last executing test programs: 6.132874615s ago: executing program 0 (id=3281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) 6.017372587s ago: executing program 0 (id=3284): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x5}}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x3, 0x10, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f14562c5f463273ef4a720564f485a"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xd, @private2, 0x8001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast2}}]}, 0x80}, 0x1, 0x7}, 0x0) eventfd2(0x9, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e20ac1414bb0000000000000000020013000200000029bd70000e350000"], 0x78}, 0x1, 0x7}, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r3, 0xf502, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x77}], 0x1, 0x40010103, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x2000000, 0x0, 'id0\x00', 'timer0\x00'}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000003a2c5c5533b7270bb64d2e0787ff7634cbdceec1f6866a4bf8eb8e3a936e1b377f751ad45d92643470c1df238a5a34963a3c081c95ec02ce8751d2b36bdfcdca4ebe790f0a51494371b55a9bd59560c3920bfb2af789f06f8431137689316bd02e5cf674212c427984903a4c8f3489da"], 0x50}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000280)=0x3) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) 5.037277695s ago: executing program 0 (id=3299): syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sched\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB="747299b5fca60b", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',\x00']) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @private=0xa010100}], 0x40) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="000000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r7, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x4, @vifc_lcl_addr=@loopback, @local}, 0x10) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x4898, 0x0) 4.705050738s ago: executing program 0 (id=3302): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000008c0)='mm_page_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x6, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f0000000380)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x1200000, 0x260900) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b", 0xe, 0xfffffffffffffffd) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff06860900020073796232000000000800410073697700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) syz_usbip_server_init(0x6) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) 4.434332606s ago: executing program 2 (id=3304): unshare(0x20000400) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="74df617506064ce43be693f6e2b9bb76ade24b9bb7f552926736947fdf87ef5e964a9892f5f576de6db3362fe476028c3bb8fa01708dbd4c42324bc08a70cadc0672b37db139e2d37df1f53e4610ebee284ef39236f7e7", 0x57, 0xc5, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @local, 0x4}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$FIOCLEX(r1, 0x5451) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) utime(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)={0x5, 0xfffffffffffffe01}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$packet(0x11, 0xa, 0x300) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x3}, 0x12, 0x6, 0x7, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 3.578698351s ago: executing program 0 (id=3320): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) syz_clone3(&(0x7f00000007c0)={0x1000400, 0x0, 0x0, 0x0, {0x26}, &(0x7f0000000580)=""/255, 0xff, 0x0, 0x0}, 0x58) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 2.657818083s ago: executing program 1 (id=3327): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) dup2(r1, r0) 2.656871663s ago: executing program 4 (id=3328): unshare(0x20000400) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="74df617506064ce43be693f6e2b9bb76ade24b9bb7f552926736947fdf87ef5e964a9892f5f576de6db3362fe476028c3bb8fa01708dbd4c42324bc08a70cadc0672b37db139e2d37df1f53e4610ebee284ef39236f7e7", 0x57, 0xc5, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @local, 0x4}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$FIOCLEX(r1, 0x5451) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) utime(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)={0x5, 0xfffffffffffffe01}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$packet(0x11, 0xa, 0x300) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x3}, 0x12, 0x6, 0x7, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 2.617096487s ago: executing program 1 (id=3330): openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000008c0)='mm_page_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x6, 0xe, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000007c0)={[{@nouid32}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f0000000380)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x1200000, 0x260900) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x84}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x18) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b", 0xe, 0xfffffffffffffffd) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff06860900020073796232000000000800410073697700140033006272696467653000"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50) syz_usbip_server_init(0x6) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r4, &(0x7f0000000300)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) 2.255449164s ago: executing program 3 (id=3333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001cc0)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x4b, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) iopl(0x3) gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000440)="4066ba4a86c66f3ab3b40bc05f7e1f0d4c38bdbc1b0397dc1d7bfb956447697a0f0b8bcbfa0a55026215581e47652b884d48", &(0x7f00000007c0)="a59990bf7d861423777d293471b8429540c80af4e0d6eff85de22390b7646e9688d268"}}, &(0x7f0000bbdffc)) timerfd_create(0x0, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r0, 0x0, 0x11, 0x801afd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c00028005000100060000"], 0x44}}, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x4ec000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.103850919s ago: executing program 4 (id=3334): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) get_mempolicy(0x0, 0x0, 0x5, &(0x7f000041e000/0x1000)=nil, 0x2) fcntl$notify(r0, 0x402, 0x21) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x40) write$binfmt_elf32(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000000000000000000300000008000000f30000007f00000004000000040020000c000000000400000f88f736179bb218026139484dc0ecb61babf07c39f5e6932c337d6b2a9c963632e0a3961668b3e6526ae85eeb6e805a0ccd7b8818483228d7324b9f811767988ad9103ed49318e941a42a3fdfa6543f1ae1d39b5b80211db0ba4e785fd20e28ff8911c0d6057381"], 0x58) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) unshare(0x400) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="00008f2616ca8a950000000001000000000000000045b7e9ee00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100"/28], 0x50) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x26, 0x1}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x2404c0d0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r4}, 0x18) r7 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x40010) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r9, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.629384186s ago: executing program 3 (id=3335): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095", @ANYRES64], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, &(0x7f0000002200)=0xc0100100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xa, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) 1.609737418s ago: executing program 1 (id=3336): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x3}}]}, 0x82, 0x48f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xe, &(0x7f0000000040)=@raw=[@generic={0x4, 0x7, 0x6, 0xb, 0x80000001}, @ldst={0x0, 0x3, 0x4, 0x6, 0xb, 0x50, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xc, 0x1, 0x9, 0x1, 0x1}, @exit, @call={0x85, 0x0, 0x0, 0xb2}], &(0x7f00000000c0)='GPL\x00', 0x8, 0xf3, &(0x7f0000000840)=""/243, 0x40f00, 0x20, '\x00', r2, 0x25, r0, 0x8, &(0x7f0000000100)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0x5, 0x7, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[r0], &(0x7f0000000240)=[{0x0, 0x4, 0x5, 0xa}, {0x1, 0x4, 0x0, 0x6}, {0x1, 0x5, 0x10, 0x7}], 0x10, 0xb4d17a53}, 0x94) 1.481948871s ago: executing program 4 (id=3337): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10000) 1.166376693s ago: executing program 1 (id=3338): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffffff, 0x0, 0x0) 1.061565943s ago: executing program 1 (id=3339): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) syz_clone3(&(0x7f00000007c0)={0x1000400, 0x0, 0x0, 0x0, {0x26}, &(0x7f0000000580)=""/255, 0xff, 0x0, 0x0}, 0x58) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) 1.013847358s ago: executing program 2 (id=3307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000eb00000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002040)="6394d3488330666dbdd9950eab66acedb7d63142f2579bb5c49d6afcf733d53868f022d406603472f8fe856b8b1dec832a9e1aed59fed3cfabd3b12e55901fc713c22cf897a36932c18e9b56a1b27cd6e87f4ad3feddd6f92547771e227cd37d9d513fd0cd3064f568ad9d7d7392db22625d406496d092a39dcbb89252e3736d81263d4c2f60eaf0bdf5bf510d0d046260b1bc6fabeecf59289a42c09ce4b5488d1e094bb040ad5250952d8f7e0e9ae0b1e1dc11e940a60a902045731b520ab814026fd0fa683e994eaec41845f221df61bc1e16156175865a5cb0cd4336c5", 0x0, 0x4f, r1, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f80)='./cgroup.net/syz1\x00', 0x200002, 0x0) 946.679825ms ago: executing program 2 (id=3340): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x2, 0x3, 0x10000, 0xff, r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x300}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) pipe2$9p(&(0x7f00000001c0), 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_pidfd_open(0x0, 0x0) 896.06763ms ago: executing program 2 (id=3341): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x1c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xf, 0x3, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60e, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={0x0, r4}, 0x18) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, 0x0, 0x0) unlink(&(0x7f0000000500)='./file0\x00') sendmsg$kcm(r3, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x141) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r5}, &(0x7f00000002c0), 0x0}, 0x20) 806.452448ms ago: executing program 2 (id=3342): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x10481a, 0x0, 0x0, 0x7, 0x4, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[], 0xfdef) 763.618683ms ago: executing program 3 (id=3343): unshare(0x20000400) syz_mount_image$ext4(&(0x7f0000002180)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008802, &(0x7f0000000000)={[{@jqfmt_vfsv1}, {@abort}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@data_ordered}, {@mblk_io_submit}, {@usrquota}, {@nodioread_nolock}, {@errors_remount}, {}, {@auto_da_alloc}]}, 0x9, 0x606, &(0x7f0000000600)="$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") chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="74df617506064ce43be693f6e2b9bb76ade24b9bb7f552926736947fdf87ef5e964a9892f5f576de6db3362fe476028c3bb8fa01708dbd4c42324bc08a70cadc0672b37db139e2d37df1f53e4610ebee284ef39236f7e7", 0x57, 0xc5, &(0x7f00000002c0)={0xa, 0x4e22, 0x4, @local, 0x4}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) ioctl$FIOCLEX(r1, 0x5451) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) utime(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000003c0)={0x5, 0xfffffffffffffe01}) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) socket$packet(0x11, 0xa, 0x300) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd, 0x3}, 0x12, 0x6, 0x7, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x2000000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 628.017496ms ago: executing program 2 (id=3344): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000180)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000640)="cbf3257a1a3e65dc202051cbea3a771cfd177081783885f50696db9d4f38aa19dfeacdf41fe5a4aca616f5fe58345a388817f74a8989314b2633f3af2c1bc5af786df09448dd622c97dd33f27d738ff4e3cb640606a771feb8d24861fdcee3ec0285291a68eea2e13c4161a982e0e318908695e2d624a85b281bccd4c895ffd64a5fc53d81b10c4cb0681dcd6608a9be70893301e1a3343a2973703934247c6b8e57795d9287d34d7f5a1db474ea235f71f738dae35aea214042b1ec51ce40e72edeebd9d6ca719924b1c673adbfa78d8775a741568268f35c7716a6886ead6398a1d2058bfa5bc24c5e", &(0x7f00000007c0)=""/86, 0x4}, 0x20) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180800001bc81a0000000000000000011830000002000000000000000000000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000002000101180000000000000000000000fdffffff9500000000000000360a0000000f0000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ff1300b702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x8000000000000003, {}, 0xfd}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x10) setitimer(0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$nl_route_sched(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000540)=""/84, &(0x7f0000000740)=0x54) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xc8, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0xb, 0xfff, 0x2, 0x6, 0x8, 0xa}}, {0x18, 0x2, [0x6, 0x4, 0x3, 0x4, 0x2, 0x9, 0xa, 0x3, 0x80, 0xfffa]}}, {{0x1c, 0x1, {0x1, 0x8, 0x6, 0xb2816, 0x2, 0x7, 0x5, 0x3}}, {0xa, 0x2, [0xd, 0x200, 0x5]}}, {{0x1c, 0x1, {0x6, 0xa, 0x6, 0x0, 0x0, 0x6, 0x101, 0x7}}, {0x12, 0x2, [0xfff, 0xd, 0x6, 0x7, 0x800, 0x5, 0x2]}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0xc8}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delchain={0x24, 0x2e, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff3, 0xffff}, {0xfff1, 0xe}}}, 0x24}}, 0x4000) 615.107178ms ago: executing program 4 (id=3345): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x20000000}, 0x50) 538.255986ms ago: executing program 4 (id=3346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) 491.28833ms ago: executing program 4 (id=3347): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x8000000) r2 = syz_io_uring_setup(0x5c6, 0x0, 0x0, &(0x7f0000000580)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000d80)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x154}}, 0x40000) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000480)={@dev={0xfe, 0x80, '\x00', 0x30}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x5}, 0x1) close(r5) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRES8=r7], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x53, &(0x7f0000000140)={0x0, 0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) migrate_pages(0x0, 0x8, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 254.289514ms ago: executing program 3 (id=3348): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530000000000000000000140001"], 0x110}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x49, 0x0, &(0x7f0000000580)="004b906e2ec55230186f69cada77b28d372cdd8597a4f2d792621496e04097d312634b9103fb6885525951080acf6693ef0a34912f3f4694c9311e5fad715aebf4af0392fd32e4c912", 0x0}, 0x50) sendto$inet(r0, 0x0, 0x0, 0x17, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") 181.238861ms ago: executing program 0 (id=3349): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e65766530000000000000000000140001"], 0x110}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x49, 0x0, &(0x7f0000000580)="004b906e2ec55230186f69cada77b28d372cdd8597a4f2d792621496e04097d312634b9103fb6885525951080acf6693ef0a34912f3f4694c9311e5fad715aebf4af0392fd32e4c912", 0x0}, 0x50) sendto$inet(r0, 0x0, 0x0, 0x17, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) rt_sigprocmask(0x2, &(0x7f0000000040)={[0xf1]}, 0x0, 0x8) syz_read_part_table(0x1059, &(0x7f0000000000)="$eJzsz8FNw0AUBNDxYmRbogNa4Ewn7scHCuFMT0hUwDmX6EdeR0oHSQ7v3Uazs9IPD/WRlpxqfG+ZkyXJuWpK8nb0VdVakr+ehtuwP+q2ek3ycoRx2f/JsF3LVv+fa9/VsC++l6/5aH4zZf25150AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8MwuAQAA//9ZkRMF") 65.297693ms ago: executing program 3 (id=3350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000eb00000008"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x20) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000d40), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002040)="6394d3488330666dbdd9950eab66acedb7d63142f2579bb5c49d6afcf733d53868f022d406603472f8fe856b8b1dec832a9e1aed59fed3cfabd3b12e55901fc713c22cf897a36932c18e9b56a1b27cd6e87f4ad3feddd6f92547771e227cd37d9d513fd0cd3064f568ad9d7d7392db22625d406496d092a39dcbb89252e3736d81263d4c2f60eaf0bdf5bf510d0d046260b1bc6fabeecf59289a42c09ce4b5488d1e094bb040ad5250952d8f7e0e9ae0b1e1dc11e940a60a902045731b520ab814026fd0fa683e994eaec41845f221df61bc1e16156175865a5cb0cd4336c5", 0x0, 0x4f, r1, 0x4}, 0x38) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001f80)='./cgroup.net/syz1\x00', 0x200002, 0x0) 24.654387ms ago: executing program 1 (id=3351): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r2, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90}) syz_clone3(&(0x7f00000007c0)={0x1000400, 0x0, 0x0, 0x0, {0x26}, &(0x7f0000000580)=""/255, 0xff, 0x0, 0x0}, 0x58) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 0s ago: executing program 3 (id=3352): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x2, 0x3, 0x10000, 0xff, r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x300}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) pipe2$9p(&(0x7f00000001c0), 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) syz_pidfd_open(0x0, 0x0) kernel console output (not intermixed with test programs): race: [ 187.792205][T12073] [ 187.792213][T12073] __dump_stack+0x1d/0x30 [ 187.792236][T12073] dump_stack_lvl+0xe8/0x140 [ 187.792257][T12073] dump_stack+0x15/0x1b [ 187.792273][T12073] dump_header+0x81/0x220 [ 187.792366][T12073] oom_kill_process+0x342/0x400 [ 187.792399][T12073] out_of_memory+0x979/0xb80 [ 187.792505][T12073] try_charge_memcg+0x610/0xa10 [ 187.792540][T12073] obj_cgroup_charge_pages+0xa6/0x150 [ 187.792615][T12073] __memcg_kmem_charge_page+0x9f/0x170 [ 187.792639][T12073] __alloc_frozen_pages_noprof+0x188/0x360 [ 187.792715][T12073] alloc_pages_mpol+0xb3/0x260 [ 187.792735][T12073] alloc_pages_noprof+0x90/0x130 [ 187.792754][T12073] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 187.792849][T12073] __kvmalloc_node_noprof+0x483/0x670 [ 187.792916][T12073] ? ip_set_alloc+0x24/0x30 [ 187.793054][T12073] ? ip_set_alloc+0x24/0x30 [ 187.793083][T12073] ip_set_alloc+0x24/0x30 [ 187.793112][T12073] hash_netiface_create+0x282/0x740 [ 187.793192][T12073] ? __pfx_hash_netiface_create+0x10/0x10 [ 187.793284][T12073] ip_set_create+0x3cc/0x970 [ 187.793314][T12073] ? __nla_parse+0x40/0x60 [ 187.793336][T12073] nfnetlink_rcv_msg+0x4c6/0x590 [ 187.793386][T12073] netlink_rcv_skb+0x123/0x220 [ 187.793416][T12073] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 187.793500][T12073] nfnetlink_rcv+0x167/0x16c0 [ 187.793527][T12073] ? kmem_cache_free+0xe4/0x3d0 [ 187.793560][T12073] ? __kfree_skb+0x109/0x150 [ 187.793624][T12073] ? nlmon_xmit+0x4f/0x60 [ 187.793649][T12073] ? consume_skb+0x49/0x150 [ 187.793674][T12073] ? nlmon_xmit+0x4f/0x60 [ 187.793779][T12073] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 187.793816][T12073] ? __dev_queue_xmit+0x1200/0x2000 [ 187.793836][T12073] ? __dev_queue_xmit+0x182/0x2000 [ 187.793854][T12073] ? ref_tracker_free+0x37d/0x3e0 [ 187.793904][T12073] ? __netlink_deliver_tap+0x4dc/0x500 [ 187.793935][T12073] netlink_unicast+0x5c0/0x690 [ 187.793967][T12073] netlink_sendmsg+0x58b/0x6b0 [ 187.793990][T12073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.794051][T12073] __sock_sendmsg+0x145/0x180 [ 187.794073][T12073] ____sys_sendmsg+0x31e/0x4e0 [ 187.794105][T12073] ___sys_sendmsg+0x17b/0x1d0 [ 187.794212][T12073] __x64_sys_sendmsg+0xd4/0x160 [ 187.794236][T12073] x64_sys_call+0x191e/0x3000 [ 187.794260][T12073] do_syscall_64+0xd2/0x200 [ 187.794290][T12073] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 187.794321][T12073] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 187.794355][T12073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.794377][T12073] RIP: 0033:0x7f274c5ff6c9 [ 187.794448][T12073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.794467][T12073] RSP: 002b:00007f274b067038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.794485][T12073] RAX: ffffffffffffffda RBX: 00007f274c855fa0 RCX: 00007f274c5ff6c9 [ 187.794499][T12073] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000007 [ 187.794512][T12073] RBP: 00007f274c681f91 R08: 0000000000000000 R09: 0000000000000000 [ 187.794524][T12073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.794572][T12073] R13: 00007f274c856038 R14: 00007f274c855fa0 R15: 00007fffd810d158 [ 187.794589][T12073] [ 187.794596][T12073] memory: usage 307200kB, limit 307200kB, failcnt 1157 [ 187.816108][ T29] audit: type=1400 audit(1763134265.408:26067): avc: denied { map_create } for pid=12114 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.818333][T12073] memory+swap: usage 307652kB, limit 9007199254740988kB, failcnt 0 [ 187.818346][T12073] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 187.821322][ T29] audit: type=1400 audit(1763134265.408:26068): avc: denied { map_read map_write } for pid=12114 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.825594][T12073] Memory cgroup stats for [ 187.833290][T12110] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2860: corrupted inode contents [ 187.834303][T12073] /syz0: [ 188.204398][ T29] audit: type=1400 audit(1763134265.438:26069): avc: denied { open } for pid=12114 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 188.219914][T12110] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.2860: mark_inode_dirty error [ 188.227115][ T29] audit: type=1400 audit(1763134265.438:26070): avc: denied { kernel } for pid=12114 comm="syz.1.2862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 188.259260][T12073] cache 8192 [ 188.262470][T12073] rss 0 [ 188.265225][T12073] shmem 0 [ 188.265556][T12116] loop1: detected capacity change from 0 to 512 [ 188.268164][T12073] mapped_file 0 [ 188.277898][T12073] dirty 0 [ 188.280895][T12073] writeback 0 [ 188.284238][T12073] workingset_refault_anon 240 [ 188.286023][T12110] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2860: corrupted inode contents [ 188.288944][T12073] workingset_refault_file 2678 [ 188.305481][T12073] swap 462848 [ 188.308796][T12073] swapcached 0 [ 188.312149][T12073] pgpgin 162771 [ 188.312726][T12116] EXT4-fs: Ignoring removed bh option [ 188.315621][T12073] pgpgout 162769 [ 188.315630][T12073] pgfault 201174 [ 188.328058][T12073] pgmajfault 133 [ 188.331666][T12073] inactive_anon 0 [ 188.335285][T12073] active_anon 0 [ 188.337942][T12110] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 188.338753][T12073] inactive_file 8192 [ 188.338762][T12073] active_file 0 [ 188.338769][T12073] unevictable 0 [ 188.338775][T12073] hierarchical_memory_limit 314572800 [ 188.338783][T12073] hierarchical_memsw_limit 9223372036854771712 [ 188.338792][T12073] total_cache 8192 [ 188.349031][T12110] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.2860: corrupted inode contents [ 188.351186][T12073] total_rss 0 [ 188.354766][T12110] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.2860: mark_inode_dirty error [ 188.358023][T12073] total_shmem 0 [ 188.358031][T12073] total_mapped_file 0 [ 188.365157][T12110] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 188.369561][T12073] total_dirty 0 [ 188.373506][T12110] EXT4-fs (loop3): 1 truncate cleaned up [ 188.385085][T12073] total_writeback 0 [ 188.385094][T12073] total_workingset_refault_anon 240 [ 188.385103][T12073] total_workingset_refault_file 2678 [ 188.389827][T12116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.399393][T12073] total_swap 462848 [ 188.399403][T12073] total_swapcached 0 [ 188.403093][T12116] ext4 filesystem being mounted at /460/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.406811][T12073] total_pgpgin 162771 [ 188.406820][T12073] total_pgpgout 162769 [ 188.477547][T12073] total_pgfault 201174 [ 188.481613][T12073] total_pgmajfault 133 [ 188.485720][T12073] total_inactive_anon 0 [ 188.489874][T12073] total_active_anon 0 [ 188.493838][T12073] total_inactive_file 8192 [ 188.498223][T12073] total_active_file 0 [ 188.502199][T12073] total_unevictable 0 [ 188.506158][T12073] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2851,pid=12072,uid=0 [ 188.521004][T12073] Memory cgroup out of memory: Killed process 12072 (syz.0.2851) total-vm:95872kB, anon-rss:1116kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 188.567305][T12115] siw: device registration error -23 [ 188.579600][ T58] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 188.604097][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.613656][T12110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.644640][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.685319][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.705055][T12123] tipc: Enabled bearer , priority 0 [ 188.712360][T12123] syzkaller0: entered promiscuous mode [ 188.717828][T12123] syzkaller0: entered allmulticast mode [ 188.727923][T12123] tipc: Resetting bearer [ 188.735015][T12122] tipc: Resetting bearer [ 188.741709][T12122] tipc: Disabling bearer [ 188.769446][T10128] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.799294][T12128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 188.851644][T12135] lo speed is unknown, defaulting to 1000 [ 188.871431][T12135] lo speed is unknown, defaulting to 1000 [ 188.878664][T12141] loop2: detected capacity change from 0 to 256 [ 188.891131][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2869'. [ 188.936789][T12141] vfat: Bad value for 'uid' [ 188.941402][T12141] vfat: Bad value for 'uid' [ 189.004585][T12135] pim6reg: entered allmulticast mode [ 189.012969][T12135] pim6reg: left allmulticast mode [ 189.116092][T12153] loop2: detected capacity change from 0 to 512 [ 189.126061][T12153] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.137699][T12153] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 189.147843][T12153] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2875: Corrupt directory, running e2fsck is recommended [ 189.160989][T12153] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 189.169340][T12153] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.2875: corrupted in-inode xattr: invalid ea_ino [ 189.182779][T12153] EXT4-fs (loop2): Remounting filesystem read-only [ 189.189132][T12155] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.189759][T12153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.230754][T12153] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.242304][T12153] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 189.252431][T12153] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2875: Corrupt directory, running e2fsck is recommended [ 189.268280][T12153] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.279775][T12153] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it [ 189.289849][T12153] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.2875: Corrupt directory, running e2fsck is recommended [ 189.313150][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.401781][T12164] loop2: detected capacity change from 0 to 512 [ 189.419964][T12164] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.432666][T12164] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.599469][T12174] loop1: detected capacity change from 0 to 512 [ 189.623935][T12177] loop4: detected capacity change from 0 to 512 [ 189.630395][T12174] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.641895][T12174] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 189.651962][T12174] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2883: Corrupt directory, running e2fsck is recommended [ 189.665397][T12177] EXT4-fs: Ignoring removed bh option [ 189.671953][T12174] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 189.683890][T12174] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.2883: corrupted in-inode xattr: invalid ea_ino [ 189.713875][T12177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.738392][T12174] EXT4-fs (loop1): Remounting filesystem read-only [ 189.745203][T12177] ext4 filesystem being mounted at /536/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.756231][T12174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.781397][T12174] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.792955][T12174] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 189.803066][T12174] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2883: Corrupt directory, running e2fsck is recommended [ 189.828096][T12174] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.828150][ T4102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.839634][T12174] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 189.839650][T12174] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.2883: Corrupt directory, running e2fsck is recommended [ 189.876036][T12183] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 189.969431][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.029383][T12191] pim6reg: left allmulticast mode [ 190.080267][T12195] loop3: detected capacity change from 0 to 128 [ 190.214149][T12201] loop4: detected capacity change from 0 to 2048 [ 190.248286][T12195] syz.3.2891: attempt to access beyond end of device [ 190.248286][T12195] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 190.268635][ T5309] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 190.279577][ T5309] CPU: 1 UID: 0 PID: 5309 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.279652][ T5309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 190.279664][ T5309] Call Trace: [ 190.279671][ T5309] [ 190.279678][ T5309] __dump_stack+0x1d/0x30 [ 190.279701][ T5309] dump_stack_lvl+0xe8/0x140 [ 190.279729][ T5309] dump_stack+0x15/0x1b [ 190.279747][ T5309] dump_header+0x81/0x220 [ 190.279766][ T5309] oom_kill_process+0x342/0x400 [ 190.279797][ T5309] out_of_memory+0x979/0xb80 [ 190.279873][ T5309] try_charge_memcg+0x610/0xa10 [ 190.279972][ T5309] charge_memcg+0x51/0xc0 [ 190.279995][ T5309] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 190.280022][ T5309] __read_swap_cache_async+0x17b/0x2d0 [ 190.280046][ T5309] swap_cluster_readahead+0x262/0x3c0 [ 190.280146][ T5309] swapin_readahead+0xde/0x6f0 [ 190.280167][ T5309] ? css_rstat_updated+0xb7/0x240 [ 190.280188][ T5309] ? __rcu_read_unlock+0x4f/0x70 [ 190.280265][ T5309] ? __rcu_read_unlock+0x4f/0x70 [ 190.280291][ T5309] ? swap_cache_get_folio+0x277/0x280 [ 190.280312][ T5309] do_swap_page+0x2ae/0x2370 [ 190.280389][ T5309] ? _raw_spin_unlock+0x26/0x50 [ 190.280414][ T5309] ? finish_task_switch+0xad/0x2b0 [ 190.280439][ T5309] ? __pfx_default_wake_function+0x10/0x10 [ 190.280467][ T5309] handle_mm_fault+0x9a5/0x2be0 [ 190.280552][ T5309] ? vma_start_read+0x141/0x1f0 [ 190.280586][ T5309] do_user_addr_fault+0x630/0x1080 [ 190.280608][ T5309] ? fpregs_restore_userregs+0xe2/0x1d0 [ 190.280656][ T5309] ? switch_fpu_return+0xe/0x20 [ 190.280686][ T5309] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 190.280738][ T5309] exc_page_fault+0x62/0xa0 [ 190.280846][ T5309] asm_exc_page_fault+0x26/0x30 [ 190.280866][ T5309] RIP: 0033:0x7f96958b1f45 [ 190.280885][ T5309] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 66 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 190.280903][ T5309] RSP: 002b:00007ffc9d2948d8 EFLAGS: 00010246 [ 190.280919][ T5309] RAX: 0000000000000000 RBX: 00000000000004d9 RCX: 00007f96958b1f43 [ 190.280932][ T5309] RDX: 00007ffc9d2948f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.280945][ T5309] RBP: 00007ffc9d29495c R08: 000000000bff259f R09: 0000000000000000 [ 190.280958][ T5309] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 190.280971][ T5309] R13: 00000000000927c0 R14: 000000000002e3fa R15: 00007ffc9d2949b0 [ 190.281047][ T5309] [ 190.281054][ T5309] memory: usage 307200kB, limit 307200kB, failcnt 575 [ 190.319920][T12201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.320283][ T5309] memory+swap: usage 307620kB, limit 9007199254740988kB, failcnt 0 [ 190.325368][T12202] bond4: entered promiscuous mode [ 190.329420][ T5309] kmem: usage 307160kB, limit 9007199254740988kB, failcnt 0 [ 190.329434][ T5309] Memory cgroup stats for /syz2 [ 190.334012][T12202] bond4: entered allmulticast mode [ 190.338861][ T5309] : [ 190.339388][ T5309] cache 8192 [ 190.388174][T12202] 8021q: adding VLAN 0 to HW filter on device bond4 [ 190.389992][ T5309] rss 0 [ 190.419599][T12195] syz.3.2891: attempt to access beyond end of device [ 190.419599][T12195] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 190.420585][ T5309] shmem 0 [ 190.426175][T12195] syz.3.2891: attempt to access beyond end of device [ 190.426175][T12195] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 190.430944][ T5309] mapped_file 0 [ 190.430952][ T5309] dirty 0 [ 190.430957][ T5309] writeback 12288 [ 190.430965][ T5309] workingset_refault_anon 198 [ 190.430972][ T5309] workingset_refault_file 2181 [ 190.430980][ T5309] swap 430080 [ 190.430986][ T5309] swapcached 32768 [ 190.430993][ T5309] pgpgin 184163 [ 190.430999][ T5309] pgpgout 184153 [ 190.437692][T12195] syz.3.2891: attempt to access beyond end of device [ 190.437692][T12195] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 190.441527][ T5309] pgfault 206174 [ 190.441535][ T5309] pgmajfault 145 [ 190.468787][T12195] syz.3.2891: attempt to access beyond end of device [ 190.468787][T12195] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 190.470442][ T5309] inactive_anon 32768 [ 190.484877][T12195] syz.3.2891: attempt to access beyond end of device [ 190.484877][T12195] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 190.492483][ T5309] active_anon 0 [ 190.492492][ T5309] inactive_file 0 [ 190.492498][ T5309] active_file 4096 [ 190.492513][ T5309] unevictable 0 [ 190.520908][T12195] syz.3.2891: attempt to access beyond end of device [ 190.520908][T12195] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 190.526232][ T5309] hierarchical_memory_limit 314572800 [ 190.557557][T12195] syz.3.2891: attempt to access beyond end of device [ 190.557557][T12195] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 190.558308][ T5309] hierarchical_memsw_limit 9223372036854771712 [ 190.558319][ T5309] total_cache 8192 [ 190.558327][ T5309] total_rss 0 [ 190.586727][T12195] syz.3.2891: attempt to access beyond end of device [ 190.586727][T12195] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 190.596576][ T5309] total_shmem 0 [ 190.596585][ T5309] total_mapped_file 0 [ 190.596637][ T5309] total_dirty 0 [ 190.596643][ T5309] total_writeback 12288 [ 190.596651][ T5309] total_workingset_refault_anon 198 [ 190.596660][ T5309] total_workingset_refault_file 2181 [ 190.596668][ T5309] total_swap 430080 [ 190.596676][ T5309] total_swapcached 32768 [ 190.596683][ T5309] total_pgpgin 184163 [ 190.596690][ T5309] total_pgpgout 184153 [ 190.596696][ T5309] total_pgfault 206174 [ 190.596703][ T5309] total_pgmajfault 145 [ 190.632982][T12195] syz.3.2891: attempt to access beyond end of device [ 190.632982][T12195] loop3: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 190.635889][ T5309] total_inactive_anon 32768 [ 190.635897][ T5309] total_active_anon 0 [ 190.635904][ T5309] total_inactive_file 0 [ 190.635910][ T5309] total_active_file 4096 [ 190.790014][T12214] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 190.791112][ T5309] total_unevictable 0 [ 190.864108][ T5309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2879,pid=12163,uid=0 [ 190.878872][ T5309] Memory cgroup out of memory: Killed process 12163 (syz.2.2879) total-vm:95872kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 190.898171][T12202] bond4 (unregistering): Released all slaves [ 191.174451][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.241479][T12234] pim6reg: entered allmulticast mode [ 191.249143][T12233] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.265553][T12234] pim6reg: left allmulticast mode [ 191.267836][T12236] loop3: detected capacity change from 0 to 512 [ 191.290552][T12236] EXT4-fs: Ignoring removed bh option [ 191.311284][T12236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.346677][T12236] ext4 filesystem being mounted at /470/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.399198][T12236] siw: device registration error -23 [ 191.411825][T12236] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 191.418462][T12236] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 191.426590][T12236] vhci_hcd vhci_hcd.0: Device attached [ 191.433236][T12243] vhci_hcd: connection closed [ 191.433605][ T2384] vhci_hcd: stop threads [ 191.442571][ T2384] vhci_hcd: release socket [ 191.447003][ T2384] vhci_hcd: disconnect device [ 191.459178][T12245] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 191.605065][T12250] loop0: detected capacity change from 0 to 2048 [ 191.660107][T12250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.038596][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.142894][T12256] lo speed is unknown, defaulting to 1000 [ 192.149526][T12256] lo speed is unknown, defaulting to 1000 [ 192.185350][ T4102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.215976][T12263] 9pnet_fd: Insufficient options for proto=fd [ 192.263995][T12268] loop3: detected capacity change from 0 to 512 [ 192.283199][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 192.293680][T12268] EXT4-fs: Ignoring removed bh option [ 192.313752][T12268] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.344549][T12268] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.359528][T12268] siw: device registration error -23 [ 192.378900][T12268] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 192.385561][T12268] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 192.393830][T12268] vhci_hcd vhci_hcd.0: Device attached [ 192.403565][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 192.403579][ T29] audit: type=1400 audit(1763134269.998:26355): avc: denied { bind } for pid=12266 comm="syz.3.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 192.423619][T12280] vhci_hcd: connection closed [ 192.432135][ T31] vhci_hcd: stop threads [ 192.437047][ T29] audit: type=1400 audit(1763134269.998:26356): avc: denied { lock } for pid=12249 comm="syz.0.2906" path="/140/file2/cpuacct.usage_sys" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 192.441108][ T31] vhci_hcd: release socket [ 192.441141][ T31] vhci_hcd: disconnect device [ 192.464981][ T29] audit: type=1400 audit(1763134270.018:26357): avc: denied { open } for pid=12277 comm="syz.2.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 192.465005][ T29] audit: type=1400 audit(1763134270.018:26358): avc: denied { perfmon } for pid=12277 comm="syz.2.2915" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.514554][ T29] audit: type=1400 audit(1763134270.018:26359): avc: denied { kernel } for pid=12277 comm="syz.2.2915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 192.514582][ T29] audit: type=1326 audit(1763134270.028:26360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12272 comm="syz.4.2910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fcf22d0f6c9 code=0x7ffc0000 [ 192.518137][T12256] pim6reg: entered allmulticast mode [ 192.540154][T12256] pim6reg: left allmulticast mode [ 192.544303][ T29] audit: type=1400 audit(1763134270.068:26361): avc: denied { create } for pid=12275 comm="syz.4.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.544339][ T29] audit: type=1400 audit(1763134270.068:26362): avc: denied { create } for pid=12275 comm="syz.4.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.544363][ T29] audit: type=1400 audit(1763134270.068:26363): avc: denied { write } for pid=12275 comm="syz.4.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.544388][ T29] audit: type=1400 audit(1763134270.068:26364): avc: denied { read } for pid=12275 comm="syz.4.2914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.775661][T12288] loop2: detected capacity change from 0 to 512 [ 192.798440][T12288] EXT4-fs: Ignoring removed bh option [ 192.823885][T12288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.855861][T12288] ext4 filesystem being mounted at /525/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.866674][T12295] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 192.962575][T12288] siw: device registration error -23 [ 192.977446][T12297] loop1: detected capacity change from 0 to 2048 [ 192.994391][T12288] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 193.001041][T12288] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 193.009357][T12288] vhci_hcd vhci_hcd.0: Device attached [ 193.040388][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.066006][T12297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.070025][T12303] loop3: detected capacity change from 0 to 512 [ 193.092084][T12298] vhci_hcd: connection closed [ 193.103545][ T31] vhci_hcd: stop threads [ 193.112522][ T31] vhci_hcd: release socket [ 193.116932][ T31] vhci_hcd: disconnect device [ 193.134882][T12303] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.179517][T12303] EXT4-fs (loop3): 1 truncate cleaned up [ 193.199087][T12303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.490940][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.638933][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.650892][T12314] 9pnet_fd: Insufficient options for proto=fd [ 193.833599][T12321] lo speed is unknown, defaulting to 1000 [ 193.849205][T12321] lo speed is unknown, defaulting to 1000 [ 194.008948][T12324] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 194.045109][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'. [ 194.258181][T12325] pim6reg: entered allmulticast mode [ 194.313630][T12326] pim6reg: left allmulticast mode [ 194.470318][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.634125][T10128] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.640399][T12333] pim6reg: entered allmulticast mode [ 194.670280][T12333] pim6reg: left allmulticast mode [ 194.743640][T12342] loop2: detected capacity change from 0 to 1024 [ 194.753446][T12345] loop4: detected capacity change from 0 to 128 [ 194.820287][T12342] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 194.894528][T12353] bond2: entered promiscuous mode [ 194.899672][T12353] bond2: entered allmulticast mode [ 194.915180][T12353] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.959696][T12353] bond2 (unregistering): Released all slaves [ 195.045413][T12366] loop3: detected capacity change from 0 to 512 [ 195.084383][T12369] netlink: 'syz.4.2943': attribute type 29 has an invalid length. [ 195.090826][T12366] EXT4-fs: Ignoring removed bh option [ 195.158298][T12369] netlink: 'syz.4.2943': attribute type 29 has an invalid length. [ 195.247126][T12369] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2943'. [ 195.383922][T12366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.407040][T12366] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.441343][T12366] siw: device registration error -23 [ 195.449137][T12374] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.497902][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.568145][T12383] loop3: detected capacity change from 0 to 2048 [ 195.631211][T12385] loop4: detected capacity change from 0 to 2048 [ 195.638826][T12383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.690074][T12385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.707111][T12398] netlink: 'syz.2.2953': attribute type 29 has an invalid length. [ 195.729244][T12398] netlink: 'syz.2.2953': attribute type 29 has an invalid length. [ 195.739755][T12398] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2953'. [ 195.758994][T12399] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.574560][T12426] loop0: detected capacity change from 0 to 1024 [ 196.645880][T12428] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.732298][T12426] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 197.369859][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.452657][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 197.452743][ T29] audit: type=1326 audit(1763134275.048:26489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969587f6c9 code=0x7ffc0000 [ 197.489829][ T29] audit: type=1326 audit(1763134275.088:26490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969587f6c9 code=0x7ffc0000 [ 197.544976][T12441] loop3: detected capacity change from 0 to 512 [ 197.570442][T12441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 197.580740][ T29] audit: type=1326 audit(1763134275.118:26491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f969587f6c9 code=0x7ffc0000 [ 197.604331][ T29] audit: type=1326 audit(1763134275.118:26492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969587f6c9 code=0x7ffc0000 [ 197.627920][ T29] audit: type=1326 audit(1763134275.118:26493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f969587f6c9 code=0x7ffc0000 [ 197.651498][ T29] audit: type=1326 audit(1763134275.118:26494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969587f6c9 code=0x7ffc0000 [ 197.675105][ T29] audit: type=1326 audit(1763134275.118:26495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12421 comm="syz.2.2958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f969587f6c9 code=0x7ffc0000 [ 197.705940][T12441] EXT4-fs (loop3): 1 truncate cleaned up [ 197.739792][T12441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.792436][ T29] audit: type=1400 audit(1763134275.388:26496): avc: denied { read } for pid=12440 comm=FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 197.834614][ T29] audit: type=1400 audit(1763134275.428:26497): avc: denied { remove_name } for pid=12440 comm=FF name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 197.846510][T12446] loop1: detected capacity change from 0 to 512 [ 197.856569][ T29] audit: type=1400 audit(1763134275.428:26498): avc: denied { rename } for pid=12440 comm=FF name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 197.876493][T12446] EXT4-fs: Ignoring removed bh option [ 197.925907][T12446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.940906][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.011003][T12446] ext4 filesystem being mounted at /478/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.160022][T12446] siw: device registration error -23 [ 198.163744][T12462] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12462 comm=syz.0.2975 [ 198.182656][T12460] loop2: detected capacity change from 0 to 2048 [ 198.211844][T12462] siw: device registration error -23 [ 198.220856][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.253119][T12460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.286330][T12470] loop1: detected capacity change from 0 to 128 [ 198.533515][T12477] bond1: entered promiscuous mode [ 198.538562][T12477] bond1: entered allmulticast mode [ 198.558529][T12480] loop3: detected capacity change from 0 to 512 [ 198.594410][T12462] loop0: detected capacity change from 0 to 1024 [ 198.615631][T12480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 198.660240][T12470] bio_check_eod: 204 callbacks suppressed [ 198.660258][T12470] syz.1.2976: attempt to access beyond end of device [ 198.660258][T12470] loop1: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 198.689032][T12477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 198.707920][T12480] EXT4-fs (loop3): 1 truncate cleaned up [ 198.715064][T12462] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.727485][T12480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.728255][T12470] syz.1.2976: attempt to access beyond end of device [ 198.728255][T12470] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 198.774859][T12477] bond1 (unregistering): Released all slaves [ 198.785994][T12470] syz.1.2976: attempt to access beyond end of device [ 198.785994][T12470] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 198.799758][T12470] syz.1.2976: attempt to access beyond end of device [ 198.799758][T12470] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 198.813399][T12470] syz.1.2976: attempt to access beyond end of device [ 198.813399][T12470] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 198.827196][T12470] syz.1.2976: attempt to access beyond end of device [ 198.827196][T12470] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 198.840890][T12470] syz.1.2976: attempt to access beyond end of device [ 198.840890][T12470] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 198.854849][T12470] syz.1.2976: attempt to access beyond end of device [ 198.854849][T12470] loop1: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 198.972968][T12470] syz.1.2976: attempt to access beyond end of device [ 198.972968][T12470] loop1: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 199.017218][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.028966][T12470] syz.1.2976: attempt to access beyond end of device [ 199.028966][T12470] loop1: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 199.083225][T12485] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12485 comm=syz.3.2980 [ 199.182485][T10128] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.398999][T12495] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.429302][T12496] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.485321][T12485] loop3: detected capacity change from 0 to 1024 [ 199.520448][T12485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.610970][T12485] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2980: Allocating blocks 449-513 which overlap fs metadata [ 199.718436][T12484] EXT4-fs (loop3): pa ffff888106e01690: logic 48, phys. 177, len 21 [ 199.726490][T12484] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 199.791170][ T4102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.918229][T12504] loop4: detected capacity change from 0 to 512 [ 199.939326][T12504] EXT4-fs: Ignoring removed bh option [ 199.952773][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.981201][T12504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.010681][T12510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2988'. [ 200.010866][T12504] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.047374][T12512] loop3: detected capacity change from 0 to 256 [ 200.054314][T12512] vfat: Bad value for 'uid' [ 200.058946][T12512] vfat: Bad value for 'uid' [ 200.116645][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.180577][T12519] loop2: detected capacity change from 0 to 2048 [ 200.189422][ T4102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.227880][T12519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.249670][T12529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12529 comm=syz.0.2996 [ 200.312847][T12529] siw: device registration error -23 [ 200.317854][T12537] loop3: detected capacity change from 0 to 512 [ 200.366879][T12542] loop1: detected capacity change from 0 to 256 [ 200.378066][T12540] loop4: detected capacity change from 0 to 2048 [ 200.419174][T12542] vfat: Bad value for 'uid' [ 200.423739][T12542] vfat: Bad value for 'uid' [ 200.480894][T12540] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.498126][T12537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.518810][T12537] ext4 filesystem being mounted at /497/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.772707][T12559] loop1: detected capacity change from 0 to 512 [ 200.784155][T12559] EXT4-fs: Ignoring removed bh option [ 200.874678][T12559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.900565][T12529] loop0: detected capacity change from 0 to 1024 [ 200.920863][T12559] ext4 filesystem being mounted at /485/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.964473][T12559] siw: device registration error -23 [ 200.998360][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.998627][T12529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.078321][T12565] loop1: detected capacity change from 0 to 2048 [ 201.106714][T12565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.168968][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.221686][T12529] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.2996: Allocating blocks 449-513 which overlap fs metadata [ 201.286364][T12526] EXT4-fs (loop0): pa ffff888106e5cee0: logic 48, phys. 177, len 21 [ 201.294537][T12526] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 201.339701][T12572] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 201.430041][ T4102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.440204][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.487078][T12577] loop4: detected capacity change from 0 to 512 [ 201.502222][T12579] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12579 comm=syz.3.3007 [ 201.555637][T12577] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.606309][T12577] EXT4-fs (loop4): 1 truncate cleaned up [ 201.629438][T12577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.630454][T10128] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.692783][T12579] loop3: detected capacity change from 0 to 1024 [ 201.750340][T12579] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.775752][T12579] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.3007: Allocating blocks 449-513 which overlap fs metadata [ 201.793281][T12578] EXT4-fs (loop3): pa ffff888106e017e0: logic 48, phys. 177, len 21 [ 201.801355][T12578] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 201.883001][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.911087][ T4102] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.967047][T12596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3013'. [ 202.158689][T12607] pim6reg: entered allmulticast mode [ 202.217041][T12607] pim6reg: left allmulticast mode [ 202.279175][T12615] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12615 comm=syz.4.3022 [ 202.303116][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3023'. [ 202.329551][T12615] siw: device registration error -23 [ 202.346316][T12608] loop0: detected capacity change from 0 to 2048 [ 202.378863][T12619] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3024'. [ 202.404195][T12623] lo speed is unknown, defaulting to 1000 [ 202.410379][T12623] lo speed is unknown, defaulting to 1000 [ 202.540240][T12615] loop4: detected capacity change from 0 to 1024 [ 202.553685][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3026'. [ 202.619184][T12636] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 202.668854][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 202.668868][ T29] audit: type=1326 audit(1763134280.258:26554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm="syz.1.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.698517][ T29] audit: type=1326 audit(1763134280.258:26555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm="syz.1.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.708468][T12615] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.3022: Allocating blocks 449-513 which overlap fs metadata [ 202.722091][ T29] audit: type=1326 audit(1763134280.258:26556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.745936][T12613] EXT4-fs (loop4): pa ffff888106e017e0: logic 48, phys. 177, len 21 [ 202.759490][ T29] audit: type=1326 audit(1763134280.258:26557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.767429][T12613] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 202.790973][ T29] audit: type=1326 audit(1763134280.258:26558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.790999][ T29] audit: type=1326 audit(1763134280.258:26559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.791022][ T29] audit: type=1326 audit(1763134280.258:26560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.871691][ T29] audit: type=1326 audit(1763134280.258:26561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.895276][ T29] audit: type=1326 audit(1763134280.258:26562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.918982][ T29] audit: type=1326 audit(1763134280.258:26563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12638 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f939fa3f6c9 code=0x7ffc0000 [ 202.947701][T12623] pim6reg: entered allmulticast mode [ 203.013251][T12623] pim6reg: left allmulticast mode [ 203.086683][T12646] loop1: detected capacity change from 0 to 2048 [ 203.106610][T12648] loop4: detected capacity change from 0 to 512 [ 203.122359][T12648] ext4 filesystem being mounted at /561/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.671163][T12663] loop2: detected capacity change from 0 to 2048 [ 203.695971][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3037'. [ 203.742485][T12667] loop0: detected capacity change from 0 to 512 [ 203.792017][T12667] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 203.804556][T12667] EXT4-fs (loop0): 1 truncate cleaned up [ 203.823986][T12671] pim6reg: entered allmulticast mode [ 204.232262][T12686] loop3: detected capacity change from 0 to 512 [ 204.270955][T12686] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 204.290075][T12686] EXT4-fs (loop3): orphan cleanup on readonly fs [ 204.315670][T12686] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3042: corrupted inode contents [ 204.552943][T12686] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.3042: mark_inode_dirty error [ 204.565010][T12686] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3042: corrupted inode contents [ 204.591410][T12686] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3042: mark_inode_dirty error [ 204.634792][T12686] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3042: corrupted inode contents [ 204.718686][T12686] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 204.735032][T12686] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.3042: corrupted inode contents [ 204.747119][T12686] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.3042: mark_inode_dirty error [ 204.758561][T12686] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 204.789205][T12686] EXT4-fs (loop3): 1 truncate cleaned up [ 204.796087][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 1 [ 204.846867][T12698] loop0: detected capacity change from 0 to 2048 [ 205.292993][T12712] loop4: detected capacity change from 0 to 512 [ 205.353602][T12712] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 205.394867][T12712] EXT4-fs (loop4): 1 truncate cleaned up [ 205.436603][T12718] loop3: detected capacity change from 0 to 256 [ 205.630603][T12718] vfat: Bad value for 'uid' [ 205.635115][T12718] vfat: Bad value for 'uid' [ 205.803267][T12728] loop2: detected capacity change from 0 to 512 [ 205.812467][T12727] loop3: detected capacity change from 0 to 512 [ 205.834125][T12727] EXT4-fs: Ignoring removed bh option [ 205.837002][T12725] pim6reg: entered allmulticast mode [ 205.848376][T12728] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.895406][T12725] pim6reg: left allmulticast mode [ 205.929173][T12727] ext4 filesystem being mounted at /515/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.063841][T12735] loop4: detected capacity change from 0 to 512 [ 206.082015][T12727] siw: device registration error -23 [ 206.140394][T12739] loop3: detected capacity change from 0 to 2048 [ 206.189358][T12735] EXT4-fs: Ignoring removed bh option [ 206.617614][T12728] syz.2.3057 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 206.631770][T12728] CPU: 1 UID: 0 PID: 12728 Comm: syz.2.3057 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.631795][T12728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.631889][T12728] Call Trace: [ 206.631896][T12728] [ 206.631904][T12728] __dump_stack+0x1d/0x30 [ 206.631929][T12728] dump_stack_lvl+0xe8/0x140 [ 206.631951][T12728] dump_stack+0x15/0x1b [ 206.631970][T12728] dump_header+0x81/0x220 [ 206.632058][T12728] oom_kill_process+0x342/0x400 [ 206.632099][T12728] out_of_memory+0x979/0xb80 [ 206.632133][T12728] try_charge_memcg+0x610/0xa10 [ 206.632161][T12728] obj_cgroup_charge_pages+0xa6/0x150 [ 206.632206][T12728] __memcg_kmem_charge_page+0x9f/0x170 [ 206.632260][T12728] __alloc_frozen_pages_noprof+0x188/0x360 [ 206.632355][T12728] alloc_pages_mpol+0xb3/0x260 [ 206.632391][T12728] ? alloc_pages_noprof+0xf4/0x130 [ 206.632410][T12728] alloc_pages_noprof+0x90/0x130 [ 206.632497][T12728] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 206.632535][T12728] __kvmalloc_node_noprof+0x483/0x670 [ 206.632705][T12728] ? ip_set_alloc+0x24/0x30 [ 206.632738][T12728] ? ip_set_alloc+0x24/0x30 [ 206.632775][T12728] ip_set_alloc+0x24/0x30 [ 206.632801][T12728] hash_netiface_create+0x282/0x740 [ 206.632907][T12728] ? __pfx_hash_netiface_create+0x10/0x10 [ 206.632941][T12728] ip_set_create+0x3cc/0x970 [ 206.632963][T12728] ? __nla_parse+0x40/0x60 [ 206.632983][T12728] nfnetlink_rcv_msg+0x4c6/0x590 [ 206.633038][T12728] netlink_rcv_skb+0x123/0x220 [ 206.633120][T12728] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.633149][T12728] nfnetlink_rcv+0x167/0x16c0 [ 206.633178][T12728] ? __list_add_valid_or_report+0x38/0xe0 [ 206.633301][T12728] ? trace_event_reg+0xdc/0x170 [ 206.633324][T12728] ? perf_trace_add+0x176/0x1a0 [ 206.633370][T12728] ? event_sched_in+0x675/0x750 [ 206.633398][T12728] ? should_fail_ex+0x30/0x280 [ 206.633464][T12728] ? selinux_nlmsg_lookup+0x99/0x890 [ 206.633488][T12728] ? __rcu_read_unlock+0x34/0x70 [ 206.633519][T12728] ? __netlink_lookup+0x266/0x2a0 [ 206.633584][T12728] netlink_unicast+0x5c0/0x690 [ 206.633660][T12728] netlink_sendmsg+0x58b/0x6b0 [ 206.633678][T12728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.633697][T12728] __sock_sendmsg+0x145/0x180 [ 206.633722][T12728] ____sys_sendmsg+0x31e/0x4e0 [ 206.633780][T12728] ___sys_sendmsg+0x17b/0x1d0 [ 206.633810][T12728] __x64_sys_sendmsg+0xd4/0x160 [ 206.633830][T12728] x64_sys_call+0x191e/0x3000 [ 206.633850][T12728] do_syscall_64+0xd2/0x200 [ 206.633899][T12728] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.633928][T12728] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 206.633960][T12728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.634001][T12728] RIP: 0033:0x7f969587f6c9 [ 206.634015][T12728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.634031][T12728] RSP: 002b:00007f96942e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.634050][T12728] RAX: ffffffffffffffda RBX: 00007f9695ad5fa0 RCX: 00007f969587f6c9 [ 206.634064][T12728] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000007 [ 206.634084][T12728] RBP: 00007f9695901f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.634168][T12728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.634179][T12728] R13: 00007f9695ad6038 R14: 00007f9695ad5fa0 R15: 00007ffc9d294598 [ 206.634195][T12728] [ 206.634200][T12728] memory: usage 307200kB, limit 307200kB, failcnt 803 [ 206.970314][T12728] memory+swap: usage 307640kB, limit 9007199254740988kB, failcnt 0 [ 206.978194][T12728] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 206.985484][T12728] Memory cgroup stats for /syz2: [ 206.988025][T12728] cache 8192 [ 206.990185][T12735] ext4 filesystem being mounted at /566/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.993017][T12728] rss 0 [ 207.009229][T12728] shmem 0 [ 207.012155][T12728] mapped_file 0 [ 207.015603][T12728] dirty 0 [ 207.018540][T12728] writeback 0 [ 207.021833][T12728] workingset_refault_anon 247 [ 207.026559][T12728] workingset_refault_file 2309 [ 207.031331][T12728] swap 450560 [ 207.034601][T12728] swapcached 12288 [ 207.038305][T12728] pgpgin 201156 [ 207.041815][T12728] pgpgout 201151 [ 207.045409][T12728] pgfault 225114 [ 207.048971][T12728] pgmajfault 173 [ 207.052567][T12728] inactive_anon 4096 [ 207.056440][T12728] active_anon 8192 [ 207.060222][T12728] inactive_file 0 [ 207.063851][T12728] active_file 8192 [ 207.067555][T12728] unevictable 0 [ 207.071044][T12728] hierarchical_memory_limit 314572800 [ 207.076476][T12728] hierarchical_memsw_limit 9223372036854771712 [ 207.082625][T12728] total_cache 8192 [ 207.086329][T12728] total_rss 0 [ 207.089693][T12728] total_shmem 0 [ 207.093160][T12728] total_mapped_file 0 [ 207.097125][T12728] total_dirty 0 [ 207.100593][T12728] total_writeback 0 [ 207.104386][T12728] total_workingset_refault_anon 247 [ 207.109581][T12728] total_workingset_refault_file 2309 [ 207.114925][T12728] total_swap 450560 [ 207.118776][T12728] total_swapcached 12288 [ 207.123005][T12728] total_pgpgin 201156 [ 207.126971][T12728] total_pgpgout 201151 [ 207.131066][T12728] total_pgfault 225114 [ 207.135116][T12728] total_pgmajfault 173 [ 207.139194][T12728] total_inactive_anon 4096 [ 207.143594][T12728] total_active_anon 8192 [ 207.147860][T12728] total_inactive_file 0 [ 207.152051][T12728] total_active_file 8192 [ 207.156271][T12728] total_unevictable 0 [ 207.160272][T12728] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3057,pid=12724,uid=0 [ 207.174986][T12728] Memory cgroup out of memory: Killed process 12724 (syz.2.3057) total-vm:93824kB, anon-rss:1136kB, file-rss:22568kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 207.442109][T12761] loop0: detected capacity change from 0 to 512 [ 207.469056][T12761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 207.498419][T12761] EXT4-fs (loop0): 1 truncate cleaned up [ 207.605269][T12768] loop1: detected capacity change from 0 to 512 [ 207.624825][T12779] loop0: detected capacity change from 0 to 512 [ 207.629708][T12768] EXT4-fs: Ignoring removed bh option [ 207.674724][T12768] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.713862][T12779] ------------[ cut here ]------------ [ 207.719430][T12779] EA inode 11 i_nlink=2 [ 207.719661][T12779] WARNING: CPU: 1 PID: 12779 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 207.734000][T12779] Modules linked in: [ 207.737939][T12779] CPU: 1 UID: 0 PID: 12779 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 207.747472][T12779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 207.757561][T12779] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 207.764230][T12779] Code: 90 49 8d 7e 40 e8 e6 f9 b8 ff 4d 8b 6e 40 4c 89 e7 e8 fa f4 b8 ff 41 8b 56 48 48 c7 c7 a7 d3 55 86 4c 89 ee e8 87 f5 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 08 f4 b5 03 0f 1f 84 00 00 00 00 00 [ 207.783902][T12779] RSP: 0018:ffffc90002e8b5a0 EFLAGS: 00010246 [ 207.790004][T12779] RAX: fa7ec8258ad1a900 RBX: ffff888105978600 RCX: 0000000000080000 [ 207.798005][T12779] RDX: ffffc90004969000 RSI: 00000000000045ff RDI: 0000000000004600 [ 207.806010][T12779] RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000000 [ 207.814079][T12779] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff8881059785b0 [ 207.822166][T12779] R13: 000000000000000b R14: ffff888105978568 R15: 0000000000000001 [ 207.830154][T12779] FS: 00007f274b0676c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 207.839099][T12779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.845682][T12779] CR2: 0000001b3221aff8 CR3: 0000000144f62000 CR4: 00000000003506f0 [ 207.853692][T12779] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 207.861705][T12779] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 207.869699][T12779] Call Trace: [ 207.873066][T12779] [ 207.876070][T12779] ext4_xattr_set_entry+0x77f/0x1020 [ 207.881508][T12779] ext4_xattr_ibody_set+0x184/0x3c0 [ 207.886760][T12779] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 207.892695][T12779] __ext4_expand_extra_isize+0x246/0x280 [ 207.898416][T12779] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 207.903963][T12779] ext4_evict_inode+0x80e/0xd90 [ 207.908895][T12779] ? __pfx_ext4_evict_inode+0x10/0x10 [ 207.914278][T12779] evict+0x2e3/0x550 [ 207.918249][T12779] ? __dquot_initialize+0x146/0x7c0 [ 207.923636][T12779] iput+0x4ed/0x650 [ 207.923792][T12789] siw: device registration error -23 [ 207.927452][T12779] ext4_process_orphan+0x1a9/0x1c0 [ 207.937867][T12779] ext4_orphan_cleanup+0x6a8/0xa00 [ 207.943011][T12779] ext4_fill_super+0x3483/0x3810 [ 207.947997][T12779] ? snprintf+0x86/0xb0 [ 207.952188][T12779] ? set_blocksize+0x1a8/0x310 [ 207.956997][T12779] ? sb_set_blocksize+0xe3/0x100 [ 207.961985][T12779] ? setup_bdev_super+0x30e/0x370 [ 207.967072][T12779] ? __pfx_ext4_fill_super+0x10/0x10 [ 207.972420][T12779] get_tree_bdev_flags+0x291/0x300 [ 207.977543][T12779] ? __pfx_ext4_fill_super+0x10/0x10 [ 207.982995][T12779] get_tree_bdev+0x1f/0x30 [ 207.987588][T12779] ext4_get_tree+0x1c/0x30 [ 207.992055][T12779] vfs_get_tree+0x57/0x1d0 [ 207.996516][T12779] do_new_mount+0x24d/0x660 [ 208.001066][T12779] path_mount+0x4a5/0xb70 [ 208.005440][T12779] ? user_path_at+0x109/0x130 [ 208.010139][T12779] __se_sys_mount+0x28c/0x2e0 [ 208.014815][T12779] __x64_sys_mount+0x67/0x80 [ 208.019518][T12779] x64_sys_call+0x2b51/0x3000 [ 208.024212][T12779] do_syscall_64+0xd2/0x200 [ 208.028738][T12779] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.034883][T12779] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 208.040653][T12779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.046591][T12779] RIP: 0033:0x7f274c600e6a [ 208.051028][T12779] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.070666][T12779] RSP: 002b:00007f274b066e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 208.079159][T12779] RAX: ffffffffffffffda RBX: 00007f274b066ef0 RCX: 00007f274c600e6a [ 208.087122][T12779] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f274b066eb0 [ 208.095108][T12779] RBP: 0000200000000180 R08: 00007f274b066ef0 R09: 0000000000800700 [ 208.103191][T12779] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 208.111274][T12779] R13: 00007f274b066eb0 R14: 000000000000046f R15: 000000000000002c [ 208.119426][T12779] [ 208.122435][T12779] ---[ end trace 0000000000000000 ]--- [ 208.129707][T12779] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm wÞ£ÿ: iget: bad extra_isize 90 (inode size 256) [ 208.143789][T12779] EXT4-fs (loop0): Remounting filesystem read-only [ 208.154171][T12793] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.166057][T12779] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 208.198761][T12779] EXT4-fs (loop0): 1 orphan inode deleted [ 208.208018][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 208.208032][ T29] audit: type=1400 audit(1763134285.798:26711): avc: denied { execute } for pid=12796 comm="syz.2.3078" path="/556/file0" dev="tmpfs" ino=2897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 208.244703][ T29] audit: type=1326 audit(1763134285.798:26712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12778 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f274c5fdf10 code=0x7ffc0000 [ 208.268481][ T29] audit: type=1326 audit(1763134285.798:26713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12778 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f274c5fe417 code=0x7ffc0000 [ 208.292279][ T29] audit: type=1326 audit(1763134285.798:26714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12778 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f274c5fdf10 code=0x7ffc0000 [ 208.315994][ T29] audit: type=1326 audit(1763134285.798:26715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12778 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274c5ff6c9 code=0x7ffc0000 [ 208.339682][ T29] audit: type=1326 audit(1763134285.838:26716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12778 comm=77DEA305FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274c5ff6c9 code=0x7ffc0000 [ 208.363372][ T29] audit: type=1326 audit(1763134285.838:26717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf22d0f6c9 code=0x7ffc0000 [ 208.387152][ T29] audit: type=1326 audit(1763134285.838:26718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf22d0f6c9 code=0x7ffc0000 [ 208.410760][ T29] audit: type=1326 audit(1763134285.838:26719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12790 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7fcf22d0f6c9 code=0x7ffc0000 [ 208.455963][ T29] audit: type=1400 audit(1763134285.938:26720): avc: denied { ioctl } for pid=12796 comm="syz.2.3078" path="socket:[48178]" dev="sockfs" ino=48178 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 208.551152][T12808] FAULT_INJECTION: forcing a failure. [ 208.551152][T12808] name failslab, interval 1, probability 0, space 0, times 1 [ 208.563928][T12808] CPU: 0 UID: 0 PID: 12808 Comm: syz.1.3084 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.563959][T12808] Tainted: [W]=WARN [ 208.563965][T12808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.563976][T12808] Call Trace: [ 208.563982][T12808] [ 208.563990][T12808] __dump_stack+0x1d/0x30 [ 208.564064][T12808] dump_stack_lvl+0xe8/0x140 [ 208.564086][T12808] dump_stack+0x15/0x1b [ 208.564116][T12808] should_fail_ex+0x265/0x280 [ 208.564134][T12808] should_failslab+0x8c/0xb0 [ 208.564161][T12808] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 208.564189][T12808] ? __alloc_skb+0x101/0x320 [ 208.564267][T12808] __alloc_skb+0x101/0x320 [ 208.564296][T12808] alloc_skb_with_frags+0x7d/0x470 [ 208.564324][T12808] ? selinux_capable+0x31/0x40 [ 208.564344][T12808] ? radix_tree_lookup+0xfa/0x140 [ 208.564415][T12808] ? make_kgid+0x13b/0x320 [ 208.564439][T12808] sock_alloc_send_pskb+0x430/0x4e0 [ 208.564460][T12808] unix_dgram_sendmsg+0x380/0xfd0 [ 208.564536][T12808] ? selinux_socket_sendmsg+0x175/0x1b0 [ 208.564584][T12808] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 208.564611][T12808] __sock_sendmsg+0x145/0x180 [ 208.564631][T12808] ____sys_sendmsg+0x345/0x4e0 [ 208.564668][T12808] ___sys_sendmsg+0x17b/0x1d0 [ 208.564751][T12808] __sys_sendmmsg+0x178/0x300 [ 208.564780][T12808] __x64_sys_sendmmsg+0x57/0x70 [ 208.564798][T12808] x64_sys_call+0x1c4a/0x3000 [ 208.564817][T12808] do_syscall_64+0xd2/0x200 [ 208.564887][T12808] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.564923][T12808] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 208.564984][T12808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.565057][T12808] RIP: 0033:0x7f939fa3f6c9 [ 208.565071][T12808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.565086][T12808] RSP: 002b:00007f939e4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 208.565102][T12808] RAX: ffffffffffffffda RBX: 00007f939fc95fa0 RCX: 00007f939fa3f6c9 [ 208.565113][T12808] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 208.565124][T12808] RBP: 00007f939e4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.565135][T12808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.565217][T12808] R13: 00007f939fc96038 R14: 00007f939fc95fa0 R15: 00007ffd83149268 [ 208.565232][T12808] [ 208.819685][T12814] loop2: detected capacity change from 0 to 512 [ 208.826709][T12814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.852935][T12811] tipc: Enabled bearer , priority 0 [ 208.853747][T12814] EXT4-fs (loop2): 1 truncate cleaned up [ 208.868462][T12804] loop0: detected capacity change from 0 to 1024 [ 208.879986][T12811] syzkaller0: entered promiscuous mode [ 208.880003][T12811] syzkaller0: entered allmulticast mode [ 208.882826][T12811] tipc: Resetting bearer [ 208.883571][T12810] tipc: Resetting bearer [ 208.887758][T12804] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 208.891167][T12804] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 208.891199][T12804] EXT4-fs (loop0): failed to initialize system zone (-117) [ 208.891226][T12804] EXT4-fs (loop0): mount failed [ 208.892225][T12810] tipc: Disabling bearer [ 208.897714][T12804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12804 comm=syz.0.3079 [ 209.034459][T12831] 9pnet: Could not find request transport: fdí ù= ‡÷Ð8çÿÆåS›e‹›?5 [ 209.069925][T12834] loop3: detected capacity change from 0 to 2048 [ 209.189081][T12853] tipc: Started in network mode [ 209.193982][T12853] tipc: Node identity b652dbc52781, cluster identity 4711 [ 209.194971][T12850] loop4: detected capacity change from 0 to 4096 [ 209.201254][T12853] tipc: Enabled bearer , priority 0 [ 209.237354][T12853] syzkaller0: entered promiscuous mode [ 209.242953][T12853] syzkaller0: entered allmulticast mode [ 209.284783][T12853] tipc: Resetting bearer [ 209.291374][T12851] tipc: Resetting bearer [ 209.309381][T12851] tipc: Disabling bearer [ 209.529171][T12869] loop0: detected capacity change from 0 to 512 [ 209.570112][T12869] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 209.626490][T12869] EXT4-fs (loop0): 1 truncate cleaned up [ 209.877581][T12885] loop1: detected capacity change from 0 to 1024 [ 209.891461][T12885] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 210.074207][T12894] loop0: detected capacity change from 0 to 512 [ 210.074548][T12894] EXT4-fs: Ignoring removed bh option [ 210.090171][T12894] ext4 filesystem being mounted at /191/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.094149][T12894] siw: device registration error -23 [ 210.095201][T12894] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 210.095222][T12894] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 210.095272][T12894] vhci_hcd vhci_hcd.0: Device attached [ 210.097157][T12901] vhci_hcd: connection closed [ 210.102377][ T2384] vhci_hcd: stop threads [ 210.102388][ T2384] vhci_hcd: release socket [ 210.102395][ T2384] vhci_hcd: disconnect device [ 210.131160][T12903] loop4: detected capacity change from 0 to 512 [ 210.224269][T12906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3120'. [ 210.270871][T12903] ext4 filesystem being mounted at /577/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.778920][T12911] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 210.788717][T12911] SELinux: failed to load policy [ 211.027360][T12928] loop3: detected capacity change from 0 to 8192 [ 211.030711][T12930] lo speed is unknown, defaulting to 1000 [ 211.044038][T12932] FAULT_INJECTION: forcing a failure. [ 211.044038][T12932] name failslab, interval 1, probability 0, space 0, times 0 [ 211.056747][T12932] CPU: 0 UID: 0 PID: 12932 Comm: syz.2.3131 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.056812][T12932] Tainted: [W]=WARN [ 211.056818][T12932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.056830][T12932] Call Trace: [ 211.056837][T12932] [ 211.056845][T12932] __dump_stack+0x1d/0x30 [ 211.056868][T12932] dump_stack_lvl+0xe8/0x140 [ 211.056885][T12932] dump_stack+0x15/0x1b [ 211.056933][T12932] should_fail_ex+0x265/0x280 [ 211.056950][T12932] ? __se_sys_mount+0xef/0x2e0 [ 211.057033][T12932] should_failslab+0x8c/0xb0 [ 211.057136][T12932] __kmalloc_cache_noprof+0x4c/0x4a0 [ 211.057164][T12932] ? memdup_user+0x99/0xd0 [ 211.057190][T12932] __se_sys_mount+0xef/0x2e0 [ 211.057210][T12932] ? fput+0x8f/0xc0 [ 211.057224][T12932] ? ksys_write+0x192/0x1a0 [ 211.057325][T12932] __x64_sys_mount+0x67/0x80 [ 211.057347][T12932] x64_sys_call+0x2b51/0x3000 [ 211.057377][T12932] do_syscall_64+0xd2/0x200 [ 211.057453][T12932] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.057479][T12932] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 211.057517][T12932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.057539][T12932] RIP: 0033:0x7f969587f6c9 [ 211.057555][T12932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.057593][T12932] RSP: 002b:00007f96942e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 211.057611][T12932] RAX: ffffffffffffffda RBX: 00007f9695ad5fa0 RCX: 00007f969587f6c9 [ 211.057627][T12932] RDX: 0000200000000440 RSI: 0000200000000080 RDI: 0000000000000000 [ 211.057638][T12932] RBP: 00007f96942e7090 R08: 0000200000000840 R09: 0000000000000000 [ 211.057648][T12932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.057660][T12932] R13: 00007f9695ad6038 R14: 00007f9695ad5fa0 R15: 00007ffc9d294598 [ 211.057678][T12932] [ 211.062886][T12930] lo speed is unknown, defaulting to 1000 [ 211.116636][T12935] loop1: detected capacity change from 0 to 512 [ 211.136537][T12937] loop2: detected capacity change from 0 to 2048 [ 211.149160][T12933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3129'. [ 211.215435][T12935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 211.296591][T12935] EXT4-fs (loop1): 1 truncate cleaned up [ 211.467879][T12930] pim6reg: entered allmulticast mode [ 211.475370][T12930] pim6reg: left allmulticast mode [ 211.688338][T12968] loop3: detected capacity change from 0 to 128 [ 211.889608][T12984] loop1: detected capacity change from 0 to 256 [ 211.896390][T12984] vfat: Bad value for 'uid' [ 211.900921][T12984] vfat: Bad value for 'uid' [ 211.984987][T12988] bond4: entered promiscuous mode [ 211.990108][T12988] bond4: entered allmulticast mode [ 212.014746][T12988] 8021q: adding VLAN 0 to HW filter on device bond4 [ 212.055978][T12988] bond4 (unregistering): Released all slaves [ 212.091311][T12968] bio_check_eod: 97 callbacks suppressed [ 212.091329][T12968] syz.3.3143: attempt to access beyond end of device [ 212.091329][T12968] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 212.115119][T12968] syz.3.3143: attempt to access beyond end of device [ 212.115119][T12968] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 212.136882][T12990] lo speed is unknown, defaulting to 1000 [ 212.143000][T12968] syz.3.3143: attempt to access beyond end of device [ 212.143000][T12968] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 212.168167][T12990] lo speed is unknown, defaulting to 1000 [ 212.183505][T12968] syz.3.3143: attempt to access beyond end of device [ 212.183505][T12968] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 212.229851][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'. [ 212.245954][T12968] syz.3.3143: attempt to access beyond end of device [ 212.245954][T12968] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 212.293965][T12968] syz.3.3143: attempt to access beyond end of device [ 212.293965][T12968] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 212.343202][T12968] syz.3.3143: attempt to access beyond end of device [ 212.343202][T12968] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 212.379708][T12999] loop1: detected capacity change from 0 to 512 [ 212.388312][T12999] EXT4-fs: Ignoring removed bh option [ 212.400952][T12971] pim6reg: entered allmulticast mode [ 212.408853][T12971] pim6reg: left allmulticast mode [ 212.419634][T12968] syz.3.3143: attempt to access beyond end of device [ 212.419634][T12968] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 212.435777][T12968] syz.3.3143: attempt to access beyond end of device [ 212.435777][T12968] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 212.437470][T12999] ext4 filesystem being mounted at /515/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.449689][T12968] syz.3.3143: attempt to access beyond end of device [ 212.449689][T12968] loop3: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 212.561763][T13007] netlink: 182 bytes leftover after parsing attributes in process `syz.2.3157'. [ 212.565952][T12999] siw: device registration error -23 [ 212.609620][T13007] loop2: detected capacity change from 0 to 7 [ 212.634148][T13014] loop1: detected capacity change from 0 to 1024 [ 212.665620][T13014] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.681659][T13014] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 212.695538][T13014] EXT4-fs error (device loop1): __ext4_iget:5443: inode #12: block 13: comm syz.1.3160: invalid block [ 212.708097][T13014] EXT4-fs (loop1): Remounting filesystem read-only [ 212.867518][T13028] loop4: detected capacity change from 0 to 128 [ 212.882773][T13026] loop2: detected capacity change from 0 to 512 [ 212.903947][T13026] EXT4-fs: Ignoring removed bh option [ 212.910585][T13030] loop1: detected capacity change from 0 to 2048 [ 212.941147][T13026] ext4 filesystem being mounted at /569/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.996018][T13028] bond2: entered promiscuous mode [ 213.001163][T13028] bond2: entered allmulticast mode [ 213.011389][T13028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 213.035931][T13028] bond2 (unregistering): Released all slaves [ 213.059872][T13026] siw: device registration error -23 [ 213.132246][T13026] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 213.138939][T13026] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 213.147138][T13026] vhci_hcd vhci_hcd.0: Device attached [ 213.224853][T13039] vhci_hcd: connection closed [ 213.240872][ T52] vhci_hcd: stop threads [ 213.249844][ T52] vhci_hcd: release socket [ 213.254264][ T52] vhci_hcd: disconnect device [ 213.303770][T13058] bridge_slave_0: left allmulticast mode [ 213.309473][T13058] bridge_slave_0: left promiscuous mode [ 213.315137][T13058] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.337549][T13058] bridge_slave_1: left allmulticast mode [ 213.343303][T13058] bridge_slave_1: left promiscuous mode [ 213.348966][T13058] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.357174][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 213.357186][ T29] audit: type=1400 audit(1763134290.948:26966): avc: denied { read } for pid=13057 comm="syz.0.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.386487][T13058] bond0: (slave bond_slave_0): Releasing backup interface [ 213.402622][ T29] audit: type=1400 audit(1763134290.988:26967): avc: denied { ioctl } for pid=13057 comm="syz.0.3174" path="socket:[49370]" dev="sockfs" ino=49370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.428517][ T29] audit: type=1400 audit(1763134290.988:26968): avc: denied { bind } for pid=13057 comm="syz.0.3174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 213.497379][T13058] bond0: (slave bond_slave_1): Releasing backup interface [ 213.527400][T13058] team0: Port device team_slave_0 removed [ 213.555897][T13058] team0: Port device team_slave_1 removed [ 213.571618][ T29] audit: type=1400 audit(1763134291.168:26969): avc: denied { read write } for pid=13068 comm="syz.4.3178" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 213.587160][T13058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.596033][ T29] audit: type=1400 audit(1763134291.168:26970): avc: denied { open } for pid=13068 comm="syz.4.3178" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 213.603402][T13058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.640580][T13070] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3179'. [ 213.651199][T13058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.658605][T13058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.665909][ T29] audit: type=1400 audit(1763134291.258:26971): avc: denied { getopt } for pid=13071 comm="syz.4.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 213.694381][T13058] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 213.695225][T13070] netlink: 'syz.3.3179': attribute type 10 has an invalid length. [ 213.718216][T13070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3179'. [ 213.719002][ T29] audit: type=1400 audit(1763134291.308:26972): avc: denied { module_request } for pid=13074 comm="syz.4.3181" kmod="fs-esdfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 213.740431][T13070] batman_adv: batadv0: Adding interface: veth1_vlan [ 213.755499][T13070] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.805213][T13070] batman_adv: batadv0: Interface activated: veth1_vlan [ 213.857511][T13085] loop4: detected capacity change from 0 to 2048 [ 213.887798][T13067] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 213.887848][ T3422] lo speed is unknown, defaulting to 1000 [ 213.925780][T11952] Alternate GPT is invalid, using primary GPT. [ 213.932157][T11952] loop4: p2 p3 p7 [ 213.973133][T13085] Alternate GPT is invalid, using primary GPT. [ 213.979460][T13085] loop4: p2 p3 p7 [ 213.985298][T13088] loop0: detected capacity change from 0 to 2048 [ 213.996319][ T29] audit: type=1400 audit(1763134291.588:26973): avc: denied { create } for pid=13084 comm="syz.4.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.040795][ T29] audit: type=1400 audit(1763134291.588:26974): avc: denied { ioctl } for pid=13084 comm="syz.4.3184" path="socket:[48699]" dev="sockfs" ino=48699 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.065717][ T29] audit: type=1400 audit(1763134291.588:26975): avc: denied { setopt } for pid=13084 comm="syz.4.3184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 214.169679][T11954] udevd[11954]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 214.181554][T11952] udevd[11952]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 214.203044][T11953] udevd[11953]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 214.237407][T11952] udevd[11952]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 214.248394][T11953] udevd[11953]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 214.259541][T11954] udevd[11954]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 214.440391][T13111] loop2: detected capacity change from 0 to 512 [ 214.452474][T13111] EXT4-fs: Ignoring removed bh option [ 214.470450][T13111] ext4 filesystem being mounted at /574/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.484649][T13116] tipc: Enabled bearer , priority 0 [ 214.497518][T13116] syzkaller0: entered promiscuous mode [ 214.503025][T13116] syzkaller0: entered allmulticast mode [ 214.520164][T13111] siw: device registration error -23 [ 214.526195][T13111] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 214.532812][T13111] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.541009][T13111] vhci_hcd vhci_hcd.0: Device attached [ 214.551114][T13115] tipc: Resetting bearer [ 214.579665][T13115] tipc: Disabling bearer [ 214.590226][T13119] vhci_hcd: connection closed [ 214.592354][ T2256] vhci_hcd: stop threads [ 214.601305][ T2256] vhci_hcd: release socket [ 214.605720][ T2256] vhci_hcd: disconnect device [ 214.879609][T13125] tipc: Enabled bearer , priority 0 [ 214.886664][T13125] syzkaller0: entered promiscuous mode [ 214.892225][T13125] syzkaller0: entered allmulticast mode [ 214.902651][T13125] tipc: Resetting bearer [ 214.914691][T13124] tipc: Resetting bearer [ 214.926745][T13124] tipc: Disabling bearer [ 215.293008][T13133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3202'. [ 215.543137][T13147] lo speed is unknown, defaulting to 1000 [ 215.562255][T13147] lo speed is unknown, defaulting to 1000 [ 215.667014][T13149] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3200'. [ 215.840092][T13149] loop1: detected capacity change from 0 to 1024 [ 215.917246][T13149] ext4: Unknown parameter 'obj_user' [ 216.033709][T13140] loop2: detected capacity change from 0 to 2048 [ 216.095769][T13140] loop2: p4 < > [ 216.114988][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.149672][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.332593][T13161] loop1: detected capacity change from 0 to 512 [ 216.339454][T13161] EXT4-fs: Ignoring removed bh option [ 216.370861][T13161] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.499861][T13161] siw: device registration error -23 [ 216.514444][T13161] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 216.521052][T13161] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.529266][T13161] vhci_hcd vhci_hcd.0: Device attached [ 216.566186][T13168] vhci_hcd: connection closed [ 216.566421][ T31] vhci_hcd: stop threads [ 216.575376][ T31] vhci_hcd: release socket [ 216.579829][ T31] vhci_hcd: disconnect device [ 216.790135][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3214'. [ 216.851176][T13171] lo speed is unknown, defaulting to 1000 [ 216.857394][T13171] lo speed is unknown, defaulting to 1000 [ 217.056929][T13171] chnl_net:caif_netlink_parms(): no params data found [ 217.129933][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3221'. [ 217.179718][T13201] lo speed is unknown, defaulting to 1000 [ 217.236769][T13213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 217.268390][T13201] lo speed is unknown, defaulting to 1000 [ 217.321748][T13171] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.328843][T13171] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.349601][T13171] bridge_slave_0: entered allmulticast mode [ 217.369438][T13171] bridge_slave_0: entered promiscuous mode [ 217.377556][T13225] loop0: detected capacity change from 0 to 1024 [ 217.385588][T13171] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.392825][T13171] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.400012][T13171] bridge_slave_1: entered allmulticast mode [ 217.401680][T13225] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.406319][T13171] bridge_slave_1: entered promiscuous mode [ 217.437022][T13171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.446418][T13225] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 217.460413][T13171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.492620][T13225] EXT4-fs mount: 61 callbacks suppressed [ 217.492636][T13225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.531899][T13171] team0: Port device team_slave_0 added [ 217.536002][T13225] EXT4-fs error (device loop0): __ext4_iget:5443: inode #12: block 13: comm syz.0.3229: invalid block [ 217.543065][T13171] team0: Port device team_slave_1 added [ 217.566862][T13225] EXT4-fs (loop0): Remounting filesystem read-only [ 217.593786][T13171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.600829][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.627149][T13171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.640827][T10128] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.664466][T13171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.671471][T13171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.697496][T13171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.739668][T13171] hsr_slave_0: entered promiscuous mode [ 217.745780][T13171] hsr_slave_1: entered promiscuous mode [ 217.751979][T13171] debugfs: 'hsr0' already exists in 'hsr' [ 217.757705][T13171] Cannot create hsr debugfs directory [ 217.890227][T13171] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.969704][T13171] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.990241][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3231'. [ 218.002152][T13239] batadv1: entered promiscuous mode [ 218.007439][T13239] batadv1: entered allmulticast mode [ 218.013460][T13239] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 218.062605][T13171] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.108772][T13171] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.136477][T13247] process 'syz.2.3235' launched './file0' with NULL argv: empty string added [ 218.161209][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3235'. [ 218.174926][T13247] macvlan0 (unregistering): left promiscuous mode [ 218.293808][T13254] loop2: detected capacity change from 0 to 8192 [ 218.390766][T13171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.399719][T13171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.410328][T13171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.419287][T13171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.439151][T13257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.452140][T13171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.462722][T13171] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.471543][T13265] loop1: detected capacity change from 0 to 128 [ 218.487553][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 218.487567][ T29] audit: type=1400 audit(1763134296.078:27055): avc: denied { mount } for pid=13264 comm="syz.1.3239" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 218.520249][T13265] bio_check_eod: 204 callbacks suppressed [ 218.520266][T13265] syz.1.3239: attempt to access beyond end of device [ 218.520266][T13265] loop1: rw=2049, sector=145, nr_sectors = 72 limit=128 [ 218.528088][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.540174][T13265] syz.1.3239: attempt to access beyond end of device [ 218.540174][T13265] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 218.546552][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.560068][T13265] syz.1.3239: attempt to access beyond end of device [ 218.560068][T13265] loop1: rw=2049, sector=241, nr_sectors = 9 limit=128 [ 218.583919][ T29] audit: type=1400 audit(1763134296.178:27056): avc: denied { name_bind } for pid=13255 comm="syz.2.3238" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 218.632665][T13271] loop0: detected capacity change from 0 to 128 [ 218.649798][T13272] syz.1.3239: attempt to access beyond end of device [ 218.649798][T13272] loop1: rw=2049, sector=257, nr_sectors = 80 limit=128 [ 218.676012][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.683265][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.688752][ T29] audit: type=1400 audit(1763134296.178:27057): avc: denied { node_bind } for pid=13255 comm="syz.2.3238" saddr=224.0.0.1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 218.756244][T13171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.766677][T13171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.799405][ T12] kworker/u8:0: attempt to access beyond end of device [ 218.799405][ T12] loop1: rw=1, sector=257, nr_sectors = 1 limit=128 [ 218.812916][ T12] Buffer I/O error on dev loop1, logical block 257, lost async page write [ 218.828898][ T29] audit: type=1400 audit(1763134296.328:27058): avc: denied { lock } for pid=13275 comm="syz.3.3243" path="socket:[50297]" dev="sockfs" ino=50297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 218.837845][T13271] syz.0.3241: attempt to access beyond end of device [ 218.837845][T13271] loop0: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 218.852237][ T29] audit: type=1400 audit(1763134296.388:27059): avc: denied { unmount } for pid=4827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 218.905122][ T29] audit: type=1400 audit(1763134296.468:27060): avc: denied { create } for pid=13275 comm="syz.3.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 218.924801][ T29] audit: type=1400 audit(1763134296.468:27061): avc: denied { setopt } for pid=13275 comm="syz.3.3243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 218.958777][T13271] syz.0.3241: attempt to access beyond end of device [ 218.958777][T13271] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 218.961422][T13278] bond1: entered promiscuous mode [ 218.972850][T13271] syz.0.3241: attempt to access beyond end of device [ 218.972850][T13271] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 218.977283][T13278] bond1: entered allmulticast mode [ 218.996426][T13271] syz.0.3241: attempt to access beyond end of device [ 218.996426][T13271] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 219.003853][T13278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.009990][T13271] syz.0.3241: attempt to access beyond end of device [ 219.009990][T13271] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 219.032245][ T29] audit: type=1326 audit(1763134296.528:27062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05061ef6c9 code=0x7ffc0000 [ 219.055857][ T29] audit: type=1326 audit(1763134296.528:27063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05061ef6c9 code=0x7ffc0000 [ 219.079442][ T29] audit: type=1326 audit(1763134296.528:27064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13275 comm="syz.3.3243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f05061ef6c9 code=0x7ffc0000 [ 219.118678][T13285] loop1: detected capacity change from 0 to 512 [ 219.131055][T13278] bond1 (unregistering): Released all slaves [ 219.137997][T13285] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 219.158016][T13285] EXT4-fs (loop1): 1 truncate cleaned up [ 219.165245][T13285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.165336][T13290] tipc: Enabled bearer , priority 0 [ 219.192326][T13171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.220144][T13290] tipc: Resetting bearer [ 219.221536][T13288] tipc: Disabling bearer [ 219.284486][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.312423][T13305] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3250'. [ 219.425517][T13171] veth0_vlan: entered promiscuous mode [ 219.433971][T13171] veth1_vlan: entered promiscuous mode [ 219.450434][T13171] veth0_macvtap: entered promiscuous mode [ 219.458301][T13171] veth1_macvtap: entered promiscuous mode [ 219.468458][T13171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.481349][T13171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.497676][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.506738][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.516674][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.525609][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.528942][T13330] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 219.589107][T13331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 219.602146][T13335] pim6reg: entered allmulticast mode [ 219.660498][T13338] loop4: detected capacity change from 0 to 512 [ 219.677366][T13338] EXT4-fs: Ignoring removed bh option [ 219.708436][T13338] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.733619][T13338] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 219.757594][T13338] siw: device registration error -23 [ 219.836408][T13171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.857885][T13344] loop4: detected capacity change from 0 to 512 [ 219.864792][T13344] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 219.878038][T13344] EXT4-fs (loop4): 1 truncate cleaned up [ 219.884833][T13344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.939902][T13171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.162138][T13367] loop4: detected capacity change from 0 to 512 [ 220.168690][T13367] EXT4-fs: Ignoring removed bh option [ 220.180982][T13367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.193876][T13367] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.208290][T13367] siw: device registration error -23 [ 220.272060][T13373] loop3: detected capacity change from 0 to 128 [ 220.302205][T13171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.404991][T13382] loop1: detected capacity change from 0 to 1024 [ 220.441220][T13385] loop3: detected capacity change from 0 to 512 [ 220.447914][T13382] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.464958][T13382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 220.477840][T13385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.505348][T13382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.514637][T13385] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.528676][T13398] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 220.528942][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3283'. [ 220.536596][T13399] netlink: 'syz.4.3282': attribute type 1 has an invalid length. [ 220.545435][T13402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3283'. [ 220.601723][T13385] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.612034][T13385] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49266 - 0 [ 220.632290][T13407] loop2: detected capacity change from 0 to 512 [ 220.633110][T13382] EXT4-fs error (device loop1): __ext4_iget:5443: inode #12: block 13: comm syz.1.3275: invalid block [ 220.639993][T13407] EXT4-fs: Ignoring removed bh option [ 220.661366][T13382] EXT4-fs (loop1): Remounting filesystem read-only [ 220.701919][T13407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.714671][T13407] ext4 filesystem being mounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.714872][T13398] veth3: entered promiscuous mode [ 220.732577][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.742782][T13407] siw: device registration error -23 [ 220.748550][T13399] veth3: entered promiscuous mode [ 220.786634][T13385] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.797058][T13385] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49266 - 0 [ 220.807578][T13414] loop1: detected capacity change from 0 to 128 [ 220.831644][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.865384][T13385] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.875736][T13385] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49266 - 0 [ 220.916574][T13418] loop4: detected capacity change from 0 to 4096 [ 220.941745][T13385] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.952125][T13385] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 49266 - 0 [ 221.014239][T13427] netlink: 'syz.1.3290': attribute type 12 has an invalid length. [ 221.026284][T13425] netlink: 660 bytes leftover after parsing attributes in process `syz.2.3291'. [ 221.050593][ T2384] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 49266 - 0 [ 221.058921][ T2384] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.080505][ T2384] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 49266 - 0 [ 221.088831][ T2384] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.104979][ T2384] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 49266 - 0 [ 221.113380][ T2384] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.129698][T13432] FAULT_INJECTION: forcing a failure. [ 221.129698][T13432] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 221.142902][T13432] CPU: 0 UID: 0 PID: 13432 Comm: syz.1.3292 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.142937][T13432] Tainted: [W]=WARN [ 221.142945][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.143024][T13432] Call Trace: [ 221.143031][T13432] [ 221.143039][T13432] __dump_stack+0x1d/0x30 [ 221.143071][T13432] dump_stack_lvl+0xe8/0x140 [ 221.143092][T13432] dump_stack+0x15/0x1b [ 221.143111][T13432] should_fail_ex+0x265/0x280 [ 221.143194][T13432] should_fail+0xb/0x20 [ 221.143210][T13432] should_fail_usercopy+0x1a/0x20 [ 221.143234][T13432] _copy_from_user+0x1c/0xb0 [ 221.143319][T13432] ___sys_sendmsg+0xc1/0x1d0 [ 221.143395][T13432] __x64_sys_sendmsg+0xd4/0x160 [ 221.143419][T13432] x64_sys_call+0x191e/0x3000 [ 221.143499][T13432] do_syscall_64+0xd2/0x200 [ 221.143519][T13432] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.143549][T13432] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.143626][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.143649][T13432] RIP: 0033:0x7f939fa3f6c9 [ 221.143665][T13432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.143685][T13432] RSP: 002b:00007f939e4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.143755][T13432] RAX: ffffffffffffffda RBX: 00007f939fc95fa0 RCX: 00007f939fa3f6c9 [ 221.143770][T13432] RDX: 000000002404c140 RSI: 00002000000000c0 RDI: 0000000000000003 [ 221.143783][T13432] RBP: 00007f939e4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.143796][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.143808][T13432] R13: 00007f939fc96038 R14: 00007f939fc95fa0 R15: 00007ffd83149268 [ 221.143827][T13432] [ 221.159047][ T2384] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 49266 - 0 [ 221.200576][T13425] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 221.202019][ T2384] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 221.260264][T13434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 221.365012][T13432] infiniband syû: set active [ 221.369673][T13432] infiniband syû: added bond_slave_0 [ 221.381285][T13385] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.399087][T13432] RDS/IB: syû: added [ 221.403833][T13432] smc: adding ib device syû with port count 1 [ 221.410353][T13432] smc: ib device syû port 1 has no pnetid [ 221.457716][T13440] pim6reg: entered allmulticast mode [ 221.503942][T13445] loop2: detected capacity change from 0 to 512 [ 221.514126][T13445] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 221.529311][T13445] EXT4-fs (loop2): 1 truncate cleaned up [ 221.535415][T13445] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.575191][T13451] lo speed is unknown, defaulting to 1000 [ 221.575612][T13451] lo speed is unknown, defaulting to 1000 [ 221.708440][T13455] lo speed is unknown, defaulting to 1000 [ 221.711062][T13455] lo speed is unknown, defaulting to 1000 [ 221.712921][T13452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3299'. [ 221.766954][T13458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3300'. [ 221.802984][T13451] pim6reg: entered allmulticast mode [ 221.808957][T13451] pim6reg: left allmulticast mode [ 221.832608][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.901745][T13462] loop2: detected capacity change from 0 to 128 [ 221.944058][T13464] loop0: detected capacity change from 0 to 512 [ 221.979992][T13464] EXT4-fs: Ignoring removed bh option [ 222.038247][T13464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.102330][T13464] ext4 filesystem being mounted at /221/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.116146][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3303'. [ 222.125310][T13470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3303'. [ 222.150903][T13470] gretap0: entered promiscuous mode [ 222.177149][T13470] gretap0: left promiscuous mode [ 222.208893][T13472] loop2: detected capacity change from 0 to 1024 [ 222.219598][T13472] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.226445][T13472] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 222.230202][T13464] siw: device registration error -23 [ 222.245787][T13472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.258514][T13464] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 222.265187][T13464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 222.273392][T13464] vhci_hcd vhci_hcd.0: Device attached [ 222.281468][T13472] EXT4-fs error (device loop2): __ext4_iget:5443: inode #12: block 13: comm syz.2.3304: invalid block [ 222.298848][T13472] EXT4-fs (loop2): Remounting filesystem read-only [ 222.305438][T13474] vhci_hcd: connection closed [ 222.305639][ T7329] vhci_hcd: stop threads [ 222.314621][ T7329] vhci_hcd: release socket [ 222.319170][ T7329] vhci_hcd: disconnect device [ 222.378653][ T5309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.476715][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 222.675915][T13487] lo speed is unknown, defaulting to 1000 [ 222.682421][T13508] syzkaller0: entered promiscuous mode [ 222.687914][T13508] syzkaller0: entered allmulticast mode [ 222.695486][T13487] lo speed is unknown, defaulting to 1000 [ 222.701706][T13506] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.773645][T13512] FAULT_INJECTION: forcing a failure. [ 222.773645][T13512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.786872][T13512] CPU: 0 UID: 0 PID: 13512 Comm: syz.4.3318 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 222.786906][T13512] Tainted: [W]=WARN [ 222.786960][T13512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 222.786973][T13512] Call Trace: [ 222.786980][T13512] [ 222.786987][T13512] __dump_stack+0x1d/0x30 [ 222.787008][T13512] dump_stack_lvl+0xe8/0x140 [ 222.787025][T13512] dump_stack+0x15/0x1b [ 222.787094][T13512] should_fail_ex+0x265/0x280 [ 222.787111][T13512] should_fail+0xb/0x20 [ 222.787125][T13512] should_fail_usercopy+0x1a/0x20 [ 222.787143][T13512] _copy_to_user+0x20/0xa0 [ 222.787243][T13512] simple_read_from_buffer+0xb5/0x130 [ 222.787267][T13512] proc_fail_nth_read+0x10e/0x150 [ 222.787294][T13512] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.787325][T13512] vfs_read+0x1a8/0x770 [ 222.787371][T13512] ? __pfx_ppp_ioctl+0x10/0x10 [ 222.787395][T13512] ? ppp_ioctl+0x10c6/0x11c0 [ 222.787500][T13512] ksys_read+0xda/0x1a0 [ 222.787523][T13512] __x64_sys_read+0x40/0x50 [ 222.787548][T13512] x64_sys_call+0x27c0/0x3000 [ 222.787575][T13512] do_syscall_64+0xd2/0x200 [ 222.787596][T13512] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 222.787626][T13512] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 222.787689][T13512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.787711][T13512] RIP: 0033:0x7fad2d87e0dc [ 222.787726][T13512] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 222.787745][T13512] RSP: 002b:00007fad2c2e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.787765][T13512] RAX: ffffffffffffffda RBX: 00007fad2dad5fa0 RCX: 00007fad2d87e0dc [ 222.787858][T13512] RDX: 000000000000000f RSI: 00007fad2c2e70a0 RDI: 0000000000000004 [ 222.787871][T13512] RBP: 00007fad2c2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 222.787883][T13512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.787895][T13512] R13: 00007fad2dad6038 R14: 00007fad2dad5fa0 R15: 00007fff52118388 [ 222.787914][T13512] [ 223.016344][T10128] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.063841][T13487] chnl_net:caif_netlink_parms(): no params data found [ 223.079466][T13525] loop4: detected capacity change from 0 to 512 [ 223.088913][T13525] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c018, mo2=0002] [ 223.089479][T13522] loop1: detected capacity change from 0 to 4096 [ 223.128872][T13525] EXT4-fs (loop4): orphan cleanup on readonly fs [ 223.152596][T13525] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 223.175009][T13523] loop0: detected capacity change from 0 to 2048 [ 223.207183][T13525] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 223.220402][T13523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.221032][T13487] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.239527][T13487] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.247751][T13525] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.3323: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 223.266138][T13487] bridge_slave_0: entered allmulticast mode [ 223.272193][T13525] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3323: couldn't read orphan inode 13 (err -117) [ 223.284766][T13487] bridge_slave_0: entered promiscuous mode [ 223.289472][T13525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 223.291742][T13487] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.310020][T13487] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.319310][T13487] bridge_slave_1: entered allmulticast mode [ 223.325890][T13487] bridge_slave_1: entered promiscuous mode [ 223.359197][T13171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.381457][T13487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.392453][T13487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.414490][T13536] loop4: detected capacity change from 0 to 512 [ 223.423021][T13487] team0: Port device team_slave_0 added [ 223.429710][T13487] team0: Port device team_slave_1 added [ 223.449765][T13536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.463572][T13536] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.504264][T13487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.511346][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.526866][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 223.526880][ T29] audit: type=1400 audit(1763134301.118:27253): avc: denied { write } for pid=13535 comm="syz.4.3324" path="/21/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.537293][T13487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.556890][ T29] audit: type=1326 audit(1763134301.148:27254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2d87f6c9 code=0x7ffc0000 [ 223.594656][T13487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.600172][ T29] audit: type=1326 audit(1763134301.148:27255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad2d87f6c9 code=0x7ffc0000 [ 223.607085][T13487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.630630][ T29] audit: type=1326 audit(1763134301.148:27256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2d87f6c9 code=0x7ffc0000 [ 223.630687][ T29] audit: type=1326 audit(1763134301.148:27257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad2d87f6c9 code=0x7ffc0000 [ 223.630723][ T29] audit: type=1326 audit(1763134301.148:27258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2d87f6c9 code=0x7ffc0000 [ 223.656635][T13487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.680144][ T29] audit: type=1326 audit(1763134301.148:27259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad2d87f6c9 code=0x7ffc0000 [ 223.761473][ T29] audit: type=1326 audit(1763134301.148:27260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2d87f6c9 code=0x7ffc0000 [ 223.785391][ T29] audit: type=1326 audit(1763134301.148:27261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fad2d8815e7 code=0x7ffc0000 [ 223.808902][ T29] audit: type=1326 audit(1763134301.148:27262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13535 comm="syz.4.3324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad2d87f6c9 code=0x7ffc0000 [ 223.870182][T13543] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 223.997286][T13171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.010775][T13487] hsr_slave_0: entered promiscuous mode [ 224.019399][T13487] hsr_slave_1: entered promiscuous mode [ 224.025231][T13487] debugfs: 'hsr0' already exists in 'hsr' [ 224.030995][T13487] Cannot create hsr debugfs directory [ 224.058590][T13553] loop1: detected capacity change from 0 to 512 [ 224.065042][T13551] loop3: detected capacity change from 0 to 8192 [ 224.077249][T13553] EXT4-fs: Ignoring removed bh option [ 224.122422][T13556] loop4: detected capacity change from 0 to 1024 [ 224.132108][T13556] EXT4-fs: Ignoring removed mblk_io_submit option [ 224.152477][T13556] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 224.184441][T13553] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.199117][T13553] ext4 filesystem being mounted at /546/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 224.212857][T13556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.242974][T13553] siw: device registration error -23 [ 224.249484][T13556] EXT4-fs error (device loop4): __ext4_iget:5443: inode #12: block 13: comm syz.4.3328: invalid block [ 224.296892][T13553] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 224.303493][T13553] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 224.311714][T13553] vhci_hcd vhci_hcd.0: Device attached [ 224.330155][T13556] EXT4-fs (loop4): Remounting filesystem read-only [ 224.352028][T13564] vhci_hcd: connection closed [ 224.352207][ T2384] vhci_hcd: stop threads [ 224.361121][ T2384] vhci_hcd: release socket [ 224.362152][T13568] loop3: detected capacity change from 0 to 128 [ 224.365535][ T2384] vhci_hcd: disconnect device [ 224.457353][T13568] bio_check_eod: 423 callbacks suppressed [ 224.457369][T13568] syz.3.3333: attempt to access beyond end of device [ 224.457369][T13568] loop3: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 224.477093][T13568] syz.3.3333: attempt to access beyond end of device [ 224.477093][T13568] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 224.491263][T13568] syz.3.3333: attempt to access beyond end of device [ 224.491263][T13568] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 224.491481][T13171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.506013][T13568] syz.3.3333: attempt to access beyond end of device [ 224.506013][T13568] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 224.528766][T13568] syz.3.3333: attempt to access beyond end of device [ 224.528766][T13568] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 224.543860][T13487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.554043][T13487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.574293][T13487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.581986][T13568] syz.3.3333: attempt to access beyond end of device [ 224.581986][T13568] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 224.583453][T13487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.646485][T13568] syz.3.3333: attempt to access beyond end of device [ 224.646485][T13568] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 224.657857][T13487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.702805][T13568] syz.3.3333: attempt to access beyond end of device [ 224.702805][T13568] loop3: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 224.744119][T13568] syz.3.3333: attempt to access beyond end of device [ 224.744119][T13568] loop3: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 224.763241][T13487] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.807405][T13487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.817821][T13487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.831835][T13568] syz.3.3333: attempt to access beyond end of device [ 224.831835][T13568] loop3: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 224.851365][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3334'. [ 224.891512][ T2384] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.898675][ T2384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.924524][ T2384] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.931615][ T2384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.989603][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.059047][T13585] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.064300][T13487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.078271][T13588] loop1: detected capacity change from 0 to 512 [ 225.130549][T13588] EXT4-fs (loop1): 1 truncate cleaned up [ 225.141179][T13588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.277451][T13588] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3336: bg 0: block 465: padding at end of block bitmap is not set [ 225.292433][T13588] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 225.304797][T13588] EXT4-fs (loop1): This should not happen!! Data will be lost [ 225.304797][T13588] [ 225.332598][T13588] vlan0: entered allmulticast mode [ 225.384197][T13487] veth0_vlan: entered promiscuous mode [ 225.395865][T13487] veth1_vlan: entered promiscuous mode [ 225.425972][T13487] veth0_macvtap: entered promiscuous mode [ 225.432068][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 225.437864][T13487] veth1_macvtap: entered promiscuous mode [ 225.444496][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 225.444496][ T31] [ 225.459824][ T31] EXT4-fs (loop1): Total free blocks count 0 [ 225.465794][ T31] EXT4-fs (loop1): Free/Dirty block details [ 225.471231][T13487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.471740][ T31] EXT4-fs (loop1): free_blocks=0 [ 225.483796][ T31] EXT4-fs (loop1): dirty_blocks=64 [ 225.489009][ T31] EXT4-fs (loop1): Block reservation details [ 225.491293][T13487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.509592][ T7329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.531279][ T7329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.544673][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.577527][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.586476][T13603] loop1: detected capacity change from 0 to 2048 [ 225.620286][T13603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.848184][T13619] loop3: detected capacity change from 0 to 1024 [ 225.862951][T13619] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.956004][T13619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.043310][T13619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.066495][T13626] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3344'. [ 226.179765][T13619] EXT4-fs error (device loop3): __ext4_iget:5443: inode #12: block 13: comm syz.3.3343: invalid block [ 226.204733][T13619] EXT4-fs (loop3): Remounting filesystem read-only [ 226.340367][ T5595] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.413990][T10128] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.446900][T13634] loop3: detected capacity change from 0 to 8192 [ 226.516229][T13636] loop0: detected capacity change from 0 to 8192 [ 226.570407][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.597532][ T4827] ================================================================== [ 226.605632][ T4827] BUG: KCSAN: data-race in has_bh_in_lru / invalidate_bh_lru [ 226.613000][ T4827] [ 226.615303][ T4827] write to 0xffff888237c26fd0 of 8 bytes by task 11953 on cpu 0: [ 226.622998][ T4827] invalidate_bh_lru+0x8f/0xf0 [ 226.627753][ T4827] smp_call_function_many_cond+0x88f/0xc60 [ 226.633544][ T4827] on_each_cpu_cond_mask+0x3c/0x80 [ 226.638644][ T4827] invalidate_bh_lrus+0x2a/0x30 [ 226.643483][ T4827] blkdev_flush_mapping+0x9a/0x1a0 [ 226.648588][ T4827] bdev_release+0x2bf/0x3d0 [ 226.653094][ T4827] blkdev_release+0x15/0x20 [ 226.657590][ T4827] __fput+0x29b/0x650 [ 226.661563][ T4827] fput_close_sync+0x6e/0x120 [ 226.666230][ T4827] __x64_sys_close+0x56/0xf0 [ 226.670810][ T4827] x64_sys_call+0x273c/0x3000 [ 226.675476][ T4827] do_syscall_64+0xd2/0x200 [ 226.679966][ T4827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.685841][ T4827] [ 226.688147][ T4827] read to 0xffff888237c26fd0 of 8 bytes by task 4827 on cpu 1: [ 226.695669][ T4827] has_bh_in_lru+0x35/0x1f0 [ 226.700162][ T4827] smp_call_function_many_cond+0x2a9/0xc60 [ 226.705956][ T4827] on_each_cpu_cond_mask+0x3c/0x80 [ 226.711051][ T4827] invalidate_bh_lrus+0x2a/0x30 [ 226.715890][ T4827] invalidate_bdev+0x42/0x70 [ 226.720462][ T4827] ext4_put_super+0x624/0x7d0 [ 226.725126][ T4827] generic_shutdown_super+0xe6/0x210 [ 226.730394][ T4827] kill_block_super+0x2a/0x70 [ 226.735063][ T4827] ext4_kill_sb+0x42/0x80 [ 226.739383][ T4827] deactivate_locked_super+0x75/0x1c0 [ 226.744739][ T4827] deactivate_super+0x97/0xa0 [ 226.749418][ T4827] cleanup_mnt+0x269/0x2e0 [ 226.753824][ T4827] __cleanup_mnt+0x19/0x20 [ 226.758229][ T4827] task_work_run+0x131/0x1a0 [ 226.762894][ T4827] exit_to_user_mode_loop+0xed/0x110 [ 226.768168][ T4827] do_syscall_64+0x1d6/0x200 [ 226.772742][ T4827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.778617][ T4827] [ 226.780918][ T4827] value changed: 0xffff888106e232d8 -> 0x0000000000000000 [ 226.788002][ T4827] [ 226.790304][ T4827] Reported by Kernel Concurrency Sanitizer on: [ 226.796437][ T4827] CPU: 1 UID: 0 PID: 4827 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.807879][ T4827] Tainted: [W]=WARN [ 226.811663][ T4827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 226.821697][ T4827] ================================================================== [ 226.886318][T13642] loop1: detected capacity change from 0 to 2048 [ 226.910121][T13642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.774149][ T4827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.