last executing test programs: 1m45.980108125s ago: executing program 3 (id=776): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m45.788448892s ago: executing program 3 (id=779): rmdir(0x0) r0 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) unshare(0x28020480) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x61, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x200000000000000, 0x0) 1m44.820165517s ago: executing program 3 (id=797): r0 = syz_io_uring_setup(0x5c2, &(0x7f0000000500)={0x0, 0x2, 0x0, 0x4, 0x26b}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x43, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 1m43.88301533s ago: executing program 3 (id=811): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000001480)="$eJzs3T+LI2UYAPBndpNJ7iySwkoEB7SwOm6vtckiOThMpaRQC128O5AkCHew4CkGK1sbSz+BINj5JWwEP4DgB7DzioNXJpkh2btJsoHLrX9+vyL77Lzv877POzPZPyzz7sevziZ3i7j/9Ze/R7ebxdEgBvE4i34cRS2llGJl8G0AAP9mj1OKP9PSJVMG5UsWEd3DlgYAHMje3/9/OnhJAMCBvff+B++cjkbDd4uiG7dn35yPy9/sy4/L9tP78WlM417cjF48Wf4toP5poXy9nVKat4pSP96Yzc/HZebso1+q8U/riU6iF/1FdDH/zmh4Uiyt5c/LOq5X8w/K+W9FL15umP/OaHirIT/Gebz5+lr9N6IXv34Sn8U07i6KWOV/dVIUb6fv/vriw7K8Mj+bn487i34r6fjFXRUAAAAAAAAAAAAAAAAAAAAAAP7rblR753RisX9Peajaf+f4SflJO4pa/+L+PMv8rB7oqf2B5im+T6nTihgNbxZFkaqOq/xWvNKK1tWsGgAAAAAAAAAAAAAAAAAAAP5ZHn7+aHI2nd570BD8dj1iQ9OGoN4NoH6sf0fW8aamwdqR1+LR5KyzecC1pqMq3DJpHNd9soity4lWux65v9dJ2D+4tqnmH37cd8Du7j7tbefn+QT13TU5y6KxTyfqI936mv683iePS86Vb2pKu2+/tSBvbOrtvfb8pUUw39Insm2FvfXH8sxVR7KnV5EvzmpjenttN47me6P5Wmx6pzwjW7yt8+f3xQcAAAAAAAAAAAAAAAAAALhg9dDvM03XdqQepc7BygIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAF2r1///3COZV8iU65/Hg4RUvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP+BvwMAAP//QSRWPA==") syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) lgetxattr(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 1m42.923215085s ago: executing program 3 (id=816): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) syz_open_dev$hiddev(0x0, 0x3ff, 0x100) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1m42.587953635s ago: executing program 3 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x29, 0x0, 0x0) 1m42.568944696s ago: executing program 32 (id=819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x29, 0x0, 0x0) 1m40.861169777s ago: executing program 2 (id=843): pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r2, 0x0, 0x4}, 0x18) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) 1m40.724981029s ago: executing program 2 (id=844): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 1m39.866513165s ago: executing program 2 (id=857): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 1m39.659615493s ago: executing program 2 (id=848): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2c2, &(0x7f0000001480)="$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") syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000001100)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) lgetxattr(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)=@known='trusted.overlay.redirect\x00', 0x0, 0x0) 1m39.500737897s ago: executing program 2 (id=851): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x3) close_range(r2, 0xffffffffffffffff, 0x0) 1m39.026237809s ago: executing program 2 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m39.025821779s ago: executing program 33 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 1m15.546927364s ago: executing program 1 (id=1262): socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r3, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 1m15.233876522s ago: executing program 1 (id=1270): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x57) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1m15.13682373s ago: executing program 1 (id=1273): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500000000000a"], 0x80}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffff0301000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m14.57437376s ago: executing program 1 (id=1279): socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@quota}]}, 0x2, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x8) pwrite64(r1, &(0x7f0000000100), 0x0, 0xe7c) r2 = syz_open_dev$evdev(0x0, 0x2, 0xc0082) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000700)=0xfffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 1m13.819587107s ago: executing program 1 (id=1282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) capset(0x0, 0x0) 1m13.376290676s ago: executing program 1 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x4a8c, &(0x7f0000000300)={0x0, 0xb692, 0x100, 0x4, 0x3d7}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) 1m13.364302317s ago: executing program 34 (id=1287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x4a8c, &(0x7f0000000300)={0x0, 0xb692, 0x100, 0x4, 0x3d7}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r4, &(0x7f0000000080)=@file={0x1}, 0x6e) close_range(r2, 0xffffffffffffffff, 0x0) 1m0.452662928s ago: executing program 6 (id=1484): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x237, &(0x7f0000000480)="$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") r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) 59.936456254s ago: executing program 6 (id=1499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r5, 0x2004, 0x0) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x0) 59.430432698s ago: executing program 6 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) 58.576829363s ago: executing program 6 (id=1513): socket$inet6(0xa, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3000046, &(0x7f00000134c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@sysvgroups}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x7f}}, {@data_err_ignore}, {@grpquota}, {@dioread_nolock}, {@nobarrier}, {@mblk_io_submit}, {@quota}]}, 0x2, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, 0x0, 0x183042, 0x8) pwrite64(r1, &(0x7f0000000100), 0x0, 0xe7c) r2 = syz_open_dev$evdev(0x0, 0x2, 0xc0082) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000700)=0xfffffffe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 58.219033775s ago: executing program 6 (id=1517): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd29, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 57.839038308s ago: executing program 6 (id=1523): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x220c000, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x31f, &(0x7f00000004c0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x29000000, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 57.792217713s ago: executing program 35 (id=1523): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000040)='./file0\x00', 0x220c000, &(0x7f0000000080)=ANY=[@ANYBLOB="666c7573682c756e695f786c6174653d312c6e6f6e756d7461696c3d302c726f6469722c666c7573682c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c756e695f786c6174653d312c71756965742c00dc5e6e02a2c7cc484d0c"], 0xf8, 0x31f, &(0x7f00000004c0)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x29000000, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 3.058020419s ago: executing program 0 (id=2257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 2.964546278s ago: executing program 8 (id=2259): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x80003}, 0x100002, 0x0, 0xffffffff, 0x3, 0xf, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 2.528421456s ago: executing program 8 (id=2261): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000004000000850000000100000095"], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 2.334727463s ago: executing program 8 (id=2265): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x110010, 0x0, 0x40000000, 0x0, 0x200f, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) close(r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001040)={0x0, r0, 0x0, 0x6, &(0x7f0000001000)='rose0\x00'}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.235781442s ago: executing program 0 (id=2266): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.017529491s ago: executing program 8 (id=2267): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x340a) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.553218003s ago: executing program 4 (id=2268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x2}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x6}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a40)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0x1, 0x4, 0x6078f0b6, 0x2, 0x2, 0x2, 0x4, 0x2, 0x32, 0x0, 0x3, 0x40, 0x7, 0xa, 0x81, 0x3, 0x5, 0x10001, 0x7, 0xf, 0x8, 0xd2, 0x4, 0x7, 0x2, 0x8, 0x0, 0x7, 0x8, 0xa, 0x2, 0x1800, 0x3, 0xe, 0x706, 0x1ff, 0x8, 0x200, 0xfffffff9, 0x7, 0x4, 0x200, 0x80, 0x623, 0xa32, 0xfffffff8, 0x5, 0x1, 0x101, 0xab, 0x9, 0x81, 0xc, 0x81, 0xffffb108, 0x5, 0x0, 0xc, 0x0, 0x1000, 0x3ff, 0x9, 0x80000001, 0x9, 0x81, 0x3, 0xffff7fff, 0x4, 0x1, 0x7fff, 0xffff, 0x3, 0x2, 0x7, 0x8, 0xee, 0x6, 0x2, 0x3, 0xfffffff8, 0x115, 0x8, 0x0, 0xce6, 0xa, 0xe3c, 0x4, 0x88, 0x4, 0x10000, 0x6, 0x200, 0xb, 0x8c30, 0x7, 0x1ff, 0x0, 0xc, 0x6, 0xd723a07d, 0x1, 0x9, 0x8, 0xf04, 0x80000000, 0xe0000000, 0x7, 0xfff, 0x101, 0x6, 0x8, 0x3, 0x1, 0x3, 0x7, 0x13, 0x3ff, 0x80000001, 0x5, 0x6, 0x5, 0x400, 0x8, 0x4, 0x0, 0x10001, 0xc, 0xffffff01, 0xfff, 0x7, 0x0, 0xb, 0x9, 0x6, 0x4, 0xc, 0xca, 0x9, 0xfffffffb, 0xa, 0x887, 0x9, 0x6, 0x8, 0xbd, 0x7, 0x9, 0x1, 0xfffffffa, 0x2, 0x5, 0x2, 0xfffffff2, 0x3c0, 0x9, 0x400, 0x2, 0x4, 0x200, 0xfa82, 0x1, 0xfffffff4, 0x2, 0x2, 0x4, 0x7, 0x9, 0x81, 0x8001, 0x5, 0x200, 0x8, 0x0, 0xe, 0x0, 0x8, 0x8001, 0x1e9a9eb0, 0xfffffff9, 0xa, 0x200, 0x0, 0x800, 0x1000, 0xb, 0x400, 0x4, 0xfff, 0xe8, 0x2, 0x9, 0x8, 0x101, 0xfffffff7, 0x3, 0xfffeffff, 0x3, 0xffff2d41, 0x7, 0x3, 0x38, 0x1, 0x200, 0x5, 0x5, 0xffffff80, 0x3, 0x7, 0x1, 0x388, 0x6, 0x9, 0x1, 0x2, 0xdb8, 0x8, 0x3, 0x3, 0xfffff800, 0x4, 0xa2, 0x7fffffff, 0x3, 0x5, 0x6, 0x800, 0x0, 0x10000, 0x6, 0x6, 0x80000000, 0x2, 0xaf0c, 0x1, 0x1, 0xff, 0x7ff, 0x7, 0x1, 0x10001, 0x8, 0x2, 0xd, 0x6, 0x4, 0x4, 0x4, 0x7fff, 0x1, 0x8, 0x0, 0x9, 0x4, 0x3f, 0x1]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x2, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x8007}, 0x3, 0x8, 0x41e}}]}}]}, 0x45c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000002000005000000180001801400020073797a5f74756e000000000000000000080005000a0f00005c0003800400010054000380"], 0x90}}, 0x4000000) 1.482880169s ago: executing program 4 (id=2269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0xffffff4f}], 0x1) close_range(r2, r3, 0x0) 1.404700915s ago: executing program 7 (id=2271): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) rmdir(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1.283297816s ago: executing program 7 (id=2272): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x1b, r0, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=rdma']) 1.282563666s ago: executing program 4 (id=2273): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7daf, 0x10, 0x8000, 0x8000e1}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x9, 0x6000, @fd=r4, 0x100, 0x0, 0x0, 0x1c}) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 1.105439102s ago: executing program 0 (id=2274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @remote}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) 1.104732062s ago: executing program 7 (id=2275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x1000000) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 1.104040552s ago: executing program 8 (id=2276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) unshare(0x62040200) 1.084083284s ago: executing program 0 (id=2277): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.004244751s ago: executing program 0 (id=2279): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket(0x10, 0x4, 0xffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x2f, 0x18, 0x4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='kmem_cache_free\x00', r4}, 0x18) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 956.345855ms ago: executing program 7 (id=2280): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) unshare(0x2040400) r0 = semget$private(0x0, 0x7, 0x191) semtimedop(r0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r1}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x2, 0x80805, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r3, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) 929.235658ms ago: executing program 0 (id=2281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000440)="7a0000800000210e3000cd7a0100", 0xe, 0x20000000, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd5, 0x6, @broadcast}, 0x14) 923.112798ms ago: executing program 7 (id=2282): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x318}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x7, 0x0, &(0x7f0000001fc0)=0x7c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 389.911635ms ago: executing program 5 (id=2284): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x0) open(&(0x7f00000003c0)='.\x00', 0x800, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 389.203115ms ago: executing program 5 (id=2285): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000100)=0x17, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000100)={r2, 0x80000001, 0x0, 0x3ff}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa03aaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd2821000e0000ff02000000000000000000000000000104004e200042b0"], 0x0) 327.35219ms ago: executing program 5 (id=2286): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8003}, 0x10, 0x2e, 0x43a1bd76, 0x1, 0x9, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x80, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_setup(0x4, &(0x7f0000000040)) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000080850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) 273.747535ms ago: executing program 4 (id=2287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xb9, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000640)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 179.150374ms ago: executing program 8 (id=2288): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 178.809814ms ago: executing program 5 (id=2289): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 125.860468ms ago: executing program 5 (id=2290): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 116.863689ms ago: executing program 7 (id=2291): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x31, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2208810, &(0x7f0000000080), 0xfe, 0x581, &(0x7f0000000780)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x32) mount(&(0x7f0000000140)=@sr0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x800, 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f0000000200)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1, 0x3400, 0x2, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x100000001, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x4000000000000, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 47.911965ms ago: executing program 4 (id=2292): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xec4ba78a, 0x2, 0x100b, 0x8000, 0x0, 0x0, 0xfffffffd, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 18.944148ms ago: executing program 5 (id=2293): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @local}, 0x14) 0s ago: executing program 4 (id=2294): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") kernel console output (not intermixed with test programs): or -12 reading directory block [ 122.053578][T11584] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.064127][ T3317] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 122.081647][ T3317] EXT4-fs warning (device loop1): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 122.167265][T11584] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 122.264294][ T3713] EXT4-fs (loop1): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 122.284227][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.299726][ T3713] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.309426][T11574] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 122.320605][ T3713] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.347453][ T3713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.383221][ T3713] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 122.541819][T11612] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1292'. [ 122.601800][T11617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 122.739629][T11606] chnl_net:caif_netlink_parms(): no params data found [ 122.802628][T11606] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.809853][T11606] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.817690][T11606] bridge_slave_0: entered allmulticast mode [ 122.824799][T11606] bridge_slave_0: entered promiscuous mode [ 122.838976][T11606] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.846249][T11606] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.868741][T11606] bridge_slave_1: entered allmulticast mode [ 122.875743][T11606] bridge_slave_1: entered promiscuous mode [ 122.926666][T11606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.944505][T11606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.981702][T11642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1301'. [ 122.993451][T11640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1300'. [ 122.994489][T11606] team0: Port device team_slave_0 added [ 123.019857][T11606] team0: Port device team_slave_1 added [ 123.074918][T11606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.081909][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.107942][T11606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.126195][T11606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.133340][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.160070][T11606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.211151][T11606] hsr_slave_0: entered promiscuous mode [ 123.221031][T11606] hsr_slave_1: entered promiscuous mode [ 123.225180][T11652] IPv6: Can't replace route, no match found [ 123.249601][T11606] debugfs: 'hsr0' already exists in 'hsr' [ 123.255503][T11606] Cannot create hsr debugfs directory [ 123.421032][T11606] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.435515][T11606] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.454758][T11606] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.464379][T11606] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 123.566550][T11606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.586894][T11606] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.596801][ T3727] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.603979][ T3727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.640270][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.647530][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.741048][T11683] loop6: detected capacity change from 0 to 2048 [ 123.758599][T11683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.792450][T11606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.795069][ T6014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.883840][T11704] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11704 comm=syz.6.1316 [ 123.928375][T11710] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1317'. [ 123.945250][T11710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.964086][T11710] macvlan2: entered promiscuous mode [ 123.969445][T11710] macvlan2: entered allmulticast mode [ 123.976276][T11710] bond1: (slave macvlan2): Opening slave failed [ 123.997950][T11606] veth0_vlan: entered promiscuous mode [ 124.007008][T11606] veth1_vlan: entered promiscuous mode [ 124.026758][T11606] veth0_macvtap: entered promiscuous mode [ 124.035188][T11606] veth1_macvtap: entered promiscuous mode [ 124.047675][T11606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.061917][T11606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.073985][ T3713] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.089942][ T3713] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.102252][ T3713] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.115826][ T3713] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.312660][T11731] netlink: '+}[@': attribute type 1 has an invalid length. [ 124.328150][T11731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.534813][T11748] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.595534][T11748] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.687283][T11748] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.753485][T11765] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 124.774463][T11748] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 124.836427][ T3692] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.850318][ T3689] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.883753][ T3689] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 124.892113][ T3689] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 125.056321][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.064195][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.072017][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.080244][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.088246][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.096178][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.104044][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x1 [ 125.111845][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.119679][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.127520][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: unknown main item tag 0x0 [ 125.189293][T11779] __nla_validate_parse: 4 callbacks suppressed [ 125.189315][T11779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 125.623891][ T3406] hid-generic 0000:0000:FFFFFFFC.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 125.707552][T11790] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1348'. [ 125.755574][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1350'. [ 125.805358][T11792] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.814574][T11788] lo speed is unknown, defaulting to 1000 [ 125.821107][T11788] lo speed is unknown, defaulting to 1000 [ 125.866702][T11788] lo speed is unknown, defaulting to 1000 [ 125.873223][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1351'. [ 126.007718][T11788] infiniband syz1: set active [ 126.012506][T11788] infiniband syz1: added lo [ 126.017304][ T6303] lo speed is unknown, defaulting to 1000 [ 126.044833][T11788] RDS/IB: syz1: added [ 126.049452][T11788] smc: adding ib device syz1 with port count 1 [ 126.059123][T11788] smc: ib device syz1 port 1 has no pnetid [ 126.065893][ T6303] lo speed is unknown, defaulting to 1000 [ 126.171910][T11788] lo speed is unknown, defaulting to 1000 [ 126.233397][T11788] lo speed is unknown, defaulting to 1000 [ 126.315740][T11822] netlink: 'syz.7.1368': attribute type 12 has an invalid length. [ 126.412273][T11826] IPv6: Can't replace route, no match found [ 126.428349][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 126.428367][ T29] audit: type=1326 audit(1767660437.745:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.443982][T11788] lo speed is unknown, defaulting to 1000 [ 126.489755][ T29] audit: type=1326 audit(1767660437.785:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.513450][ T29] audit: type=1326 audit(1767660437.785:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.537025][ T29] audit: type=1326 audit(1767660437.785:5646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.560948][ T29] audit: type=1326 audit(1767660437.785:5647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.584634][ T29] audit: type=1326 audit(1767660437.785:5648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.608243][ T29] audit: type=1326 audit(1767660437.785:5649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.632318][ T29] audit: type=1326 audit(1767660437.785:5650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.655964][ T29] audit: type=1326 audit(1767660437.785:5651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.679650][ T29] audit: type=1326 audit(1767660437.785:5652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11825 comm="syz.7.1359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 126.813951][T11788] lo speed is unknown, defaulting to 1000 [ 126.981569][T11788] lo speed is unknown, defaulting to 1000 [ 127.074818][T11788] lo speed is unknown, defaulting to 1000 [ 127.377884][T11844] netlink: 'syz.5.1367': attribute type 10 has an invalid length. [ 127.385964][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1367'. [ 127.418271][T11844] team0: Port device geneve1 added [ 127.436891][ T3679] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.457075][ T3679] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.465562][ T3679] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.474075][ T3692] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.577284][T11844] loop5: detected capacity change from 0 to 1764 [ 127.857024][T11850] lo speed is unknown, defaulting to 1000 [ 128.224409][T11866] netlink: 'syz.7.1378': attribute type 30 has an invalid length. [ 128.247850][T11867] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 128.298836][T11867] x_tables: duplicate underflow at hook 3 [ 128.368078][T11872] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.416881][T11872] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.458503][T11872] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.507214][T11872] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.551955][ T3725] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.563438][ T3725] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.575201][ T3725] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.587179][ T3725] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.651841][T11885] loop7: detected capacity change from 0 to 1024 [ 128.665452][T11885] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.713418][T11606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.958905][T11893] netlink: 'syz.7.1385': attribute type 4 has an invalid length. [ 128.992864][T11897] netlink: 'syz.6.1387': attribute type 7 has an invalid length. [ 129.000934][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1387'. [ 129.021213][T11899] netlink: 'syz.0.1388': attribute type 10 has an invalid length. [ 129.029386][T11899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1388'. [ 129.085009][T11905] netlink: 'syz.0.1391': attribute type 30 has an invalid length. [ 129.170863][T11912] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 129.225115][T11912] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 129.279360][T11923] lo speed is unknown, defaulting to 1000 [ 129.293723][T11912] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 129.360825][T11912] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 129.463875][ T3717] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.494250][ T3717] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.502669][ T3717] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.551617][ T3717] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 129.632056][T11938] netlink: 'syz.7.1402': attribute type 10 has an invalid length. [ 129.640750][T11938] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1402'. [ 129.709464][T11939] loop7: detected capacity change from 0 to 1764 [ 129.849670][T11938] team0: Failed to send options change via netlink (err -105) [ 129.857318][T11938] team0: Port device geneve1 added [ 129.918991][T11946] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1405'. [ 130.190488][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1414'. [ 130.500321][T11991] vlan2: entered allmulticast mode [ 130.505759][T11991] dummy0: entered allmulticast mode [ 130.873011][T12014] lo speed is unknown, defaulting to 1000 [ 131.310665][T12123] syz_tun: entered allmulticast mode [ 131.317413][T12098] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1425'. [ 131.330412][T12123] ªªªªª: renamed from vlan0 [ 131.338145][T12098] 0ªX¹¦À: renamed from caif0 [ 131.345828][T12098] 0ªX¹¦À: entered allmulticast mode [ 131.351084][T12098] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 131.367060][T12108] syz_tun: left allmulticast mode [ 131.458636][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 131.458656][ T29] audit: type=1326 audit(1767660442.775:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.554094][ T29] audit: type=1326 audit(1767660442.775:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.577725][ T29] audit: type=1326 audit(1767660442.785:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.601366][ T29] audit: type=1326 audit(1767660442.785:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.625191][ T29] audit: type=1326 audit(1767660442.785:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.648900][ T29] audit: type=1326 audit(1767660442.785:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.672601][ T29] audit: type=1326 audit(1767660442.785:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.696229][ T29] audit: type=1326 audit(1767660442.785:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.720131][ T29] audit: type=1326 audit(1767660442.785:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 131.743701][ T29] audit: type=1326 audit(1767660442.785:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.6.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f804e28f749 code=0x7ffc0000 [ 132.005379][T12283] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.060010][T12289] loop6: detected capacity change from 0 to 128 [ 132.067443][T12283] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.071718][T12289] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.089717][T12289] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.106488][T12289] EXT4-fs (loop6): shut down requested (0) [ 132.115049][T12283] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.138375][ T6014] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.181042][T12283] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.699783][T12294] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.764564][T12294] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.850347][T12294] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.920195][T12294] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.044983][T12301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1441'. [ 133.052645][ T2858] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.128334][ T2858] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.139119][T12301] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12301 comm=syz.0.1441 [ 133.161066][T12304] syzkaller0: entered allmulticast mode [ 133.166882][ T2858] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.183914][T12304] syzkaller0: entered promiscuous mode [ 133.189774][ T2858] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.232691][T12304] syzkaller0 (unregistering): left allmulticast mode [ 133.239511][T12304] syzkaller0 (unregistering): left promiscuous mode [ 133.274090][ T2858] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.282473][T12310] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 133.300375][ T2858] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.315326][ T2858] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.351453][ T2858] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.489843][T12321] lo speed is unknown, defaulting to 1000 [ 133.498373][T12327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=12327 comm=syz.5.1451 [ 133.606266][T12330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.618194][T12330] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.631665][T12330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.657047][T12315] lo speed is unknown, defaulting to 1000 [ 134.461426][T12353] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1460'. [ 134.544328][T12353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.577342][T12353] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 134.592288][T12353] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 134.603518][T12353] bond2 (unregistering): Released all slaves [ 134.651842][T12360] xt_hashlimit: max too large, truncated to 1048576 [ 134.659563][T12360] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.814460][T12364] lo speed is unknown, defaulting to 1000 [ 134.820256][T12364] lo speed is unknown, defaulting to 1000 [ 134.865220][T12364] lo speed is unknown, defaulting to 1000 [ 134.872411][T12364] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.909306][T12364] lo speed is unknown, defaulting to 1000 [ 134.939069][T12364] lo speed is unknown, defaulting to 1000 [ 134.987769][T12364] lo speed is unknown, defaulting to 1000 [ 135.001739][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1473'. [ 135.016422][T12364] lo speed is unknown, defaulting to 1000 [ 135.023868][T12384] netlink: 'syz.6.1474': attribute type 7 has an invalid length. [ 135.031718][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1474'. [ 135.054810][T12364] lo speed is unknown, defaulting to 1000 [ 135.070904][T12364] lo speed is unknown, defaulting to 1000 [ 135.149725][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1477'. [ 135.190856][T12397] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1479'. [ 135.200477][T12397] hsr_slave_0: left promiscuous mode [ 135.208506][T12397] hsr_slave_1: left promiscuous mode [ 135.262748][T12403] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1482'. [ 135.383172][T12413] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 135.438388][T12416] loop6: detected capacity change from 0 to 128 [ 135.487008][T12416] msdos: Bad value for 'errors' [ 135.576998][T12434] loop7: detected capacity change from 0 to 512 [ 135.603460][T12434] EXT4-fs: Ignoring removed nobh option [ 135.614314][T12436] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.639518][T12434] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 135.648189][T12434] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1493: invalid indirect mapped block 256 (level 1) [ 135.663861][T12434] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1493: invalid indirect mapped block 2683928664 (level 1) [ 135.681740][T12434] EXT4-fs (loop7): 1 truncate cleaned up [ 135.690348][T12434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.721023][T12436] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.747319][T11606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.771507][T12444] netlink: 'syz.7.1497': attribute type 7 has an invalid length. [ 135.786556][T12436] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.831106][T12446] loop7: detected capacity change from 0 to 2048 [ 135.840398][T12436] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 135.856047][T12446] Alternate GPT is invalid, using primary GPT. [ 135.862470][T12446] loop7: p2 p3 p7 [ 135.883125][ T3715] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.895869][ T3715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.908588][ T3715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.921147][ T3715] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 135.931331][T12450] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.981664][T12450] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.025051][T12456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1502'. [ 136.062449][T12450] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.096428][T12450] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.390856][T12465] netlink: 'syz.0.1514': attribute type 16 has an invalid length. [ 136.398985][T12465] netlink: 'syz.0.1514': attribute type 17 has an invalid length. [ 136.419563][T12465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.437597][T12468] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 136.454252][ T6305] lo speed is unknown, defaulting to 1000 [ 136.527596][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 136.527617][ T29] audit: type=1326 audit(1767660703.845:6023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.557780][ T29] audit: type=1326 audit(1767660703.845:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.562100][T12474] lo speed is unknown, defaulting to 1000 [ 136.581620][ T29] audit: type=1326 audit(1767660703.845:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.610941][ T29] audit: type=1326 audit(1767660703.845:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.634539][ T29] audit: type=1326 audit(1767660703.845:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.658224][ T29] audit: type=1326 audit(1767660703.845:6028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.681892][ T29] audit: type=1326 audit(1767660703.845:6029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.687586][T12474] lo speed is unknown, defaulting to 1000 [ 136.705648][ T29] audit: type=1326 audit(1767660703.845:6031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.705755][ T29] audit: type=1326 audit(1767660703.845:6030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.759178][ T29] audit: type=1326 audit(1767660703.855:6032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12473 comm="syz.4.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 136.823188][T12478] lo speed is unknown, defaulting to 1000 [ 136.857286][T12478] lo speed is unknown, defaulting to 1000 [ 137.197280][T12486] loop6: detected capacity change from 0 to 1024 [ 137.204133][T12486] EXT4-fs: inline encryption not supported [ 137.210145][T12486] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.224777][T12486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.293009][T12486] loop6: detected capacity change from 1024 to 64 [ 137.304341][T12486] bio_check_eod: 103 callbacks suppressed [ 137.304359][T12486] syz.6.1513: attempt to access beyond end of device [ 137.304359][T12486] loop6: rw=2049, sector=352, nr_sectors = 4 limit=64 [ 137.323584][T12486] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 176) [ 137.349407][T12486] syz.6.1513: attempt to access beyond end of device [ 137.349407][T12486] loop6: rw=2049, sector=354, nr_sectors = 6 limit=64 [ 137.362833][T12486] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 177) [ 137.374177][T12486] EXT4-fs (loop6): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 137.386742][T12486] buffer_io_error: 8 callbacks suppressed [ 137.386759][T12486] Buffer I/O error on device loop6, logical block 177 [ 137.399404][T12486] Buffer I/O error on device loop6, logical block 178 [ 137.406264][T12486] Buffer I/O error on device loop6, logical block 179 [ 137.413122][T12486] Buffer I/O error on device loop6, logical block 176 [ 137.419948][T12486] Buffer I/O error on device loop6, logical block 177 [ 137.428076][T12486] syz.6.1513: attempt to access beyond end of device [ 137.428076][T12486] loop6: rw=2049, sector=360, nr_sectors = 24 limit=64 [ 137.441642][T12486] EXT4-fs warning (device loop6): ext4_end_bio:372: I/O error 10 writing to inode 15 starting block 180) [ 137.452970][T12486] EXT4-fs (loop6): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 137.465629][T12486] Buffer I/O error on device loop6, logical block 180 [ 137.472435][T12486] Buffer I/O error on device loop6, logical block 181 [ 137.479228][T12486] Buffer I/O error on device loop6, logical block 182 [ 137.486013][T12486] Buffer I/O error on device loop6, logical block 183 [ 137.492847][T12486] Buffer I/O error on device loop6, logical block 184 [ 137.509991][ T3713] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.525678][ T3713] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.543081][ T3713] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.549358][ T6014] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 137.551377][ T3713] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.577669][ T6014] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 137.594328][ T6014] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 137.608629][ T6014] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 137.622747][ T6014] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 137.636422][ T6014] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 137.662079][ T6014] EXT4-fs warning (device loop6): ext4_empty_dir:3078: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 137.803993][ T3716] kworker/u8:50: attempt to access beyond end of device [ 137.803993][ T3716] loop6: rw=1, sector=226, nr_sectors = 2 limit=64 [ 137.817412][ T3716] EXT4-fs (loop6): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -5) [ 137.840882][ T6014] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.851671][T12487] kmmpd-loop6: attempt to access beyond end of device [ 137.851671][T12487] loop6: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 137.865700][T12487] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 137.954426][T12514] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 138.049142][ T3679] bridge_slave_1: left allmulticast mode [ 138.055034][ T3679] bridge_slave_1: left promiscuous mode [ 138.060854][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.079410][ T3679] bridge_slave_0: left allmulticast mode [ 138.085299][ T3679] bridge_slave_0: left promiscuous mode [ 138.085886][T12527] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1529'. [ 138.091191][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.203649][T12529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12529 comm=syz.4.1529 [ 138.245045][ T3679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.254259][ T3679] bond0 (unregistering): Released all slaves [ 138.263257][ T3679] bond1 (unregistering): Released all slaves [ 138.447998][ T3679] team0 (unregistering): Port device team_slave_1 removed [ 138.471060][ T3679] team0 (unregistering): Port device team_slave_0 removed [ 138.555911][T12521] lo speed is unknown, defaulting to 1000 [ 138.646284][T12521] lo speed is unknown, defaulting to 1000 [ 138.731717][T12542] veth0: entered promiscuous mode [ 138.764707][T12542] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 138.854227][T12521] chnl_net:caif_netlink_parms(): no params data found [ 138.947746][T12521] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.954910][T12521] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.962311][T12521] bridge_slave_0: entered allmulticast mode [ 138.970160][T12521] bridge_slave_0: entered promiscuous mode [ 139.003345][T12521] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.010471][T12521] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.038338][T12521] bridge_slave_1: entered allmulticast mode [ 139.050548][T12521] bridge_slave_1: entered promiscuous mode [ 139.084066][T12560] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1536'. [ 139.093299][T12560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1536'. [ 139.105245][T12521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.127419][T12521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.167825][T12521] team0: Port device team_slave_0 added [ 139.198161][T12521] team0: Port device team_slave_1 added [ 139.218826][T12521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.225953][T12521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.251928][T12521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.283189][T12521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.290196][T12521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.316452][T12521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.346214][T12521] hsr_slave_0: entered promiscuous mode [ 139.352471][T12521] hsr_slave_1: entered promiscuous mode [ 139.358517][T12521] debugfs: 'hsr0' already exists in 'hsr' [ 139.364322][T12521] Cannot create hsr debugfs directory [ 139.465866][T12521] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 139.474949][T12521] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 139.485533][T12521] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 139.500495][T12521] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 139.512822][T12576] 8021q: VLANs not supported on vxcan1 [ 139.588956][T12521] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.596226][T12521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.603596][T12521] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.611011][T12521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.642172][T12521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.686490][ T1885] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.694690][ T1885] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.717971][T12521] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.728968][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.736147][ T3713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.756706][ T1885] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.763842][ T1885] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.809846][T12521] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 139.820354][T12521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.851444][T12588] batadv_slave_0: entered promiscuous mode [ 139.875951][T12590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12590 comm=syz.4.1545 [ 139.888637][T12590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12590 comm=syz.4.1545 [ 139.974848][T12521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.006412][T12595] loop5: detected capacity change from 0 to 2048 [ 140.062612][T12595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.113616][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.182295][T12521] veth0_vlan: entered promiscuous mode [ 140.193828][T12521] veth1_vlan: entered promiscuous mode [ 140.209753][T12521] veth0_macvtap: entered promiscuous mode [ 140.217391][T12521] veth1_macvtap: entered promiscuous mode [ 140.238502][T12521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.257408][T12521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.268640][ T3679] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.281642][ T3679] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.296528][ T3679] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.309135][ T3679] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.475961][T12576] syz.0.1543 (12576) used greatest stack depth: 6008 bytes left [ 140.618378][T12629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1553'. [ 140.645441][T12628] lo speed is unknown, defaulting to 1000 [ 140.715379][T12628] lo speed is unknown, defaulting to 1000 [ 141.795470][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1563'. [ 141.827239][T12658] tipc: Enabled bearer , priority 0 [ 141.874818][ T3702] tipc: Resetting bearer [ 141.880907][T12660] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.888158][T12660] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.932084][T12650] tipc: Resetting bearer [ 141.938948][T12660] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12660 comm=syz.7.1563 [ 141.960137][T12650] tipc: Disabling bearer [ 142.054490][T12672] netlink: 'syz.0.1565': attribute type 3 has an invalid length. [ 142.062304][T12672] netlink: 'syz.0.1565': attribute type 1 has an invalid length. [ 142.070134][T12672] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.1565'. [ 142.095748][T12673] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.139860][T12677] netlink: 'syz.0.1569': attribute type 1 has an invalid length. [ 142.158896][T12677] 8021q: adding VLAN 0 to HW filter on device bond6 [ 142.175497][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 142.200597][T12677] bond6 (unregistering): Released all slaves [ 142.270767][T12693] blktrace: Concurrent blktraces are not allowed on sg0 [ 142.298424][T12689] geneve2: entered promiscuous mode [ 142.303771][T12689] geneve2: entered allmulticast mode [ 142.313889][ T3713] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.327502][ T3713] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.346833][ T3713] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.361473][ T3713] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 142.364600][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1576'. [ 142.372382][T12695] lo speed is unknown, defaulting to 1000 [ 142.407323][T12702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'. [ 142.460583][T12695] lo speed is unknown, defaulting to 1000 [ 142.497692][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 142.497730][ T29] audit: type=1400 audit(1767660709.815:6208): avc: denied { append } for pid=12708 comm="syz.7.1582" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.586597][T12715] lo: entered allmulticast mode [ 142.592258][T12713] lo: left allmulticast mode [ 142.671263][ T29] audit: type=1326 audit(1767660709.985:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 142.722932][ T29] audit: type=1326 audit(1767660710.015:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 142.746655][ T29] audit: type=1326 audit(1767660710.015:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 142.770327][ T29] audit: type=1326 audit(1767660710.015:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 142.793962][ T29] audit: type=1326 audit(1767660710.015:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 142.817537][ T29] audit: type=1326 audit(1767660710.015:6214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 142.841286][ T29] audit: type=1326 audit(1767660710.015:6215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 142.864840][ T29] audit: type=1326 audit(1767660710.015:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 142.888326][ T29] audit: type=1326 audit(1767660710.015:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12722 comm="syz.7.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 143.166253][T12739] __nla_validate_parse: 4 callbacks suppressed [ 143.166272][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'. [ 143.187876][T12742] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.227249][T12742] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.350241][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1597'. [ 143.363424][T12742] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.445394][T12742] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.517012][ T1885] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.555453][ T1885] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.617962][ T1885] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.694838][ T1885] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.722549][T12764] loop5: detected capacity change from 0 to 512 [ 143.770403][T12763] lo speed is unknown, defaulting to 1000 [ 143.807741][T12764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.822011][T12763] lo speed is unknown, defaulting to 1000 [ 143.868826][T12764] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.909165][T12764] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.1601: corrupted inode contents [ 143.921993][T12764] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #2: comm syz.5.1601: mark_inode_dirty error [ 143.933564][T12764] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #2: comm syz.5.1601: corrupted inode contents [ 143.945611][T12764] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.1601: mark_inode_dirty error [ 143.997699][T12778] netlink: 'syz.7.1605': attribute type 7 has an invalid length. [ 144.005607][T12778] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1605'. [ 144.019563][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.123867][T12785] netlink: 'syz.4.1608': attribute type 12 has an invalid length. [ 144.220053][T12673] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.253076][T12790] lo speed is unknown, defaulting to 1000 [ 144.329372][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 144.378411][T12673] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.403380][T12790] lo speed is unknown, defaulting to 1000 [ 144.556423][T12673] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.730255][T12801] loop7: detected capacity change from 0 to 2048 [ 144.764823][T12801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.998581][T12791] Set syz1 is full, maxelem 65536 reached [ 145.009204][T11606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.024611][ T3715] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.042332][ T3715] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.081285][ T1885] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.106872][ T1885] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.262335][T12862] syzkaller0: entered promiscuous mode [ 145.268198][T12862] syzkaller0: entered allmulticast mode [ 145.440696][T12879] lo speed is unknown, defaulting to 1000 [ 145.496970][T12884] lo speed is unknown, defaulting to 1000 [ 145.499412][T12879] lo speed is unknown, defaulting to 1000 [ 145.510683][T12890] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1623'. [ 145.519828][T12890] netlink: 228 bytes leftover after parsing attributes in process `syz.8.1623'. [ 145.533383][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1623'. [ 145.595665][T12884] lo speed is unknown, defaulting to 1000 [ 145.833769][T12929] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.843684][T12929] netdevsim netdevsim7 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 145.905840][T12929] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.915771][T12929] netdevsim netdevsim7 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 145.975170][T12929] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.985175][T12929] netdevsim netdevsim7 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 146.036157][T12929] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.046164][T12929] netdevsim netdevsim7 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 146.123397][ T3714] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.131745][ T3714] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.149608][ T3714] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.158049][ T3714] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.177494][ T3714] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.185940][ T3714] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.209348][ T3714] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.217702][ T3714] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.952377][T13003] netlink: 'syz.0.1642': attribute type 13 has an invalid length. [ 147.081280][ T3702] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.106481][ T3702] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.144757][ T3702] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.167688][T13006] netlink: 'syz.0.1643': attribute type 1 has an invalid length. [ 147.172057][ T3702] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.175519][T13006] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 147.175536][T13006] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1643'. [ 147.191927][T13006] netlink: 'syz.0.1643': attribute type 1 has an invalid length. [ 147.208916][T13006] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 147.216746][T13006] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1643'. [ 147.419784][T13013] netlink: 'syz.8.1646': attribute type 1 has an invalid length. [ 147.439622][ T3702] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.472818][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1646'. [ 147.656423][T13018] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.775362][T13018] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.855815][T13018] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.935519][T13018] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.984986][ T3702] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.994327][ T3702] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.002820][ T3702] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.023426][ T3702] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.040520][ T3702] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.054369][ T3702] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.062712][ T3702] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.187870][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 148.187890][ T29] audit: type=1326 audit(1767660715.505:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.218120][ T29] audit: type=1326 audit(1767660715.505:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.274493][ T29] audit: type=1326 audit(1767660715.535:6410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.298265][ T29] audit: type=1326 audit(1767660715.535:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.321841][ T29] audit: type=1326 audit(1767660715.535:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.345402][ T29] audit: type=1326 audit(1767660715.535:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.368962][ T29] audit: type=1326 audit(1767660715.535:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.392575][ T29] audit: type=1326 audit(1767660715.585:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.416108][ T29] audit: type=1326 audit(1767660715.585:6416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.439716][ T29] audit: type=1326 audit(1767660715.585:6417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13022 comm="syz.0.1649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 148.953943][T13035] __nla_validate_parse: 1 callbacks suppressed [ 148.954218][T13035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 149.343879][T13044] netlink: 'syz.4.1658': attribute type 7 has an invalid length. [ 149.351679][T13044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1658'. [ 149.394674][T13048] loop8: detected capacity change from 0 to 128 [ 149.411072][ T3406] IPVS: starting estimator thread 0... [ 149.447241][T13048] lo speed is unknown, defaulting to 1000 [ 149.507135][T13048] lo speed is unknown, defaulting to 1000 [ 149.513197][T13051] IPVS: using max 1680 ests per chain, 84000 per kthread [ 149.601915][T13065] bridge_slave_0: left allmulticast mode [ 149.607671][T13065] bridge_slave_0: left promiscuous mode [ 149.613527][T13065] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.624875][T13065] bridge_slave_1: left allmulticast mode [ 149.630846][T13065] bridge_slave_1: left promiscuous mode [ 149.636754][T13065] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.672790][T13065] team0: Port device team_slave_0 removed [ 149.695907][T13065] team0: Port device team_slave_1 removed [ 149.703240][T13065] bond0: (slave veth7): Releasing active interface [ 149.709873][T13065] bond0: (slave veth7): the permanent HWaddr of slave - 16:76:fb:0a:5e:f7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 149.726991][T13065] batadv1: entered promiscuous mode [ 149.744004][T13070] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1666'. [ 149.780979][T13065] bond0: (slave batadv1): Releasing active interface [ 149.788325][T13065] batadv1: left promiscuous mode [ 149.826978][T13065] bond1: (slave ip6gretap1): Releasing active interface [ 149.834146][T13065] ip6gretap1: left allmulticast mode [ 149.863770][T13065] bond2: (slave veth9): Releasing active interface [ 149.889865][T13065] bond3: (slave geneve1): Releasing backup interface [ 149.897534][T13066] team0: Mode changed to "activebackup" [ 150.040077][T13068] lo speed is unknown, defaulting to 1000 [ 150.074859][T13079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1668'. [ 150.108845][T13068] lo speed is unknown, defaulting to 1000 [ 150.261215][ T3406] IPVS: starting estimator thread 0... [ 150.307515][T13093] netlink: 'syz.8.1674': attribute type 21 has an invalid length. [ 150.319846][T13093] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1674'. [ 150.382977][T13091] IPVS: using max 2256 ests per chain, 112800 per kthread [ 150.619619][T13108] netlink: 'syz.5.1681': attribute type 13 has an invalid length. [ 150.656452][ T3406] lo speed is unknown, defaulting to 1000 [ 150.656466][ T367] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.662328][ T3406] syz2: Port: 1 Link DOWN [ 150.671122][ T367] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.704900][ T367] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.715198][T13110] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.729676][ T367] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.755215][T13110] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.805216][T13110] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.865300][T13110] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.943701][ T3702] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.959111][T13112] loop5: detected capacity change from 0 to 32768 [ 150.968857][ T3702] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.977418][ T3702] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.990049][ T3702] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.068740][T13120] vlan2: entered allmulticast mode [ 151.074127][T13120] dummy0: entered allmulticast mode [ 151.290712][T13132] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 151.303282][T13132] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 151.338158][T13134] lo speed is unknown, defaulting to 1000 [ 151.353623][T13136] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1690'. [ 151.362659][T13136] netlink: 228 bytes leftover after parsing attributes in process `syz.7.1690'. [ 151.389636][T13136] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1690'. [ 151.501824][T13140] loop5: detected capacity change from 0 to 128 [ 151.571275][T13134] lo speed is unknown, defaulting to 1000 [ 151.676342][T13144] lo speed is unknown, defaulting to 1000 [ 151.798153][T13150] loop5: detected capacity change from 0 to 128 [ 151.885538][T13144] lo speed is unknown, defaulting to 1000 [ 151.963212][T13150] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.033866][T13150] ext4 filesystem being mounted at /163/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.106538][T13150] EXT4-fs (loop5): shut down requested (0) [ 152.182837][ T5854] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.277957][T13164] vlan2: entered allmulticast mode [ 152.298469][T13164] dummy0: entered allmulticast mode [ 152.329976][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1703'. [ 152.339086][T13166] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1703'. [ 152.532531][T13169] loop7: detected capacity change from 0 to 8192 [ 152.825614][T13176] lo speed is unknown, defaulting to 1000 [ 152.992145][T13176] lo speed is unknown, defaulting to 1000 [ 153.391687][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 153.391705][ T29] audit: type=1400 audit(1767660720.705:6538): avc: denied { nlmsg_write } for pid=13183 comm="syz.4.1709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 153.462917][ T29] audit: type=1400 audit(1767660720.735:6539): avc: denied { audit_write } for pid=13183 comm="syz.4.1709" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 153.484385][ T29] audit: type=1107 audit(1767660720.735:6540): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 153.628014][T13192] loop5: detected capacity change from 0 to 2048 [ 153.679847][T13192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.730073][T13201] wg2: left promiscuous mode [ 153.734787][T13201] wg2: left allmulticast mode [ 153.742562][T13201] bond1: left allmulticast mode [ 153.748074][T13201] bond2: left allmulticast mode [ 153.753199][T13201] veth9: left promiscuous mode [ 153.758139][T13201] ip6gre1: left allmulticast mode [ 153.765712][ T29] audit: type=1400 audit(1767660721.045:6541): avc: denied { execute } for pid=13191 comm="syz.5.1712" path="/166/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.894079][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.941305][T13205] loop7: detected capacity change from 0 to 1024 [ 153.965118][T13205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.030900][T11606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.111676][T13215] __nla_validate_parse: 2 callbacks suppressed [ 154.111728][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1717'. [ 154.227141][T13231] xt_hashlimit: max too large, truncated to 1048576 [ 154.228216][ T29] audit: type=1326 audit(1767660721.545:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 154.238925][T13231] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.257350][ T29] audit: type=1326 audit(1767660721.545:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 154.289006][ T29] audit: type=1326 audit(1767660721.545:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 154.312597][ T29] audit: type=1326 audit(1767660721.545:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 154.336135][ T29] audit: type=1326 audit(1767660721.545:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 154.359705][ T29] audit: type=1326 audit(1767660721.545:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13230 comm="syz.0.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 154.387289][T13233] veth6: entered promiscuous mode [ 154.392437][T13233] veth6: entered allmulticast mode [ 154.483502][T13240] lo speed is unknown, defaulting to 1000 [ 154.564053][T13240] lo speed is unknown, defaulting to 1000 [ 154.802599][T13250] loop8: detected capacity change from 0 to 32768 [ 154.833385][T13250] loop8: p1 p2 p3 < > p4 < p5 p6 > [ 154.838757][T13250] loop8: p1 start 460800 is beyond EOD, truncated [ 154.839001][T13245] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 154.845243][T13250] loop8: p2 size 83886080 extends beyond EOD, truncated [ 154.872009][T13250] loop8: p5 start 460800 is beyond EOD, truncated [ 154.878688][T13250] loop8: p6 size 83886080 extends beyond EOD, truncated [ 155.142141][T13270] xt_hashlimit: max too large, truncated to 1048576 [ 155.163969][T13270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 155.268306][T13283] siw: device registration error -23 [ 155.353203][T13293] loop5: detected capacity change from 0 to 128 [ 155.359951][T13293] msdos: Bad value for 'errors' [ 155.644228][T13309] netlink: 'syz.7.1753': attribute type 16 has an invalid length. [ 155.652128][T13309] netlink: 'syz.7.1753': attribute type 17 has an invalid length. [ 155.664486][T13308] loop5: detected capacity change from 0 to 512 [ 155.671608][T13308] vfat: Unknown parameter 'iochar‘¬t' [ 155.728557][T13309] 0ªX¹¦À: left allmulticast mode [ 155.733633][T13309] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 156.025780][T13318] lo speed is unknown, defaulting to 1000 [ 156.085255][T13318] lo speed is unknown, defaulting to 1000 [ 156.272636][T13321] loop8: detected capacity change from 0 to 512 [ 156.280110][T13321] EXT4-fs: Ignoring removed nobh option [ 156.344370][T13321] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 156.402064][T13321] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1757: invalid indirect mapped block 256 (level 1) [ 156.434827][T13321] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.1757: invalid indirect mapped block 2683928664 (level 1) [ 156.452232][T13321] EXT4-fs (loop8): 1 truncate cleaned up [ 156.458691][T13321] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.488941][T12521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.534575][T13326] veth2: entered promiscuous mode [ 156.539682][T13326] veth2: entered allmulticast mode [ 156.595093][T13330] netlink: 'syz.5.1760': attribute type 21 has an invalid length. [ 156.607684][T13330] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1760'. [ 156.765813][T13338] syzkaller0: entered promiscuous mode [ 156.771362][T13338] syzkaller0: entered allmulticast mode [ 157.019582][T13348] batadv_slave_0: left promiscuous mode [ 157.025592][T13348] ip6gre1: left promiscuous mode [ 157.100384][T13356] veth2: entered promiscuous mode [ 157.105604][T13356] veth2: entered allmulticast mode [ 157.302285][T13369] lo speed is unknown, defaulting to 1000 [ 157.341289][T13369] lo speed is unknown, defaulting to 1000 [ 157.423904][T13371] lo speed is unknown, defaulting to 1000 [ 157.491367][T13371] lo speed is unknown, defaulting to 1000 [ 157.877139][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1782'. [ 157.894357][T13378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.918662][T13378] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 157.937375][T13383] netlink: 3 bytes leftover after parsing attributes in process `syz.8.1784'. [ 157.956899][T13378] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 157.967466][T13378] bond1 (unregistering): Released all slaves [ 157.979117][T13383] 0ªX¹¦À: renamed from caif0 [ 157.990843][T13387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1785'. [ 158.006113][T13383] 0ªX¹¦À: entered allmulticast mode [ 158.011376][T13383] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 158.107781][T13396] loop8: detected capacity change from 0 to 1024 [ 158.136319][T13396] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.178505][T13406] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.191437][T13406] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.240648][T13406] erspan0: entered promiscuous mode [ 158.247868][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1793'. [ 158.302007][T13414] veth6: left promiscuous mode [ 158.319229][T12521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.846255][T13423] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1798'. [ 158.855354][T13423] 0ªX¹¦À: renamed from caif0 [ 158.861725][T13423] 0ªX¹¦À: entered allmulticast mode [ 158.867093][T13423] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 158.927189][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1800'. [ 158.944230][T13430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.962502][T13430] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 159.015252][T13430] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 159.029259][T13430] bond2 (unregistering): Released all slaves [ 159.243939][T13439] batadv_slave_0: entered promiscuous mode [ 159.262475][T13440] lo speed is unknown, defaulting to 1000 [ 159.325537][T13440] lo speed is unknown, defaulting to 1000 [ 159.490484][T13445] loop7: detected capacity change from 0 to 512 [ 159.558618][T13445] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 159.629976][T13445] EXT4-fs (loop7): mount failed [ 160.518377][T13474] cgroup: fork rejected by pids controller in /syz5 [ 160.761203][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 160.761221][ T29] audit: type=1326 audit(1767660984.075:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13597 comm="syz.0.1816" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x0 [ 161.223467][ T29] audit: type=1326 audit(1767660984.545:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.280145][T13991] process '/newroot/355/file0' started with executable stack [ 161.303743][ T29] audit: type=1326 audit(1767660984.565:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.327377][ T29] audit: type=1326 audit(1767660984.565:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.350949][ T29] audit: type=1326 audit(1767660984.565:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.374596][ T29] audit: type=1326 audit(1767660984.565:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.398160][ T29] audit: type=1326 audit(1767660984.565:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.421731][ T29] audit: type=1326 audit(1767660984.565:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.445296][ T29] audit: type=1326 audit(1767660984.565:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.469061][ T29] audit: type=1326 audit(1767660984.565:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13991 comm="syz.4.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 161.532823][T14037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14037 comm=syz.0.1820 [ 161.868659][T14047] lo speed is unknown, defaulting to 1000 [ 161.885682][T14048] loop8: detected capacity change from 0 to 2048 [ 161.924916][T14048] Alternate GPT is invalid, using primary GPT. [ 161.931598][T14048] loop8: p2 p3 p7 [ 161.949082][T14047] lo speed is unknown, defaulting to 1000 [ 162.035404][T14054] lo speed is unknown, defaulting to 1000 [ 162.096641][T14054] lo speed is unknown, defaulting to 1000 [ 162.700374][T14065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1830'. [ 162.709821][T14065] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 162.919466][T14082] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 162.936233][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1838'. [ 162.967269][T14088] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1836'. [ 162.988068][T14090] loop7: detected capacity change from 0 to 128 [ 163.015740][T14090] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 163.028873][T14090] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.048127][T14097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14097 comm=syz.0.1842 [ 163.060874][T14097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14097 comm=syz.0.1842 [ 163.188132][T11606] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 163.300521][T14115] loop7: detected capacity change from 0 to 128 [ 163.321905][T14115] x_tables: ip_tables: dccp match: only valid for protocol 33 [ 163.467258][T14120] loop7: detected capacity change from 0 to 1764 [ 163.492059][T14119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1851'. [ 163.577494][T14126] bridge0: entered promiscuous mode [ 163.583264][T14126] macsec1: entered promiscuous mode [ 163.589514][T14126] bridge0: port 3(macsec1) entered blocking state [ 163.596319][T14126] bridge0: port 3(macsec1) entered disabled state [ 163.624051][T14126] macsec1: entered allmulticast mode [ 163.629457][T14126] bridge0: entered allmulticast mode [ 163.636457][T14126] macsec1: left allmulticast mode [ 163.641578][T14126] bridge0: left allmulticast mode [ 163.655139][T14126] bridge0: left promiscuous mode [ 163.758736][T14132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14132 comm=syz.7.1856 [ 163.771453][T14132] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14132 comm=syz.7.1856 [ 164.093361][T14139] loop5: detected capacity change from 0 to 128 [ 164.102564][T14139] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 164.123272][T14139] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.237939][T14150] loop8: detected capacity change from 0 to 1024 [ 164.245834][T14150] EXT4-fs: Ignoring removed orlov option [ 164.254304][T14150] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.299401][ T5854] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.342122][T14155] loop5: detected capacity change from 0 to 4096 [ 164.366173][T14155] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.409821][T14159] veth0: entered promiscuous mode [ 164.416093][T14159] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 164.425314][T14159] veth0 (unregistering): left promiscuous mode [ 164.483490][T14161] 8021q: VLANs not supported on vxcan1 [ 164.699660][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1867'. [ 164.743024][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1867'. [ 164.818151][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1866'. [ 164.837653][T12521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.717291][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.006280][T14171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.140254][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.146661][ T3714] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.155179][ T3714] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.175173][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.184220][ T3714] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.192788][ T3714] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.203282][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.214923][T14194] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 166.232703][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.234973][ T3714] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.247144][ T3714] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.258837][T14210] loop7: detected capacity change from 0 to 1024 [ 166.266265][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.291578][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.298340][ T3714] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 166.306912][ T3714] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.315620][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.316243][T14210] EXT4-fs: Ignoring removed orlov option [ 166.341085][T14213] netlink: 'syz.4.1882': attribute type 10 has an invalid length. [ 166.350083][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.357084][T14210] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.362837][T14194] wg1 speed is unknown, defaulting to 1000 [ 166.388296][T14213] bond0: (slave dummy0): Releasing active interface [ 166.436324][T14213] dummy0: left allmulticast mode [ 166.442731][T14213] team0: Device dummy0 is already a lower device of the team interface [ 166.456253][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.467627][T14213] netlink: 'syz.4.1882': attribute type 10 has an invalid length. [ 166.511859][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.671651][T14228] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 166.734075][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 166.734092][ T29] audit: type=1326 audit(1767660990.055:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.803491][ T29] audit: type=1326 audit(1767660990.085:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.827154][ T29] audit: type=1326 audit(1767660990.085:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.850731][ T29] audit: type=1326 audit(1767660990.085:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.874308][ T29] audit: type=1326 audit(1767660990.085:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.897848][ T29] audit: type=1326 audit(1767660990.085:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.921401][ T29] audit: type=1326 audit(1767660990.085:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.944903][ T29] audit: type=1326 audit(1767660990.085:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.968422][ T29] audit: type=1326 audit(1767660990.085:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 166.991980][ T29] audit: type=1326 audit(1767660990.085:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.5.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f488b4ff749 code=0x7ffc0000 [ 167.018267][T11606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.136927][T14246] veth14: entered promiscuous mode [ 167.142245][T14246] veth14: entered allmulticast mode [ 167.317921][T14251] loop5: detected capacity change from 0 to 128 [ 167.838895][T14295] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1902'. [ 168.004049][T14316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14316 comm=syz.0.1904 [ 168.204530][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'. [ 168.587315][T14385] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1914'. [ 168.624057][T14389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1915'. [ 168.670394][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1915'. [ 168.787890][T14407] netlink: 'syz.5.1920': attribute type 10 has an invalid length. [ 168.844282][T14407] team0: Port device dummy0 added [ 168.871681][T14411] netlink: 'syz.5.1920': attribute type 10 has an invalid length. [ 168.902638][T14411] team0: Port device dummy0 removed [ 169.035885][T14432] loop5: detected capacity change from 0 to 164 [ 169.356693][T14477] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 169.383355][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1930'. [ 169.440567][T14483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1932'. [ 169.773283][T14487] netlink: 'syz.7.1933': attribute type 10 has an invalid length. [ 169.783149][T14487] team0: Port device dummy0 added [ 169.791240][T14487] netlink: 'syz.7.1933': attribute type 10 has an invalid length. [ 169.811160][T14487] team0: Port device dummy0 removed [ 169.818756][T14487] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 169.847534][T14491] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.890683][T14489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1935'. [ 169.989169][T14491] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.078179][T14491] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.091056][T14504] lo speed is unknown, defaulting to 1000 [ 170.134853][T14491] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.171087][T14504] lo speed is unknown, defaulting to 1000 [ 170.180101][T14504] wg1 speed is unknown, defaulting to 1000 [ 170.213081][ T3714] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.234967][ T3714] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.253526][ T3714] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.272901][ T3714] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.392122][T14518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1945'. [ 170.412331][T14520] loop8: detected capacity change from 0 to 256 [ 170.444508][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 170.454082][T14520] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.919726][T14504] Set syz1 is full, maxelem 65536 reached [ 171.014814][T14525] loop8: detected capacity change from 0 to 164 [ 171.066708][T14525] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 171.102091][T14525] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 171.137475][T14525] Symlink component flag not implemented [ 171.143244][T14525] Symlink component flag not implemented [ 171.149307][T14525] Symlink component flag not implemented (7) [ 171.155387][T14525] Symlink component flag not implemented (116) [ 171.347939][T14555] veth4: entered promiscuous mode [ 171.353082][T14555] veth4: entered allmulticast mode [ 171.742573][T14548] lo speed is unknown, defaulting to 1000 [ 172.205155][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 172.205172][ T29] audit: type=1326 audit(1767660995.515:6936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.235046][ T29] audit: type=1326 audit(1767660995.515:6937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.258733][ T29] audit: type=1326 audit(1767660995.515:6938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.282310][ T29] audit: type=1326 audit(1767660995.515:6939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.305998][ T29] audit: type=1326 audit(1767660995.515:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.329438][ T29] audit: type=1326 audit(1767660995.525:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.353071][ T29] audit: type=1326 audit(1767660995.525:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.376680][ T29] audit: type=1326 audit(1767660995.525:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.400383][ T29] audit: type=1326 audit(1767660995.525:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.424005][ T29] audit: type=1326 audit(1767660995.525:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14625 comm="syz.7.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 172.488605][T14548] lo speed is unknown, defaulting to 1000 [ 172.503929][T14548] wg1 speed is unknown, defaulting to 1000 [ 172.581226][T14634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.588752][T14634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.597217][T14634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.604734][T14634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.476987][T14762] __nla_validate_parse: 2 callbacks suppressed [ 174.477032][T14762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1988'. [ 174.492357][T14762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1988'. [ 174.698957][T14770] netlink: 660 bytes leftover after parsing attributes in process `syz.4.1992'. [ 175.239171][T14795] loop5: detected capacity change from 0 to 256 [ 175.262448][T14795] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.445698][ T3403] hid_parser_main: 19 callbacks suppressed [ 175.445721][ T3403] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 175.563226][ T3403] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 175.695353][T14835] loop5: detected capacity change from 0 to 256 [ 175.715894][T14835] FAT-fs (loop5): bogus number of FAT sectors [ 175.722193][T14835] FAT-fs (loop5): Can't find a valid FAT filesystem [ 176.570425][T14847] 9pnet_fd: p9_fd_create_tcp (14847): problem connecting socket to 127.0.0.1 [ 177.472401][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 177.472416][ T29] audit: type=1326 audit(1767661000.785:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.545974][T14979] loop5: detected capacity change from 0 to 512 [ 177.552715][T14979] EXT4-fs: Ignoring removed orlov option [ 177.559807][T14979] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 177.570642][ T29] audit: type=1326 audit(1767661000.825:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.570847][T14979] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.2022: corrupted in-inode xattr: e_value size too large [ 177.594312][ T29] audit: type=1326 audit(1767661000.825:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.631926][ T29] audit: type=1326 audit(1767661000.825:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.655582][ T29] audit: type=1326 audit(1767661000.825:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.679270][ T29] audit: type=1326 audit(1767661000.825:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.702909][ T29] audit: type=1326 audit(1767661000.825:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.726450][ T29] audit: type=1326 audit(1767661000.825:7026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.750260][ T29] audit: type=1326 audit(1767661000.825:7027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.773921][ T29] audit: type=1326 audit(1767661000.825:7028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14976 comm="syz.8.2021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f82e21af749 code=0x7ffc0000 [ 177.813277][T14979] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2022: couldn't read orphan inode 15 (err -117) [ 177.885936][T14979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.924583][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.965060][T14987] netlink: 'syz.5.2024': attribute type 10 has an invalid length. [ 177.974474][T14987] team0: Failed to send options change via netlink (err -105) [ 177.982010][T14987] team0: Port device dummy0 added [ 177.999521][T14987] netlink: 'syz.5.2024': attribute type 10 has an invalid length. [ 178.013422][T14987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.048183][T14987] team0: Failed to send options change via netlink (err -105) [ 178.056172][T14987] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 178.073408][T14987] team0: Port device dummy0 removed [ 179.359125][T15018] SELinux: failed to load policy [ 179.411841][T15040] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 179.809844][T15061] tipc: Started in network mode [ 179.814877][T15061] tipc: Node identity 84e, cluster identity 4711 [ 179.821260][T15061] tipc: Node number set to 2126 [ 179.981399][T15074] loop8: detected capacity change from 0 to 764 [ 180.015229][T15074] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 180.074457][T15074] Symlink component flag not implemented [ 180.107529][T15074] Symlink component flag not implemented (7) [ 180.183219][T15091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2056'. [ 180.221365][T15091] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15091 comm=syz.0.2056 [ 180.414300][T15119] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2058'. [ 180.999221][T15174] netlink: 'syz.4.2062': attribute type 4 has an invalid length. [ 181.007181][T15174] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2062'. [ 181.025975][T15165] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2061'. [ 181.876237][T15232] netlink: 'syz.4.2071': attribute type 13 has an invalid length. [ 181.889911][T15229] can0: slcan on ttyS3. [ 181.983106][T15229] can0 (unregistered): slcan off ttyS3. [ 182.035529][T15242] loop5: detected capacity change from 0 to 764 [ 182.051289][T15242] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 182.072449][T15242] Symlink component flag not implemented [ 182.079517][T15242] Symlink component flag not implemented (7) [ 182.852290][T15318] syzkaller0: entered promiscuous mode [ 182.857958][T15318] syzkaller0: entered allmulticast mode [ 183.019622][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 183.019640][ T29] audit: type=1326 audit(1767661006.335:7186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 183.054067][ T29] audit: type=1326 audit(1767661006.335:7187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 183.077797][ T29] audit: type=1326 audit(1767661006.335:7188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 183.101737][ T29] audit: type=1326 audit(1767661006.345:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 183.125364][ T29] audit: type=1326 audit(1767661006.345:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 183.149215][ T29] audit: type=1326 audit(1767661006.345:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 183.172900][ T29] audit: type=1326 audit(1767661006.345:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f332c08f749 code=0x7ffc0000 [ 183.196572][ T29] audit: type=1326 audit(1767661006.345:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f332c091667 code=0x7ffc0000 [ 183.220030][ T29] audit: type=1326 audit(1767661006.345:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f332c0915dc code=0x7ffc0000 [ 183.243514][ T29] audit: type=1326 audit(1767661006.345:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15342 comm="syz.0.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f332c091514 code=0x7ffc0000 [ 183.278106][T15355] netlink: 104 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 183.374336][T15364] loop8: detected capacity change from 0 to 2048 [ 183.416162][T15364] EXT4-fs (loop8): Invalid log block size: 2817 [ 183.515278][T15378] syzkaller0: entered promiscuous mode [ 183.520862][T15378] syzkaller0: entered allmulticast mode [ 183.569842][T15387] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2101'. [ 183.586461][T15380] lo speed is unknown, defaulting to 1000 [ 183.656540][T15380] lo speed is unknown, defaulting to 1000 [ 183.668001][T15380] wg1 speed is unknown, defaulting to 1000 [ 183.911332][T15424] lo speed is unknown, defaulting to 1000 [ 183.921888][T15430] loop5: detected capacity change from 0 to 1024 [ 183.973754][T15430] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2107: bad orphan inode 134217728 [ 184.031668][T15430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.044972][T15433] delete_channel: no stack [ 184.073563][T15424] lo speed is unknown, defaulting to 1000 [ 184.079713][T15424] wg1 speed is unknown, defaulting to 1000 [ 184.201831][T15466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2111'. [ 184.211901][T15466] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.2111'. [ 184.221945][T15466] netlink: zone id is out of range [ 184.227223][T15466] netlink: zone id is out of range [ 184.248944][T15466] netlink: zone id is out of range [ 184.255130][T15466] netlink: zone id is out of range [ 184.260524][T15466] netlink: zone id is out of range [ 184.266127][T15466] netlink: zone id is out of range [ 184.274255][T15470] netlink: 'syz.4.2112': attribute type 83 has an invalid length. [ 184.368374][T15466] netlink: set zone limit has 8 unknown bytes [ 184.618967][T15490] loop8: detected capacity change from 0 to 128 [ 184.625700][T15490] EXT4-fs: Ignoring removed nobh option [ 184.635379][T15490] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.647892][T15490] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 184.666605][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.709510][T12521] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.727879][T15493] ªªªªªª: renamed from vlan0 [ 185.000479][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2127'. [ 185.035082][T15508] team0 (unregistering): Port device team_slave_0 removed [ 185.050582][T15508] team0 (unregistering): Port device team_slave_1 removed [ 185.067722][T15508] team0 (unregistering): Port device geneve1 removed [ 185.229829][T15512] netlink: 'syz.5.2129': attribute type 30 has an invalid length. [ 185.286384][T15504] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2125'. [ 185.303679][T15504] netem: change failed [ 185.407909][T15521] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 185.421441][T15520] syzkaller0: entered promiscuous mode [ 185.427087][T15520] syzkaller0: entered allmulticast mode [ 185.455728][T15521] team0: Failed to send options change via netlink (err -105) [ 185.463401][T15521] team0: Port device dummy0 added [ 185.469060][T15524] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 185.483627][T15524] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 185.519456][T15524] team0: Failed to send options change via netlink (err -105) [ 185.533170][T15524] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 185.554555][T15524] team0: Port device dummy0 removed [ 185.586328][T15530] loop8: detected capacity change from 0 to 164 [ 185.760244][T15550] loop5: detected capacity change from 0 to 1024 [ 185.779090][T15550] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.2152: bad orphan inode 134217728 [ 185.791016][T15550] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.015224][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.081109][T15563] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 186.095254][T15561] loop8: detected capacity change from 0 to 4096 [ 186.102319][T15561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.112251][T15561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.137093][T15567] netlink: 'syz.4.2147': attribute type 10 has an invalid length. [ 186.162906][T15567] team0: Device dummy0 is already a lower device of the team interface [ 186.173225][T15567] netlink: 'syz.4.2147': attribute type 10 has an invalid length. [ 186.250384][T15574] loop5: detected capacity change from 0 to 2048 [ 186.276123][T15574] Alternate GPT is invalid, using primary GPT. [ 186.282577][T15574] loop5: p2 p3 p7 [ 186.299094][T15574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.322516][T15574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.365305][T15582] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2156'. [ 186.467281][T12521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.503036][T15587] netlink: 664 bytes leftover after parsing attributes in process `syz.8.2158'. [ 186.553880][T15590] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.578203][T15591] syzkaller0: entered promiscuous mode [ 186.583805][T15591] syzkaller0: entered allmulticast mode [ 186.623976][T15590] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.695630][T15590] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.722040][T15598] lo speed is unknown, defaulting to 1000 [ 186.735142][T15590] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.774881][T15598] lo speed is unknown, defaulting to 1000 [ 186.786639][T15598] wg1 speed is unknown, defaulting to 1000 [ 186.812583][ T3713] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.834291][ T3713] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.859111][ T3713] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.877060][ T3713] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.916040][T15608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2165'. [ 187.008993][T15615] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2168'. [ 187.093735][T15620] pim6reg: entered allmulticast mode [ 187.116961][T15620] pim6reg: left allmulticast mode [ 187.336341][T15630] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 187.599447][T15639] lo speed is unknown, defaulting to 1000 [ 187.649186][T15643] gretap1: entered promiscuous mode [ 187.741196][T15639] lo speed is unknown, defaulting to 1000 [ 187.747606][T15639] wg1 speed is unknown, defaulting to 1000 [ 187.857926][T15652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2181'. [ 187.998417][T15658] lo speed is unknown, defaulting to 1000 [ 188.003534][T15662] loop8: detected capacity change from 0 to 128 [ 188.015986][T15662] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 188.028890][T15662] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.060102][T15658] lo speed is unknown, defaulting to 1000 [ 188.066653][T15658] wg1 speed is unknown, defaulting to 1000 [ 188.075494][T15664] siw: device registration error -23 [ 188.097861][T12521] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 188.155822][T15666] netlink: 'syz.8.2187': attribute type 1 has an invalid length. [ 188.164862][T15666] Unknown options in mask 20 [ 188.180964][T15660] infiniband !yz!: set down [ 188.185640][T15660] infiniband !yz!: added team_slave_0 [ 188.204184][T15660] RDS/IB: !yz!: added [ 188.208388][T15660] smc: adding ib device !yz! with port count 1 [ 188.214853][T15660] smc: ib device !yz! port 1 has no pnetid [ 188.247759][ T29] kauditd_printk_skb: 818 callbacks suppressed [ 188.247817][ T29] audit: type=1326 audit(1767661011.565:8014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 188.281566][ T29] audit: type=1326 audit(1767661011.595:8015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 188.305393][ T29] audit: type=1326 audit(1767661011.595:8016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 188.329023][ T29] audit: type=1326 audit(1767661011.595:8017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 188.352578][ T29] audit: type=1326 audit(1767661011.595:8018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 188.376555][ T29] audit: type=1326 audit(1767661011.595:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b9db1f749 code=0x7ffc0000 [ 188.400113][ T29] audit: type=1326 audit(1767661011.595:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b9db21667 code=0x7ffc0000 [ 188.423554][ T29] audit: type=1326 audit(1767661011.595:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4b9db215dc code=0x7ffc0000 [ 188.447033][ T29] audit: type=1326 audit(1767661011.595:8022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4b9db21514 code=0x7ffc0000 [ 188.470481][ T29] audit: type=1326 audit(1767661011.595:8023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.4.2188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4b9db21514 code=0x7ffc0000 [ 188.541692][T15674] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 188.548298][T15674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 188.555964][T15674] vhci_hcd vhci_hcd.0: Device attached [ 188.583787][T15675] vhci_hcd: connection closed [ 188.583976][ T3714] vhci_hcd vhci_hcd.5: stop threads [ 188.594178][ T3714] vhci_hcd vhci_hcd.5: release socket [ 188.599646][ T3714] vhci_hcd vhci_hcd.5: disconnect device [ 188.867271][T15686] syz.7.2194: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 188.882036][T15686] CPU: 0 UID: 0 PID: 15686 Comm: syz.7.2194 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 188.882145][T15686] Tainted: [W]=WARN [ 188.882155][T15686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.882176][T15686] Call Trace: [ 188.882189][T15686] [ 188.882198][T15686] __dump_stack+0x1d/0x30 [ 188.882231][T15686] dump_stack_lvl+0x95/0xd0 [ 188.882259][T15686] dump_stack+0x15/0x1b [ 188.882286][T15686] warn_alloc+0x12b/0x1a0 [ 188.882434][T15686] __vmalloc_node_range_noprof+0xa0/0x1310 [ 188.882471][T15686] ? __rcu_read_unlock+0x4f/0x70 [ 188.882500][T15686] ? perf_iterate_sb+0x62a/0x650 [ 188.882530][T15686] ? __pfx_perf_event_switch_output+0x10/0x10 [ 188.882555][T15686] ? __rcu_read_unlock+0x4f/0x70 [ 188.882573][T15686] ? avc_has_perm_noaudit+0xab/0x130 [ 188.882650][T15686] ? should_fail_ex+0x30/0x280 [ 188.882669][T15686] ? should_failslab+0x8c/0xb0 [ 188.882757][T15686] vmalloc_user_noprof+0x7d/0xb0 [ 188.882779][T15686] ? xskq_create+0x80/0xe0 [ 188.882818][T15686] xskq_create+0x80/0xe0 [ 188.882927][T15686] xsk_init_queue+0x95/0xf0 [ 188.882966][T15686] xsk_setsockopt+0x3f5/0x640 [ 188.883004][T15686] ? __pfx_xsk_setsockopt+0x10/0x10 [ 188.883060][T15686] __sys_setsockopt+0x184/0x200 [ 188.883086][T15686] __x64_sys_setsockopt+0x64/0x80 [ 188.883165][T15686] x64_sys_call+0x21d5/0x3000 [ 188.883188][T15686] do_syscall_64+0xca/0x2b0 [ 188.883219][T15686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.883313][T15686] RIP: 0033:0x7f3228cbf749 [ 188.883332][T15686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.883349][T15686] RSP: 002b:00007f322771f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 188.883367][T15686] RAX: ffffffffffffffda RBX: 00007f3228f15fa0 RCX: 00007f3228cbf749 [ 188.883378][T15686] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 188.883407][T15686] RBP: 00007f3228d43f91 R08: 0000000000000004 R09: 0000000000000000 [ 188.883437][T15686] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.883453][T15686] R13: 00007f3228f16038 R14: 00007f3228f15fa0 R15: 00007ffd9c5b58c8 [ 188.883490][T15686] [ 189.102715][T15686] Mem-Info: [ 189.105960][T15686] active_anon:18669 inactive_anon:3237 isolated_anon:0 [ 189.105960][T15686] active_file:18265 inactive_file:2859 isolated_file:0 [ 189.105960][T15686] unevictable:0 dirty:285 writeback:0 [ 189.105960][T15686] slab_reclaimable:3801 slab_unreclaimable:111194 [ 189.105960][T15686] mapped:28745 shmem:3391 pagetables:1715 [ 189.105960][T15686] sec_pagetables:0 bounce:0 [ 189.105960][T15686] kernel_misc_reclaimable:0 [ 189.105960][T15686] free:1554288 free_pcp:21442 free_cma:0 [ 189.151465][T15686] Node 0 active_anon:74676kB inactive_anon:12948kB active_file:73060kB inactive_file:11436kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:114980kB dirty:1140kB writeback:0kB shmem:13564kB kernel_stack:5072kB pagetables:6860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.179374][T15686] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.209052][T15686] lowmem_reserve[]: 0 2880 7859 7859 [ 189.214582][T15686] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 189.246034][T15686] lowmem_reserve[]: 0 0 4978 4978 [ 189.251178][T15686] Node 0 Normal free:3255804kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:74676kB inactive_anon:12948kB active_file:73060kB inactive_file:11436kB unevictable:0kB writepending:1140kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:82384kB local_pcp:67560kB free_cma:0kB [ 189.284842][T15686] lowmem_reserve[]: 0 0 0 0 [ 189.289407][T15686] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.302300][T15686] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 189.318603][T15686] Node 0 Normal: 1665*4kB (UME) 1495*8kB (UME) 714*16kB (UM) 691*32kB (UM) 450*64kB (UM) 326*128kB (UME) 209*256kB (UME) 255*512kB (UME) 204*1024kB (UME) 112*2048kB (UME) 613*4096kB (UM) = 3255868kB [ 189.338477][T15686] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB [ 189.347874][T15686] 24898 total pagecache pages [ 189.352599][T15686] 396 pages in swap cache [ 189.357166][T15686] Free swap = 68688kB [ 189.361408][T15686] Total swap = 124996kB [ 189.365652][T15686] 2097051 pages RAM [ 189.369496][T15686] 0 pages HighMem/MovableOnly [ 189.374387][T15686] 81272 pages reserved [ 189.455588][T15699] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2198'. [ 189.493540][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2201'. [ 189.504934][T15706] team0: Port device team_slave_1 removed [ 189.564381][T15713] loop5: detected capacity change from 0 to 1024 [ 189.572469][T15713] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.582454][T15713] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 189.591276][T15713] System zones: 0-1, 3-36 [ 189.598429][T15713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.616985][T15713] siw: device registration error -23 [ 189.639015][ T5854] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.648505][T15722] lo speed is unknown, defaulting to 1000 [ 189.690642][T15722] lo speed is unknown, defaulting to 1000 [ 189.702142][T15722] wg1 speed is unknown, defaulting to 1000 [ 190.406133][T15757] siw: device registration error -23 [ 190.559328][T15762] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2222'. [ 190.594104][T15764] netlink: 'syz.7.2223': attribute type 7 has an invalid length. [ 190.601908][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2223'. [ 190.742436][T15776] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 190.753496][T15775] IPVS: stopping backup sync thread 15776 ... [ 190.761254][T15775] netlink: 'syz.7.2228': attribute type 10 has an invalid length. [ 190.769164][T15775] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2228'. [ 190.778573][T15775] dummy0: entered promiscuous mode [ 190.787751][T15775] bond0: (slave dummy0): Releasing backup interface [ 190.805974][T15775] bridge0: port 3(dummy0) entered blocking state [ 190.812412][T15775] bridge0: port 3(dummy0) entered disabled state [ 190.832960][T15779] netlink: 'syz.7.2228': attribute type 10 has an invalid length. [ 190.871626][T15779] dummy0: left promiscuous mode [ 190.876756][T15779] bridge0: port 3(dummy0) entered disabled state [ 190.905265][T15779] team0: Port device dummy0 added [ 191.484665][T15810] syzkaller0: entered promiscuous mode [ 191.490260][T15810] syzkaller0: entered allmulticast mode [ 192.310503][T15830] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2247'. [ 192.338652][T15832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2248'. [ 192.446683][T15840] loop8: detected capacity change from 0 to 512 [ 192.465690][T15840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.485051][T15840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.498092][T15840] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.534439][T12521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.556071][T15848] loop5: detected capacity change from 0 to 512 [ 192.562764][T15848] EXT4-fs: Ignoring removed oldalloc option [ 192.585579][T15848] journal_path: Lookup failure for './file0' [ 192.591635][T15848] EXT4-fs: error: could not find journal device path [ 192.619829][T15848] sg_write: data in/out 178/204 bytes for SCSI command 0xfe-- guessing data in; [ 192.619829][T15848] program syz.5.2254 not setting count and/or reply_len properly [ 192.684945][T15858] loop8: detected capacity change from 0 to 512 [ 192.691625][T15858] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 192.735487][T15858] netlink: 176 bytes leftover after parsing attributes in process `syz.8.2256'. [ 192.899299][T15866] loop5: detected capacity change from 0 to 128 [ 192.917672][T15866] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 193.273063][T15866] ext4 filesystem being mounted at /285/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.383653][T15872] bridge: RTM_NEWNEIGH with invalid ether address [ 193.394269][ T5854] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 193.578795][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 193.578813][ T29] audit: type=1326 audit(1767661016.895:8367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15875 comm="syz.7.2263" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x0 [ 194.362168][T15896] netlink: 'syz.5.2270': attribute type 1 has an invalid length. [ 194.370022][T15896] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2270'. [ 194.407478][ T29] audit: type=1326 audit(1767661017.715:8368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.431136][ T29] audit: type=1326 audit(1767661017.715:8369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.454843][ T29] audit: type=1326 audit(1767661017.715:8370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.479006][ T29] audit: type=1326 audit(1767661017.715:8371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.502952][ T29] audit: type=1326 audit(1767661017.715:8372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.526667][ T29] audit: type=1326 audit(1767661017.715:8373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.550258][ T29] audit: type=1326 audit(1767661017.715:8374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.573845][ T29] audit: type=1326 audit(1767661017.715:8375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.597796][ T29] audit: type=1326 audit(1767661017.715:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15897 comm="syz.7.2271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f3228cbf749 code=0x7ffc0000 [ 194.808596][T15916] tipc: New replicast peer: 255.255.255.255 [ 194.814783][T15916] tipc: Enabled bearer , priority 10 [ 194.865350][T15921] syzkaller0: entered promiscuous mode [ 194.870966][T15921] syzkaller0: entered allmulticast mode [ 194.922688][T15923] lo speed is unknown, defaulting to 1000 [ 194.981410][T15923] lo speed is unknown, defaulting to 1000 [ 194.988158][T15923] wg1 speed is unknown, defaulting to 1000 [ 195.608051][T15941] loop8: detected capacity change from 0 to 1024 [ 195.639855][T15941] EXT4-fs error (device loop8): ext4_orphan_get:1417: comm syz.8.2288: bad orphan inode 134217728 [ 195.651309][T15941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.748969][T15941] ================================================================== [ 195.757116][T15941] BUG: KCSAN: data-race in filemap_read / filemap_read [ 195.764018][T15941] [ 195.766387][T15941] read to 0xffff888104c8e5e8 of 8 bytes by task 15954 on cpu 0: [ 195.774053][T15941] filemap_read+0x6f/0xa00 [ 195.778499][T15941] generic_file_read_iter+0x79/0x330 [ 195.783808][T15941] ext4_file_read_iter+0x1cc/0x290 [ 195.788966][T15941] copy_splice_read+0x442/0x660 [ 195.793860][T15941] splice_direct_to_actor+0x290/0x680 [ 195.799425][T15941] do_splice_direct+0xda/0x150 [ 195.804214][T15941] do_sendfile+0x380/0x650 [ 195.808654][T15941] __x64_sys_sendfile64+0x105/0x150 [ 195.813873][T15941] x64_sys_call+0x2db1/0x3000 [ 195.818578][T15941] do_syscall_64+0xca/0x2b0 [ 195.823114][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.829031][T15941] [ 195.831399][T15941] write to 0xffff888104c8e5e8 of 8 bytes by task 15941 on cpu 1: [ 195.839124][T15941] filemap_read+0x974/0xa00 [ 195.843650][T15941] generic_file_read_iter+0x79/0x330 [ 195.848958][T15941] ext4_file_read_iter+0x1cc/0x290 [ 195.854089][T15941] copy_splice_read+0x442/0x660 [ 195.858965][T15941] splice_direct_to_actor+0x290/0x680 [ 195.864358][T15941] do_splice_direct+0xda/0x150 [ 195.869142][T15941] do_sendfile+0x380/0x650 [ 195.873592][T15941] __x64_sys_sendfile64+0x105/0x150 [ 195.878828][T15941] x64_sys_call+0x2db1/0x3000 [ 195.883526][T15941] do_syscall_64+0xca/0x2b0 [ 195.888063][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.893975][T15941] [ 195.896323][T15941] value changed: 0x00000000000000c1 -> 0x00000000000000c2 [ 195.903436][T15941] [ 195.905771][T15941] Reported by Kernel Concurrency Sanitizer on: [ 195.911934][T15941] CPU: 1 UID: 0 PID: 15941 Comm: syz.8.2288 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.923337][T15941] Tainted: [W]=WARN [ 195.927151][T15941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.937226][T15941] ================================================================== [ 195.945549][ T6296] tipc: Node number set to 2690882556 [ 196.137247][T12521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.