last executing test programs: 1m45.549287876s ago: executing program 4 (id=2384): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x6}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 1m45.312105609s ago: executing program 4 (id=2395): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x40000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@usrquota}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1) renameat2(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 1m44.994541833s ago: executing program 4 (id=2400): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x2, 0xc4ffffff, 0x0, 0x0) 1m44.928651514s ago: executing program 4 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 1m44.905310455s ago: executing program 4 (id=2402): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r1, 0x0) write$tun(r0, &(0x7f0000000600)={@void, @val={0x1, 0x3, 0xffff, 0x9, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x7b8dd026, 0x1ff}}}}}, 0x36) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 1m44.732333607s ago: executing program 4 (id=2404): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1400c005}, 0x14) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) accept4(r0, 0x0, 0x0, 0x0) 1m44.711591887s ago: executing program 32 (id=2404): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1400c005}, 0x14) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x20000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) accept4(r0, 0x0, 0x0, 0x0) 1m27.560354907s ago: executing program 1 (id=2828): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m27.383205399s ago: executing program 1 (id=2833): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000280)='./file1\x00', 0x4800, &(0x7f0000000600)=ANY=[@ANYBLOB="26f3a023f330bb11210654972e79d584aff7978ea30bcec608b02ac6ec0bec23cb0063b37b5812025f224ad642479501f4b0bfb0664ffbaff50b1e4c9846f64f8830dac33540902585bdfd2d41a8cc0a258558225a41956f76626145ad500208ecb705681602e911ccfff73e6950dd759dbba19f7d6135a2e2a68336fe3da7d3a70db1a6fcd8ea941a64003ffee05fe1e95d62d32e17de9d8bad6a", @ANYBLOB="8115b31ac017b6cdeb8b0783b9ac10488a21fbb431c7c96077030ce111291daf11ef066561eb808b2d98e0187310c3a0f88c5fab75c5aa5d5b5f4871a26dcdca350457908629912d333f6235655df3b0432258471914ea09958e5cb85ae3c748b950fa9558", @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRES16, @ANYRES8], 0xf9, 0x11ff, &(0x7f0000000f00)="$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") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x200040d0}, 0x0) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 1m27.237009451s ago: executing program 1 (id=2838): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x8000) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x22, 0x0, @thr={0x0, 0x0}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000082"], 0x34}}, 0x0) r0 = syz_io_uring_setup(0x4a60, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0xfffffffe, 0x1b3}, &(0x7f00000004c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1m27.186746442s ago: executing program 1 (id=2839): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 1m27.186048682s ago: executing program 1 (id=2841): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newtfilter={0x24, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0x5, 0x2}}}, 0x24}}, 0x20004084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m27.089150843s ago: executing program 1 (id=2844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) 1m27.058942173s ago: executing program 33 (id=2844): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f00000003c0)='./file0\x00') readlinkat(r3, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/198, 0xc6) 1m25.701719841s ago: executing program 3 (id=2856): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 1m25.540902833s ago: executing program 3 (id=2847): sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0203", 0x2, 0x0, 0x0, 0x0) unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 1m25.441030584s ago: executing program 3 (id=2849): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0101020000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0xba01}, 0x810) 1m25.282754876s ago: executing program 3 (id=2852): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 1m25.246132417s ago: executing program 3 (id=2854): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x529, &(0x7f00000008c0)="$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") pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1m25.180075627s ago: executing program 3 (id=2857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 1m25.179296038s ago: executing program 34 (id=2857): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000740)="03", 0x1}], 0x1}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 4.449031613s ago: executing program 2 (id=4653): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) rename(0x0, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x0, 0x80000}, 0x20) 4.372258224s ago: executing program 2 (id=4655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usbip_server_init(0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000500)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x203}}, {@mblk_io_submit}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x2, &(0x7f0000002380)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x200a00, 0xc00}]) open(&(0x7f0000000140)='./file1\x00', 0x64842, 0x21) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) 3.252643218s ago: executing program 2 (id=4663): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x10400, 0xffffffff, 0x6, 0x6, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) gettid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.747921165s ago: executing program 2 (id=4679): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 2.684518465s ago: executing program 2 (id=4680): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(r0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000010280)={0x8, 0x0, 0x100, 0x1, 0x5, "90897f0000030000000000f4ff1d277fffffeb"}) r3 = dup(r2) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x9, 0x2, 0x0, 0x82fa, 0x1a, "e8540000808000"}) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x7f) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000002c0)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff) 2.661999195s ago: executing program 7 (id=4684): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r3, 0x0) 2.519991148s ago: executing program 7 (id=4686): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000380)={0x1}) 2.484812348s ago: executing program 5 (id=4688): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, 0x0) write(r0, 0x0, 0x0) 2.455920138s ago: executing program 7 (id=4689): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x24, r5, 0x1, 0x0, 0x4, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010100}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0xfffd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410e9) 2.260332291s ago: executing program 5 (id=4691): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x660}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffbfe, 0x8, 0x10000000, 0xb, 0xff}, @broadcast, @multicast1, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xd, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2.259758281s ago: executing program 5 (id=4692): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000780), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 2.241419161s ago: executing program 5 (id=4694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) io_setup(0x200, &(0x7f0000000140)) 2.131807032s ago: executing program 5 (id=4697): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x2, 0x0, 0x0) 1.674060118s ago: executing program 6 (id=4702): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6112b4000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf5400000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r3 = dup(r2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000909000000000000000007"], 0x4c}}, 0x0) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 1.655056929s ago: executing program 6 (id=4703): sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) 1.464359231s ago: executing program 7 (id=4704): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.463838791s ago: executing program 6 (id=4705): writev(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1.460851361s ago: executing program 6 (id=4706): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000003000), 0x201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910960000000000070000005157e7c595007400"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) 1.404039492s ago: executing program 6 (id=4707): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x69) close(r0) 1.345895553s ago: executing program 7 (id=4708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0xc0100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x6, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.288325093s ago: executing program 6 (id=4709): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1008d2}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0xb8}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) add_key$keyring(&(0x7f0000000300), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 1.287511843s ago: executing program 5 (id=4710): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) 480.465394ms ago: executing program 7 (id=4711): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000001040)=""/259, 0x103, 0x0, 0x0, 0x0) 200.428207ms ago: executing program 2 (id=4714): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<-+||!') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r0}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 199.999597ms ago: executing program 35 (id=4714): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu<-+||!') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r0}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 191.718797ms ago: executing program 0 (id=4716): getpid() r0 = epoll_create1(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000380)) r4 = fcntl$dupfd(r2, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000000)) 175.362317ms ago: executing program 0 (id=4717): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 92.080759ms ago: executing program 0 (id=4718): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r3 = dup(r2) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) 91.471579ms ago: executing program 0 (id=4719): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0x47cdc) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') acct(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 18.77607ms ago: executing program 0 (id=4720): clock_gettime(0x0, &(0x7f0000000080)) futex(&(0x7f0000000040), 0x5, 0x0, 0x0, &(0x7f0000000200)=0x1, 0x2) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7fff}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c000000010401010000000000000000000004000500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x5}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) 0s ago: executing program 0 (id=4722): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000034c0)={0x14, 0x12, 0x1, 0x0, 0x0, {0xd, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000700)={0x11, 0x20c, '\x00', [@calipso={0x7, 0x58, {0x3, 0x14, 0x8, 0x81, [0x10e0, 0x3, 0xffffffffffffff42, 0x40, 0x0, 0x9, 0x6abb, 0x3, 0x4, 0x0]}}, @jumbo={0xc2, 0x4, 0x1}, @generic={0x7, 0xffe, "f382b16abd2d4a14fc7a4fcfefbb795bae3dc291e843c7e0abdba9377773ad39b963b3a20538d1c5c57d5add34297484a64f83fd1129f31df6c5d1580dbf7a57f219e9adabaf8bb0a8688a65391d15d6f18fff4633c90478870d2e8fdc64cbcdee8f91871c76640a414122bed4a9e5ec260547084bf48fed52a9bca0cc3ce9ff508a10b96edcc0c00354925915e87d126ef5940343617b085e77b84a7eaa1c193bdf4353d93e2e5250d1afcdb52114d0d554ecaae18d548ffadabf62878faca90cd032e6ec6c5536a648f7843bb2e1dc65991b79d3a94e3c307a15cb781f5a4cea77dbd7a087420f9806f258bcae8acf2d5f55be3894749eef9352527b7514e1836423754ae4d59158f05b44cbcdf56350becbc6b7d5b3b9db0c00f1dee828b4e63e730dfe0dcdd4a7c2f57df58bd2c86587c88c6e99ce930990bc8b84a0b8e085e61f13e42b1d682c7e99a66378a3c3861e8fd05e372919782636f346a246e35b6217f8bb252fba870510a631ab1d7522153c0f4dcbe5cfaafcf7e692303a8625aa6de009a8e6e790eabe5a047cf2c7aa933e6d36d7b7a3e8631550833a3bf5528dc66ec7209dfe01a36085df288ad6599550b9f2e8969d319ef9ed4fcc7d395ff9848af55bec364b599f09349a7b316175d30b4ecce0248e400e658fe022334d9cb647b90c152cb51fa7ca2ee0a553babc8246a92e02c3b5efbed48ef361904b851cef7b7a29badcfd279e88b611fe7d010c8b468f23ca4b9fad4f58e07c35b1494f9d725b700889ec1a631bd7e3d447a6433ad12db6c48550e04fee050ab2cfa51953d4174c717c31ab565eaa721cc5f5e46c472eb29ca1c94b770d4826964537894cfda84c2693c7f626aebffdf4211ef4ff3b8206da96313c871adee5d6d9d5b842471f91ab4d05da2b1006b5e1d6a9a87e0afcc5dcac6243cc1a7ed4e4e09440e91cc2875f0c73c84e6e99102c8552d4f938cc99240c30333ceaabf57865ea1d6c3057f2d7de545ccd9635b9a33ea701d07f85493ee007f96b461d99cbbc722e41e80e8de479219a234e0df29029e29ffaa9351474a46e6925754bfae033fe0f5b84d881529565bc73f6a2c337e43730fe7ccf0a23949b60ae2d345f1dceafe8f8f89cc6ca134224e8023abde2cfcdc22346c098a1829fb893837523ce4c227de4c1133c4ecb78a89dfe79d43812246352e848b53b05ce8427cc738cf680e86b2e511dbf0a8dfc0d164502ab775511fe4022b062273294b9d40ed674e332952bf20c0957ad9d8bae3213eca64a5ea16127db16b29b3b09905fccc9e63bc8f6bc8da92765f25b4508a744bd425b0270649e2146dbff8542660ef0b47d6c8f9c4a901e6787202a1cd664e80720178ea2fa6a3816269dd3d63aeefed1bbdf4dab870b78656cd9299e62fee838e4445ffadf64189fb276478e711e5e8903451eef50671a4634161805f4494eff21537683b801441a75b2f08e520c4074db233069c226596805557c33a49448a966c192a2bb36c5d8c1550a21a8b3c9246e0b7e85147c2f5ced4ec02a6ae67329c9dd8ace682712c4d7f23e894c369060091fbd2e13dfcc110392382c6d0cddde7109f78d74b2be74e80aaa3b4c66f7c1385dc0a5af719c92b9ec144df8d4abf1abbb8975cffc20c2cedcfd7ddb9d371e9f76f077f4363e27882fcce760ef093fe5ab30ac6304bb5bc407bba6bd15ef6b5488938bbc61476d6c6ec67c6815ceeda99e8a839c861325421d5167a4f143cedef9ed47e44189c9c174a3ae024bf5b4b29288f62992083e42183b6c6b7c7dbc1cc4d8a0e4fb26a0febeea10dce0b76fb68998f3e98934b36b40464c42def54478873e93f0e95837f254074d5be841f91719ca313941aba2a7e65d769feab1e2752233c1e3a34553bd3a76a445f6c1bcb597ed1e80beb244d092bc2a50df326d0afcdc9a2aed0094166c57fafd43d95497ee57ee2c90afd635982e98da9b413cfc40b9df866c4e853efb4dce244ea0b5a4082a83c8f53134343c8bcce07c49cec0f7dd075a90105d119954a61bd9160c56b19b54c9dd7ff4638dfe510e2d62953566939bdab4217a665203c9bd02189be2a99991cbdf12aa959f03805077eb42d0db33b676a8906ad2e0a9009ab8deea183c9b4f6ec0583c64fd7e340dcf14dcef7a884483d3b96e309d5e4313b03abf171f343d3f0542019f8401511ecc9535dc4626e38308f1bbd4955d1db12be6165b072938fe28ff7fd4c52a423c59b9fdd965c5523db1a6177cd084c07488239626d41d1226fc43f7ca04c8e8c2a480c501d3873e859a04e65ae997b0749edf54c18080949c6f08764707faaa073db7b577c757191486f9b52cb2cbd22d2244a7fe8fe275164c4510da491df682ed730fc0228e3ffff8521f82f466f6b353a512ac4bc6462e6c55e84f4f23a1ddac39202b14e0ae3396ef82879cb96b5eeb0bd49f2df4084d99280a85118d4f2fb4c450f8a24e48026872cb96a9ecfb54fc6997fe5a5103b2966b5e46d05e849dd1d67d6009b49085ade7e06b31e4df23160efa881f27eb483f2f7e75ec431b58021b8e47aaaaf19e8673af7066006a66edba3ed367c9c26a962d33d926fd010ff4f9c410494e0e7a87f2c1f478732d8d310d6c8f615befe445f0e830b73cf03df2443f5bff74010e4d9c42b6b414a5c87a13374f9ac670c7b94e6f27a135d98f6ae357db0014707ef5a6faca4e5556924837cfce41f9915bc029a09b89296bbddf04b9c93150c6195b9f024b51ed62ed44a928a6ae400efdb23c23b13f1fb7d5e6c1af0f88e5f1332f006b54a74a20e5b600d00e82030d3fe26d241ab53594069f280714580d7a749c1e6706d3dfb29ed06968592325163e349ca6072276cc779dcb298edb61ab94c3f47df89b76795db4de2d2ffb5d7e6d04a24b6d6983f30c85ab44611cbb029f6aba95d178b5011e719dfd37e13c76d1b131084e73e651e152308b19071d406bfa01ff14832697b9eddf1200ab98bcced2c357bf72ac81fca20efde718a6dfc29eb321868efb50a077b25c5e903cb307504f3cc6b70533725eaff07d757e4a78b875220584bfe60475803f5e053912997e747bc0f59091b04c4510349494364301d8a5711f4a9ef3e1752b8de64377c25c5269071439b0076d09abfb2eecc6a80298970c48ef9356b43a83308f1d81603ca547734f51515d9d6b7797669c189339979ad7e68862b64a472796f7ce23c6baadf9b023c9629f12df2a8be762250f90541f9b6e182a201db0777455229018e9ac44cc1b3c532596d4094110aa91145c8629e727d5e1df17594a715524099bc8753fa65ec8e5b5e3c2969f852a3fde437cc7b23a6f3b4d4ae92ee56b0ad0d7d65947d07207c469906b401bb43c1e6ab6b22f89a351cf970a9c961c0e03ee1ef11c280dcaaa5452bb06f9060982db3a7a00bfa3c7226c202c9c83574738e8e1a5ec4f480286cedbfd3a9088ac13b39a8c3f69f334221ec3beb9d5729083787b33ea085dad1087903820d02b02e852c45f9f091e1bb9022a1aa55945c29eb47ff771bf3942227ffe390c168445ff9c7607376f96c8a6e49a956c3ab990f7f7d8bcd9322400524641bb041058e7bee77f66bdf84a9d86b6a6493a85d8cbf660d74cb4065eba25ee10e2cdbf00594655bf195501eb173b210a2567e38c441dea748281a1df1dbbdb80081f6ea37fd099a6ba307b13861167b51f4c1bb9c59c68747be984e92907e7d81973780a46179f93cb5351e246eb657947bd9b3c7832a9220c0120990c975e54434efeb2d811a359d887eda1c3cbc8c5f0b83ddb4380538c6b834e338a1903be50b7b68a7487a3e2e2a500d26f9a40bcbb103a3c2069e1865ee4fedba0b51fc1d1bba0ed186f46172e54709659fdb0fe42947f6167b5f0a3139c65c0244e2b60d90b22cec30d176df5197744f82927f57e786a1bbd57991aeb83f765275a5631e0a5a1ce4dc63af9b0624a526e9e4527b7e792f79c5f8144d1cfc40c844d8d24b0f436b4c5919f6270e3c04e4e4e7ca34b66fd4e1edba7926461c8503c6899be769dff4a295db0230b1c598767807226c72fb56671a3975353b3e09fdde8b1799449d7031bebacf9c89b84f2025327048891e8cd2cd72f88400f206d1f9a11fc4d51ffabe70a4706a936e9486eed7675ae8ec054d7e1ac6cce182d4c69a880ac878658c305825e9609323589a2c5674ea87f9d2195445f7a3b2a7572da3403d027fb2bef783fd497398d6da22d6f4d295e68d7aff1068e373356623a40ad506b043c9b88e343f06aa3d33f2de3906f58fd5c626a06aceebd5945627acac704242f0f00172e71f2255a54772c87461d14eab5183152c6426ee4b8bff863f52f7d48881294e0ee23e0e3dbeee0c58778a8c9093af952791196d4301c0271cd4cb5af61ea434eba51aec9d4f791f621022e2bb0568f4221356dfd3e4059d9adc22e2bd8879d245822fd114bfe7e25938ffab31a21a3f97cc3f8adcefa3f18f1640ad148914214829648dd41fb37a940a5366331de44c8d17eca874a1506034a6e7e941d3140247087679c4a2cb45ed05e9ff8a33f1e606ef7da808d1c5e90899e80c22189e33834d82bce8d0cbc5e3fad4a8ec337a4222261e0995a2679398cc490785c1bb0c0946067be21f72605097340244217de0836cf5bedf207ca47e64fc010b3e7d6f2a98ed0625a17d1140b83bf346a4c218110f85009583017e2a607efcf8ba330a198dd70c3544f19f613f37112c7e97a4ad091377c499c122ef1e851b3ecd7fe066ae707b04c74152c98c2ca2e1a7da79be7d53d31c0391eec4d52e3d4cc7fa4567d1ae6cf4891aff81fd57915bdd024fca59df4cdd55883ccb3b83feeeacee73498de33db6e1d498d9494b070cf96b01dbb14fbaaa69138a042ff1bd4627c07a179f58ae7e0d27c87767136ad4a83a3e3bcc4db1a7cea099c0f4af2e8d0a65b090c68bf7604801fb2b88e2711aaeeb6bb68bc183beefa2b566f3bfb9c8e6e1eae6a280b1782a29467af01731e39b0f2916d012f7fec6e61cf86b6fbc67d061d6167cdd88e237baa8fae34f83fadd57d1b5123cafbd8ccf10518dbabbb605ac56055a831dd77fb5e862fd06557a73b943630d011c7268f90c7467ff8aead50cdbd3b3b350bbc767fa39e4ae6ae1556deaaf527404c12c63fdc30bdf2da2e31ac198d0d2f91a8edc16409613c98edfed26a99ebfe9f8f41f4a4279d1d022852b113208580cfbbb51e0b445c814929e32160462eb363f8718e16da4a43115a12e46b6f6addd0a1378859a3712acc2af2be29d7e6f2c8273aac2a49a49c0f35e8a8fc06b9d52719fb109c2b09fe0d0a73a0d7cc05168e7043981017c2606fa3ed033852b19a593626a46cfca69f2c7ad337f02c34b0562c89a6ded62e9690507ad56219d49d7aaca1cc322d26ae9f069b668b58424d66ab810c332e2ef619c9910db1f37cf15707942a30b3636a6ef2047ce7c236418b03f134ea4bbf49c17257fc2997978f33bf4c959a3a87a33ac58b59048d9629271286bd65f35e5a9996ec488839c68a9a63e4db4a60f0f25c2650b2bc11dd1788c2c0cf686cf931c83c1d9f6a4709af53eea837089899afe5eca29d81a55702c96bcee40ff4960f6e2127e98c474ddeffd80d9d27d9a4785e8f02adcc40ac9b9e09c024d6ab8646f74cce493b43bdb63b5ad633cbffc2ba5adf59e44d99fa87aa7f9dc7c3556bf8e8dcf1a738b600e185acbad12da4c7322f06530abe4c4d5b40eb6ec6e76c177a01a982"}]}, 0x1068) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): 992][T12628] serio: Serial port ptm0 [ 178.652651][T12651] vlan2: entered allmulticast mode [ 178.658072][T12651] dummy0: entered allmulticast mode [ 178.728402][T12655] ALSA: seq fatal error: cannot create timer (-19) [ 178.781363][T12660] SELinux: failed to load policy [ 178.807591][T12662] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3403'. [ 178.980860][T12682] loop2: detected capacity change from 0 to 164 [ 178.991994][T12682] syz.2.3413: attempt to access beyond end of device [ 178.991994][T12682] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 179.007703][T12682] syz.2.3413: attempt to access beyond end of device [ 179.007703][T12682] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 179.290291][T12720] loop6: detected capacity change from 0 to 128 [ 179.417389][T12720] syz.6.3429: attempt to access beyond end of device [ 179.417389][T12720] loop6: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 179.436643][T12720] syz.6.3429: attempt to access beyond end of device [ 179.436643][T12720] loop6: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 179.459819][T12720] syz.6.3429: attempt to access beyond end of device [ 179.459819][T12720] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 179.475028][T12720] syz.6.3429: attempt to access beyond end of device [ 179.475028][T12720] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 179.490172][T12720] syz.6.3429: attempt to access beyond end of device [ 179.490172][T12720] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 179.520078][T12720] syz.6.3429: attempt to access beyond end of device [ 179.520078][T12720] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 179.536914][T12720] syz.6.3429: attempt to access beyond end of device [ 179.536914][T12720] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 179.552943][T12720] syz.6.3429: attempt to access beyond end of device [ 179.552943][T12720] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 179.577908][T12727] loop5: detected capacity change from 0 to 2048 [ 179.645387][T12727] loop5: p1 < > p4 [ 179.649963][T12727] loop5: p4 size 8388608 extends beyond EOD, truncated [ 180.100743][T12775] loop2: detected capacity change from 0 to 512 [ 180.126214][T12775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.139498][T12775] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.178091][T12775] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3449: corrupted inode contents [ 180.191962][T12775] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.3449: mark_inode_dirty error [ 180.204507][T12775] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3449: corrupted inode contents [ 180.217858][T12775] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.3449: mark_inode_dirty error [ 180.255350][T12775] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3449: corrupted inode contents [ 180.331545][T12808] tipc: Started in network mode [ 180.336268][T12775] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #2: comm syz.2.3449: mark_inode_dirty error [ 180.337864][T12808] tipc: Node identity ac14140f, cluster identity 4711 [ 180.348991][T12775] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #2: comm syz.2.3449: corrupted inode contents [ 180.354913][T12808] tipc: New replicast peer: 255.255.255.255 [ 180.372779][T12808] tipc: Enabled bearer , priority 10 [ 180.386585][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 180.386604][ T29] audit: type=1400 audit(1746258458.846:6050): avc: denied { write } for pid=12773 comm="syz.2.3449" name="bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.432583][ T29] audit: type=1400 audit(1746258458.876:6051): avc: denied { add_name } for pid=12773 comm="syz.2.3449" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.453275][ T29] audit: type=1400 audit(1746258458.876:6052): avc: denied { remove_name } for pid=12773 comm="syz.2.3449" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 180.476141][ T29] audit: type=1400 audit(1746258458.876:6053): avc: denied { rename } for pid=12773 comm="syz.2.3449" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.498263][ T29] audit: type=1400 audit(1746258458.876:6054): avc: denied { remove_name } for pid=12773 comm="syz.2.3449" name="file0" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.516819][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.520761][ T29] audit: type=1400 audit(1746258458.876:6055): avc: denied { rmdir } for pid=12773 comm="syz.2.3449" name="file0" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.551681][ T29] audit: type=1400 audit(1746258458.876:6056): avc: denied { rename } for pid=12773 comm="syz.2.3449" name="file0" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.573689][ T29] audit: type=1400 audit(1746258458.876:6057): avc: denied { reparent } for pid=12773 comm="syz.2.3449" name="file0" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.596257][ T29] audit: type=1400 audit(1746258458.876:6058): avc: denied { unlink } for pid=12773 comm="syz.2.3449" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 180.635022][ T29] audit: type=1400 audit(1746258459.096:6059): avc: denied { read write } for pid=12839 comm="syz.2.3459" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 180.856539][T12877] __nla_validate_parse: 3 callbacks suppressed [ 180.856558][T12877] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3464'. [ 180.920076][T12890] xt_hashlimit: max too large, truncated to 1048576 [ 181.006832][T12905] loop7: detected capacity change from 0 to 512 [ 181.066563][T12905] EXT4-fs: dax option not supported [ 181.194269][T12931] 9pnet_fd: Insufficient options for proto=fd [ 181.264804][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3477'. [ 181.291150][T12934] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.427144][T12934] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.463594][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3484'. [ 181.501941][ T8337] tipc: Node number set to 2886997007 [ 181.511261][T12934] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.577657][T12934] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.912567][T12963] loop2: detected capacity change from 0 to 2048 [ 181.931128][T12934] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.945263][T12934] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.973756][T12963] loop2: p1 < > p4 [ 181.978377][T12963] loop2: p4 size 8388608 extends beyond EOD, truncated [ 181.987503][T12934] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.049165][T12934] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.156774][T12969] ref_ctr_offset mismatch. inode: 0xfeb offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000040 [ 182.362025][T12926] lo speed is unknown, defaulting to 1000 [ 182.538471][T12989] netlink: 'syz.7.3501': attribute type 27 has an invalid length. [ 182.584685][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3502'. [ 182.629679][T12989] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.637073][T12989] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.665939][T13001] loop2: detected capacity change from 0 to 128 [ 182.706846][T12989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.716766][T12989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.748262][T12989] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.756981][T12989] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.766016][T12989] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.774851][T12989] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.860771][T12993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.869783][T12993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.879224][T12993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.888681][T12993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.919201][T12996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.927587][T12996] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.937211][T12996] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.958937][T13003] vlan0: entered allmulticast mode [ 182.964231][T13003] : entered allmulticast mode [ 182.969121][T13003] bond_slave_0: entered allmulticast mode [ 182.974921][T13003] bond_slave_1: entered allmulticast mode [ 183.216987][T13011] netlink: 'syz.7.3510': attribute type 4 has an invalid length. [ 183.224859][T13011] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3510'. [ 183.317037][T13011] : renamed from bond0 (while UP) [ 183.494310][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3513'. [ 183.567386][T13018] lo speed is unknown, defaulting to 1000 [ 183.611542][T13021] loop2: detected capacity change from 0 to 1024 [ 183.647646][T13021] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.679463][T13021] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3514: bg 0: block 88: padding at end of block bitmap is not set [ 183.737137][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.778045][T13029] loop2: detected capacity change from 0 to 256 [ 183.784561][T13027] loop7: detected capacity change from 0 to 2048 [ 183.804820][T13027] loop7: p1 < > p4 [ 183.809371][T13027] loop7: p4 size 8388608 extends beyond EOD, truncated [ 183.874135][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.884543][T13030] FAT-fs (loop2): Filesystem has been set read-only [ 183.891872][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.902120][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.912276][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.923800][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.934301][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.944542][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.955569][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.965986][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 183.976179][T13030] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 184.525111][T13047] Cannot find del_set index 0 as target [ 184.727433][T13061] loop7: detected capacity change from 0 to 1024 [ 184.744956][T13061] EXT4-fs: Ignoring removed oldalloc option [ 184.768440][T13061] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 184.846604][T13061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.995626][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.037413][T13088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3539'. [ 185.197514][ T8337] IPVS: starting estimator thread 0... [ 185.304671][T13106] IPVS: using max 2448 ests per chain, 122400 per kthread [ 185.357695][T13122] loop5: detected capacity change from 0 to 256 [ 185.420298][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.430591][T13125] FAT-fs (loop5): Filesystem has been set read-only [ 185.447620][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.454857][T13124] xt_hashlimit: max too large, truncated to 1048576 [ 185.457919][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.474749][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.486608][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.496859][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.507347][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.518998][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.529221][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.539398][T13125] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 185.590225][T13132] ref_ctr_offset mismatch. inode: 0x2d8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 185.604689][T13134] loop7: detected capacity change from 0 to 128 [ 185.670475][T13138] bio_check_eod: 20368 callbacks suppressed [ 185.670496][T13138] syz.7.3557: attempt to access beyond end of device [ 185.670496][T13138] loop7: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 185.697203][T13138] syz.7.3557: attempt to access beyond end of device [ 185.697203][T13138] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 185.712435][T13138] syz.7.3557: attempt to access beyond end of device [ 185.712435][T13138] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 185.727532][T13138] syz.7.3557: attempt to access beyond end of device [ 185.727532][T13138] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 185.831501][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 185.831521][ T29] audit: type=1400 audit(1746258464.216:6094): avc: denied { map } for pid=13141 comm="syz.6.3559" path="socket:[36917]" dev="sockfs" ino=36917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.862482][ T29] audit: type=1400 audit(1746258464.216:6095): avc: denied { read } for pid=13141 comm="syz.6.3559" path="socket:[36917]" dev="sockfs" ino=36917 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 185.863427][T13138] syz.7.3557: attempt to access beyond end of device [ 185.863427][T13138] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 185.954675][T13152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3564'. [ 185.967427][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.000253][T13152] bridge_slave_1 (unregistering): left allmulticast mode [ 186.007704][T13156] loop2: detected capacity change from 0 to 1024 [ 186.008222][T13156] EXT4-fs: Ignoring removed oldalloc option [ 186.008651][T13156] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 186.033944][T13152] bridge_slave_1 (unregistering): left promiscuous mode [ 186.040936][T13152] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.059401][T13138] syz.7.3557: attempt to access beyond end of device [ 186.059401][T13138] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 186.075234][T13156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.095013][T13138] syz.7.3557: attempt to access beyond end of device [ 186.095013][T13138] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 186.121321][T13138] syz.7.3557: attempt to access beyond end of device [ 186.121321][T13138] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 186.178622][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.204240][T13138] syz.7.3557: attempt to access beyond end of device [ 186.204240][T13138] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 186.253139][ T29] audit: type=1326 audit(1746258464.706:6096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 186.273880][T13138] syz.7.3557: attempt to access beyond end of device [ 186.273880][T13138] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 186.278471][ T29] audit: type=1326 audit(1746258464.706:6097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 186.317975][ T29] audit: type=1326 audit(1746258464.706:6098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 186.342866][ T29] audit: type=1326 audit(1746258464.706:6099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 186.366822][ T29] audit: type=1326 audit(1746258464.706:6100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 186.391942][ T29] audit: type=1326 audit(1746258464.706:6101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 186.415782][ T29] audit: type=1326 audit(1746258464.706:6102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 186.440832][ T29] audit: type=1326 audit(1746258464.706:6103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13164 comm="syz.2.3570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 186.522372][T13177] netlink: 'syz.6.3576': attribute type 10 has an invalid length. [ 186.535017][T13177] hsr_slave_0: left promiscuous mode [ 186.555711][T13177] hsr_slave_1: left promiscuous mode [ 186.609862][T13192] IPv4: Oversized IP packet from 127.202.26.0 [ 186.727598][T13208] ref_ctr_offset mismatch. inode: 0x3ea offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 186.779848][T13212] netlink: 'syz.6.3591': attribute type 10 has an invalid length. [ 186.787831][T13212] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3591'. [ 186.799536][T13212] dummy0: entered promiscuous mode [ 186.823780][T13212] bridge0: port 2(dummy0) entered blocking state [ 186.830291][T13212] bridge0: port 2(dummy0) entered disabled state [ 186.844585][T13212] bridge0: port 2(dummy0) entered blocking state [ 186.851005][T13212] bridge0: port 2(dummy0) entered forwarding state [ 187.019930][T13232] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3601'. [ 187.034674][T13234] syz.7.3602: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 187.049421][T13234] CPU: 0 UID: 0 PID: 13234 Comm: syz.7.3602 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 187.049468][T13234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 187.049483][T13234] Call Trace: [ 187.049490][T13234] [ 187.049499][T13234] __dump_stack+0x1d/0x30 [ 187.049520][T13234] dump_stack_lvl+0xe8/0x140 [ 187.049539][T13234] dump_stack+0x15/0x1b [ 187.049555][T13234] warn_alloc+0x12b/0x1a0 [ 187.049605][T13234] ? schedule+0x5f/0xd0 [ 187.049634][T13234] ? futex_unqueue+0xb9/0xf0 [ 187.049657][T13234] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 187.049755][T13234] ? __pfx_futex_wake_mark+0x10/0x10 [ 187.049787][T13234] ? __rcu_read_unlock+0x4f/0x70 [ 187.049807][T13234] ? avc_has_perm_noaudit+0x1b1/0x200 [ 187.049898][T13234] ? should_fail_ex+0x30/0x280 [ 187.049936][T13234] ? xskq_create+0x36/0xe0 [ 187.049968][T13234] ? should_failslab+0x8c/0xb0 [ 187.050084][T13234] vmalloc_user_noprof+0x59/0x70 [ 187.050143][T13234] ? xskq_create+0x80/0xe0 [ 187.050177][T13234] xskq_create+0x80/0xe0 [ 187.050203][T13234] xsk_init_queue+0x95/0xf0 [ 187.050236][T13234] xsk_setsockopt+0x3de/0x510 [ 187.050303][T13234] ? __pfx_xsk_setsockopt+0x10/0x10 [ 187.050332][T13234] __sys_setsockopt+0x181/0x200 [ 187.050362][T13234] ? fpregs_restore_userregs+0xbb/0x190 [ 187.050389][T13234] __x64_sys_setsockopt+0x64/0x80 [ 187.050499][T13234] x64_sys_call+0x2bd5/0x2fb0 [ 187.050561][T13234] do_syscall_64+0xd0/0x1a0 [ 187.050582][T13234] ? clear_bhb_loop+0x25/0x80 [ 187.050602][T13234] ? clear_bhb_loop+0x25/0x80 [ 187.050622][T13234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.050645][T13234] RIP: 0033:0x7ff4479fe969 [ 187.050669][T13234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.050722][T13234] RSP: 002b:00007ff446067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 187.050820][T13234] RAX: ffffffffffffffda RBX: 00007ff447c25fa0 RCX: 00007ff4479fe969 [ 187.050833][T13234] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 187.050847][T13234] RBP: 00007ff447a80ab1 R08: 0000000000000004 R09: 0000000000000000 [ 187.050862][T13234] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 187.050875][T13234] R13: 0000000000000000 R14: 00007ff447c25fa0 R15: 00007ffe97037298 [ 187.050897][T13234] [ 187.050909][T13234] Mem-Info: [ 187.289830][T13234] active_anon:6427 inactive_anon:5 isolated_anon:0 [ 187.289830][T13234] active_file:6794 inactive_file:2314 isolated_file:0 [ 187.289830][T13234] unevictable:0 dirty:281 writeback:0 [ 187.289830][T13234] slab_reclaimable:3210 slab_unreclaimable:60912 [ 187.289830][T13234] mapped:28097 shmem:3069 pagetables:895 [ 187.289830][T13234] sec_pagetables:0 bounce:0 [ 187.289830][T13234] kernel_misc_reclaimable:0 [ 187.289830][T13234] free:1777361 free_pcp:22993 free_cma:0 [ 187.334884][T13234] Node 0 active_anon:14340kB inactive_anon:20kB active_file:27176kB inactive_file:9256kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112388kB dirty:1124kB writeback:0kB shmem:1024kB writeback_tmp:0kB kernel_stack:3184kB pagetables:3580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 187.363818][T13234] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 187.390761][T13234] lowmem_reserve[]: 0 2884 7863 7863 [ 187.396158][T13234] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 187.424712][T13234] lowmem_reserve[]: 0 0 4978 4978 [ 187.429787][T13234] Node 0 Normal free:4156908kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:14340kB inactive_anon:20kB active_file:27176kB inactive_file:9256kB unevictable:0kB writepending:1124kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:86300kB local_pcp:1144kB free_cma:0kB [ 187.460240][T13234] lowmem_reserve[]: 0 0 0 0 [ 187.464868][T13234] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 187.477868][T13234] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 187.494314][T13234] Node 0 Normal: 2452*4kB (UME) 771*8kB (UME) 853*16kB (UME) 738*32kB (UME) 628*64kB (UME) 444*128kB (UME) 235*256kB (UME) 208*512kB (UME) 110*1024kB (UME) 66*2048kB (UME) 877*4096kB (UME) = 4156920kB [ 187.514713][T13234] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 187.524065][T13234] 9362 total pagecache pages [ 187.528680][T13234] 5 pages in swap cache [ 187.532850][T13234] Free swap = 124800kB [ 187.537082][T13234] Total swap = 124996kB [ 187.541375][T13234] 2097051 pages RAM [ 187.545239][T13234] 0 pages HighMem/MovableOnly [ 187.549914][T13234] 80258 pages reserved [ 187.559107][T13244] veth1_macvtap: left promiscuous mode [ 187.566286][T13244] macsec0: entered promiscuous mode [ 187.781193][T13262] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.792408][T13262] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 187.803602][T13262] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 187.849050][T13264] pim6reg1: entered promiscuous mode [ 187.854449][T13264] pim6reg1: entered allmulticast mode [ 187.876143][T13262] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.886120][T13262] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 187.897263][T13262] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 188.011279][T13262] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.021365][T13262] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 188.031204][T13262] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 188.115875][T13262] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.125899][T13262] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 188.135699][T13262] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 188.195036][T13262] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.204704][T13262] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 188.212816][T13262] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.231507][T13262] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.241354][T13262] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 188.241981][T13275] loop7: detected capacity change from 0 to 1024 [ 188.251043][T13262] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.271602][T13262] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.279874][T13262] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 188.288113][T13262] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.301607][T13262] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.311248][T13262] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 188.320847][T13262] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 188.344433][T13275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.402535][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.435275][T13282] loop7: detected capacity change from 0 to 256 [ 188.504384][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.514579][T13283] FAT-fs (loop7): Filesystem has been set read-only [ 188.522203][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.533833][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.545537][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.560838][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.572387][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.584174][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.596098][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.607706][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.619101][T13283] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000005) [ 188.677811][T13288] vlan2: entered allmulticast mode [ 188.695761][T13288] dummy0: entered allmulticast mode [ 188.750205][T13293] loop5: detected capacity change from 0 to 1024 [ 188.757297][T13293] EXT4-fs: Ignoring removed i_version option [ 188.764793][T13293] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.793413][T13293] EXT4-fs: Ignoring removed nobh option [ 188.799035][T13293] EXT4-fs: Ignoring removed bh option [ 188.836313][T13293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.859210][T13293] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3623: Allocating blocks 385-513 which overlap fs metadata [ 188.902413][T13293] EXT4-fs (loop5): pa ffff8881062a1770: logic 16, phys. 129, len 24 [ 188.910590][T13293] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 188.982390][T13293] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 188.994896][T13293] EXT4-fs (loop5): This should not happen!! Data will be lost [ 188.994896][T13293] [ 189.004830][T13293] EXT4-fs (loop5): Total free blocks count 0 [ 189.010819][T13293] EXT4-fs (loop5): Free/Dirty block details [ 189.016936][T13293] EXT4-fs (loop5): free_blocks=128 [ 189.022073][T13293] EXT4-fs (loop5): dirty_blocks=0 [ 189.027266][T13293] EXT4-fs (loop5): Block reservation details [ 189.033437][T13293] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 189.064550][T13309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13309 comm=syz.6.3629 [ 189.142784][T13314] serio: Serial port ptm0 [ 189.152586][T13316] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 189.238727][T13320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3635'. [ 189.422132][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3637'. [ 189.471647][T13335] lo speed is unknown, defaulting to 1000 [ 189.628575][T13349] netlink: 'syz.5.3643': attribute type 10 has an invalid length. [ 189.645370][T13349] hsr_slave_0: left promiscuous mode [ 189.652547][T13349] hsr_slave_1: left promiscuous mode [ 189.696993][T13354] loop6: detected capacity change from 0 to 164 [ 190.174545][T13366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3654'. [ 190.187369][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.196451][T13367] 9pnet_fd: Insufficient options for proto=fd [ 190.205403][T13366] bridge_slave_1 (unregistering): left allmulticast mode [ 190.212497][T13366] bridge_slave_1 (unregistering): left promiscuous mode [ 190.219674][T13366] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.236147][T13367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3653'. [ 190.248547][T13367] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.289292][T13371] vlan2: entered allmulticast mode [ 190.301062][T13367] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.386188][T13367] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.445352][T13367] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.512168][T13367] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.538413][T13367] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.552953][T13367] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.566238][T13367] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.655014][T13390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13390 comm=syz.6.3662 [ 190.660857][T13387] loop7: detected capacity change from 0 to 2048 [ 190.697855][T13387] EXT4-fs: inline encryption not supported [ 190.717095][T13387] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.747077][T13401] loop2: detected capacity change from 0 to 512 [ 190.754321][T13401] EXT4-fs: Ignoring removed i_version option [ 190.761301][T13387] EXT4-fs error (device loop7): ext4_find_extent:938: inode #2: comm syz.7.3663: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 190.778750][T13401] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.778789][T13387] EXT4-fs (loop7): Remounting filesystem read-only [ 190.832453][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.958694][T13401] EXT4-fs (loop2): 1 truncate cleaned up [ 190.977369][T13401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.995071][T13417] loop5: detected capacity change from 0 to 512 [ 191.001852][T13408] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 191.013085][T13408] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.025771][T13417] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 191.087316][T13417] EXT4-fs (loop5): 1 truncate cleaned up [ 191.098279][T13417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.150553][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.201692][T13426] loop5: detected capacity change from 0 to 128 [ 191.216961][T13426] FAT-fs (loop5): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 191.230985][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 191.231067][ T29] audit: type=1326 audit(1746258469.686:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.5.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 191.272738][ T54] FAT-fs (loop5): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 191.285923][T13428] netlink: 'syz.0.3677': attribute type 27 has an invalid length. [ 191.322391][T13430] 9pnet_fd: Insufficient options for proto=fd [ 191.322717][ T29] audit: type=1326 audit(1746258469.716:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.5.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 191.352391][ T29] audit: type=1326 audit(1746258469.716:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.5.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 191.375937][ T29] audit: type=1326 audit(1746258469.716:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.5.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 191.399561][ T29] audit: type=1326 audit(1746258469.716:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13425 comm="syz.5.3676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 191.439394][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3679'. [ 191.454419][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.465673][T13430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3678'. [ 191.504764][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3679'. [ 191.584610][ T29] audit: type=1400 audit(1746258470.046:6185): avc: denied { write } for pid=13445 comm="syz.2.3681" name="tcp" dev="proc" ino=4026533584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 191.742512][T13428] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 191.751016][T13428] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 191.759615][T13428] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 191.768237][T13428] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 191.797643][T13428] ip6gre1: left allmulticast mode [ 191.826961][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3684'. [ 191.888893][T13428] ip6gre2: left allmulticast mode [ 191.917412][T13428] vlan2: left promiscuous mode [ 191.922437][T13428] bond1: left promiscuous mode [ 191.927445][T13428] vlan2: left allmulticast mode [ 191.932573][T13428] bond1: left allmulticast mode [ 191.939154][T13428] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.947818][T13428] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.956277][T13428] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.964777][T13428] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.999042][T13428] veth5: left allmulticast mode [ 192.005894][T13428] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 192.014291][T13428] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 192.022583][T13428] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 192.031005][T13428] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 192.041573][T13428] geneve2: left promiscuous mode [ 192.046675][T13428] geneve2: left allmulticast mode [ 192.056601][T13428] ip6gre3: left allmulticast mode [ 192.115036][T13433] 8021q: adding VLAN 0 to HW filter on device  [ 192.122782][T13433] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.153073][T13433] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 192.193021][T13430] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.231556][T13437] syz2: Port: 1 Link DOWN [ 192.251609][T13455] team0 (unregistering): Port device team_slave_0 removed [ 192.276665][T13455] team0 (unregistering): Port device team_slave_1 removed [ 192.297811][T13430] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.377056][T13430] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.417795][T13430] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.440188][T13482] loop6: detected capacity change from 0 to 1024 [ 192.466569][T13482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.530929][T13430] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.542282][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.572620][T13430] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.615360][T13430] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.627589][T13430] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.716353][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3699'. [ 192.733927][ T29] audit: type=1400 audit(1746258471.156:6186): avc: denied { ioctl } for pid=13497 comm="syz.5.3699" path="socket:[38058]" dev="sockfs" ino=38058 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.781343][T13504] netlink: 'syz.2.3700': attribute type 27 has an invalid length. [ 192.792390][T13502] loop5: detected capacity change from 0 to 164 [ 192.814939][T13504] lo: left promiscuous mode [ 192.819618][T13504] lo: left allmulticast mode [ 192.828547][T13502] bio_check_eod: 85 callbacks suppressed [ 192.828564][T13502] syz.5.3701: attempt to access beyond end of device [ 192.828564][T13502] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 192.864531][T13502] syz.5.3701: attempt to access beyond end of device [ 192.864531][T13502] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 193.040127][T13504] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.047526][T13504] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.326400][T13504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.358889][T13504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.431302][T13504] macsec0: left promiscuous mode [ 193.450121][T13504] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.458681][T13504] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.467179][T13504] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.475699][T13504] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.523110][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.548680][T13507] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.646822][T13518] loop2: detected capacity change from 0 to 1024 [ 193.699933][ T8352] lo speed is unknown, defaulting to 1000 [ 193.705908][ T8352] syz0: Port: 1 Link ACTIVE [ 193.710790][T13522] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 193.722135][T13513] IPVS: stopping master sync thread 13522 ... [ 193.730369][T13518] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.759623][T13530] loop6: detected capacity change from 0 to 1024 [ 193.812101][T13537] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 193.829627][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.840865][T13530] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 193.850020][T13530] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 193.859532][T13530] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3716: Failed to acquire dquot type 0 [ 193.874940][T13530] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 193.915444][T13530] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.3716: corrupted inode contents [ 193.929159][T13530] EXT4-fs error (device loop6): ext4_dirty_inode:6103: inode #13: comm syz.6.3716: mark_inode_dirty error [ 193.951828][T13530] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.3716: corrupted inode contents [ 193.966628][T13530] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #13: comm syz.6.3716: mark_inode_dirty error [ 193.997319][T13552] loop2: detected capacity change from 0 to 512 [ 194.004493][T13530] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.3716: corrupted inode contents [ 194.017298][T13552] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 194.033451][T13530] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 194.046423][T13552] EXT4-fs (loop2): 1 truncate cleaned up [ 194.052507][T13552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.065233][T13530] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #13: comm syz.6.3716: corrupted inode contents [ 194.083383][T13530] EXT4-fs error (device loop6): ext4_truncate:4255: inode #13: comm syz.6.3716: mark_inode_dirty error [ 194.103019][T13530] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 194.152345][T13530] EXT4-fs (loop6): 1 truncate cleaned up [ 194.154728][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.159202][T13530] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.287071][ T29] audit: type=1326 audit(1746258472.746:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13579 comm="syz.5.3718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 194.337752][T13530] EXT4-fs: Ignoring removed orlov option [ 194.369022][T13530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 194.397757][T13530] EXT4-fs (loop6): can't enable nombcache during remount [ 194.497800][T13483] lo speed is unknown, defaulting to 1000 [ 194.617061][T13592] lo speed is unknown, defaulting to 1000 [ 195.164316][T13650] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3727'. [ 195.398400][T13683] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3736'. [ 195.489557][T13687] loop2: detected capacity change from 0 to 128 [ 195.609982][T13699] netlink: 'syz.7.3742': attribute type 3 has an invalid length. [ 195.786029][T13724] loop7: detected capacity change from 0 to 512 [ 195.792900][T13724] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 196.184167][ T4459] page_pool_release_retry() stalled pool shutdown: id 65, 2 inflight 60 sec [ 196.272534][T13745] netlink: 'syz.2.3754': attribute type 3 has an invalid length. [ 196.310376][T13748] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3752'. [ 196.352803][T13755] loop2: detected capacity change from 0 to 128 [ 196.366588][T13757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3757'. [ 196.384306][T13753] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 196.392284][T13753] FAT-fs (loop2): Filesystem has been set read-only [ 196.405879][T13753] syz.2.3756: attempt to access beyond end of device [ 196.405879][T13753] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 196.422856][T13753] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 196.430846][T13753] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 196.440406][T13755] syz.2.3756: attempt to access beyond end of device [ 196.440406][T13755] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.454780][T13755] syz.2.3756: attempt to access beyond end of device [ 196.454780][T13755] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 196.468826][T13761] veth0_macvtap: left promiscuous mode [ 196.485589][T13761] macvtap0: refused to change device tx_queue_len [ 196.706837][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 196.706863][ T29] audit: type=1400 audit(1746258475.166:6473): avc: denied { name_bind } for pid=13776 comm="syz.7.3765" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 196.832680][T13783] ip6gre1: entered allmulticast mode [ 196.891938][ T29] audit: type=1326 audit(1746258475.346:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 196.915856][ T29] audit: type=1326 audit(1746258475.346:6475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 196.939682][ T29] audit: type=1326 audit(1746258475.346:6476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 196.963474][ T29] audit: type=1326 audit(1746258475.346:6477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 196.988784][ T29] audit: type=1326 audit(1746258475.346:6478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 197.014196][ T29] audit: type=1326 audit(1746258475.346:6479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 197.039267][ T29] audit: type=1326 audit(1746258475.346:6480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 197.064162][ T29] audit: type=1326 audit(1746258475.356:6481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 197.088956][ T29] audit: type=1326 audit(1746258475.356:6482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13787 comm="syz.2.3769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630389e969 code=0x7ffc0000 [ 197.115460][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.572307][T13811] loop6: detected capacity change from 0 to 1024 [ 197.572944][T13809] SELinux: ebitmap: truncated map [ 197.581482][T13811] EXT4-fs: Ignoring removed nobh option [ 197.592485][T13809] SELinux: failed to load policy [ 197.607240][T13811] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.661393][T13811] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.3779: Allocating blocks 449-513 which overlap fs metadata [ 197.699409][T13810] EXT4-fs (loop6): pa ffff88810628ba10: logic 48, phys. 177, len 21 [ 197.708854][T13810] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 197.745619][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.772695][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3782'. [ 197.783081][T13819] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3782'. [ 197.855366][T13822] pim6reg1: entered promiscuous mode [ 197.860883][T13822] pim6reg1: entered allmulticast mode [ 197.994779][T13831] bridge0: port 2(dummy0) entered disabled state [ 198.001332][T13831] bridge0: port 3(veth0_to_bond) entered disabled state [ 198.008409][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.017437][T13831] bridge0: entered allmulticast mode [ 198.055274][T13831] bridge0: port 2(dummy0) entered blocking state [ 198.061824][T13831] bridge0: port 2(dummy0) entered forwarding state [ 198.068463][T13831] bridge0: port 3(veth0_to_bond) entered blocking state [ 198.075592][T13831] bridge0: port 3(veth0_to_bond) entered forwarding state [ 198.083020][T13831] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.090111][T13831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.098647][T13831] bridge0: entered promiscuous mode [ 198.432851][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 198.446987][T13852] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.456815][T13852] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.466291][T13852] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.474783][T13852] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 198.484454][T13852] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.492853][T13852] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.501276][T13852] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.511220][T13852] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.689618][T13879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3806'. [ 198.718160][T13883] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3808'. [ 198.761478][T13890] loop6: detected capacity change from 0 to 512 [ 198.798745][T13890] EXT4-fs (loop6): orphan cleanup on readonly fs [ 198.806583][T13890] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.3811: bad orphan inode 13 [ 198.817128][T13890] ext4_test_bit(bit=12, block=18) = 1 [ 198.822543][T13890] is_bad_inode(inode)=0 [ 198.826749][T13890] NEXT_ORPHAN(inode)=2130706432 [ 198.831656][T13890] max_ino=32 [ 198.834892][T13890] i_nlink=1 [ 198.839447][T13890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.855700][T13890] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 198.884842][T13890] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3811: bg 0: block 248: padding at end of block bitmap is not set [ 198.899604][T13890] EXT4-fs error (device loop6): ext4_acquire_dquot:6935: comm syz.6.3811: Failed to acquire dquot type 1 [ 198.911819][T13890] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.944339][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.508259][T13914] serio: Serial port pts0 [ 199.642048][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3825'. [ 199.655820][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3825'. [ 200.336903][T14010] lo speed is unknown, defaulting to 1000 [ 200.525292][T14047] $H: renamed from  [ 200.530682][T14047] $H: entered promiscuous mode [ 200.537176][T14047] bond_slave_0: entered promiscuous mode [ 200.543009][T14047] bond_slave_1: entered promiscuous mode [ 200.639533][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3855'. [ 200.658433][T14059] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.668495][T14059] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.678129][T14059] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.687870][T14059] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.727486][T14059] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.737335][T14059] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.747091][T14059] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.756756][T14059] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 201.029667][T14103] loop7: detected capacity change from 0 to 1024 [ 201.042449][T14109] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14109 comm=syz.2.3864 [ 201.043853][T14103] EXT4-fs: Ignoring removed nobh option [ 201.060895][T14103] EXT4-fs: Ignoring removed bh option [ 201.069131][T14108] netlink: 'syz.6.3865': attribute type 12 has an invalid length. [ 201.087178][T14103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.205423][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.318903][T14120] lo speed is unknown, defaulting to 1000 [ 201.416363][T14140] loop2: detected capacity change from 0 to 8192 [ 201.705831][T14174] loop2: detected capacity change from 0 to 8192 [ 201.796993][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 201.797012][ T29] audit: type=1326 audit(1746258480.256:7105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dccb55927 code=0x7ffc0000 [ 201.831308][T14235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3893'. [ 201.844676][T14235] ip6gre2: entered allmulticast mode [ 201.858404][ T29] audit: type=1326 audit(1746258480.256:7106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dccafab39 code=0x7ffc0000 [ 201.881986][ T29] audit: type=1326 audit(1746258480.256:7107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2dccb55927 code=0x7ffc0000 [ 201.905534][ T29] audit: type=1326 audit(1746258480.256:7108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2dccafab39 code=0x7ffc0000 [ 201.929029][ T29] audit: type=1326 audit(1746258480.256:7109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 201.952623][ T29] audit: type=1326 audit(1746258480.256:7110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 201.976336][ T29] audit: type=1326 audit(1746258480.256:7111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 202.000152][ T29] audit: type=1326 audit(1746258480.256:7112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 202.023752][ T29] audit: type=1326 audit(1746258480.256:7113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 202.047313][ T29] audit: type=1326 audit(1746258480.256:7114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14232 comm="syz.6.3883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 202.170207][T14239] lo speed is unknown, defaulting to 1000 [ 202.372677][T14249] loop2: detected capacity change from 0 to 1024 [ 202.381258][T14249] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.400637][T14249] EXT4-fs: Ignoring removed bh option [ 202.437249][T14249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.500637][T14249] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 202.577146][T14263] loop7: detected capacity change from 0 to 512 [ 202.585469][T14263] ext4: Unknown parameter '.' [ 202.591929][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.760762][T14289] loop7: detected capacity change from 0 to 512 [ 202.775482][T14289] EXT4-fs warning (device loop7): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 202.785863][T14293] loop5: detected capacity change from 0 to 2048 [ 202.790239][T14289] EXT4-fs (loop7): mount failed [ 202.815811][T14293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.828342][T14293] ext4 filesystem being mounted at /256/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.903803][T14278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.922378][T14278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.086434][T14178] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 345: padding at end of block bitmap is not set [ 203.103439][T14178] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 97 with error 117 [ 203.116210][T14178] EXT4-fs (loop5): This should not happen!! Data will be lost [ 203.116210][T14178] [ 203.749393][T14329] loop6: detected capacity change from 0 to 4096 [ 203.784765][T14329] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.926239][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.979175][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.073764][T14359] loop5: detected capacity change from 0 to 128 [ 204.369885][T14378] syz_tun: entered allmulticast mode [ 204.378564][T14377] syz_tun: left allmulticast mode [ 204.416076][T14380] loop5: detected capacity change from 0 to 2048 [ 204.423011][T14380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.433622][T14382] loop7: detected capacity change from 0 to 512 [ 204.442298][T14380] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 204.453492][T14382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.467656][T14382] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 204.483099][T14382] EXT4-fs error (device loop7): ext4_do_update_inode:5211: inode #18: comm syz.7.3942: corrupted inode contents [ 204.497939][T14382] EXT4-fs (loop7): Remounting filesystem read-only [ 204.506002][T14382] EXT4-fs warning (device loop7): ext4_evict_inode:279: xattr delete (err -30) [ 204.518288][T14380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.571736][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.639091][T14391] loop2: detected capacity change from 0 to 512 [ 204.686129][T14391] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 204.731985][T14391] EXT4-fs (loop2): mount failed [ 204.796000][T14399] loop2: detected capacity change from 0 to 1024 [ 204.828689][T14399] EXT4-fs: Ignoring removed nobh option [ 204.834366][T14399] EXT4-fs: Ignoring removed bh option [ 204.849015][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.889166][T14399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.948651][T14399] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3948: Allocating blocks 385-513 which overlap fs metadata [ 205.024203][T14399] EXT4-fs (loop2): pa ffff8881062a1700: logic 16, phys. 129, len 24 [ 205.032283][T14399] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 205.061795][T14399] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 205.074170][T14399] EXT4-fs (loop2): This should not happen!! Data will be lost [ 205.074170][T14399] [ 205.083860][T14399] EXT4-fs (loop2): Total free blocks count 0 [ 205.089925][T14399] EXT4-fs (loop2): Free/Dirty block details [ 205.095915][T14399] EXT4-fs (loop2): free_blocks=128 [ 205.101224][T14399] EXT4-fs (loop2): dirty_blocks=0 [ 205.106289][T14399] EXT4-fs (loop2): Block reservation details [ 205.112404][T14399] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 205.130098][T14419] loop6: detected capacity change from 0 to 512 [ 205.159738][T14419] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 205.166008][T14422] loop2: detected capacity change from 0 to 1024 [ 205.178307][T14419] EXT4-fs (loop6): orphan cleanup on readonly fs [ 205.185381][T14419] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #3: comm syz.6.3957: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 205.204155][T14419] EXT4-fs error (device loop6): ext4_quota_enable:7129: comm syz.6.3957: Bad quota inode: 3, type: 0 [ 205.216895][T14422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.229613][T14422] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.240820][T14419] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 205.255569][T14419] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 205.267265][T14419] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 205.296098][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.312104][T14419] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3957: bg 0: block 64: padding at end of block bitmap is not set [ 205.338983][T14427] loop2: detected capacity change from 0 to 1024 [ 205.352680][T14427] EXT4-fs: Ignoring removed nobh option [ 205.358398][T14427] EXT4-fs: Ignoring removed bh option [ 205.365818][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.386837][T14427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.487479][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.547382][T14448] loop6: detected capacity change from 0 to 512 [ 205.560514][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3970'. [ 205.571717][T14448] EXT4-fs warning (device loop6): dx_probe:863: inode #2: comm syz.6.3969: dx entry: limit 1024 != root limit 124 [ 205.584082][T14448] EXT4-fs warning (device loop6): dx_probe:936: inode #2: comm syz.6.3969: Corrupt directory, running e2fsck is recommended [ 205.653346][T14448] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 205.680011][T14448] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.3969: corrupted in-inode xattr: invalid ea_ino [ 205.696361][T14448] EXT4-fs (loop6): Remounting filesystem read-only [ 205.712051][T14448] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.790794][T14468] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 205.791407][T14474] netlink: 'syz.0.3978': attribute type 4 has an invalid length. [ 205.951983][T14484] loop2: detected capacity change from 0 to 128 [ 205.970045][T14484] tipc: Started in network mode [ 205.975066][T14484] tipc: Node identity ac14140f, cluster identity 4711 [ 205.982950][T14484] tipc: New replicast peer: 255.255.255.255 [ 205.989249][T14484] tipc: Enabled bearer , priority 10 [ 206.148108][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3993'. [ 206.157134][T14510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3993'. [ 206.226462][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3997'. [ 206.385620][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.399321][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4001'. [ 206.412501][T14528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14528 comm=syz.7.4003 [ 206.444282][T14528] netlink: 'syz.7.4003': attribute type 1 has an invalid length. [ 206.489118][T14528] bond0: (slave gretap1): making interface the new active one [ 206.491763][T14539] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4008'. [ 206.498352][T14528] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 206.515009][T14539] netlink: 'syz.6.4008': attribute type 5 has an invalid length. [ 206.522862][T14539] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4008'. [ 206.722226][T14552] pim6reg: entered allmulticast mode [ 206.730922][T14552] pim6reg: left allmulticast mode [ 206.983312][ T8352] tipc: Node number set to 2886997007 [ 207.063293][T14571] loop7: detected capacity change from 0 to 512 [ 207.102976][T14571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.166618][T14571] ext4 filesystem being mounted at /223/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.220719][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.445067][ T29] kauditd_printk_skb: 816 callbacks suppressed [ 207.445105][ T29] audit: type=1326 audit(1746258485.906:7929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.512927][ T29] audit: type=1326 audit(1746258485.946:7930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.536440][ T29] audit: type=1326 audit(1746258485.946:7931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.560196][ T29] audit: type=1326 audit(1746258485.946:7932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.583903][ T29] audit: type=1326 audit(1746258485.946:7933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.607472][ T29] audit: type=1326 audit(1746258485.946:7934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.631208][ T29] audit: type=1326 audit(1746258485.946:7935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.654756][ T29] audit: type=1326 audit(1746258485.946:7936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.678485][ T29] audit: type=1326 audit(1746258485.946:7937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.702156][ T29] audit: type=1326 audit(1746258485.946:7938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.7.4031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4479fe969 code=0x7ffc0000 [ 207.876148][T14617] loop2: detected capacity change from 0 to 256 [ 207.949309][T14624] loop5: detected capacity change from 0 to 128 [ 207.964955][T14624] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 207.999849][T14624] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.062713][T14633] loop2: detected capacity change from 0 to 512 [ 208.069722][T14633] EXT4-fs: Ignoring removed oldalloc option [ 208.077808][T14633] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 208.116160][ T9470] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.141508][T14633] EXT4-fs (loop2): 1 truncate cleaned up [ 208.147717][T14633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.192963][T14638] netlink: 'syz.5.4051': attribute type 2 has an invalid length. [ 208.202133][T14638] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4051'. [ 208.243811][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.317110][T14660] loop6: detected capacity change from 0 to 512 [ 208.334791][T14660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 208.355672][T14660] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.4061: invalid block [ 208.375712][T14660] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4061: invalid indirect mapped block 4294967295 (level 1) [ 208.391703][T14660] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4061: invalid indirect mapped block 4294967295 (level 1) [ 208.408040][T14660] EXT4-fs (loop6): 2 truncates cleaned up [ 208.415830][T14660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.441745][T14660] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.4061: path /226/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 208.478732][T14660] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.6.4061: path /226/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 208.505654][T14677] bridge0: entered promiscuous mode [ 208.511076][T14677] macsec1: entered allmulticast mode [ 208.516650][T14677] bridge0: entered allmulticast mode [ 208.524099][T14677] bridge0: port 3(macsec1) entered blocking state [ 208.530615][T14677] bridge0: port 3(macsec1) entered disabled state [ 208.551101][T14677] bridge0: left allmulticast mode [ 208.557624][T14677] bridge0: left promiscuous mode [ 208.578057][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.616294][T14684] loop2: detected capacity change from 0 to 128 [ 208.625203][T14684] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 208.667611][T14684] SELinux: failed to load policy [ 208.721238][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 208.739506][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 208.750675][T14693] loop2: detected capacity change from 0 to 128 [ 208.951728][T14680] bond1: entered promiscuous mode [ 208.965470][T14680] bond1: entered allmulticast mode [ 208.971673][T14680] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.042215][T14680] bond1 (unregistering): Released all slaves [ 209.205010][T14718] loop7: detected capacity change from 0 to 512 [ 209.211950][T14718] EXT4-fs: Ignoring removed nobh option [ 209.231388][T14718] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4086: invalid indirect mapped block 256 (level 2) [ 209.246526][T14718] EXT4-fs (loop7): 2 truncates cleaned up [ 209.259622][T14718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.418859][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.440676][T14736] loop5: detected capacity change from 0 to 256 [ 209.477918][T14736] syz.5.4094: attempt to access beyond end of device [ 209.477918][T14736] loop5: rw=0, sector=256, nr_sectors = 20 limit=256 [ 209.626391][T14758] loop6: detected capacity change from 0 to 4096 [ 209.657193][T14758] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.750157][T14774] IPv4: Oversized IP packet from 127.202.26.0 [ 209.810205][T14782] smc: net device bond0 erased user defined pnetid SYZ0 [ 209.832853][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.909407][T14795] serio: Serial port ptm0 [ 210.257550][T14836] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4138'. [ 210.290904][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4141'. [ 210.301936][T14817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.310597][T14817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.506235][T14853] syzkaller0: entered promiscuous mode [ 210.511786][T14853] syzkaller0: entered allmulticast mode [ 210.590271][T14861] $H: renamed from  (while UP) [ 210.598750][T14861] $H: entered promiscuous mode [ 210.605362][T14861] bond_slave_0: entered promiscuous mode [ 210.611433][T14861] bond_slave_1: entered promiscuous mode [ 210.658104][T14868] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4152'. [ 210.695217][T14875] loop2: detected capacity change from 0 to 164 [ 210.707949][T14875] syz.2.4156: attempt to access beyond end of device [ 210.707949][T14875] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 210.722743][T14875] syz.2.4156: attempt to access beyond end of device [ 210.722743][T14875] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 210.987484][T14911] loop2: detected capacity change from 0 to 512 [ 211.019873][T14911] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 211.062465][T14911] EXT4-fs (loop2): 1 truncate cleaned up [ 211.083765][T14911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.156041][T14922] loop6: detected capacity change from 0 to 1024 [ 211.198594][T14922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.234307][T14922] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 211.269737][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.408424][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.430348][T14927] loop2: detected capacity change from 0 to 4096 [ 211.488046][T14927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.646119][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.297380][T14955] netlink: 172 bytes leftover after parsing attributes in process `syz.7.4189'. [ 212.426947][T14964] pim6reg1: entered promiscuous mode [ 212.432298][T14964] pim6reg1: entered allmulticast mode [ 212.471523][T14967] pim6reg1: entered promiscuous mode [ 212.478426][T14967] pim6reg1: entered allmulticast mode [ 212.625958][T14972] loop2: detected capacity change from 0 to 1024 [ 212.642106][T14972] EXT4-fs: Ignoring removed orlov option [ 212.658394][T14972] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 212.715590][T14972] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.754776][ T29] kauditd_printk_skb: 771 callbacks suppressed [ 212.754791][ T29] audit: type=1326 audit(1746258491.216:8710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.790400][ T29] audit: type=1326 audit(1746258491.246:8711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.815663][ T29] audit: type=1326 audit(1746258491.246:8712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.840757][ T29] audit: type=1326 audit(1746258491.246:8713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.865952][ T29] audit: type=1326 audit(1746258491.246:8714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.891054][ T29] audit: type=1326 audit(1746258491.246:8715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.916103][ T29] audit: type=1326 audit(1746258491.246:8716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.941192][ T29] audit: type=1326 audit(1746258491.246:8717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.964738][ T29] audit: type=1326 audit(1746258491.246:8718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 212.989882][ T29] audit: type=1326 audit(1746258491.246:8719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14978 comm="syz.6.4199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 213.024432][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.044862][T14984] tipc: Enabling of bearer rejected, failed to enable media [ 213.162706][T14999] program syz.7.4208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.352426][T15013] loop6: detected capacity change from 0 to 512 [ 213.367762][T15013] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 213.415143][T15013] EXT4-fs (loop6): 1 truncate cleaned up [ 213.425788][T15013] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.646333][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.675052][T15021] loop7: detected capacity change from 0 to 256 [ 213.806705][T15030] program syz.2.4219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.851029][T15034] loop7: detected capacity change from 0 to 512 [ 213.893174][T15023] loop6: detected capacity change from 0 to 1024 [ 213.900297][T15023] EXT4-fs: inline encryption not supported [ 213.906396][T15023] EXT4-fs: Ignoring removed bh option [ 213.918711][T15034] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.940542][T15034] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.968215][T15034] 9pnet_fd: p9_fd_create_tcp (15034): problem connecting socket to 127.0.0.1 [ 213.968229][T15023] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.013947][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.081160][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.197342][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4226'. [ 214.207790][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4226'. [ 214.220710][T15056] loop7: detected capacity change from 0 to 256 [ 214.250456][T15059] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.276119][T15063] netlink: 'syz.7.4232': attribute type 4 has an invalid length. [ 214.359256][T15068] loop5: detected capacity change from 0 to 1024 [ 214.379778][T15068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.406394][T15059] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.443481][T15068] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 214.482855][T15059] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.495246][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.530631][T15079] 9pnet_fd: Insufficient options for proto=fd [ 214.544757][T15084] loop9: detected capacity change from 0 to 7 [ 214.553490][T15084] buffer_io_error: 631 callbacks suppressed [ 214.553505][T15084] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.569424][T15084] Buffer I/O error on dev loop9, logical block 0, async page read [ 214.578101][T15084] loop9: unable to read partition table [ 214.584887][T15059] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.594704][T15084] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 214.594704][T15084] U) failed (rc=-5) [ 214.680427][T15059] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.711509][T15059] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.802845][T15097] atomic_op ffff888139cb5528 conn xmit_atomic 0000000000000000 [ 214.804524][T15059] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.841284][T15099] netem: change failed [ 214.850008][T15059] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.007360][T15105] loop7: detected capacity change from 0 to 1024 [ 215.097835][T15105] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.159496][T15105] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 215.282642][T10979] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.356989][T15124] atomic_op ffff8881178d6528 conn xmit_atomic 0000000000000000 [ 215.438283][T15131] loop5: detected capacity change from 0 to 512 [ 215.469544][T15134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4256'. [ 215.474102][T15131] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.493372][T15131] ext4 filesystem being mounted at /315/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.514972][T15138] loop6: detected capacity change from 0 to 512 [ 215.542575][T15140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4263'. [ 215.568846][T15140] bond0: (slave bond_slave_0): Releasing backup interface [ 215.600658][T15138] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.621745][T15138] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.699541][T15138] EXT4-fs error (device loop6): ext4_do_update_inode:5211: inode #18: comm syz.6.4262: corrupted inode contents [ 215.739759][T15138] EXT4-fs (loop6): Remounting filesystem read-only [ 215.764174][T15138] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -30) [ 215.874724][T15157] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4270'. [ 216.066114][T15164] lo speed is unknown, defaulting to 1000 [ 216.086749][T13438] IPVS: starting estimator thread 0... [ 216.173365][T15169] IPVS: using max 2448 ests per chain, 122400 per kthread [ 216.294353][T15183] loop7: detected capacity change from 0 to 1024 [ 216.301194][T15183] EXT4-fs: inline encryption not supported [ 216.307249][T15183] EXT4-fs: Ignoring removed bh option [ 216.775763][T15215] loop6: detected capacity change from 0 to 512 [ 216.836396][T15215] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.324166][T15242] loop7: detected capacity change from 0 to 512 [ 217.717678][T15258] lo speed is unknown, defaulting to 1000 [ 217.805834][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 217.805873][ T29] audit: type=1400 audit(1746258496.266:8853): avc: denied { read } for pid=15263 comm="syz.5.4308" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.879508][ T29] audit: type=1400 audit(1746258496.266:8854): avc: denied { open } for pid=15263 comm="syz.5.4308" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 217.940375][ T29] audit: type=1400 audit(1746258496.396:8855): avc: denied { create } for pid=15266 comm="syz.2.4309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.017339][ T29] audit: type=1400 audit(1746258496.466:8856): avc: denied { write } for pid=15268 comm="syz.6.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.039722][T15273] loop9: detected capacity change from 0 to 7 [ 218.046259][ T29] audit: type=1400 audit(1746258496.496:8857): avc: denied { append } for pid=15272 comm="syz.6.4312" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 218.070352][T15273] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.070413][T15273] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.070431][T15273] loop9: unable to read partition table [ 218.070453][T15273] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 218.070453][T15273] U) failed (rc=-5) [ 218.109616][ T29] audit: type=1400 audit(1746258496.496:8858): avc: denied { setopt } for pid=15270 comm="syz.2.4311" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.118877][T15275] loop7: detected capacity change from 0 to 2048 [ 218.138980][T15275] EXT4-fs: Ignoring removed nomblk_io_submit option [ 218.146666][T15275] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 218.176820][ T29] audit: type=1400 audit(1746258496.636:8859): avc: denied { execute } for pid=15279 comm="syz.5.4314" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 218.228422][ T29] audit: type=1400 audit(1746258496.686:8860): avc: denied { write } for pid=15274 comm="syz.7.4313" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.250457][ T29] audit: type=1400 audit(1746258496.686:8861): avc: denied { add_name } for pid=15274 comm="syz.7.4313" name="hugetlb.1GB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 218.273346][ T29] audit: type=1400 audit(1746258496.686:8862): avc: denied { create } for pid=15274 comm="syz.7.4313" name="hugetlb.1GB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 218.568065][T15302] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15302 comm=syz.6.4332 [ 218.596093][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.605124][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.624039][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.637249][T15302] netlink: 'syz.6.4332': attribute type 1 has an invalid length. [ 218.652600][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.661615][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.671824][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.698836][T15316] bond1: (slave gretap1): making interface the new active one [ 218.709197][T15316] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 218.749238][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.758256][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.770894][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 218.796235][T15324] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 219.015562][T15323] lo speed is unknown, defaulting to 1000 [ 219.282701][T15334] loop6: detected capacity change from 0 to 2048 [ 219.303008][T15334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 219.324105][T15334] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 219.458584][T15344] loop5: detected capacity change from 0 to 512 [ 219.498830][T15344] EXT4-fs warning (device loop5): dx_probe:863: inode #2: comm syz.5.4337: dx entry: limit 1024 != root limit 124 [ 219.512399][T15344] EXT4-fs warning (device loop5): dx_probe:936: inode #2: comm syz.5.4337: Corrupt directory, running e2fsck is recommended [ 219.577004][T15344] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 219.606480][T15344] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.4337: corrupted in-inode xattr: invalid ea_ino [ 219.651878][T15344] EXT4-fs (loop5): Remounting filesystem read-only [ 220.010396][T15362] program syz.6.4344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 220.034718][T15362] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 220.495970][T15393] loop6: detected capacity change from 0 to 512 [ 220.527005][T15393] ext4 filesystem being mounted at /297/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.626810][ T8352] IPVS: starting estimator thread 0... [ 220.651630][T15391] lo speed is unknown, defaulting to 1000 [ 220.672346][T15405] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 220.694860][ T8056] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 220.723272][T15399] IPVS: using max 1968 ests per chain, 98400 per kthread [ 221.667614][ T8056] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 221.844599][T15439] loop5: detected capacity change from 0 to 512 [ 221.869010][T15439] EXT4-fs: Ignoring removed oldalloc option [ 221.895253][T15439] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 221.941711][T15439] EXT4-fs (loop5): 1 truncate cleaned up [ 221.983031][T15420] lo speed is unknown, defaulting to 1000 [ 222.076568][T15452] __nla_validate_parse: 2 callbacks suppressed [ 222.076586][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4377'. [ 222.259967][T15452] team0 (unregistering): Port device team_slave_0 removed [ 222.269002][T15452] team0 (unregistering): Port device team_slave_1 removed [ 222.279154][T15452] team0 (unregistering): Port device geneve1 removed [ 222.308680][T15459] netlink: 71 bytes leftover after parsing attributes in process `syz.2.4389'. [ 222.830092][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 222.830179][ T29] audit: type=1400 audit(1746258501.286:9034): avc: denied { ioctl } for pid=15465 comm="syz.7.4382" path="socket:[44152]" dev="sockfs" ino=44152 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 222.941702][ T29] audit: type=1400 audit(1746258501.396:9035): avc: denied { setopt } for pid=15475 comm="syz.2.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.992808][ T29] audit: type=1400 audit(1746258501.446:9036): avc: denied { bind } for pid=15475 comm="syz.2.4383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.055365][ T29] audit: type=1400 audit(1746258501.446:9037): avc: denied { name_bind } for pid=15475 comm="syz.2.4383" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 223.077498][ T29] audit: type=1400 audit(1746258501.446:9038): avc: denied { node_bind } for pid=15475 comm="syz.2.4383" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 223.099679][ T29] audit: type=1400 audit(1746258501.456:9039): avc: denied { write } for pid=15475 comm="syz.2.4383" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.121119][ T29] audit: type=1400 audit(1746258501.456:9040): avc: denied { connect } for pid=15475 comm="syz.2.4383" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.142807][ T29] audit: type=1400 audit(1746258501.456:9041): avc: denied { name_connect } for pid=15475 comm="syz.2.4383" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 223.165155][ T29] audit: type=1400 audit(1746258501.476:9042): avc: denied { shutdown } for pid=15475 comm="syz.2.4383" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.186983][ T29] audit: type=1400 audit(1746258501.486:9043): avc: denied { read write } for pid=15477 comm="syz.5.4384" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 223.534104][T15504] loop2: detected capacity change from 0 to 512 [ 223.546739][T15504] ext4 filesystem being mounted at /471/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.722709][T15509] vlan2: entered allmulticast mode [ 223.826395][T15514] loop2: detected capacity change from 0 to 128 [ 223.840005][T15514] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 223.848061][T15514] FAT-fs (loop2): Filesystem has been set read-only [ 223.854995][T15514] syz.2.4398: attempt to access beyond end of device [ 223.854995][T15514] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 223.868931][T15514] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 223.876989][T15514] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 223.885158][T15514] syz.2.4398: attempt to access beyond end of device [ 223.885158][T15514] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 223.898546][T15514] syz.2.4398: attempt to access beyond end of device [ 223.898546][T15514] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 223.959951][T15516] loop5: detected capacity change from 0 to 512 [ 223.976660][T15516] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.996232][T15516] EXT4-fs mount: 20 callbacks suppressed [ 223.996252][T15516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.030028][T15526] bridge0: port 1(macvlan0) entered blocking state [ 224.031691][T15516] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.038121][T15526] bridge0: port 1(macvlan0) entered disabled state [ 224.066851][T15526] macvlan0: entered allmulticast mode [ 224.077422][T15526] macvlan0: left allmulticast mode [ 224.100168][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.249721][T15529] lo speed is unknown, defaulting to 1000 [ 224.377649][T15539] lo speed is unknown, defaulting to 1000 [ 224.654403][T15558] wg2: entered promiscuous mode [ 224.659356][T15558] wg2: entered allmulticast mode [ 224.795873][T15563] xt_CT: No such helper "pptp" [ 224.984952][T15571] hub 9-0:1.0: USB hub found [ 225.015040][T15571] hub 9-0:1.0: 8 ports detected [ 225.193826][T15583] loop5: detected capacity change from 0 to 1024 [ 225.232666][T15583] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.295437][T15583] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 225.405919][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.481814][T15601] loop6: detected capacity change from 0 to 512 [ 225.491870][T15601] EXT4-fs: Ignoring removed orlov option [ 225.547899][T15601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.562464][T15601] ext4 filesystem being mounted at /308/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.574938][T15612] loop5: detected capacity change from 0 to 164 [ 225.588212][T15601] EXT4-fs error (device loop6): __ext4_new_inode:1279: comm syz.6.4435: failed to insert inode 16: doubly allocated? [ 225.689546][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.832479][T15620] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 225.855809][T15619] loop5: detected capacity change from 0 to 512 [ 225.870363][T15619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 225.892381][T15620] SELinux: failed to load policy [ 225.926622][T15619] EXT4-fs (loop5): orphan cleanup on readonly fs [ 225.958089][T15626] loop6: detected capacity change from 0 to 128 [ 226.043330][T15626] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 226.052490][T15619] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4441: bg 0: block 248: padding at end of block bitmap is not set [ 226.089257][T15619] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.4441: Failed to acquire dquot type 1 [ 226.108683][T15626] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 226.117875][T15626] FAT-fs (loop6): Filesystem has been set read-only [ 226.131446][T15626] syz.6.4443: attempt to access beyond end of device [ 226.131446][T15626] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 226.148699][T15633] serio: Serial port ptm0 [ 226.154576][T15626] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 226.162467][T15626] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 226.171025][T15619] EXT4-fs (loop5): 1 truncate cleaned up [ 226.177281][T15619] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 226.190268][T15626] syz.6.4443: attempt to access beyond end of device [ 226.190268][T15626] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 226.205235][T15619] EXT4-fs error (device loop5): __ext4_remount:6738: comm syz.5.4441: Abort forced by user [ 226.218763][T15619] EXT4-fs (loop5): Remounting filesystem read-only [ 226.226750][T15619] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 226.259405][T15639] pim6reg1: entered promiscuous mode [ 226.264884][T15639] pim6reg1: entered allmulticast mode [ 226.275882][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.379914][T15647] serio: Serial port ptm0 [ 226.407086][T15649] SELinux: failed to load policy [ 226.607682][T15672] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4460'. [ 226.826299][T15680] loop6: detected capacity change from 0 to 164 [ 226.857790][T15680] syz.6.4464: attempt to access beyond end of device [ 226.857790][T15680] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 226.880228][T15680] syz.6.4464: attempt to access beyond end of device [ 226.880228][T15680] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 226.996261][T15688] netlink: 664 bytes leftover after parsing attributes in process `syz.6.4468'. [ 227.038462][T15690] lo speed is unknown, defaulting to 1000 [ 227.049767][T15694] loop6: detected capacity change from 0 to 512 [ 227.058633][T15694] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.077528][T15694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.096135][T15694] ext4 filesystem being mounted at /316/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.195263][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.326777][T15702] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4474'. [ 227.740432][T15698] bond0: entered promiscuous mode [ 227.747202][T15698] bond0: entered allmulticast mode [ 227.755175][T15698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.850465][T15698] bond0 (unregistering): Released all slaves [ 227.957298][T15709] pim6reg1: entered promiscuous mode [ 227.962688][T15709] pim6reg1: entered allmulticast mode [ 228.060921][T15707] lo speed is unknown, defaulting to 1000 [ 228.100899][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 228.100914][ T29] audit: type=1400 audit(1746258506.556:9265): avc: denied { read } for pid=15716 comm="syz.7.4479" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 228.136456][ T29] audit: type=1400 audit(1746258506.596:9266): avc: denied { open } for pid=15716 comm="syz.7.4479" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 228.226682][T15724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4483'. [ 228.230578][ T29] audit: type=1400 audit(1746258506.656:9267): avc: denied { create } for pid=15719 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.257043][ T29] audit: type=1400 audit(1746258506.656:9268): avc: denied { bind } for pid=15719 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.278069][ T29] audit: type=1400 audit(1746258506.656:9269): avc: denied { write } for pid=15719 comm="syz.0.4480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 228.502998][T15735] lo speed is unknown, defaulting to 1000 [ 228.802875][ T29] audit: type=1326 audit(1746258507.256:9270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15768 comm="syz.5.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 228.827595][ T29] audit: type=1326 audit(1746258507.256:9271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15768 comm="syz.5.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 228.878876][ T29] audit: type=1326 audit(1746258507.316:9272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15768 comm="syz.5.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 228.907340][ T29] audit: type=1400 audit(1746258507.366:9273): avc: denied { create } for pid=15768 comm="syz.5.4490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 228.944785][ T29] audit: type=1326 audit(1746258507.366:9274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15768 comm="syz.5.4490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa2dfe969 code=0x7ffc0000 [ 229.396140][T15823] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4501'. [ 229.578069][T15841] block device autoloading is deprecated and will be removed. [ 229.662848][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4514'. [ 229.872872][T15863] loop7: detected capacity change from 0 to 128 [ 229.897910][T15864] loop2: detected capacity change from 0 to 1024 [ 229.913802][T15863] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 229.927612][T15864] EXT4-fs: Ignoring removed orlov option [ 229.974342][T15864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.990560][T15863] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.081046][T15875] netlink: 'syz.6.4523': attribute type 4 has an invalid length. [ 230.106634][T15875] netlink: 'syz.6.4523': attribute type 4 has an invalid length. [ 230.110391][T10979] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.021948][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.039419][T15911] loop5: detected capacity change from 0 to 1024 [ 231.059257][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4538'. [ 231.059995][T15911] EXT4-fs: inline encryption not supported [ 231.085353][T15911] EXT4-fs: Ignoring removed bh option [ 231.129202][T15911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.167998][T15919] loop2: detected capacity change from 0 to 128 [ 231.199071][T15919] syz.2.4537: attempt to access beyond end of device [ 231.199071][T15919] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 231.212394][T15919] Buffer I/O error on dev loop2, logical block 2065, async page read [ 231.254002][T13438] page_pool_release_retry() stalled pool shutdown: id 88, 1 inflight 60 sec [ 231.273090][T15919] syz.2.4537: attempt to access beyond end of device [ 231.273090][T15919] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 231.286423][T15919] Buffer I/O error on dev loop2, logical block 2066, async page read [ 231.332071][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.342878][T15919] syz.2.4537: attempt to access beyond end of device [ 231.342878][T15919] loop2: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 231.357616][T15919] Buffer I/O error on dev loop2, logical block 2067, async page read [ 231.388777][T15919] syz.2.4537: attempt to access beyond end of device [ 231.388777][T15919] loop2: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 231.403444][T15919] Buffer I/O error on dev loop2, logical block 2068, async page read [ 231.450959][T15919] syz.2.4537: attempt to access beyond end of device [ 231.450959][T15919] loop2: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 231.465396][T15919] Buffer I/O error on dev loop2, logical block 2069, async page read [ 231.494295][T15919] syz.2.4537: attempt to access beyond end of device [ 231.494295][T15919] loop2: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 231.507759][T15919] Buffer I/O error on dev loop2, logical block 2070, async page read [ 231.534428][T15919] syz.2.4537: attempt to access beyond end of device [ 231.534428][T15919] loop2: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 231.549202][T15919] Buffer I/O error on dev loop2, logical block 2071, async page read [ 231.613423][T15919] syz.2.4537: attempt to access beyond end of device [ 231.613423][T15919] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 231.626758][T15919] Buffer I/O error on dev loop2, logical block 2072, async page read [ 231.664555][T15919] syz.2.4537: attempt to access beyond end of device [ 231.664555][T15919] loop2: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 231.679307][T15919] Buffer I/O error on dev loop2, logical block 2065, async page read [ 231.772660][T15919] syz.2.4537: attempt to access beyond end of device [ 231.772660][T15919] loop2: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 231.787282][T15919] Buffer I/O error on dev loop2, logical block 2066, async page read [ 232.010401][T15939] SELinux: policydb version 0 does not match my version range 15-34 [ 232.041148][T15939] SELinux: failed to load policy [ 232.161955][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4551'. [ 232.597822][T15962] all: renamed from lo (while UP) [ 232.809904][T15977] bridge_slave_1: left allmulticast mode [ 232.816826][T15977] bridge_slave_1: left promiscuous mode [ 232.822533][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.845444][T15977] $H: (slave bond_slave_0): Releasing backup interface [ 232.853187][T15977] bond_slave_0: left promiscuous mode [ 232.860167][T15977] bond_slave_0: left allmulticast mode [ 232.876021][T15977] $H: (slave bond_slave_1): Releasing backup interface [ 232.886278][T15977] bond_slave_1: left promiscuous mode [ 232.891871][T15977] bond_slave_1: left allmulticast mode [ 232.916445][T15977] team0: Port device team_slave_0 removed [ 232.925570][T15977] team0: Port device team_slave_1 removed [ 232.932973][T15982] netlink: 'syz.0.4565': attribute type 10 has an invalid length. [ 232.951812][T15982] $H: left promiscuous mode [ 232.971857][T15982] 8021q: adding VLAN 0 to HW filter on device $H [ 232.997578][T15982] team0: Port device $H added [ 233.180878][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 233.180894][ T29] audit: type=1400 audit(1746258511.636:9423): avc: denied { create } for pid=15987 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.243269][ T29] audit: type=1400 audit(1746258511.686:9424): avc: denied { setopt } for pid=15987 comm="syz.2.4571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.347181][ T29] audit: type=1400 audit(1746258511.806:9425): avc: denied { create } for pid=16001 comm="syz.6.4576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.392044][ T29] audit: type=1400 audit(1746258511.826:9426): avc: denied { write } for pid=16001 comm="syz.6.4576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.411743][ T29] audit: type=1400 audit(1746258511.826:9427): avc: denied { connect } for pid=16001 comm="syz.6.4576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.431502][ T29] audit: type=1400 audit(1746258511.826:9428): avc: denied { name_connect } for pid=16001 comm="syz.6.4576" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 233.464860][ T29] audit: type=1400 audit(1746258511.906:9429): avc: denied { name_connect } for pid=16001 comm="syz.6.4576" dest=19999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 233.508910][ T29] audit: type=1400 audit(1746258511.966:9430): avc: denied { shutdown } for pid=16001 comm="syz.6.4576" lport=36097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.529975][ T29] audit: type=1400 audit(1746258511.966:9431): avc: denied { setopt } for pid=16001 comm="syz.6.4576" lport=36097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 233.555782][T16008] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4577'. [ 233.593733][ T29] audit: type=1400 audit(1746258512.056:9432): avc: denied { create } for pid=16012 comm="syz.7.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 233.689998][T16019] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4583'. [ 233.737786][T16021] loop5: detected capacity change from 0 to 1024 [ 233.746709][T16021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 233.772238][T16021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.788494][T16021] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 233.809493][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.830146][T16030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4586'. [ 233.842336][T16030] ip6gre1: entered allmulticast mode [ 233.967073][T16040] loop5: detected capacity change from 0 to 1024 [ 233.976904][T16040] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 233.994777][T16044] loop7: detected capacity change from 0 to 164 [ 234.014374][T16044] Unable to read rock-ridge attributes [ 234.026100][T16044] Unable to read rock-ridge attributes [ 234.036516][T16046] vlan2: entered allmulticast mode [ 234.162682][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4597'. [ 234.173113][T16058] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4597'. [ 234.307030][T16066] pim6reg1: entered promiscuous mode [ 234.312444][T16066] pim6reg1: entered allmulticast mode [ 234.347054][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4605'. [ 234.374923][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4605'. [ 234.622430][T16088] lo speed is unknown, defaulting to 1000 [ 234.687936][T16105] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4621'. [ 234.721466][T16108] loop7: detected capacity change from 0 to 736 [ 234.729921][T16108] iso9660: Unknown parameter 'Q{UaND?sM00000000000000000000' [ 234.734955][T16102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.866636][T16118] loop6: detected capacity change from 0 to 2048 [ 234.878540][T16120] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4628'. [ 234.889920][T16120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.905038][T16118] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.919439][T16120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.036982][T16118] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4627: bg 0: block 234: padding at end of block bitmap is not set [ 235.052955][T16118] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1430 with error 117 [ 235.065762][T16118] EXT4-fs (loop6): This should not happen!! Data will be lost [ 235.065762][T16118] [ 235.164881][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.413339][ T8352] page_pool_release_retry() stalled pool shutdown: id 94, 1 inflight 60 sec [ 235.452458][T16142] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.498627][T16142] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.555251][T16142] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.569589][T16157] loop6: detected capacity change from 0 to 256 [ 235.608817][T16142] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.659609][T16142] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.671367][T16142] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.684717][T16142] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.709750][T16142] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.759825][T16168] SELinux: failed to load policy [ 235.965298][T16186] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 235.971880][T16186] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 235.979436][T16186] vhci_hcd vhci_hcd.0: Device attached [ 236.007475][T16186] loop2: detected capacity change from 0 to 512 [ 236.014197][T16186] EXT4-fs: Ignoring removed mblk_io_submit option [ 236.037658][T16186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.082712][T16186] EXT4-fs (loop2): 1 truncate cleaned up [ 236.093950][T16186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.233444][ T8352] usb 5-1: new low-speed USB device number 3 using vhci_hcd [ 236.526817][T16187] vhci_hcd: connection reset by peer [ 236.535466][ T9792] vhci_hcd: stop threads [ 236.539840][ T9792] vhci_hcd: release socket [ 236.545599][ T9792] vhci_hcd: disconnect device [ 237.126573][ T8670] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.273942][T16264] loop6: detected capacity change from 0 to 2048 [ 237.288572][T16264] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.481514][T10820] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.575395][T16276] loop5: detected capacity change from 0 to 1024 [ 237.582471][T16276] EXT4-fs: Ignoring removed oldalloc option [ 237.590371][T16276] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 237.615341][T16276] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.666596][ T9470] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.901049][T16298] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4686'. [ 238.417416][T16333] lo speed is unknown, defaulting to 1000 [ 238.446469][T16334] bond2: entered promiscuous mode [ 238.451635][T16334] bond2: entered allmulticast mode [ 238.459418][T16334] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.477703][T16334] bond2 (unregistering): Released all slaves [ 238.580071][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 238.580087][ T29] audit: type=1400 audit(1746258517.036:9590): avc: denied { read } for pid=16336 comm="syz.6.4701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 238.927202][T16344] netlink: 'syz.7.4704': attribute type 3 has an invalid length. [ 238.938367][ T29] audit: type=1400 audit(1746258517.396:9591): avc: denied { ioctl } for pid=16347 comm="syz.6.4706" path="" dev="cgroup2" ino=364 ioctlcmd=0x2406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 239.003506][ T29] audit: type=1400 audit(1746258517.466:9592): avc: denied { watch watch_reads } for pid=16349 comm="syz.6.4707" path="/369/file0" dev="tmpfs" ino=1946 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 239.046273][ T29] audit: type=1400 audit(1746258517.506:9593): avc: denied { name_bind } for pid=16351 comm="syz.7.4708" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 239.083448][ T29] audit: type=1326 audit(1746258517.516:9594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 239.107085][ T29] audit: type=1326 audit(1746258517.516:9595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 239.130741][ T29] audit: type=1326 audit(1746258517.526:9596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 239.154411][ T29] audit: type=1326 audit(1746258517.526:9597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 239.178207][ T29] audit: type=1326 audit(1746258517.526:9598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 239.201866][ T29] audit: type=1326 audit(1746258517.526:9599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16353 comm="syz.6.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2dccb5e969 code=0x7ffc0000 [ 240.314853][ T9792] bridge_slave_1: left allmulticast mode [ 240.320713][ T9792] bridge_slave_1: left promiscuous mode [ 240.326498][ T9792] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.342494][ T9792] bridge_slave_0: left promiscuous mode [ 240.348373][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.432802][T16356] ================================================================== [ 240.441027][T16356] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 240.448866][T16356] [ 240.451209][T16356] write to 0xffffea00051e8658 of 8 bytes by task 16358 on cpu 0: [ 240.458967][T16356] __filemap_remove_folio+0x1a5/0x2a0 [ 240.464364][T16356] filemap_remove_folio+0x6d/0x1d0 [ 240.469506][T16356] truncate_inode_folio+0x42/0x50 [ 240.474561][T16356] shmem_undo_range+0x244/0xa80 [ 240.479437][T16356] shmem_fallocate+0x799/0x840 [ 240.484240][T16356] vfs_fallocate+0x410/0x450 [ 240.488864][T16356] __x64_sys_fallocate+0x7a/0xd0 [ 240.493846][T16356] x64_sys_call+0x2b88/0x2fb0 [ 240.498558][T16356] do_syscall_64+0xd0/0x1a0 [ 240.503085][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.509268][T16356] [ 240.511609][T16356] read to 0xffffea00051e8658 of 8 bytes by task 16356 on cpu 1: [ 240.519253][T16356] folio_mapping+0xa1/0x120 [ 240.523794][T16356] evict_folios+0x2986/0x33d0 [ 240.528650][T16356] try_to_shrink_lruvec+0x45a/0x7e0 [ 240.533857][T16356] shrink_lruvec+0x22e/0x1a40 [ 240.538566][T16356] shrink_node+0x686/0x2110 [ 240.543161][T16356] do_try_to_free_pages+0x3f6/0xcd0 [ 240.548382][T16356] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 240.554378][T16356] try_charge_memcg+0x3ab/0x870 [ 240.559420][T16356] obj_cgroup_charge_pages+0xb7/0x1a0 [ 240.564808][T16356] __memcg_kmem_charge_page+0x9f/0x170 [ 240.570449][T16356] __alloc_frozen_pages_noprof+0x188/0x360 [ 240.576266][T16356] alloc_pages_mpol+0xb3/0x250 [ 240.581047][T16356] alloc_pages_noprof+0x90/0x130 [ 240.586004][T16356] __vmalloc_node_range_noprof+0x6a4/0xdf0 [ 240.591820][T16356] __kvmalloc_node_noprof+0x2f3/0x4d0 [ 240.597204][T16356] ip_set_alloc+0x1f/0x30 [ 240.601546][T16356] hash_netiface_create+0x282/0x740 [ 240.606754][T16356] ip_set_create+0x3c9/0x960 [ 240.611354][T16356] nfnetlink_rcv_msg+0x4c3/0x590 [ 240.616309][T16356] netlink_rcv_skb+0x120/0x220 [ 240.621140][T16356] nfnetlink_rcv+0x16b/0x1690 [ 240.625828][T16356] netlink_unicast+0x59e/0x670 [ 240.630619][T16356] netlink_sendmsg+0x58b/0x6b0 [ 240.635414][T16356] __sock_sendmsg+0x142/0x180 [ 240.640210][T16356] ____sys_sendmsg+0x31e/0x4e0 [ 240.644997][T16356] ___sys_sendmsg+0x17b/0x1d0 [ 240.649723][T16356] __x64_sys_sendmsg+0xd4/0x160 [ 240.654579][T16356] x64_sys_call+0x2999/0x2fb0 [ 240.659313][T16356] do_syscall_64+0xd0/0x1a0 [ 240.663838][T16356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.669750][T16356] [ 240.672104][T16356] value changed: 0xffff88814b04d078 -> 0x0000000000000000 [ 240.679225][T16356] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 240.681556][T16356] Reported by Kernel Concurrency Sanitizer on: [ 240.687709][T16356] CPU: 1 UID: 0 PID: 16356 Comm: syz.5.4710 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(voluntary) [ 240.700300][T16356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.710364][T16356] ================================================================== [ 240.839500][ T9792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.849311][ T9792] bond0 (unregistering): Released all slaves [ 240.869405][T16392] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 240.915642][ T9792] tipc: Disabling bearer [ 240.920956][ T9792] tipc: Left network mode [ 240.976853][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.984474][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.056034][ T8355] lo speed is unknown, defaulting to 1000 [ 241.061871][ T8355] infiniband syz0: ib_query_port failed (-19) [ 241.253281][ T8352] usb 5-1: enqueue for inactive port 0 [ 241.261520][ T8352] usb 5-1: enqueue for inactive port 0 [ 241.333510][ T8352] vhci_hcd: vhci_device speed not set [ 241.371054][ T9792] IPVS: stop unused estimator thread 0... [ 241.417306][ T9792] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.475930][ T9792] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.534875][ T9792] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.575884][ T9792] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.647790][ T9792] bridge_slave_0: left promiscuous mode [ 241.653642][ T9792] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.746538][ T9792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.757021][ T9792] bond0 (unregistering): Released all slaves [ 241.794535][ T9792] tipc: Disabling bearer [ 241.799969][ T9792] tipc: Left network mode [ 241.822789][ T9792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.830301][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.837905][ T9792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.846610][ T9792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.857580][ T9792] veth1_macvtap: left promiscuous mode [ 241.863235][ T9792] veth1_vlan: left promiscuous mode [ 241.868579][ T9792] veth0_vlan: left promiscuous mode [ 241.928441][ T9792] team0 (unregistering): Port device team_slave_1 removed [ 241.937994][ T9792] team0 (unregistering): Port device team_slave_0 removed [ 242.597976][T14208] bridge_slave_1: left allmulticast mode [ 242.603827][T14208] bridge_slave_1: left promiscuous mode [ 242.609539][T14208] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.617263][T14208] bridge_slave_0: left allmulticast mode [ 242.622978][T14208] bridge_slave_0: left promiscuous mode [ 242.628890][T14208] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.655047][T14208] bond0 (unregistering): (slave gretap1): Releasing active interface [ 242.696420][T14208] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.705492][T14208] bond_slave_0: left promiscuous mode [ 242.711497][T14208] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.720371][T14208] bond_slave_1: left promiscuous mode [ 242.726278][T14208] $H (unregistering): Released all slaves [ 242.734791][T14208] bond0 (unregistering): Released all slaves [ 242.792993][T14208] hsr_slave_0: left promiscuous mode [ 242.799933][T14208] hsr_slave_1: left promiscuous mode [ 243.100596][T14208] IPVS: stop unused estimator thread 0... [ 243.596431][T14208] team0: Port device $H removed [ 243.602249][T14208] $H (unregistering): Released all slaves [ 243.611543][T14208] bond1 (unregistering): Released all slaves [ 245.204923][T14208] tipc: Left network mode [ 245.226080][T14208] hsr_slave_0: left promiscuous mode [ 245.231742][T14208] hsr_slave_1: left promiscuous mode [ 245.264897][ T9792] smc: removing ib device syz2 [ 245.578705][T14208] IPVS: stop unused estimator thread 0...