326 audit(1754923962.379:12189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21430 comm="syz.5.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 334.700546][ T29] audit: type=1326 audit(1754923962.379:12190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21430 comm="syz.5.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 334.724115][ T29] audit: type=1326 audit(1754923962.379:12191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21430 comm="syz.5.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe582ad310 code=0x7ffc0000 [ 334.747710][ T29] audit: type=1326 audit(1754923962.379:12192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21430 comm="syz.5.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 334.771361][ T29] audit: type=1326 audit(1754923962.379:12193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21430 comm="syz.5.6749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 334.867978][T21433] sd 0:0:1:0: device reset [ 334.904788][ T29] audit: type=1326 audit(1754923962.583:12194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21431 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 334.928413][ T29] audit: type=1326 audit(1754923962.593:12195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21431 comm="syz.8.6750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a58fd310 code=0x7ffc0000 [ 334.970944][T21440] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6753'. [ 335.019532][T21445] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6755'. [ 335.146893][T21459] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6761'. [ 335.222607][T21461] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 335.336340][T21464] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6762'. [ 337.393269][T21468] validate_nla: 22 callbacks suppressed [ 337.393285][T21468] netlink: 'syz.4.6764': attribute type 21 has an invalid length. [ 337.406967][T21468] netlink: 'syz.4.6764': attribute type 1 has an invalid length. [ 338.152138][T21470] netlink: 'syz.4.6765': attribute type 21 has an invalid length. [ 338.160088][T21470] netlink: 'syz.4.6765': attribute type 1 has an invalid length. [ 338.502773][T21481] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 338.611818][T21485] netlink: 'syz.3.6768': attribute type 21 has an invalid length. [ 338.650466][T21485] netlink: 'syz.3.6768': attribute type 1 has an invalid length. [ 338.658252][T21485] __nla_validate_parse: 2 callbacks suppressed [ 338.658265][T21485] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6768'. [ 338.725871][T21486] sd 0:0:1:0: device reset [ 338.731115][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 338.731128][ T29] audit: type=1326 audit(1754923966.713:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.3.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 338.760934][ T29] audit: type=1326 audit(1754923966.724:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.3.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 338.784522][ T29] audit: type=1326 audit(1754923966.724:12315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.3.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc94cc8d310 code=0x7ffc0000 [ 338.808116][ T29] audit: type=1326 audit(1754923966.724:12316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.3.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 338.831761][ T29] audit: type=1326 audit(1754923966.724:12317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.3.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 338.855375][ T29] audit: type=1326 audit(1754923966.735:12318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.3.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 338.903265][ T29] audit: type=1326 audit(1754923966.906:12319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.3.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 338.926952][ T29] audit: type=1326 audit(1754923966.906:12320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21484 comm="syz.3.6768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 339.853737][T21493] netlink: 'syz.3.6773': attribute type 21 has an invalid length. [ 339.861619][T21493] netlink: 'syz.3.6773': attribute type 1 has an invalid length. [ 339.869419][T21493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6773'. [ 339.882294][ T29] audit: type=1326 audit(1754923967.979:12321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21492 comm="syz.3.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 341.801281][ T29] audit: type=1326 audit(1754923970.018:12322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21492 comm="syz.3.6773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc94cc8d310 code=0x7ffc0000 [ 341.996445][T21503] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 342.839525][T21508] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 343.866851][T21516] netlink: 'syz.5.6781': attribute type 21 has an invalid length. [ 343.875174][T21516] netlink: 'syz.5.6781': attribute type 1 has an invalid length. [ 343.882950][T21516] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6781'. [ 343.953010][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 343.953027][ T29] audit: type=1326 audit(1754923972.335:12340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe582a5967 code=0x7ffc0000 [ 343.992215][ T29] audit: type=1326 audit(1754923972.378:12341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbe5824ab89 code=0x7ffc0000 [ 344.015796][ T29] audit: type=1326 audit(1754923972.378:12342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbe582a5967 code=0x7ffc0000 [ 344.039312][ T29] audit: type=1326 audit(1754923972.378:12343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbe5824ab89 code=0x7ffc0000 [ 344.063072][ T29] audit: type=1326 audit(1754923972.378:12344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 344.088277][ T29] audit: type=1326 audit(1754923972.378:12345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 344.112037][ T29] audit: type=1326 audit(1754923972.378:12346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe582ad310 code=0x7ffc0000 [ 344.135608][ T29] audit: type=1326 audit(1754923972.378:12347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 344.159170][ T29] audit: type=1326 audit(1754923972.378:12348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 344.260560][T21525] netlink: 'syz.4.6783': attribute type 21 has an invalid length. [ 344.261568][ T29] audit: type=1326 audit(1754923972.636:12349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21514 comm="syz.5.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 344.298052][T21525] netlink: 'syz.4.6783': attribute type 1 has an invalid length. [ 344.305877][T21525] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6783'. [ 344.330191][T21530] netlink: 'syz.3.6786': attribute type 21 has an invalid length. [ 344.346087][T21530] netlink: 'syz.3.6786': attribute type 1 has an invalid length. [ 344.353956][T21530] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6786'. [ 344.416562][T21530] sd 0:0:1:0: device reset [ 344.449208][T21539] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 352.493825][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 352.493836][ T29] audit: type=1326 audit(1754923981.509:12475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 352.546229][ T29] audit: type=1326 audit(1754923981.562:12476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 352.572397][ T29] audit: type=1326 audit(1754923981.562:12477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f140fcad310 code=0x7ffc0000 [ 352.596045][ T29] audit: type=1326 audit(1754923981.562:12478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 352.619689][ T29] audit: type=1326 audit(1754923981.562:12479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 352.643368][ T29] audit: type=1326 audit(1754923981.562:12480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 352.666887][ T29] audit: type=1326 audit(1754923981.562:12481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 352.690534][ T29] audit: type=1326 audit(1754923981.562:12482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 352.705134][T21588] sd 0:0:1:0: device reset [ 352.714085][ T29] audit: type=1326 audit(1754923981.594:12483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 352.714125][ T29] audit: type=1326 audit(1754923981.594:12484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21585 comm="syz.0.6807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 353.308092][T21599] tipc: Enabled bearer , priority 0 [ 354.200480][T21593] tipc: Resetting bearer [ 355.622475][T21593] tipc: Disabling bearer [ 356.208422][T21610] tipc: Enabled bearer , priority 0 [ 356.218501][T21603] tipc: Resetting bearer [ 356.238467][T21603] tipc: Disabling bearer [ 359.131405][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6825'. [ 359.150499][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 359.150513][ T29] audit: type=1326 audit(1754923988.643:12568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.164451][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6825'. [ 359.180305][ T29] audit: type=1326 audit(1754923988.643:12569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.223243][ T29] audit: type=1326 audit(1754923988.686:12570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f9d7d310 code=0x7ffc0000 [ 359.246968][ T29] audit: type=1326 audit(1754923988.686:12571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.270783][ T29] audit: type=1326 audit(1754923988.686:12572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.294474][ T29] audit: type=1326 audit(1754923988.697:12573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.318257][ T29] audit: type=1326 audit(1754923988.697:12574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.341987][ T29] audit: type=1326 audit(1754923988.697:12575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.365975][ T29] audit: type=1326 audit(1754923988.697:12576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.389505][ T29] audit: type=1326 audit(1754923988.697:12577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21633 comm="syz.4.6826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 359.480985][T21650] tipc: Enabling of bearer rejected, failed to enable media [ 359.673082][T21655] netlink: 'syz.4.6833': attribute type 21 has an invalid length. [ 359.792038][T21655] netlink: 'syz.4.6833': attribute type 1 has an invalid length. [ 359.800013][T21655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6833'. [ 359.885271][T21658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6834'. [ 360.050331][T21638] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 360.396781][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6840'. [ 360.511523][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6840'. [ 361.085179][T21689] netlink: 'syz.5.6845': attribute type 21 has an invalid length. [ 361.106948][T21694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6849'. [ 361.116392][T21689] netlink: 'syz.5.6845': attribute type 1 has an invalid length. [ 361.124236][T21689] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6845'. [ 361.178427][T21697] tipc: Enabling of bearer rejected, failed to enable media [ 361.190422][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6852'. [ 361.251285][T21717] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6856'. [ 361.772858][T21727] tipc: Enabled bearer , priority 0 [ 361.789150][T21726] tipc: Resetting bearer [ 361.811365][T21726] tipc: Disabling bearer [ 362.364693][T21742] tipc: Enabled bearer , priority 0 [ 362.442896][T21740] tipc: Resetting bearer [ 362.545909][T21740] tipc: Disabling bearer [ 362.708026][T21752] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 362.805333][T21756] netlink: 'syz.5.6869': attribute type 21 has an invalid length. [ 362.837468][T21756] netlink: 'syz.5.6869': attribute type 1 has an invalid length. [ 366.119756][T21774] netlink: 'syz.8.6877': attribute type 21 has an invalid length. [ 366.131058][T21771] netlink: 'syz.4.6876': attribute type 21 has an invalid length. [ 366.141543][T21771] netlink: 'syz.4.6876': attribute type 1 has an invalid length. [ 366.149433][T21771] __nla_validate_parse: 3 callbacks suppressed [ 366.149446][T21771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6876'. [ 366.167227][T21774] netlink: 'syz.8.6877': attribute type 1 has an invalid length. [ 366.175127][T21774] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6877'. [ 366.187662][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6878'. [ 366.201275][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 366.201287][ T29] audit: type=1326 audit(1754923996.207:12810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.4.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 366.203065][T21774] sd 0:0:1:0: device reset [ 366.207549][ T29] audit: type=1326 audit(1754923996.207:12811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.4.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 366.259286][ T29] audit: type=1326 audit(1754923996.207:12812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.4.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 366.282990][ T29] audit: type=1326 audit(1754923996.207:12813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.4.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f44f9d808c7 code=0x7ffc0000 [ 366.306497][ T29] audit: type=1326 audit(1754923996.207:12814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.4.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f44f9d8083c code=0x7ffc0000 [ 366.329968][ T29] audit: type=1326 audit(1754923996.207:12815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.4.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f44f9d80774 code=0x7ffc0000 [ 366.353576][ T29] audit: type=1326 audit(1754923996.207:12816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.4.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f44f9d80774 code=0x7ffc0000 [ 366.354555][T21783] tipc: Enabled bearer , priority 0 [ 366.377036][ T29] audit: type=1326 audit(1754923996.207:12817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21769 comm="syz.4.6876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f44f9d7d60a code=0x7ffc0000 [ 366.407131][ T29] audit: type=1326 audit(1754923996.207:12818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.8.6877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 366.430701][ T29] audit: type=1326 audit(1754923996.207:12819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21773 comm="syz.8.6877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 366.457960][T21782] tipc: Resetting bearer [ 366.472931][T21782] tipc: Disabling bearer [ 366.494108][T21786] syz!: rxe_newlink: already configured on team_slave_0 [ 368.453842][T21794] loop8: detected capacity change from 0 to 128 [ 369.429510][T21794] ext4: Unknown parameter '@@' [ 369.555043][T21807] netlink: 'syz.4.6889': attribute type 21 has an invalid length. [ 369.622113][T21807] netlink: 'syz.4.6889': attribute type 1 has an invalid length. [ 369.629991][T21807] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6889'. [ 369.784166][T21811] netlink: 'syz.8.6892': attribute type 21 has an invalid length. [ 369.800641][T21811] netlink: 'syz.8.6892': attribute type 1 has an invalid length. [ 369.808420][T21811] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6892'. [ 369.873944][T21813] sd 0:0:1:0: device reset [ 369.893916][T21815] netlink: 'syz.4.6893': attribute type 21 has an invalid length. [ 369.922585][T21815] netlink: 'syz.4.6893': attribute type 1 has an invalid length. [ 369.930324][T21815] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6893'. [ 369.963177][T21817] sd 0:0:1:0: device reset [ 370.048330][T21828] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 372.021812][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 372.021825][ T29] audit: type=1326 audit(1754924002.462:12934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.8.6904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 373.005170][ T29] audit: type=1326 audit(1754924003.503:12935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21847 comm="syz.8.6904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 373.898468][ T29] audit: type=1326 audit(1754924004.469:12936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 373.922258][ T29] audit: type=1326 audit(1754924004.469:12937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 373.945911][ T29] audit: type=1326 audit(1754924004.469:12938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbe582ad310 code=0x7ffc0000 [ 373.969565][ T29] audit: type=1326 audit(1754924004.469:12939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 373.993145][ T29] audit: type=1326 audit(1754924004.469:12940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 374.016867][ T29] audit: type=1326 audit(1754924004.469:12941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 374.040379][ T29] audit: type=1326 audit(1754924004.469:12942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 374.063937][ T29] audit: type=1326 audit(1754924004.469:12943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21849 comm="syz.5.6905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 376.145810][T21857] tipc: Enabled bearer , priority 0 [ 376.154059][T21853] tipc: Resetting bearer [ 376.168887][T21853] tipc: Disabling bearer [ 377.250114][T21872] netlink: 'syz.0.6911': attribute type 21 has an invalid length. [ 377.272010][T21872] netlink: 'syz.0.6911': attribute type 1 has an invalid length. [ 377.279888][T21872] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6911'. [ 377.369079][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 377.369151][ T29] audit: type=1326 audit(1754924008.192:12953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f140fca5967 code=0x7ffc0000 [ 377.398741][ T29] audit: type=1326 audit(1754924008.192:12954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f140fc4ab89 code=0x7ffc0000 [ 377.422342][ T29] audit: type=1326 audit(1754924008.192:12955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f140fca5967 code=0x7ffc0000 [ 377.445827][ T29] audit: type=1326 audit(1754924008.192:12956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f140fc4ab89 code=0x7ffc0000 [ 377.469354][ T29] audit: type=1326 audit(1754924008.192:12957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 377.492954][ T29] audit: type=1326 audit(1754924008.192:12958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 377.516586][ T29] audit: type=1326 audit(1754924008.192:12959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f140fcad310 code=0x7ffc0000 [ 377.540148][ T29] audit: type=1326 audit(1754924008.192:12960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 377.563828][ T29] audit: type=1326 audit(1754924008.192:12961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 377.587383][ T29] audit: type=1326 audit(1754924008.192:12962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21871 comm="syz.0.6911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 377.633684][T21879] tipc: Enabling of bearer rejected, failed to enable media [ 377.677287][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6914'. [ 377.744980][T21885] loop8: detected capacity change from 0 to 512 [ 377.893229][T21893] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 377.911256][T21885] EXT4-fs (loop8): orphan cleanup on readonly fs [ 377.923989][T21885] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6909: bg 0: block 248: padding at end of block bitmap is not set [ 378.406489][T21885] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.6909: Failed to acquire dquot type 1 [ 378.482175][T21885] EXT4-fs (loop8): 1 truncate cleaned up [ 378.488737][T21885] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 378.909163][T21914] netlink: 'syz.5.6926': attribute type 21 has an invalid length. [ 378.948155][T21914] netlink: 'syz.5.6926': attribute type 1 has an invalid length. [ 378.956081][T21914] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6926'. [ 379.004144][T21916] netlink: 'syz.4.6925': attribute type 21 has an invalid length. [ 379.022612][T21916] netlink: 'syz.4.6925': attribute type 1 has an invalid length. [ 379.030548][T21916] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6925'. [ 379.062753][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.171334][T21926] sd 0:0:1:0: device reset [ 379.233251][T21939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6934'. [ 379.384714][T21942] sd 0:0:1:0: device reset [ 380.100669][T21948] sd 0:0:1:0: device reset [ 380.670475][T21960] loop8: detected capacity change from 0 to 512 [ 380.713416][T21960] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.810662][T21960] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.826310][T21969] netlink: 'syz.4.6943': attribute type 21 has an invalid length. [ 380.838617][T21969] netlink: 'syz.4.6943': attribute type 1 has an invalid length. [ 380.839377][T21960] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, [ 380.846387][T21969] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6943'. [ 380.863685][T21960] block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 380.887316][T21960] EXT4-fs (loop8): Remounting filesystem read-only [ 380.909255][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.944746][T21980] loop8: detected capacity change from 0 to 512 [ 380.972285][T21980] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.662847][T22004] sd 0:0:1:0: device reset [ 381.803595][T22006] sd 0:0:1:0: device reset [ 382.414195][T22016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6955'. [ 382.605395][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.670679][T22028] netlink: 'syz.8.6958': attribute type 21 has an invalid length. [ 382.697215][T22028] netlink: 'syz.8.6958': attribute type 1 has an invalid length. [ 382.704995][T22028] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6958'. [ 382.776200][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 382.776214][ T29] audit: type=1326 audit(1754924013.996:13173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22027 comm="syz.8.6958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 382.812200][T22028] sd 0:0:1:0: device reset [ 382.859323][ T29] audit: type=1326 audit(1754924014.028:13174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22027 comm="syz.8.6958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a58fd310 code=0x7ffc0000 [ 382.883087][ T29] audit: type=1326 audit(1754924014.028:13175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22027 comm="syz.8.6958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 382.906751][ T29] audit: type=1326 audit(1754924014.028:13176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22027 comm="syz.8.6958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 382.930384][ T29] audit: type=1326 audit(1754924014.028:13177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22027 comm="syz.8.6958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 383.298701][T22040] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 383.631885][ T29] audit: type=1326 audit(1754924014.114:13178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22027 comm="syz.8.6958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 383.655549][ T29] audit: type=1326 audit(1754924014.114:13179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22027 comm="syz.8.6958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 383.679311][ T29] audit: type=1326 audit(1754924014.425:13180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22038 comm="syz.0.6962" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x0 [ 384.204825][ T29] audit: type=1326 audit(1754924015.530:13181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22047 comm="syz.0.6965" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x0 [ 384.331906][T22054] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 385.200859][ T29] audit: type=1326 audit(1754924016.592:13182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22077 comm="syz.5.6976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 385.564231][T22093] loop8: detected capacity change from 0 to 512 [ 386.523643][T22102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6981'. [ 386.657258][T22106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6982'. [ 386.959542][T22120] loop8: detected capacity change from 0 to 512 [ 386.971523][T22120] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.090487][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6993'. [ 389.110133][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.264461][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 389.264476][ T29] audit: type=1326 audit(1754924020.959:13232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc94cc85967 code=0x7ffc0000 [ 389.335198][T22163] loop8: detected capacity change from 0 to 128 [ 389.354663][ T29] audit: type=1326 audit(1754924021.002:13233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc94cc2ab89 code=0x7ffc0000 [ 389.378364][ T29] audit: type=1326 audit(1754924021.002:13234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc94cc85967 code=0x7ffc0000 [ 389.402061][ T29] audit: type=1326 audit(1754924021.002:13235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc94cc2ab89 code=0x7ffc0000 [ 389.425630][ T29] audit: type=1326 audit(1754924021.002:13236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 389.449267][ T29] audit: type=1326 audit(1754924021.002:13237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 389.472961][ T29] audit: type=1326 audit(1754924021.002:13238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 389.496675][ T29] audit: type=1326 audit(1754924021.002:13239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 389.520281][ T29] audit: type=1326 audit(1754924021.002:13240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 389.543901][ T29] audit: type=1326 audit(1754924021.002:13241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22157 comm="syz.3.6996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 389.610321][T22163] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.623031][T22163] ext4 filesystem being mounted at /482/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.666353][T14580] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.819556][T22170] tipc: Enabling of bearer rejected, failed to enable media [ 393.123956][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7005'. [ 395.187627][T22225] sd 0:0:1:0: device reset [ 395.193348][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 395.193362][ T29] audit: type=1326 audit(1754924027.311:13260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22224 comm="syz.3.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 395.223165][ T29] audit: type=1326 audit(1754924027.311:13261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22224 comm="syz.3.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 395.246779][ T29] audit: type=1326 audit(1754924027.311:13262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22224 comm="syz.3.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc94cc8d310 code=0x7ffc0000 [ 395.270683][ T29] audit: type=1326 audit(1754924027.311:13263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22224 comm="syz.3.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 395.294316][ T29] audit: type=1326 audit(1754924027.311:13264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22224 comm="syz.3.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 395.317998][ T29] audit: type=1326 audit(1754924027.311:13265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22224 comm="syz.3.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 395.461731][ T29] audit: type=1326 audit(1754924027.590:13266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22224 comm="syz.3.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 395.485428][ T29] audit: type=1326 audit(1754924027.590:13267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22224 comm="syz.3.7011" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 395.609451][ T29] audit: type=1326 audit(1754924027.751:13268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22232 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 395.633116][ T29] audit: type=1326 audit(1754924027.751:13269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22232 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 395.695857][T22241] sd 0:0:1:0: device reset [ 397.298556][T22264] sd 0:0:1:0: device reset [ 397.357465][T22266] netlink: 'syz.4.7022': attribute type 21 has an invalid length. [ 397.374834][T22266] netlink: 'syz.4.7022': attribute type 1 has an invalid length. [ 397.382691][T22266] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7022'. [ 398.267395][T22284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7026'. [ 399.698151][T22300] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7029'. [ 399.827704][T22304] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 400.134469][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 400.134483][ T29] audit: type=1326 audit(1754924032.621:13339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 400.237615][ T29] audit: type=1326 audit(1754924032.621:13340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f140fcad310 code=0x7ffc0000 [ 400.261341][ T29] audit: type=1326 audit(1754924032.621:13341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 400.285005][ T29] audit: type=1326 audit(1754924032.621:13342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 400.308567][ T29] audit: type=1326 audit(1754924032.621:13343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 400.332299][ T29] audit: type=1326 audit(1754924032.621:13344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 400.355847][ T29] audit: type=1326 audit(1754924032.621:13345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 400.379599][ T29] audit: type=1326 audit(1754924032.621:13346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f140fcb08c7 code=0x7ffc0000 [ 400.403125][ T29] audit: type=1326 audit(1754924032.621:13347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f140fcb083c code=0x7ffc0000 [ 400.426684][ T29] audit: type=1326 audit(1754924032.621:13348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22307 comm="syz.0.7032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f140fcb0774 code=0x7ffc0000 [ 401.417469][T22343] sd 0:0:1:0: device reset [ 401.945716][T22352] netlink: 6040 bytes leftover after parsing attributes in process `syz.8.7045'. [ 402.128732][T22358] loop8: detected capacity change from 0 to 512 [ 402.627862][T22358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.657557][T22376] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7052'. [ 404.475660][T22401] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 404.707390][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.173008][T22403] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.7059'. [ 405.233366][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 405.233381][ T29] audit: type=1326 audit(1754924038.083:13466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.292657][T22405] sd 0:0:1:0: device reset [ 405.395322][ T29] audit: type=1326 audit(1754924038.125:13467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc94cc8d310 code=0x7ffc0000 [ 405.419025][ T29] audit: type=1326 audit(1754924038.125:13468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.442680][ T29] audit: type=1326 audit(1754924038.125:13469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.466386][ T29] audit: type=1326 audit(1754924038.147:13470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.489908][ T29] audit: type=1326 audit(1754924038.158:13471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.513686][ T29] audit: type=1326 audit(1754924038.158:13472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.537327][ T29] audit: type=1326 audit(1754924038.158:13473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.560921][ T29] audit: type=1326 audit(1754924038.168:13474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.584642][ T29] audit: type=1326 audit(1754924038.168:13475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22404 comm="syz.3.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x7ffc0000 [ 405.696607][T22413] loop8: detected capacity change from 0 to 512 [ 405.746108][T22413] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.799755][T22416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7063'. [ 406.073724][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7064'. [ 406.097473][T22428] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7065'. [ 406.101763][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7066'. [ 406.734362][T22446] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.7072'. [ 406.800646][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.953377][T22453] loop8: detected capacity change from 0 to 128 [ 406.984989][T22453] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 407.063902][T22453] ext4 filesystem being mounted at /497/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.162599][T14580] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 407.219731][T22463] loop8: detected capacity change from 0 to 512 [ 407.255611][T22463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.176569][T22479] netlink: 'syz.4.7080': attribute type 21 has an invalid length. [ 408.201485][T22479] netlink: 'syz.4.7080': attribute type 1 has an invalid length. [ 408.209252][T22479] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7080'. [ 408.341798][T22482] netlink: 'syz.4.7081': attribute type 21 has an invalid length. [ 408.349646][T22482] netlink: 'syz.4.7081': attribute type 1 has an invalid length. [ 408.357438][T22482] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7081'. [ 408.441697][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.466562][T22485] loop8: detected capacity change from 0 to 512 [ 408.499791][T22485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.210866][T22500] netlink: 6040 bytes leftover after parsing attributes in process `syz.3.7085'. [ 409.339350][T22506] tipc: Enabling of bearer rejected, failed to enable media [ 409.416436][T22511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7089'. [ 409.791774][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.058349][T22520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7092'. [ 410.774292][T22533] netlink: 'syz.8.7094': attribute type 21 has an invalid length. [ 410.802112][T22533] netlink: 'syz.8.7094': attribute type 1 has an invalid length. [ 410.809895][T22533] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7094'. [ 410.860166][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 410.860252][ T29] audit: type=1326 audit(1754924044.123:13512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.8.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 410.890033][ T29] audit: type=1326 audit(1754924044.123:13513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.8.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 410.922083][T22533] sd 0:0:1:0: device reset [ 410.950202][T22537] loop8: detected capacity change from 0 to 512 [ 410.967199][ T29] audit: type=1326 audit(1754924044.187:13514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.8.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a58fd310 code=0x7ffc0000 [ 410.991011][ T29] audit: type=1326 audit(1754924044.187:13515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.8.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 411.014666][ T29] audit: type=1326 audit(1754924044.187:13516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22532 comm="syz.8.7094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 411.058821][T22537] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.080640][ T29] audit: type=1326 audit(1754924044.359:13517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22538 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 411.104393][ T29] audit: type=1326 audit(1754924044.359:13518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22538 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 411.128063][ T29] audit: type=1326 audit(1754924044.359:13519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22538 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f9d7d310 code=0x7ffc0000 [ 411.151639][ T29] audit: type=1326 audit(1754924044.359:13520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22538 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 411.175768][ T29] audit: type=1326 audit(1754924044.359:13521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22538 comm="syz.4.7097" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 411.218475][T22543] sd 0:0:1:0: device reset [ 411.247696][T22546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7098'. [ 411.281962][T22549] netlink: 'syz.3.7099': attribute type 21 has an invalid length. [ 411.312681][T22549] netlink: 'syz.3.7099': attribute type 1 has an invalid length. [ 411.320484][T22549] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7099'. [ 411.336548][T22549] sd 0:0:1:0: device reset [ 412.694499][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.779450][T22570] netlink: 'syz.8.7105': attribute type 21 has an invalid length. [ 412.827434][T22570] netlink: 'syz.8.7105': attribute type 1 has an invalid length. [ 412.835230][T22570] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7105'. [ 412.874158][T22570] sd 0:0:1:0: device reset [ 413.904644][T22596] loop8: detected capacity change from 0 to 512 [ 413.931271][T22596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.099381][T22627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7121'. [ 415.252630][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.324851][T22632] loop8: detected capacity change from 0 to 512 [ 415.346644][T22632] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.692257][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.683156][T22668] loop8: detected capacity change from 0 to 512 [ 417.737477][T22668] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.016145][T22684] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.7134'. [ 419.046979][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.247882][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7137'. [ 419.437638][T22710] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7139'. [ 419.900105][T22719] netlink: 'syz.8.7141': attribute type 21 has an invalid length. [ 419.935948][T22719] netlink: 'syz.8.7141': attribute type 1 has an invalid length. [ 419.943793][T22719] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7141'. [ 419.967886][T22720] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7141'. [ 420.067490][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 420.067505][ T29] audit: type=1326 audit(1754924054.004:13614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.8.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 420.097261][ T29] audit: type=1326 audit(1754924054.004:13615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.8.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 420.204034][T22728] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7143'. [ 420.314564][ T29] audit: type=1326 audit(1754924054.069:13616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.8.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f23a58fd310 code=0x7ffc0000 [ 420.338255][ T29] audit: type=1326 audit(1754924054.069:13617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.8.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 420.361933][ T29] audit: type=1326 audit(1754924054.069:13618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.8.7141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x7ffc0000 [ 420.494470][ T29] audit: type=1326 audit(1754924054.423:13619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.5.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 420.518112][ T29] audit: type=1326 audit(1754924054.423:13620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.5.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 420.681294][ T29] audit: type=1326 audit(1754924054.455:13621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.5.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 420.705033][ T29] audit: type=1326 audit(1754924054.455:13622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.5.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 420.728601][ T29] audit: type=1326 audit(1754924054.455:13623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.5.7144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe582ae9a9 code=0x7ffc0000 [ 420.782708][T22737] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.7146'. [ 420.830682][T22740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7147'. [ 420.989783][T22744] netlink: 'syz.8.7149': attribute type 21 has an invalid length. [ 420.997630][T22744] netlink: 'syz.8.7149': attribute type 1 has an invalid length. [ 421.005398][T22744] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7149'. [ 421.037477][T22747] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7149'. [ 421.079784][T22747] sd 0:0:1:0: device reset [ 421.177201][T22752] loop8: detected capacity change from 0 to 512 [ 421.198857][T22752] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 421.758115][T22772] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7156'. [ 422.602730][T22782] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7158'. [ 423.246497][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.314953][T22801] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 423.397197][T22804] loop8: detected capacity change from 0 to 512 [ 423.423828][T22804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 424.774587][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.885409][T22847] loop8: detected capacity change from 0 to 512 [ 424.912520][T22847] EXT4-fs: Ignoring removed mblk_io_submit option [ 424.949192][T22847] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 424.992601][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 424.992616][ T29] audit: type=1326 audit(1754924059.283:13682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22848 comm="syz.3.7177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94cc8e9a9 code=0x0 [ 425.033138][T22847] EXT4-fs (loop8): 1 truncate cleaned up [ 425.068415][T22847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.137941][T22853] syz!: rxe_newlink: already configured on team_slave_0 [ 425.237926][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.338084][ T29] audit: type=1326 audit(1754924059.659:13683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22855 comm="syz.8.7178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23a58fe9a9 code=0x0 [ 425.528263][T22861] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 426.192042][T22867] loop8: detected capacity change from 0 to 512 [ 426.221054][ T29] audit: type=1326 audit(1754924060.603:13684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 426.244811][ T29] audit: type=1326 audit(1754924060.603:13685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 426.268611][ T29] audit: type=1326 audit(1754924060.603:13686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 426.292318][ T29] audit: type=1326 audit(1754924060.603:13687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 426.315998][ T29] audit: type=1326 audit(1754924060.603:13688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 426.339589][ T29] audit: type=1326 audit(1754924060.603:13689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 426.363191][ T29] audit: type=1326 audit(1754924060.603:13690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 426.386773][ T29] audit: type=1326 audit(1754924060.603:13691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22868 comm="syz.4.7183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 426.436900][T22867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.532757][T22875] netlink: 'syz.4.7185': attribute type 21 has an invalid length. [ 426.594779][T22875] netlink: 'syz.4.7185': attribute type 1 has an invalid length. [ 426.602551][T22875] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7185'. [ 428.531026][T22919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7195'. [ 429.134108][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.150509][T22933] loop8: detected capacity change from 0 to 512 [ 432.157246][T22933] EXT4-fs: Ignoring removed mblk_io_submit option [ 432.163988][T22933] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 432.189950][T22933] EXT4-fs (loop8): 1 truncate cleaned up [ 432.201731][T22933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.203670][T22939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7201'. [ 432.237043][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.246826][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 432.246841][ T29] audit: type=1326 audit(1754924067.062:13754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.276635][ T29] audit: type=1326 audit(1754924067.062:13755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.300254][ T29] audit: type=1326 audit(1754924067.062:13756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.323894][ T29] audit: type=1326 audit(1754924067.062:13757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.347884][ T29] audit: type=1326 audit(1754924067.062:13758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.371500][ T29] audit: type=1326 audit(1754924067.062:13759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.395219][ T29] audit: type=1326 audit(1754924067.062:13760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.418815][ T29] audit: type=1326 audit(1754924067.062:13761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44f9d7d310 code=0x7ffc0000 [ 432.442625][ T29] audit: type=1326 audit(1754924067.062:13762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.466595][ T29] audit: type=1326 audit(1754924067.062:13763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22943 comm="syz.4.7203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f9d7e9a9 code=0x7ffc0000 [ 432.519468][T22957] sd 0:0:1:0: device reset [ 433.323870][T22970] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7209'. [ 433.374961][T22972] netlink: 'syz.5.7210': attribute type 21 has an invalid length. [ 433.383875][T22972] netlink: 'syz.5.7210': attribute type 1 has an invalid length. [ 433.391668][T22972] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7210'. [ 433.523959][T22979] loop8: detected capacity change from 0 to 512 [ 433.567531][T22981] netlink: 'syz.5.7213': attribute type 21 has an invalid length. [ 433.577491][T22979] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.629596][T22981] netlink: 'syz.5.7213': attribute type 1 has an invalid length. [ 433.637370][T22981] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7213'. [ 433.857620][T22994] netlink: 6068 bytes leftover after parsing attributes in process `syz.5.7215'. [ 433.961572][T22999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7216'. [ 433.997038][T23001] tipc: Enabling of bearer rejected, failed to enable media [ 434.956524][T23026] netlink: 'syz.4.7224': attribute type 21 has an invalid length. [ 434.979559][T23026] netlink: 'syz.4.7224': attribute type 1 has an invalid length. [ 434.987356][T23026] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7224'. [ 435.048930][T23031] netlink: 6308 bytes leftover after parsing attributes in process `syz.4.7227'. [ 435.109624][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.130300][T23037] tipc: Enabling of bearer rejected, failed to enable media [ 435.151741][T23039] loop8: detected capacity change from 0 to 512 [ 435.184708][T23039] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.573039][T23057] tmpfs: Bad value for 'mpol' [ 436.461711][T23071] netlink: 'syz.0.7237': attribute type 21 has an invalid length. [ 436.507783][T23071] netlink: 'syz.0.7237': attribute type 1 has an invalid length. [ 436.515583][T23071] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7237'. [ 436.717886][T23079] tipc: Enabled bearer , priority 0 [ 436.747453][T23076] tipc: Resetting bearer [ 436.836956][T23076] tipc: Disabling bearer [ 436.956613][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 436.956629][ T29] audit: type=1326 audit(1754924072.126:13889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.004483][ T29] audit: type=1326 audit(1754924072.158:13890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.028173][ T29] audit: type=1326 audit(1754924072.169:13891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.051887][ T29] audit: type=1326 audit(1754924072.169:13892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.075487][ T29] audit: type=1326 audit(1754924072.169:13893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.099892][ T29] audit: type=1326 audit(1754924072.169:13894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.123507][ T29] audit: type=1326 audit(1754924072.169:13895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.147175][ T29] audit: type=1326 audit(1754924072.169:13896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.171070][ T29] audit: type=1326 audit(1754924072.169:13897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.194785][ T29] audit: type=1326 audit(1754924072.169:13898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23085 comm="syz.0.7244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 437.225082][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.358970][T23101] loop8: detected capacity change from 0 to 512 [ 437.395187][T23101] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.644033][T23115] netlink: 'syz.5.7252': attribute type 21 has an invalid length. [ 437.662941][T23115] netlink: 'syz.5.7252': attribute type 1 has an invalid length. [ 437.670736][T23115] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7252'. [ 437.903243][T23127] tipc: Enabling of bearer rejected, failed to enable media [ 438.371693][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.583134][T23141] loop8: detected capacity change from 0 to 512 [ 438.670492][T23141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.105157][T23155] netlink: 'syz.4.7264': attribute type 21 has an invalid length. [ 439.160452][T23155] netlink: 'syz.4.7264': attribute type 1 has an invalid length. [ 439.168341][T23155] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7264'. [ 439.378711][T23167] tipc: Enabling of bearer rejected, failed to enable media [ 439.670972][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.927521][T23193] netlink: 'syz.3.7276': attribute type 21 has an invalid length. [ 439.953836][T23193] netlink: 'syz.3.7276': attribute type 1 has an invalid length. [ 439.961631][T23193] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7276'. [ 440.004966][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7278'. [ 440.294757][T23204] tipc: Enabling of bearer rejected, failed to enable media [ 440.372121][T23208] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7282'. [ 440.610988][T23218] sd 0:0:1:0: device reset [ 440.729331][T23227] netlink: 'syz.0.7289': attribute type 21 has an invalid length. [ 440.749613][T23227] netlink: 'syz.0.7289': attribute type 1 has an invalid length. [ 440.757440][T23227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7289'. [ 440.796028][T23230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7290'. [ 440.825337][T23233] loop8: detected capacity change from 0 to 512 [ 440.909453][T23236] tipc: Enabling of bearer rejected, failed to enable media [ 441.155349][T23240] tmpfs: Bad value for 'mpol' [ 441.873460][T23255] loop8: detected capacity change from 0 to 512 [ 441.874122][T23256] netlink: 'syz.0.7300': attribute type 21 has an invalid length. [ 441.880550][T23255] EXT4-fs: Ignoring removed mblk_io_submit option [ 441.898836][T23255] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 441.918412][T23255] EXT4-fs (loop8): 1 truncate cleaned up [ 441.924727][T23255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.952204][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 441.952216][ T29] audit: type=1326 audit(1754924077.490:14079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f140fca5967 code=0x7ffc0000 [ 441.959781][T23256] netlink: 'syz.0.7300': attribute type 1 has an invalid length. [ 441.984084][ T29] audit: type=1326 audit(1754924077.490:14080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f140fc4ab89 code=0x7ffc0000 [ 441.989724][T23256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7300'. [ 442.013172][ T29] audit: type=1326 audit(1754924077.490:14081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f140fca5967 code=0x7ffc0000 [ 442.045964][ T29] audit: type=1326 audit(1754924077.490:14082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f140fc4ab89 code=0x7ffc0000 [ 442.069476][ T29] audit: type=1326 audit(1754924077.490:14083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 442.093185][ T29] audit: type=1326 audit(1754924077.490:14084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 442.116759][ T29] audit: type=1326 audit(1754924077.490:14085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 442.140401][ T29] audit: type=1326 audit(1754924077.490:14086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 442.164009][ T29] audit: type=1326 audit(1754924077.490:14087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 442.187582][ T29] audit: type=1326 audit(1754924077.490:14088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23254 comm="syz.0.7300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f140fcae9a9 code=0x7ffc0000 [ 442.274932][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.330826][T23274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7306'. [ 442.351966][T23271] tipc: Enabled bearer , priority 0 [ 442.375201][T23270] tipc: Disabling bearer [ 442.609182][T23297] netlink: 'syz.0.7315': attribute type 21 has an invalid length. [ 442.617216][T23297] netlink: 'syz.0.7315': attribute type 1 has an invalid length. [ 442.625071][T23297] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7315'. [ 442.693343][T23299] loop8: detected capacity change from 0 to 512 [ 442.702465][T23299] EXT4-fs (loop8): orphan cleanup on readonly fs [ 442.709953][T23299] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7313: bg 0: block 248: padding at end of block bitmap is not set [ 442.725915][T23299] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7313: Failed to acquire dquot type 1 [ 442.738550][T23299] EXT4-fs (loop8): 1 truncate cleaned up [ 442.745842][T23299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.333189][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.359761][T23321] tipc: Enabling of bearer rejected, failed to enable media [ 443.375150][T23325] loop8: detected capacity change from 0 to 512 [ 443.423855][T23325] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.943277][T23343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7326'. [ 444.234212][T23346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7327'. [ 444.572891][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.596172][T23352] netlink: 'syz.8.7329': attribute type 21 has an invalid length. [ 444.611115][T23352] netlink: 'syz.8.7329': attribute type 1 has an invalid length. [ 444.618925][T23352] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7329'. [ 445.432664][T23372] loop8: detected capacity change from 0 to 512 [ 445.604839][T23372] EXT4-fs (loop8): orphan cleanup on readonly fs [ 445.612233][T23372] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.7333: bg 0: block 248: padding at end of block bitmap is not set [ 445.627531][T23372] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.7333: Failed to acquire dquot type 1 [ 445.640914][T23372] EXT4-fs (loop8): 1 truncate cleaned up [ 445.648739][T23372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 445.670965][T23378] netlink: 'syz.0.7338': attribute type 21 has an invalid length. [ 445.687259][T23378] netlink: 'syz.0.7338': attribute type 1 has an invalid length. [ 445.695120][T23378] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7338'. [ 445.773211][T23385] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7341'. [ 445.786069][T23388] netlink: 'syz.3.7343': attribute type 21 has an invalid length. [ 445.798766][T23388] netlink: 'syz.3.7343': attribute type 1 has an invalid length. [ 445.806573][T23388] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7343'. [ 445.843240][T14580] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.860884][T23391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7344'. [ 445.887258][T23396] sd 0:0:1:0: device reset [ 445.903011][T23392] ================================================================== [ 445.911122][T23392] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 445.919474][T23392] [ 445.921808][T23392] write to 0xffff8881009ea9a4 of 4 bytes by task 23397 on cpu 0: [ 445.929524][T23392] inode_update_timestamps+0x147/0x270 [ 445.935010][T23392] file_update_time+0x20e/0x2b0 [ 445.939867][T23392] shmem_file_write_iter+0x9c/0xf0 [ 445.944977][T23392] iter_file_splice_write+0x5ef/0x970 [ 445.950352][T23392] direct_splice_actor+0x156/0x2a0 [ 445.955468][T23392] splice_direct_to_actor+0x312/0x680 [ 445.960844][T23392] do_splice_direct+0xda/0x150 [ 445.965605][T23392] do_sendfile+0x380/0x650 [ 445.970013][T23392] __x64_sys_sendfile64+0x105/0x150 [ 445.975204][T23392] x64_sys_call+0x2bb0/0x2ff0 [ 445.979872][T23392] do_syscall_64+0xd2/0x200 [ 445.984371][T23392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.990264][T23392] [ 445.992592][T23392] read to 0xffff8881009ea9a4 of 4 bytes by task 23392 on cpu 1: [ 446.000221][T23392] atime_needs_update+0x2a8/0x3e0 [ 446.005252][T23392] touch_atime+0x4a/0x340 [ 446.009583][T23392] shmem_file_splice_read+0x5b1/0x600 [ 446.014958][T23392] splice_direct_to_actor+0x26c/0x680 [ 446.020332][T23392] do_splice_direct+0xda/0x150 [ 446.025098][T23392] do_sendfile+0x380/0x650 [ 446.029510][T23392] __x64_sys_sendfile64+0x105/0x150 [ 446.034700][T23392] x64_sys_call+0x2bb0/0x2ff0 [ 446.039375][T23392] do_syscall_64+0xd2/0x200 [ 446.043875][T23392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.049757][T23392] [ 446.052066][T23392] value changed: 0x2aca393d -> 0x2b6def65 [ 446.057767][T23392] [ 446.060253][T23392] Reported by Kernel Concurrency Sanitizer on: [ 446.066397][T23392] CPU: 1 UID: 0 PID: 23392 Comm: syz.4.7345 Not tainted 6.16.0-syzkaller-04405-g4b290aae788e #0 PREEMPT(voluntary) [ 446.078538][T23392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 446.088594][T23392] ==================================================================