last executing test programs: 4m30.440029388s ago: executing program 0 (id=211): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="6c010000100013072cbd7000fcdbdf2d0000000000000000000000000000d6da20010000000002000000000000000001000000204e2100020a0000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe3200000020010000000000000000000000000001400000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000050000000000000043050000000000000500000000000000ffffffffffffff7f0000000000000000000000000000000000000000000000000000000028bd7000003500000a000400000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000217d66d38547aa140db8a200000000c538c7cb7a1c0004"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x150, 0x1403, 0x200, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nr0\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x4040090) 4m30.410644231s ago: executing program 0 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x82e9ce810ab34d4c, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000380)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 4m30.331311119s ago: executing program 0 (id=215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 4m30.268551465s ago: executing program 0 (id=218): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 4m30.268053385s ago: executing program 0 (id=219): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0xa64c2a520a4acd8f, 0x2000) msgsnd(r0, &(0x7f00000005c0)=ANY=[], 0x8, 0x800) socket$inet6(0xa, 0x5, 0x1) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000000)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) 4m29.996277292s ago: executing program 0 (id=228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 4m29.985394002s ago: executing program 32 (id=228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0100001000130780fffffffcdbdf252001000000000000000000000000000020010000000000000000000000000001000000004e210002000000006c000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000000fe32000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd7000003500000a000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 4m27.248280172s ago: executing program 5 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 4m27.207200576s ago: executing program 5 (id=273): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x80}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 4m26.246825541s ago: executing program 2 (id=290): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 4m26.227614543s ago: executing program 2 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000580)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) 4m26.174775078s ago: executing program 2 (id=295): unshare(0x22020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000200adaa1000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x3, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) 4m26.133399532s ago: executing program 2 (id=299): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={r0, 0x7, 0x7, 0x1}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x8a, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@usrjquota}, {@acl}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@init_itable_val={'init_itable', 0x3d, 0x100}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}]}, 0x4, 0x44d, &(0x7f0000000900)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) unshare(0x20060400) syz_clone(0x8400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 4m26.004638515s ago: executing program 2 (id=302): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fadvise64(r4, 0x80, 0x2, 0x1) 4m25.889467266s ago: executing program 5 (id=306): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@name={0x1e, 0x2, 0x3, {{0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 4m25.868769258s ago: executing program 33 (id=306): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@name={0x1e, 0x2, 0x3, {{0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 4m25.552780059s ago: executing program 2 (id=309): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 4m25.520883052s ago: executing program 34 (id=309): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 3m43.809000213s ago: executing program 7 (id=1199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 3m43.7460031s ago: executing program 7 (id=1202): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r1, 0x25, 0x2, @void}, 0x10) 3m43.650918679s ago: executing program 7 (id=1204): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x924}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x40}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0xe4ff, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfb, {0x0, 0x0, 0x0, r4, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x5, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 3m43.530718731s ago: executing program 7 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) 3m43.501672584s ago: executing program 7 (id=1208): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1fff}]}) eventfd(0x0) 3m43.182422755s ago: executing program 7 (id=1213): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e066020108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 3m43.099433513s ago: executing program 35 (id=1213): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e066020108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 3m33.867610133s ago: executing program 8 (id=1407): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) 3m33.777653032s ago: executing program 8 (id=1410): bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3m32.871202981s ago: executing program 8 (id=1419): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000000, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3m32.752422733s ago: executing program 8 (id=1423): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) 3m32.712189527s ago: executing program 8 (id=1424): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xd, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) rt_sigpending(0x0, 0x0) 3m29.903297574s ago: executing program 8 (id=1492): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) r3 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 3m29.872508277s ago: executing program 36 (id=1492): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x14) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000040100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000001d80), &(0x7f0000001d40)=r1}, 0x20) r3 = getpid() ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) r4 = syz_pidfd_open(r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1004000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 1.796065493s ago: executing program 6 (id=5678): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4010, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x388, 0x41d9fda7) 1.757320897s ago: executing program 6 (id=5680): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) 1.486222233s ago: executing program 9 (id=5684): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x4e, 0x7) syz_read_part_table(0x593, &(0x7f00000005c0)="$eJzs0r1LK2kUB+A3A5c0e4lcLli4hWCwigqx0CIpRGJIY0RcsbAWLLQQLCwkEq39+AcUv0BsxD6lGEEUYiUpxXpBsUmVZdfZxmplUdnleZrhPefMHF5+E/hPi8Lv7XY7EUJoJ9//9m+nhbFS98TI5FQIiTAbQij8+stfnUQ88fdXz+NzOT6XktnG/vXo82nHTc9dPX0Yxf1aFMJaCGHh4Sj1b+/G/99Z/jK1vrFU3FzJz98XVx8H5/oKXVuFxZ2hg1xlujM3E/9Ytehz9qcbw8e37fLT7vf+b/VGK3sVz2USH7Ofr/U2/72f1Wa1Nd57sjyQ+dG8qGzHub/IHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GBn+cvU+sZScXMlP39fXH0cnOsrdG0VFneGDnKV6c7cTPQ6V4s+Z3+6MXx82y4/7X7v/1ZvtLJX8Vwm8TH7+Vpv89/7WW1WW+O9J8sDmR/Ni8p2nPuL/AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf6gwVuqeGJmcCiERZkMIo1HH0Z/1dvK1n4jnzuNnOa6XktnG/vXo82nHTc9dPX04EddrUQhrIYSFh6PUp1+Gd/sjAAD///tch0s=") 1.377125594s ago: executing program 3 (id=5686): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) 1.2149421s ago: executing program 6 (id=5687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x200007, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x45, @loopback, 0x1}, 0x1c) socket$inet6(0xa, 0x2, 0x0) 1.159493206s ago: executing program 6 (id=5688): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) connect$pppl2tp(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x2, 0x8, 0x7ffc1ffb}]}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, 0x0, 0x0) 1.131630089s ago: executing program 6 (id=5689): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x5d032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, 0x0) socket(0x1d, 0x2, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x2000000, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 1.078318023s ago: executing program 4 (id=5690): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000280)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nombcache}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8041, 0x1c3) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x25, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x10) kexec_load(0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180), 0x10) 1.070262484s ago: executing program 6 (id=5691): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 809.7538ms ago: executing program 4 (id=5692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='qdisc_create\x00', r6}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 805.26202ms ago: executing program 1 (id=5694): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) close(r2) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 753.408446ms ago: executing program 1 (id=5695): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000007c0)={[{@nodioread_nolock}, {@jqfmt_vfsold}, {@noauto_da_alloc}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47a, &(0x7f0000000200)="$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") socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 727.586778ms ago: executing program 1 (id=5696): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1}) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x4}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 699.850581ms ago: executing program 4 (id=5697): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000300)="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", 0xfc) 693.671022ms ago: executing program 1 (id=5698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xf, r2, 0x400006, 0x0) ptrace$cont(0x20, r2, 0x0, 0x6) 647.227586ms ago: executing program 4 (id=5699): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) 646.309066ms ago: executing program 1 (id=5700): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 483.647633ms ago: executing program 1 (id=5701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 483.498892ms ago: executing program 9 (id=5702): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) getpid() r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240001052abd7000fedbdf250900000006000300000000000600040000000000060003000000000006000400000000000600040000000000060003000000000006000300000000000600030017c8"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) 483.304673ms ago: executing program 3 (id=5703): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffa}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 446.655586ms ago: executing program 3 (id=5704): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) gettid() openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 406.41107ms ago: executing program 3 (id=5705): unshare(0x8040480) unshare(0x2a020480) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x5, 0x4, 0x4, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, r0, 0x4, 0x3}, 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000700)='./file1\x00', 0xa0c416, &(0x7f0000000500)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ee303030303032fd33a1ddfe6717c3d234e02f30303030302c6e6f646f74732cb7f973636172642c6e66733d6e6f73", @ANYRES16, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff3030303030313737373737373737f9909fdfd4291a9ccfbbdb0556c0f39fdb37372c004c0f1208ec0c34b7df4ba1b5e6b76697434de7574db9bcaef6a61212c3f260bebc7ac5b1b113e1119b83f1cf9f686b3dca22c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7acab1c2e7b6a547f8120c12a14b06fb302b8adb87fa67ab868940868fee39f0796736ccd4adf62186a216263c1322da47b156791f49bf9e904cf364616ba0d1bf1348f2e7305e9f22d6495da942b5034e13663b99da29b77f44729d2d624e275c0a7bd51391746002809f9ccbc48c93edf96a9ac580d0821f5c4caa4780ac2b7947ff520b17e3de63455fc5162ed9dd00f909ec0444b769ae353ef7f79bd4ad30ac1bf3def59632a6a7f6a069774c022bb68bb06c4204677147fda0e2825b3b223782ddc9a5762d74f50933517388aa6508249ce", @ANYRESDEC, @ANYRES16], 0x5, 0x29d, &(0x7f0000001bc0)="$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") mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) sendto$inet(r1, 0x0, 0x0, 0x2000077d, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='sit0\x00', 0x10) sendmsg$inet(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="d2", 0x200000c1}], 0x1}, 0x60) 300.56567ms ago: executing program 9 (id=5706): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 264.896104ms ago: executing program 3 (id=5707): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/117, 0x75}], 0x1}, 0xfffffffe}], 0x1, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 241.911916ms ago: executing program 4 (id=5708): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b707000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 235.939777ms ago: executing program 9 (id=5709): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x21) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x21) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0xdc, 0x1, 0x3, 0xfffffffffffffff9, 0x3, 0x3e, 0x1001, 0x101, 0x40, 0x2001df, 0x0, 0x3b, 0x38, 0x5f, 0x27, 0x5, 0xff}}, 0x40) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) 199.616051ms ago: executing program 9 (id=5710): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000300)="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", 0xfc) 70.188673ms ago: executing program 3 (id=5711): syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') r0 = socket(0x400000000010, 0x3, 0x6) sendmsg$nl_route_sched(r0, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) socket(0x17, 0x1, 0x7ff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 25.149947ms ago: executing program 9 (id=5712): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, 0x0, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0xc, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=5713): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): t(1760836684.876:7991): avc: denied { read } for pid=15539 comm="syz.6.4332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 246.720887][T15548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4335'. [ 247.011974][ T29] audit: type=1326 audit(1760836685.336:7992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 247.035575][ T29] audit: type=1326 audit(1760836685.336:7993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 247.059093][ T29] audit: type=1326 audit(1760836685.336:7994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 247.082594][ T29] audit: type=1326 audit(1760836685.336:7995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 247.106144][ T29] audit: type=1326 audit(1760836685.336:7996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 247.129635][ T29] audit: type=1326 audit(1760836685.336:7997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 247.153139][ T29] audit: type=1326 audit(1760836685.336:7998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81cb90f003 code=0x7ffc0000 [ 247.176526][ T29] audit: type=1326 audit(1760836685.336:7999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81cb90da7f code=0x7ffc0000 [ 247.208255][ T29] audit: type=1326 audit(1760836685.346:8000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.1.4339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f81cb90f057 code=0x7ffc0000 [ 247.377943][T15577] bridge: RTM_NEWNEIGH with invalid ether address [ 247.583569][T15583] netlink: 'syz.9.4349': attribute type 27 has an invalid length. [ 247.592082][T15583] netdevsi: left promiscuous mode [ 247.601540][T15583] veth2: left promiscuous mode [ 247.606414][T15583] veth2: left allmulticast mode [ 247.623832][T15583] veth4: left promiscuous mode [ 247.628635][T15583] veth4: left allmulticast mode [ 247.678262][T15594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4354'. [ 247.746943][T15594] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15594 comm=syz.4.4354 [ 247.762022][T15598] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 247.768609][T15598] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 247.776209][T15598] vhci_hcd vhci_hcd.0: Device attached [ 247.802859][T15599] vhci_hcd: connection closed [ 247.803060][ T31] vhci_hcd: stop threads [ 247.812147][ T31] vhci_hcd: release socket [ 247.816571][ T31] vhci_hcd: disconnect device [ 248.061584][T15614] loop4: detected capacity change from 0 to 2048 [ 248.073478][T15614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 248.287662][T15614] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 248.302573][T15614] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 248.315040][T15614] EXT4-fs (loop4): This should not happen!! Data will be lost [ 248.315040][T15614] [ 248.324706][T15614] EXT4-fs (loop4): Total free blocks count 0 [ 248.330695][T15614] EXT4-fs (loop4): Free/Dirty block details [ 248.336620][T15614] EXT4-fs (loop4): free_blocks=2415919104 [ 248.342517][T15614] EXT4-fs (loop4): dirty_blocks=8208 [ 248.347697][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4363'. [ 248.348003][T15614] EXT4-fs (loop4): Block reservation details [ 248.356905][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4363'. [ 248.362862][T15614] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 248.377983][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4363'. [ 248.387078][T15619] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4363'. [ 248.442387][ T3949] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 249.493172][T15677] loop6: detected capacity change from 0 to 512 [ 249.524402][T15677] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.547571][T15677] ext4 filesystem being mounted at /763/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.621471][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.012162][ T3965] Bluetooth: hci0: Frame reassembly failed (-84) [ 250.356693][T15743] _cac speed is unknown, defaulting to 1000 [ 250.363970][T15743] lo speed is unknown, defaulting to 1000 [ 250.496210][T15753] netlink: 'syz.4.4418': attribute type 10 has an invalid length. [ 250.540854][T15758] __nla_validate_parse: 2 callbacks suppressed [ 250.540877][T15758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4419'. [ 250.654218][T15763] loop3: detected capacity change from 0 to 128 [ 250.670708][T15763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 250.678624][T15763] FAT-fs (loop3): Filesystem has been set read-only [ 250.685960][T15763] bio_check_eod: 26290 callbacks suppressed [ 250.685976][T15763] syz.3.4420: attempt to access beyond end of device [ 250.685976][T15763] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 250.705879][T15763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 250.713742][T15763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 250.722193][T15763] syz.3.4420: attempt to access beyond end of device [ 250.722193][T15763] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.735812][T15763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 250.745559][T15763] syz.3.4420: attempt to access beyond end of device [ 250.745559][T15763] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 250.759520][T15763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 250.767525][T15763] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 250.775753][T15763] syz.3.4420: attempt to access beyond end of device [ 250.775753][T15763] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 250.790109][T15765] syz.3.4420: attempt to access beyond end of device [ 250.790109][T15765] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 250.803400][T15765] buffer_io_error: 26286 callbacks suppressed [ 250.803412][T15765] Buffer I/O error on dev loop3, logical block 2065, async page read [ 250.819976][T15765] syz.3.4420: attempt to access beyond end of device [ 250.819976][T15765] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 250.833304][T15765] Buffer I/O error on dev loop3, logical block 2066, async page read [ 250.841490][T15765] syz.3.4420: attempt to access beyond end of device [ 250.841490][T15765] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 250.854765][T15765] Buffer I/O error on dev loop3, logical block 2067, async page read [ 250.862882][T15765] syz.3.4420: attempt to access beyond end of device [ 250.862882][T15765] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 250.876197][T15765] Buffer I/O error on dev loop3, logical block 2068, async page read [ 250.885262][T15769] xt_policy: output policy not valid in PREROUTING and INPUT [ 250.890732][T15765] syz.3.4420: attempt to access beyond end of device [ 250.890732][T15765] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 250.906027][T15765] Buffer I/O error on dev loop3, logical block 2069, async page read [ 250.914362][T15765] syz.3.4420: attempt to access beyond end of device [ 250.914362][T15765] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 250.927690][T15765] Buffer I/O error on dev loop3, logical block 2070, async page read [ 250.935923][T15765] Buffer I/O error on dev loop3, logical block 2071, async page read [ 250.944077][T15765] Buffer I/O error on dev loop3, logical block 2072, async page read [ 250.952497][T15765] Buffer I/O error on dev loop3, logical block 2065, async page read [ 250.960646][T15765] Buffer I/O error on dev loop3, logical block 2066, async page read [ 251.415584][T15781] netlink: 'syz.1.4426': attribute type 27 has an invalid length. [ 251.432271][T15781] veth0_vlan: left allmulticast mode [ 251.437811][T15781] bond5: left promiscuous mode [ 251.442620][T15781] gre2: left promiscuous mode [ 251.447604][T15781] veth7: left promiscuous mode [ 251.452541][T15781] ip6erspan0: left promiscuous mode [ 251.458073][T15781] veth8: left promiscuous mode [ 251.462858][T15781] veth8: left allmulticast mode [ 251.467957][T15781] veth10: left promiscuous mode [ 251.472836][T15781] veth10: left allmulticast mode [ 251.478324][T15781] geneve0: left promiscuous mode [ 251.483376][T15781] geneve0: left allmulticast mode [ 251.622142][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 251.622157][ T29] audit: type=1326 audit(1760836689.956:8172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 251.651999][ T29] audit: type=1326 audit(1760836689.956:8173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15779 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 251.742730][T15794] SELinux: ebitmap: truncated map [ 251.748918][T15794] SELinux: failed to load policy [ 251.777238][ T29] audit: type=1400 audit(1760836689.966:8174): avc: denied { bind } for pid=15788 comm="syz.9.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 251.796737][ T29] audit: type=1400 audit(1760836689.966:8175): avc: denied { name_bind } for pid=15788 comm="syz.9.4430" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 251.818676][ T29] audit: type=1400 audit(1760836689.966:8176): avc: denied { node_bind } for pid=15788 comm="syz.9.4430" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 251.840435][ T29] audit: type=1400 audit(1760836690.066:8177): avc: denied { load_policy } for pid=15792 comm="syz.3.4431" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 251.870514][T15802] loop3: detected capacity change from 0 to 2048 [ 251.877213][ T29] audit: type=1326 audit(1760836690.166:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 251.900849][ T29] audit: type=1326 audit(1760836690.166:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 251.924703][ T29] audit: type=1326 audit(1760836690.166:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 251.948225][ T29] audit: type=1326 audit(1760836690.166:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15798 comm="syz.1.4435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 251.976289][T15802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.988723][T15802] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.041930][ T3501] Bluetooth: hci0: command 0x1003 tx timeout [ 252.048954][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 252.090243][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.296711][T15839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4450'. [ 252.817824][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4460'. [ 252.831151][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4460'. [ 252.958169][ T3949] Bluetooth: hci0: Frame reassembly failed (-84) [ 253.630248][T15897] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 253.949377][T15925] loop3: detected capacity change from 0 to 128 [ 253.958018][T15925] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 253.963822][T15929] netlink: 'syz.4.4484': attribute type 10 has an invalid length. [ 253.970550][T15925] ext4 filesystem being mounted at /372/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.002722][T15929] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.012239][T11134] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.012539][T15929] bond0: (slave team0): Enslaving as an active interface with an up link [ 254.402036][ T3948] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 254.413228][ T3948] ip6gretap1 (unregistering): left allmulticast mode [ 254.435691][ T3948] bond4 (unregistering): (slave geneve2): Releasing active interface [ 254.485082][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4493'. [ 254.643732][ T3948] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.653210][ T3948] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.662585][ T3948] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 254.671290][ T3948] bond0 (unregistering): Released all slaves [ 254.679372][ T3948] bond1 (unregistering): Released all slaves [ 254.687963][ T3948] bond2 (unregistering): Released all slaves [ 254.696252][ T3948] bond3 (unregistering): Released all slaves [ 254.704643][ T3948] bond4 (unregistering): Released all slaves [ 254.720137][T15951] 8021q: adding VLAN 0 to HW filter on device bond10 [ 254.731359][T15956] vlan0: entered allmulticast mode [ 254.736532][T15956] bond10: entered allmulticast mode [ 254.748147][ T3948] IPVS: stopping master sync thread 6991 ... [ 254.772679][ T3948] team0 (unregistering): Port device team_slave_1 removed [ 254.781792][ T3948] team0 (unregistering): Port device team_slave_0 removed [ 254.917918][T15974] _cac speed is unknown, defaulting to 1000 [ 254.933184][T15974] lo speed is unknown, defaulting to 1000 [ 254.976533][T15984] loop3: detected capacity change from 0 to 512 [ 254.991740][T15984] EXT4-fs (loop3): orphan cleanup on readonly fs [ 255.001983][ T3501] Bluetooth: hci0: command 0x1003 tx timeout [ 255.003695][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 255.008716][T15984] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4513: bg 0: block 248: padding at end of block bitmap is not set [ 255.042863][T15984] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4513: Failed to acquire dquot type 1 [ 255.060135][T15984] EXT4-fs (loop3): 1 truncate cleaned up [ 255.066423][T15984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.083423][ T3948] IPVS: stop unused estimator thread 0... [ 255.090727][T15980] _cac speed is unknown, defaulting to 1000 [ 255.105951][T15980] lo speed is unknown, defaulting to 1000 [ 255.107856][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.514745][T16047] syzkaller0: entered promiscuous mode [ 256.520510][T16047] syzkaller0: entered allmulticast mode [ 256.618620][T16053] _cac speed is unknown, defaulting to 1000 [ 256.631793][T16053] lo speed is unknown, defaulting to 1000 [ 256.685605][ T3968] Bluetooth: hci0: Frame reassembly failed (-84) [ 257.133601][T16064] loop3: detected capacity change from 0 to 512 [ 257.140310][T16064] EXT4-fs: Ignoring removed i_version option [ 257.146375][T16064] EXT4-fs: Ignoring removed bh option [ 257.164752][T16064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.193881][T16064] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.335977][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.214494][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 258.214509][ T29] audit: type=1400 audit(1760836696.546:8491): avc: denied { module_load } for pid=16089 comm="syz.4.4540" path="/917/bus" dev="tmpfs" ino=4790 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 258.245344][T16090] Invalid ELF header magic: != ELF [ 258.761999][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 259.133707][ T29] audit: type=1326 audit(1760836697.466:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16229 comm="syz.6.4554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d6e97efc9 code=0x0 [ 259.245923][T16242] _cac speed is unknown, defaulting to 1000 [ 259.253258][T16242] lo speed is unknown, defaulting to 1000 [ 259.328179][T16247] _cac speed is unknown, defaulting to 1000 [ 259.335027][T16247] lo speed is unknown, defaulting to 1000 [ 260.056337][T16267] _cac speed is unknown, defaulting to 1000 [ 260.064273][T16267] lo speed is unknown, defaulting to 1000 [ 260.592890][T16300] tipc: Bearer : already 2 bearers with priority 10 [ 260.600240][T16300] tipc: Bearer : trying with adjusted priority [ 260.613825][T16300] tipc: New replicast peer: 255.255.255.83 [ 260.619720][T16300] tipc: Enabled bearer , priority 9 [ 260.807068][T16315] loop6: detected capacity change from 0 to 1024 [ 260.839147][T16315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.875471][ T29] audit: type=1400 audit(1760836699.206:8493): avc: denied { rmdir } for pid=16314 comm="syz.6.4574" name="file1" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.925288][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.245212][T16345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4582'. [ 261.472041][T16354] _cac speed is unknown, defaulting to 1000 [ 261.495231][T16354] lo speed is unknown, defaulting to 1000 [ 261.664490][ T29] audit: type=1326 audit(1760836699.996:8494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16378 comm="syz.1.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 261.665604][T16380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=16380 comm=syz.4.4593 [ 261.695579][ T29] audit: type=1326 audit(1760836699.996:8495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16378 comm="syz.1.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 261.724284][ T29] audit: type=1326 audit(1760836700.016:8496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16378 comm="syz.1.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 261.748162][ T29] audit: type=1326 audit(1760836700.016:8497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16378 comm="syz.1.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 261.771826][ T29] audit: type=1326 audit(1760836700.016:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16378 comm="syz.1.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 261.803209][ T29] audit: type=1326 audit(1760836700.126:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16378 comm="syz.1.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 261.826692][ T29] audit: type=1326 audit(1760836700.126:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16378 comm="syz.1.4596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 261.986336][T16395] _cac speed is unknown, defaulting to 1000 [ 262.003053][T16395] lo speed is unknown, defaulting to 1000 [ 262.300042][T16400] sch_fq: defrate 4294967295 ignored. [ 262.482814][T16406] _cac speed is unknown, defaulting to 1000 [ 262.521623][T16416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.541599][T16406] lo speed is unknown, defaulting to 1000 [ 262.552028][T16416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.561030][T16416] xt_hashlimit: max too large, truncated to 1048576 [ 262.691877][T16428] netlink: 'syz.4.4615': attribute type 1 has an invalid length. [ 262.714980][T16428] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.740424][T16428] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.747881][T16428] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 262.759150][T16428] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 262.838949][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4617'. [ 262.851179][T16433] bridge0: port 1(batadv1) entered blocking state [ 262.857824][T16433] bridge0: port 1(batadv1) entered disabled state [ 262.864524][T16433] batadv1: entered allmulticast mode [ 262.870715][T16433] batadv1: entered promiscuous mode [ 263.010579][T16446] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4622'. [ 263.147233][T16460] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4624'. [ 263.351891][ T3965] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 263.361312][ T3965] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 263.476451][T16467] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.543536][T16467] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.594379][T16467] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.653379][T16467] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.702901][ T3948] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.716062][ T3948] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.772688][ T3949] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.797570][ T3949] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.855131][T16477] _cac speed is unknown, defaulting to 1000 [ 263.866943][T16477] lo speed is unknown, defaulting to 1000 [ 263.912835][T16482] bridge: RTM_NEWNEIGH with invalid ether address [ 264.090088][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 264.090100][ T29] audit: type=1326 audit(1760836702.416:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.4.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 264.149423][ T29] audit: type=1326 audit(1760836702.456:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.4.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 264.205012][ T29] audit: type=1326 audit(1760836702.536:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.4.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 264.228766][ T29] audit: type=1326 audit(1760836702.536:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16488 comm="syz.4.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 264.272253][T16480] _cac speed is unknown, defaulting to 1000 [ 264.286680][T16480] lo speed is unknown, defaulting to 1000 [ 264.421518][T16497] _cac speed is unknown, defaulting to 1000 [ 264.434908][T16497] lo speed is unknown, defaulting to 1000 [ 264.736336][T16508] netlink: 'syz.4.4642': attribute type 1 has an invalid length. [ 264.846221][T16508] 8021q: adding VLAN 0 to HW filter on device bond12 [ 264.902119][T16515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16515 comm=syz.4.4642 [ 265.003775][T16519] loop3: detected capacity change from 0 to 4096 [ 265.029151][T16514] bond12: (slave ip6gretap0): making interface the new active one [ 265.039836][T16519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.060943][T16514] bond12: (slave ip6gretap0): Enslaving as an active interface with an up link [ 265.176639][T16526] _cac speed is unknown, defaulting to 1000 [ 265.188111][T16526] lo speed is unknown, defaulting to 1000 [ 265.270361][ T29] audit: type=1400 audit(1760836703.615:8546): avc: denied { cmd } for pid=16530 comm="syz.4.4648" path="/939/file0" dev="tmpfs" ino=4903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 265.341709][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.387264][T16536] netlink: 'syz.3.4650': attribute type 1 has an invalid length. [ 265.404009][T16536] bond1: entered promiscuous mode [ 265.409421][T16536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.426986][T16536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.434427][T16536] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 265.445104][T16536] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 265.459725][T16536] bond1: (slave wireguard0): making interface the new active one [ 265.467619][T16536] wireguard0: entered promiscuous mode [ 265.475739][T16540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.482975][T16540] IPv6: NLM_F_CREATE should be set when creating new route [ 265.490220][T16540] IPv6: NLM_F_CREATE should be set when creating new route [ 265.544784][T16536] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 265.574157][T16540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.644902][T16540] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 265.667073][T16548] netlink: 'syz.1.4654': attribute type 1 has an invalid length. [ 265.677156][T16540] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 265.711796][T16548] 8021q: adding VLAN 0 to HW filter on device bond10 [ 265.726167][T16554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4654'. [ 265.767784][T16554] bond10 (unregistering): Released all slaves [ 265.781544][T16555] syzkaller0: entered allmulticast mode [ 265.787521][T16555] syzkaller0: entered promiscuous mode [ 265.795762][T16555] syzkaller0 (unregistering): left allmulticast mode [ 265.802584][T16555] syzkaller0 (unregistering): left promiscuous mode [ 265.826738][ T29] audit: type=1400 audit(1760836704.182:8547): avc: denied { ioctl } for pid=16562 comm="syz.3.4660" path="socket:[56001]" dev="sockfs" ino=56001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 265.977728][T16575] netlink: 'syz.4.4665': attribute type 12 has an invalid length. [ 266.073624][T16582] netlink: 'syz.3.4668': attribute type 17 has an invalid length. [ 266.081517][T16582] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4668'. [ 266.178473][T16595] loop9: detected capacity change from 0 to 164 [ 266.197275][T16595] bio_check_eod: 51106 callbacks suppressed [ 266.197292][T16595] syz.9.4674: attempt to access beyond end of device [ 266.197292][T16595] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 266.215461][T16598] netlink: 'syz.6.4673': attribute type 1 has an invalid length. [ 266.224896][T16598] netlink: 'syz.6.4673': attribute type 4 has an invalid length. [ 266.232649][T16598] netlink: 15334 bytes leftover after parsing attributes in process `syz.6.4673'. [ 266.241041][T16595] syz.9.4674: attempt to access beyond end of device [ 266.241041][T16595] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 266.277941][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4677'. [ 266.292025][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4677'. [ 266.345215][T16608] syzkaller0: entered promiscuous mode [ 266.350747][T16608] syzkaller0: entered allmulticast mode [ 266.372169][ T29] audit: type=1326 audit(1760836704.748:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16611 comm="syz.4.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 266.372859][T16612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4682'. [ 266.395832][ T29] audit: type=1326 audit(1760836704.748:8549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16611 comm="syz.4.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 266.428603][ T29] audit: type=1326 audit(1760836704.748:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16611 comm="syz.4.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 266.428747][T16612] bond5: (slave batadv0): Releasing active interface [ 266.452159][ T29] audit: type=1326 audit(1760836704.748:8551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16611 comm="syz.4.4682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 266.488263][T16614] netlink: 'syz.9.4683': attribute type 1 has an invalid length. [ 266.496148][T16614] netlink: 5452 bytes leftover after parsing attributes in process `syz.9.4683'. [ 266.551517][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4686'. [ 266.566895][T16620] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4686'. [ 266.660645][T16624] _cac speed is unknown, defaulting to 1000 [ 266.667882][T16624] lo speed is unknown, defaulting to 1000 [ 266.915916][T16646] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4695'. [ 267.031826][T16654] loop3: detected capacity change from 0 to 512 [ 267.038902][T16654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.052630][T16654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 267.080190][T16654] EXT4-fs (loop3): 1 truncate cleaned up [ 267.098452][T16654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.348805][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.369071][T16666] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4702'. [ 267.845571][T16675] _cac speed is unknown, defaulting to 1000 [ 267.853629][T16675] lo speed is unknown, defaulting to 1000 [ 267.956899][T16691] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.022007][T16691] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.116646][T16691] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.128980][T16690] _cac speed is unknown, defaulting to 1000 [ 268.138828][T16701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4716'. [ 268.148750][T16690] lo speed is unknown, defaulting to 1000 [ 268.171086][T16691] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.368111][ T3968] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.390194][ T3965] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.441517][ T3965] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.458846][ T3965] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 268.599763][T16726] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.672079][T16726] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.729046][T16726] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.758647][T16726] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 268.913367][T16741] loop9: detected capacity change from 0 to 4096 [ 268.920294][T16741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.937799][T16741] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.140394][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.470022][ T3968] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.497689][ T3968] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.519925][ T3968] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.536228][ T3968] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.581355][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 269.581374][ T29] audit: type=1326 audit(1760836708.042:8644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.650758][ T29] audit: type=1326 audit(1760836708.073:8645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.674436][ T29] audit: type=1326 audit(1760836708.073:8646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.698206][ T29] audit: type=1326 audit(1760836708.073:8647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.721756][ T29] audit: type=1326 audit(1760836708.073:8648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.745387][ T29] audit: type=1326 audit(1760836708.073:8649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.768985][ T29] audit: type=1326 audit(1760836708.073:8650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.792521][ T29] audit: type=1326 audit(1760836708.073:8651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.816178][ T29] audit: type=1326 audit(1760836708.073:8652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 269.839714][ T29] audit: type=1326 audit(1760836708.073:8653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16771 comm="syz.1.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 270.057124][T16804] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.086854][T16804] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 270.266424][T16826] loop3: detected capacity change from 0 to 512 [ 270.289859][T16826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.339746][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.147719][T16858] loop3: detected capacity change from 0 to 512 [ 271.156880][T16858] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 271.174000][T16858] EXT4-fs (loop3): 1 truncate cleaned up [ 271.198967][T16858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.254082][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.749562][T16892] ip6t_srh: unknown srh match flags 4000 [ 271.887076][T16902] SELinux: failed to load policy [ 271.910668][T16904] __nla_validate_parse: 10 callbacks suppressed [ 271.910688][T16904] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4800'. [ 271.985011][T16910] loop9: detected capacity change from 0 to 2048 [ 272.002092][T16910] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.051786][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.165836][T16927] loop9: detected capacity change from 0 to 7 [ 272.173233][T16927] buffer_io_error: 51102 callbacks suppressed [ 272.173290][T16927] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.187337][T16927] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.195212][T16927] loop9: unable to read partition table [ 272.202120][T16927] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 272.202120][T16927] ) failed (rc=-5) [ 272.423432][T16935] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4811'. [ 272.432663][T16935] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4811'. [ 273.120797][T16947] loop9: detected capacity change from 0 to 512 [ 273.129053][T16947] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 273.137541][T16947] System zones: 1-12 [ 273.141582][T16947] EXT4-fs error (device loop9): dx_probe:791: inode #2: comm syz.9.4818: Directory hole found for htree index block 0 [ 273.154495][T16947] EXT4-fs (loop9): Remounting filesystem read-only [ 273.161018][T16947] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -117 [ 273.169390][T16947] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 273.178516][T16947] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.193984][T16947] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 273.259073][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.521379][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4822'. [ 273.530594][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4822'. [ 273.539596][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4822'. [ 273.548755][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4822'. [ 273.557765][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4822'. [ 273.566873][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4822'. [ 273.575855][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4822'. [ 274.301573][T16981] _cac speed is unknown, defaulting to 1000 [ 274.324667][T16981] lo speed is unknown, defaulting to 1000 [ 274.381692][T16998] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 274.506693][T17001] bridge: RTM_NEWNEIGH with invalid ether address [ 274.613277][T17009] 8021q: adding VLAN 0 to HW filter on device bond10 [ 274.719477][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 274.719490][ T29] audit: type=1400 audit(1760836713.284:9250): avc: denied { read } for pid=17015 comm="syz.3.4844" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 274.749306][ T29] audit: type=1400 audit(1760836713.284:9251): avc: denied { open } for pid=17015 comm="syz.3.4844" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 274.801442][T17014] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17014 comm=syz.1.4845 [ 274.847042][T17024] loop6: detected capacity change from 0 to 1024 [ 274.878257][ T29] audit: type=1400 audit(1760836713.436:9252): avc: denied { write } for pid=17028 comm="syz.3.4851" name="ip_vs" dev="proc" ino=4026533448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 274.912318][T17024] EXT4-fs: Mount option(s) incompatible with ext2 [ 274.925758][T17024] loop6: detected capacity change from 0 to 128 [ 274.960265][T17024] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 274.968204][T17024] FAT-fs (loop6): Filesystem has been set read-only [ 274.985636][T17024] syz.6.4849: attempt to access beyond end of device [ 274.985636][T17024] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 275.008755][T17036] geneve2: entered promiscuous mode [ 275.014082][T17036] geneve2: entered allmulticast mode [ 275.037963][T17043] _cac speed is unknown, defaulting to 1000 [ 275.046917][T17043] lo speed is unknown, defaulting to 1000 [ 275.120159][ T29] audit: type=1326 audit(1760836713.680:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 275.143682][ T29] audit: type=1326 audit(1760836713.680:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 275.167225][ T29] audit: type=1326 audit(1760836713.690:9255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 275.190731][ T29] audit: type=1326 audit(1760836713.690:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 275.214219][ T29] audit: type=1326 audit(1760836713.690:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 275.239637][ T29] audit: type=1326 audit(1760836713.690:9258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17049 comm="syz.6.4859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 275.290035][T17060] geneve2: entered promiscuous mode [ 275.294957][ T29] audit: type=1326 audit(1760836713.863:9259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17061 comm="syz.6.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 275.295291][T17060] geneve2: entered allmulticast mode [ 275.327824][T17064] netlink: 'syz.4.4861': attribute type 13 has an invalid length. [ 275.363382][T17066] loop6: detected capacity change from 0 to 736 [ 275.469389][ T3965] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.478776][ T3965] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.491261][ T3965] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 275.652976][T17079] vlan0: entered promiscuous mode [ 275.658020][T17079] hsr_slave_1: entered promiscuous mode [ 275.663867][T17079] vlan0: entered allmulticast mode [ 275.668982][T17079] hsr_slave_1: entered allmulticast mode [ 275.776017][T17087] loop6: detected capacity change from 0 to 512 [ 275.790500][T17087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.803289][T17087] ext4 filesystem being mounted at /836/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.841263][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.071557][T17103] loop6: detected capacity change from 0 to 512 [ 276.100694][T17103] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.4879: bad orphan inode 11862016 [ 276.132531][T17103] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 276.165240][T17103] ext4 filesystem being mounted at /839/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.231801][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 276.686123][T17146] loop3: detected capacity change from 0 to 256 [ 276.917361][T17074] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 276.982736][T17074] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.061312][T17074] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 277.116127][T17161] lo: entered allmulticast mode [ 277.162071][ T3922] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.176169][ T3922] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.187798][T17167] __nla_validate_parse: 20 callbacks suppressed [ 277.187817][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4904'. [ 277.197607][ T3922] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.221516][ T3922] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 277.256887][T17160] lo: left allmulticast mode [ 277.293918][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4906'. [ 277.421596][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4914'. [ 278.657667][T17223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4926'. [ 278.672823][ T9155] Process accounting resumed [ 278.736112][T17248] vlan0: entered promiscuous mode [ 278.741273][T17248] vlan0: entered allmulticast mode [ 278.746479][T17248] hsr_slave_1: entered allmulticast mode [ 278.778467][T17246] _cac speed is unknown, defaulting to 1000 [ 278.793165][T17246] lo speed is unknown, defaulting to 1000 [ 278.957481][T17265] loop3: detected capacity change from 0 to 2048 [ 278.975295][T17265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.035093][T11134] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 279.069251][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.083744][T17285] loop9: detected capacity change from 0 to 512 [ 279.100545][T17285] EXT4-fs: test_dummy_encryption option not supported [ 279.343076][T17316] veth8: entered promiscuous mode [ 279.348263][T17316] veth8: entered allmulticast mode [ 279.413963][T17321] loop9: detected capacity change from 0 to 2048 [ 279.477037][T17321] loop9: p2 p3 p7 [ 279.825798][T17382] xt_hashlimit: max too large, truncated to 1048576 [ 279.835921][T17379] _cac speed is unknown, defaulting to 1000 [ 279.853926][T17379] lo speed is unknown, defaulting to 1000 [ 280.257167][T17410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4963'. [ 280.576243][T17436] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4970'. [ 280.783526][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 280.783544][ T29] audit: type=1326 audit(1760836975.388:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 280.795770][T17440] _cac speed is unknown, defaulting to 1000 [ 280.814868][ T29] audit: type=1326 audit(1760836975.418:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 280.848030][ T29] audit: type=1326 audit(1760836975.448:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 280.873015][T17440] lo speed is unknown, defaulting to 1000 [ 280.978548][ T29] audit: type=1326 audit(1760836975.448:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 281.002130][ T29] audit: type=1326 audit(1760836975.448:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 281.025655][ T29] audit: type=1326 audit(1760836975.448:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 281.049230][ T29] audit: type=1326 audit(1760836975.448:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 281.072859][ T29] audit: type=1326 audit(1760836975.448:9642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 281.096428][ T29] audit: type=1326 audit(1760836975.448:9643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 281.119898][ T29] audit: type=1326 audit(1760836975.448:9644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17441 comm="syz.1.4972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 281.797086][T17506] loop6: detected capacity change from 0 to 512 [ 281.809297][T17506] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.4997: inode has both inline data and extents flags [ 281.822764][T17506] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4997: couldn't read orphan inode 15 (err -117) [ 281.835484][T17506] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.879908][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.973114][T17549] netlink: 'syz.3.5011': attribute type 1 has an invalid length. [ 282.981553][T17548] _cac speed is unknown, defaulting to 1000 [ 282.989435][T17548] lo speed is unknown, defaulting to 1000 [ 283.001274][T17551] loop6: detected capacity change from 0 to 4096 [ 283.015568][T17551] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.028305][T17554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5011'. [ 283.063319][T17549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.094659][T17554] bond2 (unregistering): Released all slaves [ 283.175344][T17567] netlink: 'syz.9.5015': attribute type 12 has an invalid length. [ 283.225763][T17571] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5019'. [ 283.239303][T17573] loop9: detected capacity change from 0 to 1024 [ 283.279392][T17573] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.279604][T17571] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17571 comm=syz.1.5019 [ 283.338580][T17573] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 283.350925][T17573] EXT4-fs (loop9): This should not happen!! Data will be lost [ 283.350925][T17573] [ 283.360586][T17573] EXT4-fs (loop9): Total free blocks count 0 [ 283.366612][T17573] EXT4-fs (loop9): Free/Dirty block details [ 283.372529][T17573] EXT4-fs (loop9): free_blocks=0 [ 283.377570][T17573] EXT4-fs (loop9): dirty_blocks=0 [ 283.382758][T17573] EXT4-fs (loop9): Block reservation details [ 283.388824][T17573] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 283.433663][T17583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.445882][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.475699][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.493296][ T53] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 283.502218][ T53] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 283.511080][ T53] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 283.521245][T17593] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 283.587241][T17606] syzkaller0: entered allmulticast mode [ 283.593561][T17606] syzkaller0: entered promiscuous mode [ 283.602207][T17606] syzkaller0 (unregistering): left allmulticast mode [ 283.609031][T17606] syzkaller0 (unregistering): left promiscuous mode [ 283.673422][T17610] lo: entered promiscuous mode [ 283.678316][T17610] lo: entered allmulticast mode [ 283.693267][T17610] tunl0: entered promiscuous mode [ 283.698337][T17610] tunl0: entered allmulticast mode [ 283.713786][T17610] gre0: entered promiscuous mode [ 283.718776][T17610] gre0: entered allmulticast mode [ 283.734272][T17610] gretap0: entered promiscuous mode [ 283.739500][T17610] gretap0: entered allmulticast mode [ 283.748543][T17610] erspan0: entered promiscuous mode [ 283.753805][T17610] erspan0: entered allmulticast mode [ 283.767881][T17610] ip_vti0: entered promiscuous mode [ 283.773357][T17610] ip_vti0: entered allmulticast mode [ 283.788329][T17610] ip6_vti0: entered promiscuous mode [ 283.793695][T17610] ip6_vti0: entered allmulticast mode [ 283.805476][T17610] sit0: entered promiscuous mode [ 283.810516][T17610] sit0: entered allmulticast mode [ 283.826947][T17610] ip6tnl0: entered promiscuous mode [ 283.832202][T17610] ip6tnl0: entered allmulticast mode [ 283.839018][T17610] ip6gre0: entered promiscuous mode [ 283.844301][T17610] ip6gre0: entered allmulticast mode [ 283.850891][T17610] ip6gretap0: entered promiscuous mode [ 283.856441][T17610] ip6gretap0: entered allmulticast mode [ 283.866802][T17610] vcan0: entered promiscuous mode [ 283.871880][T17610] vcan0: entered allmulticast mode [ 283.878001][T17610] bond0: entered promiscuous mode [ 283.883145][T17610] bond_slave_0: entered promiscuous mode [ 283.888924][T17610] @0Ù: entered promiscuous mode [ 283.894054][T17610] team0: entered promiscuous mode [ 283.899155][T17610] team_slave_0: entered promiscuous mode [ 283.904986][T17610] team_slave_1: entered promiscuous mode [ 283.911044][T17610] dummy0: entered promiscuous mode [ 283.916338][T17610] bond0: entered allmulticast mode [ 283.921470][T17610] bond_slave_0: entered allmulticast mode [ 283.927319][T17610] @0Ù: entered allmulticast mode [ 283.932371][T17610] team0: entered allmulticast mode [ 283.937497][T17610] team_slave_0: entered allmulticast mode [ 283.943239][T17610] team_slave_1: entered allmulticast mode [ 283.949975][T17610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.958738][T17610] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.968933][T17610] nlmon0: entered promiscuous mode [ 283.974120][T17610] nlmon0: entered allmulticast mode [ 283.980591][T17610] caif0: entered promiscuous mode [ 283.985719][T17610] caif0: entered allmulticast mode [ 283.990878][T17610] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.006875][T17617] netlink: 'syz.9.5039': attribute type 12 has an invalid length. [ 284.103164][T17623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.193214][T17593] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.203188][T17593] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.253235][T17593] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.263133][T17593] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.289464][T17682] SELinux: failed to load policy [ 285.290987][T17683] 8021q: adding VLAN 0 to HW filter on device bond13 [ 285.303628][T17593] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.313500][T17593] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 285.425345][ T3918] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.433657][ T3918] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.460767][ T3918] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.469016][ T3918] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.500237][ T3918] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.508503][ T3918] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.523002][ T3918] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.531212][ T3918] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.643143][T17699] loop6: detected capacity change from 0 to 512 [ 285.655680][T17699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.702063][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.711566][T17701] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5070'. [ 285.824095][ T29] kauditd_printk_skb: 621 callbacks suppressed [ 285.824137][ T29] audit: type=1326 audit(1760836980.428:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 285.870258][ T29] audit: type=1326 audit(1760836980.428:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 285.894029][ T29] audit: type=1326 audit(1760836980.458:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 285.917644][ T29] audit: type=1326 audit(1760836980.458:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 285.941400][ T29] audit: type=1326 audit(1760836980.458:10270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 285.965025][ T29] audit: type=1326 audit(1760836980.458:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 285.988723][ T29] audit: type=1326 audit(1760836980.458:10272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 286.012346][ T29] audit: type=1326 audit(1760836980.458:10273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 286.035978][ T29] audit: type=1326 audit(1760836980.458:10274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 286.059517][ T29] audit: type=1326 audit(1760836980.458:10275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17717 comm="syz.9.5078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 286.141402][T17731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.296727][T17750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5088'. [ 286.321718][T17750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.344802][T17750] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.356772][T17750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 286.392431][T11484] hid_parser_main: 48 callbacks suppressed [ 286.392509][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.405764][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.413221][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.430565][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.438045][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.445479][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.452912][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.460401][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.467826][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.475281][T11484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 286.525299][T11484] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 287.260715][T17772] loop9: detected capacity change from 0 to 512 [ 287.272282][T17772] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.300273][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.411168][T17797] pim6reg1: entered promiscuous mode [ 287.416555][T17797] pim6reg1: entered allmulticast mode [ 287.481265][T17803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5111'. [ 287.564415][T17815] loop3: detected capacity change from 0 to 1024 [ 287.586630][T17815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.624313][T17815] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 287.636649][T17815] EXT4-fs (loop3): This should not happen!! Data will be lost [ 287.636649][T17815] [ 287.646419][T17815] EXT4-fs (loop3): Total free blocks count 0 [ 287.652496][T17815] EXT4-fs (loop3): Free/Dirty block details [ 287.658409][T17815] EXT4-fs (loop3): free_blocks=0 [ 287.663369][T17815] EXT4-fs (loop3): dirty_blocks=0 [ 287.668527][T17815] EXT4-fs (loop3): Block reservation details [ 287.674626][T17815] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 287.770245][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.824720][T17823] _cac speed is unknown, defaulting to 1000 [ 287.841814][T17823] lo speed is unknown, defaulting to 1000 [ 287.912470][T17824] _cac speed is unknown, defaulting to 1000 [ 287.919237][T17824] lo speed is unknown, defaulting to 1000 [ 287.977523][ T3918] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 287.986394][ T3918] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 287.999846][ T3918] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 288.257570][T17835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5121'. [ 288.286652][T17835] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17835 comm=syz.6.5121 [ 288.383053][T17848] netlink: 'syz.6.5137': attribute type 1 has an invalid length. [ 288.398625][T17848] 8021q: adding VLAN 0 to HW filter on device bond6 [ 288.412810][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5137'. [ 288.471391][T17848] bond6 (unregistering): Released all slaves [ 288.492803][T17851] _cac speed is unknown, defaulting to 1000 [ 288.502529][T17851] lo speed is unknown, defaulting to 1000 [ 288.726373][T17868] _cac speed is unknown, defaulting to 1000 [ 288.733725][T17868] lo speed is unknown, defaulting to 1000 [ 288.919632][T17880] : renamed from bond0 [ 288.946543][T17883] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5136'. [ 288.966627][T17883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17883 comm=syz.9.5136 [ 289.054282][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5138'. [ 289.075316][T17886] 8021q: adding VLAN 0 to HW filter on device  [ 289.085320][T17886] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.104600][T17886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.121090][ T9155] _cac speed is unknown, defaulting to 1000 [ 289.127060][ T9155] syz2: Port: 1 Link ACTIVE [ 289.440372][ T2195] Bluetooth: hci0: Frame reassembly failed (-84) [ 289.532882][T17828] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.593129][T17828] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.643141][T17828] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 289.697346][ T3918] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.708121][ T3918] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.731760][ T3918] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.740327][ T3918] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 289.754305][T17906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.762620][T17906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.447743][T17914] lo: entered promiscuous mode [ 290.452584][T17914] lo: entered allmulticast mode [ 290.457956][T17914] tunl0: entered promiscuous mode [ 290.463175][T17914] tunl0: entered allmulticast mode [ 290.468747][T17914] gre0: entered promiscuous mode [ 290.473771][T17914] gre0: entered allmulticast mode [ 290.479285][T17914] gretap0: entered promiscuous mode [ 290.484832][T17914] erspan0: entered promiscuous mode [ 290.490054][T17914] erspan0: entered allmulticast mode [ 290.495915][T17914] ip_vti0: entered promiscuous mode [ 290.501142][T17914] ip_vti0: entered allmulticast mode [ 290.507487][T17914] ip6_vti0: entered promiscuous mode [ 290.512841][T17914] ip6_vti0: entered allmulticast mode [ 290.519812][T17914] ip6tnl0: entered promiscuous mode [ 290.525117][T17914] ip6tnl0: entered allmulticast mode [ 290.530944][T17914] ip6gre0: entered promiscuous mode [ 290.536194][T17914] ip6gre0: entered allmulticast mode [ 290.542115][T17914] bond0: entered promiscuous mode [ 290.547155][T17914] bond_slave_0: entered promiscuous mode [ 290.552895][T17914] bond_slave_1: entered promiscuous mode [ 290.558773][T17914] dummy0: entered promiscuous mode [ 290.564012][T17914] team0: entered promiscuous mode [ 290.569112][T17914] team_slave_1: entered promiscuous mode [ 290.574954][T17914] bond0: entered allmulticast mode [ 290.580079][T17914] bond_slave_0: entered allmulticast mode [ 290.585832][T17914] bond_slave_1: entered allmulticast mode [ 290.591803][T17914] team0: entered allmulticast mode [ 290.596966][T17914] team_slave_1: entered allmulticast mode [ 290.605701][T17914] nlmon0: entered promiscuous mode [ 290.610811][T17914] nlmon0: entered allmulticast mode [ 290.616726][T17914] caif0: entered promiscuous mode [ 290.621805][T17914] caif0: entered allmulticast mode [ 290.626978][T17914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.671190][T17923] netlink: 'syz.4.5154': attribute type 1 has an invalid length. [ 290.688447][T17923] bond14: entered promiscuous mode [ 290.694076][T17923] 8021q: adding VLAN 0 to HW filter on device bond14 [ 290.709378][T17923] 8021q: adding VLAN 0 to HW filter on device bond14 [ 290.716782][T17923] bond14: (slave wireguard0): The slave device specified does not support setting the MAC address [ 290.727444][T17923] bond14: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 290.740449][T17923] bond14: (slave wireguard0): making interface the new active one [ 290.748400][T17923] wireguard0: entered promiscuous mode [ 290.755780][T17923] bond14: (slave wireguard0): Enslaving as an active interface with an up link [ 290.773118][T17928] ip6t_srh: unknown srh match flags 4000 [ 290.775921][T17923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.786118][T17923] IPv6: NLM_F_CREATE should be set when creating new route [ 290.793338][T17923] IPv6: NLM_F_CREATE should be set when creating new route [ 290.815493][T17923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.825692][T17923] bond14: (slave wireguard1): The slave device specified does not support setting the MAC address [ 290.838289][T17923] bond14: (slave wireguard1): Enslaving as a backup interface with an up link [ 290.865057][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 290.865147][ T29] audit: type=1326 audit(1760836985.468:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 290.898879][ T29] audit: type=1326 audit(1760836985.468:10441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 290.922693][ T29] audit: type=1326 audit(1760836985.468:10442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 290.946331][ T29] audit: type=1326 audit(1760836985.468:10443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f41c14ef003 code=0x7ffc0000 [ 290.969888][ T29] audit: type=1326 audit(1760836985.468:10444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 290.993594][ T29] audit: type=1326 audit(1760836985.478:10445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 291.017252][ T29] audit: type=1326 audit(1760836985.478:10446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 291.040813][ T29] audit: type=1326 audit(1760836985.478:10447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 291.064516][ T29] audit: type=1326 audit(1760836985.478:10448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 291.088064][ T29] audit: type=1326 audit(1760836985.478:10449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17934 comm="syz.9.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 291.441993][ T3501] Bluetooth: hci0: command 0x1003 tx timeout [ 291.441993][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 291.475272][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5160'. [ 291.494499][T17945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.502615][T17945] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.510949][T17945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.526840][ T23] lo speed is unknown, defaulting to 1000 [ 291.532677][ T23] syz0: Port: 1 Link ACTIVE [ 291.834069][T17951] _cac speed is unknown, defaulting to 1000 [ 291.845128][T17951] lo speed is unknown, defaulting to 1000 [ 291.976176][T17956] syzkaller0: entered allmulticast mode [ 291.990689][T17956] syzkaller0: entered promiscuous mode [ 291.998779][T17956] syzkaller0 (unregistering): left allmulticast mode [ 292.005724][T17956] syzkaller0 (unregistering): left promiscuous mode [ 292.136409][T17961] loop9: detected capacity change from 0 to 1024 [ 292.143824][T17961] EXT4-fs: Mount option(s) incompatible with ext2 [ 292.155349][T17961] loop9: detected capacity change from 0 to 128 [ 292.172952][T17961] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 292.180846][T17961] FAT-fs (loop9): Filesystem has been set read-only [ 292.187859][T17961] syz.9.5170: attempt to access beyond end of device [ 292.187859][T17961] loop9: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 292.195918][T17964] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5171'. [ 292.794388][T17996] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 292.833539][T17996] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 292.893414][T17996] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 292.943870][T17996] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 292.992074][ T2195] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.006455][T17999] netlink: 'syz.6.5184': attribute type 1 has an invalid length. [ 293.016314][ T3922] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.040107][T17999] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.052496][ T3922] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.071670][ T3922] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 293.086388][T18001] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.093982][T18001] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 293.105198][T18001] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 293.178551][T18004] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5186'. [ 293.195601][T18008] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5185'. [ 293.214674][T18004] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18004 comm=syz.9.5186 [ 293.241348][T18006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5188'. [ 293.276452][T18016] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5190'. [ 293.441069][T18039] ip6t_srh: unknown srh match flags 4000 [ 293.452442][T18040] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5194'. [ 293.463332][T18040] hsr_slave_0: left promiscuous mode [ 293.469461][T18040] hsr_slave_1: left promiscuous mode [ 293.484043][T18042] : renamed from bond0 (while UP) [ 294.344127][T18055] bridge: RTM_NEWNEIGH with invalid ether address [ 294.350869][T18054] netlink: 'syz.1.5200': attribute type 12 has an invalid length. [ 294.377749][T18059] loop9: detected capacity change from 0 to 128 [ 294.429898][T18063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5204'. [ 294.541425][T18071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5208'. [ 294.609951][T18066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5205'. [ 294.685416][T18086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5212'. [ 294.776578][T18101] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5220'. [ 295.334141][T18113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5224'. [ 295.429736][T18133] _cac speed is unknown, defaulting to 1000 [ 295.436651][T18133] lo speed is unknown, defaulting to 1000 [ 295.817505][T18152] tipc: Enabled bearer , priority 0 [ 295.856364][T18152] syzkaller0: entered promiscuous mode [ 295.861943][T18152] syzkaller0: entered allmulticast mode [ 295.869241][T18152] tipc: Resetting bearer [ 295.888064][T18151] tipc: Resetting bearer [ 295.918765][T18151] tipc: Disabling bearer [ 295.939523][T18153] _cac speed is unknown, defaulting to 1000 [ 295.950050][T18153] lo speed is unknown, defaulting to 1000 [ 296.562262][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 296.562279][ T29] audit: type=1326 audit(1760836991.168:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18175 comm="syz.6.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 296.611068][ T29] audit: type=1326 audit(1760836991.198:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18175 comm="syz.6.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 296.634724][ T29] audit: type=1326 audit(1760836991.198:10767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18175 comm="syz.6.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 296.658384][ T29] audit: type=1326 audit(1760836991.198:10768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18175 comm="syz.6.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 296.682003][ T29] audit: type=1326 audit(1760836991.198:10769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18175 comm="syz.6.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 296.705773][ T29] audit: type=1326 audit(1760836991.198:10770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18175 comm="syz.6.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 296.734887][ T29] audit: type=1326 audit(1760836991.318:10771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18175 comm="syz.6.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 296.758680][ T29] audit: type=1326 audit(1760836991.318:10772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18175 comm="syz.6.5248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 296.786022][T11207] Process accounting resumed [ 296.871746][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5253'. [ 296.908701][T18196] veth18: entered promiscuous mode [ 296.913999][T18196] veth18: entered allmulticast mode [ 296.945584][T18202] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 296.955477][T18202] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 296.974168][T18200] vhci_hcd: invalid port number 254 [ 297.026409][T18202] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.036318][T18202] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.062340][ T29] audit: type=1326 audit(1760836991.658:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.3.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad894efc9 code=0x7ffc0000 [ 297.086062][ T29] audit: type=1326 audit(1760836991.658:10774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18208 comm="syz.3.5260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faad894efc9 code=0x7ffc0000 [ 297.113582][T18202] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.123384][T18202] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.204220][T18202] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.214109][T18202] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 297.280902][ T53] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.289362][ T53] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 297.310111][ T53] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.318371][ T53] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 297.346608][ T53] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.354862][ T53] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 297.363395][ T53] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.371711][ T53] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 298.251913][T18237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5270'. [ 298.404686][T18253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5275'. [ 298.435861][T18251] loop9: detected capacity change from 0 to 2048 [ 298.459178][T18253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 298.515759][T18251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.644421][ T8046] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 298.682183][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.745931][T18272] loop9: detected capacity change from 0 to 2048 [ 298.775738][T18272] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.838135][ T8046] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 298.894395][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.048791][T18288] loop9: detected capacity change from 0 to 8192 [ 299.166440][T18300] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.223841][T18300] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.259297][T18302] netlink: 'syz.6.5296': attribute type 13 has an invalid length. [ 299.298953][T18300] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.344211][T18300] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.405033][ T3922] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.421398][ T3922] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.434348][T18316] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.448398][ T3922] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.479018][ T3922] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.488779][T18319] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5302'. [ 299.498400][T11207] IPVS: starting estimator thread 0... [ 299.504475][T18316] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.525392][T18319] hsr_slave_0: left promiscuous mode [ 299.531205][T18319] hsr_slave_1: left promiscuous mode [ 299.543212][T18316] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.612536][T18320] IPVS: using max 1920 ests per chain, 96000 per kthread [ 299.624300][T18316] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 299.689159][ T3922] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.705717][ T3922] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.724176][ T3922] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.739872][ T3922] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 299.794063][T18345] loop6: detected capacity change from 0 to 512 [ 299.801164][T18345] EXT4-fs: Ignoring removed i_version option [ 299.807450][T18345] EXT4-fs: Ignoring removed bh option [ 299.808717][T18344] tipc: Enabled bearer , priority 0 [ 299.839321][T18345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.844409][T18344] syzkaller0: entered promiscuous mode [ 299.857373][T18344] syzkaller0: entered allmulticast mode [ 299.868127][T18344] tipc: Resetting bearer [ 299.887353][T18345] ext4 filesystem being mounted at /904/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.899281][T18342] tipc: Resetting bearer [ 299.915454][T18342] tipc: Disabling bearer [ 300.025761][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.044048][T18365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5320'. [ 300.075074][T18369] loop6: detected capacity change from 0 to 512 [ 300.081753][T18369] EXT4-fs: Ignoring removed mblk_io_submit option [ 300.089254][T18369] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 300.100499][T18369] EXT4-fs (loop6): 1 truncate cleaned up [ 300.106671][T18369] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.134284][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.153505][T18372] netlink: 197276 bytes leftover after parsing attributes in process `syz.6.5322'. [ 300.174095][T18372] _cac speed is unknown, defaulting to 1000 [ 300.180821][T18372] lo speed is unknown, defaulting to 1000 [ 300.250763][T18375] loop6: detected capacity change from 0 to 512 [ 300.263954][T18375] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.276618][T18375] ext4 filesystem being mounted at /908/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.289877][T18375] netlink: 'syz.6.5323': attribute type 12 has an invalid length. [ 300.307762][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.365085][T18383] netlink: 'syz.6.5326': attribute type 10 has an invalid length. [ 300.375482][T18383] team0: Port device dummy0 added [ 300.381915][T18383] netlink: 'syz.6.5326': attribute type 10 has an invalid length. [ 300.390208][T18383] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 300.400607][T18383] team0: Failed to send options change via netlink (err -105) [ 300.409091][T18383] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 300.418208][T18383] team0: Port device dummy0 removed [ 300.513245][T18389] tipc: Enabled bearer , priority 0 [ 300.538374][T18389] syzkaller0: entered promiscuous mode [ 300.543980][T18389] syzkaller0: entered allmulticast mode [ 300.550130][T18389] tipc: Resetting bearer [ 300.563101][T18388] tipc: Resetting bearer [ 300.574726][T18388] tipc: Disabling bearer [ 300.892927][T18397] _cac speed is unknown, defaulting to 1000 [ 300.905196][T18397] lo speed is unknown, defaulting to 1000 [ 301.055758][T18405] xt_bpf: check failed: parse error [ 301.198779][T18410] _cac speed is unknown, defaulting to 1000 [ 301.213902][T18410] lo speed is unknown, defaulting to 1000 [ 301.294251][T18418] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5339'. [ 301.322815][T18418] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5339'. [ 301.350003][T18427] loop9: detected capacity change from 0 to 128 [ 301.360805][T18428] loop3: detected capacity change from 0 to 256 [ 301.453246][T18427] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 301.476412][T18433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5349'. [ 301.600332][ T3923] Bluetooth: hci0: Frame reassembly failed (-84) [ 301.634395][T18442] _cac speed is unknown, defaulting to 1000 [ 301.641026][T18442] lo speed is unknown, defaulting to 1000 [ 301.663030][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 301.663062][ T29] audit: type=1326 audit(1760837252.268:11091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.710436][ T29] audit: type=1326 audit(1760837252.268:11092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.734099][ T29] audit: type=1326 audit(1760837252.268:11093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.757817][ T29] audit: type=1326 audit(1760837252.268:11094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.781431][ T29] audit: type=1326 audit(1760837252.268:11095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.805113][ T29] audit: type=1326 audit(1760837252.268:11096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.828710][ T29] audit: type=1326 audit(1760837252.268:11097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.852341][ T29] audit: type=1326 audit(1760837252.268:11098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.876024][ T29] audit: type=1326 audit(1760837252.268:11099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.899441][ T29] audit: type=1326 audit(1760837252.268:11100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18438 comm="syz.9.5351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c14eefc9 code=0x7ffc0000 [ 301.928133][T18449] loop6: detected capacity change from 0 to 8192 [ 301.938733][T18460] netlink: 'syz.3.5356': attribute type 1 has an invalid length. [ 301.953872][T18460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.966483][T18460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5356'. [ 301.977289][T18460] bond0 (unregistering): Released all slaves [ 302.033010][T18464] loop6: detected capacity change from 0 to 2048 [ 302.069873][T18464] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.103153][T18476] loop3: detected capacity change from 0 to 2048 [ 302.123989][ T4510] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 302.160802][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.225742][T18487] loop3: detected capacity change from 0 to 512 [ 302.245354][T18487] EXT4-fs: Ignoring removed mblk_io_submit option [ 302.253285][T18487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 302.271821][T18487] EXT4-fs (loop3): 1 truncate cleaned up [ 302.283425][T18487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.323722][T18483] _cac speed is unknown, defaulting to 1000 [ 302.336342][T18483] lo speed is unknown, defaulting to 1000 [ 302.344604][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.650540][T18511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5377'. [ 302.685970][T18511] 8021q: adding VLAN 0 to HW filter on device bond16 [ 302.695544][T18511] bond15: (slave bond16): Enslaving as an active interface with an up link [ 302.706921][T18511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5377'. [ 302.718359][T18511] bond15 (unregistering): (slave bond16): Releasing backup interface [ 302.731777][T18511] bond15 (unregistering): Released all slaves [ 302.742096][T18508] loop3: detected capacity change from 0 to 2048 [ 302.764632][T18522] netlink: 'syz.1.5380': attribute type 13 has an invalid length. [ 302.793091][T18508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.925704][T11134] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 302.945501][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.361127][T18555] netlink: 'syz.6.5390': attribute type 1 has an invalid length. [ 303.412309][T18557] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5390'. [ 303.426444][T18555] 8021q: adding VLAN 0 to HW filter on device bond7 [ 303.453198][T18557] bond7 (unregistering): Released all slaves [ 303.552818][T18563] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.562697][T18563] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.603825][T18563] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.611950][ T3493] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 303.613664][T18563] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.658014][T18564] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5392'. [ 303.713399][T18563] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.723293][T18563] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.773345][T18563] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.783249][T18563] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 303.827798][ T53] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.836064][ T53] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.847942][ T2195] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.856172][ T2195] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.866987][ T2195] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.875244][ T2195] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 303.885849][ T2195] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 303.894125][ T2195] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 304.146066][T18571] loop9: detected capacity change from 0 to 512 [ 304.152905][T18571] EXT4-fs: Ignoring removed mblk_io_submit option [ 304.161277][T18571] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 304.177203][T18571] EXT4-fs (loop9): 1 truncate cleaned up [ 304.183325][T18571] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.199675][T18578] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5406'. [ 304.235005][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.281239][T18578] _cac speed is unknown, defaulting to 1000 [ 304.291756][T18578] lo speed is unknown, defaulting to 1000 [ 304.294592][T18580] syzkaller0: entered promiscuous mode [ 304.303041][T18580] syzkaller0: entered allmulticast mode [ 305.098450][T18622] loop6: detected capacity change from 0 to 1024 [ 305.106622][T18619] loop9: detected capacity change from 0 to 1024 [ 305.152021][T18619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 305.160747][T18619] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 305.171748][T18619] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 305.203618][T18622] EXT4-fs: Ignoring removed orlov option [ 305.209471][T18619] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 305.219744][T18619] EXT4-fs error (device loop9): ext4_get_journal_inode:5808: comm syz.9.5413: inode #1: comm syz.9.5413: iget: illegal inode # [ 305.240156][T18619] EXT4-fs (loop9): Remounting filesystem read-only [ 305.246734][T18619] EXT4-fs (loop9): no journal found [ 305.253707][T18622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.010763][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.046878][T18658] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5429'. [ 306.073780][T18658] 8021q: adding VLAN 0 to HW filter on device bond5 [ 306.081654][T18658] bond0: (slave bond5): Enslaving as an active interface with an up link [ 306.105765][T18658] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5429'. [ 306.131324][T18658] bond0 (unregistering): (slave bond5): Releasing backup interface [ 306.145650][T18658] bond0 (unregistering): Released all slaves [ 307.054753][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 307.054801][ T29] audit: type=1400 audit(1760837257.658:11105): avc: denied { audit_write } for pid=18697 comm="syz.3.5443" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 307.083938][ T29] audit: type=1107 audit(1760837257.668:11106): pid=18697 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 307.125882][T18703] 9pnet_fd: Insufficient options for proto=fd [ 307.132242][ T29] audit: type=1400 audit(1760837257.728:11107): avc: denied { mounton } for pid=18702 comm="syz.9.5445" path="/syzcgroup/net/syz9/devices.allow" dev="cgroup" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 307.442815][ T29] audit: type=1400 audit(1760837258.048:11108): avc: denied { setopt } for pid=18720 comm="syz.9.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 307.483357][T18725] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5455'. [ 307.532697][T18725] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.540655][T18725] bond7: (slave bond8): Enslaving as an active interface with an up link [ 307.556076][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5455'. [ 307.569581][T18725] bond7 (unregistering): (slave bond8): Releasing backup interface [ 307.596410][T18730] loop3: detected capacity change from 0 to 512 [ 307.613082][T18730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 307.617618][T18725] bond7 (unregistering): Released all slaves [ 307.648073][T18730] EXT4-fs (loop3): 1 truncate cleaned up [ 307.658474][T18730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.698493][ T29] audit: type=1400 audit(1760837258.298:11109): avc: denied { watch watch_reads } for pid=18729 comm="syz.3.5456" path="/566/file0" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.780034][T18738] loop6: detected capacity change from 0 to 736 [ 307.799332][T11134] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.836609][T18741] loop3: detected capacity change from 0 to 128 [ 307.858297][T18741] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 307.887251][T18745] ÿÿÿÿÿÿ: renamed from dummy0 [ 307.896395][T18741] ext4 filesystem being mounted at /567/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 308.014798][T11134] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.078447][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5464'. [ 308.087435][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5464'. [ 308.151987][T18749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5464'. [ 308.166654][T18754] 9pnet: Could not find request transport: fdÿÿÿÿ [ 308.297154][T18765] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 308.326565][T18762] _cac speed is unknown, defaulting to 1000 [ 308.353955][T18766] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.463483][T18766] bond0: (slave bond3): Enslaving as an active interface with an up link [ 308.472719][T18762] lo speed is unknown, defaulting to 1000 [ 308.479134][T18765] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 308.530654][T18782] loop3: detected capacity change from 0 to 736 [ 308.579419][T18765] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 308.674672][T18765] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 308.749122][T18794] __nla_validate_parse: 7 callbacks suppressed [ 308.749140][T18794] netlink: 528 bytes leftover after parsing attributes in process `syz.1.5476'. [ 308.764450][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5476'. [ 308.819193][ T2195] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 308.836364][ T2195] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 308.864479][ T2195] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 308.888496][ T2195] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 309.026537][T18813] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 309.035292][T18813] ref_ctr increment failed for inode: 0x137f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888109b9f300 [ 309.149605][T18822] loop6: detected capacity change from 0 to 1024 [ 309.157281][T18822] EXT4-fs: Ignoring removed orlov option [ 309.163167][T18822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 309.173960][T18822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.221195][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.243401][ T29] audit: type=1326 audit(1760837259.848:11110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18825 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 309.270625][T18826] syz_tun: entered allmulticast mode [ 309.279720][T18826] dvmrp8: entered allmulticast mode [ 309.287950][T18826] syz_tun: left allmulticast mode [ 309.293724][ T29] audit: type=1326 audit(1760837259.868:11111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18825 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 309.317454][ T29] audit: type=1326 audit(1760837259.868:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18825 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 309.341360][ T29] audit: type=1326 audit(1760837259.868:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18825 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 309.365048][ T29] audit: type=1326 audit(1760837259.868:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18825 comm="syz.6.5489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2d6e97efc9 code=0x7ffc0000 [ 309.389155][T18826] dvmrp8: left allmulticast mode [ 309.505548][T18835] _cac speed is unknown, defaulting to 1000 [ 309.544512][T18835] lo speed is unknown, defaulting to 1000 [ 309.802944][T18844] netlink: 'syz.3.5496': attribute type 10 has an invalid length. [ 309.832525][T18850] _cac speed is unknown, defaulting to 1000 [ 309.855061][T18850] lo speed is unknown, defaulting to 1000 [ 310.001439][T18860] loop6: detected capacity change from 0 to 512 [ 310.025820][T18860] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 310.067473][T18860] EXT4-fs (loop6): 1 truncate cleaned up [ 310.129040][T18860] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.186955][T18871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5506'. [ 310.231959][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5506'. [ 310.300570][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.357961][T18881] _cac speed is unknown, defaulting to 1000 [ 310.365764][T18881] lo speed is unknown, defaulting to 1000 [ 310.429620][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5512'. [ 310.448787][T18889] team1: entered promiscuous mode [ 310.453958][T18889] team1: entered allmulticast mode [ 310.730202][T18913] loop9: detected capacity change from 0 to 512 [ 310.737530][T18913] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 310.776445][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5522'. [ 310.785379][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5522'. [ 310.794460][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5522'. [ 310.812593][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5522'. [ 310.821596][T18916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5522'. [ 310.858478][T18920] 9pnet: Could not find request transport: fdÿÿÿÿ [ 310.889740][T18913] EXT4-fs (loop9): 1 truncate cleaned up [ 310.899285][T18913] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.967413][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.493757][T18946] _cac speed is unknown, defaulting to 1000 [ 311.510655][T18946] lo speed is unknown, defaulting to 1000 [ 311.828137][T18952] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.837971][T18952] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.913489][T18952] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.923435][T18952] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 311.973417][T18952] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.983308][T18952] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 312.023344][T18952] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.033197][T18952] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 312.068941][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 312.068954][ T29] audit: type=1326 audit(1760837262.668:11560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81cb905e67 code=0x7ffc0000 [ 312.112380][ T29] audit: type=1326 audit(1760837262.698:11561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81cb8ab099 code=0x7ffc0000 [ 312.136003][ T29] audit: type=1326 audit(1760837262.698:11562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81cb905e67 code=0x7ffc0000 [ 312.142387][ T3922] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.159508][ T29] audit: type=1326 audit(1760837262.698:11563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81cb8ab099 code=0x7ffc0000 [ 312.167670][ T3922] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 312.191160][ T29] audit: type=1326 audit(1760837262.698:11564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 312.223050][ T29] audit: type=1326 audit(1760837262.708:11565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81cb905e67 code=0x7ffc0000 [ 312.246775][ T29] audit: type=1326 audit(1760837262.708:11566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81cb8ab099 code=0x7ffc0000 [ 312.265956][ T3922] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.270339][ T29] audit: type=1326 audit(1760837262.708:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f81cb90efc9 code=0x7ffc0000 [ 312.278534][ T3922] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 312.310955][ T29] audit: type=1326 audit(1760837262.808:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f81cb905e67 code=0x7ffc0000 [ 312.334581][ T29] audit: type=1326 audit(1760837262.808:11569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18954 comm="syz.1.5530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f81cb8ab099 code=0x7ffc0000 [ 312.369091][ T3922] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.377347][ T3922] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 312.401878][ T3922] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 312.410200][ T3922] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 312.538999][T18969] loop6: detected capacity change from 0 to 128 [ 312.549347][T18969] syz.6.5551: attempt to access beyond end of device [ 312.549347][T18969] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 312.563420][T18969] syz.6.5551: attempt to access beyond end of device [ 312.563420][T18969] loop6: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 312.576943][T18969] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 312.585550][T18969] syz.6.5551: attempt to access beyond end of device [ 312.585550][T18969] loop6: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 312.599092][T18969] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 312.614637][T18968] syz.6.5551: attempt to access beyond end of device [ 312.614637][T18968] loop6: rw=524288, sector=154, nr_sectors = 8 limit=128 [ 312.629135][T18968] syz.6.5551: attempt to access beyond end of device [ 312.629135][T18968] loop6: rw=0, sector=154, nr_sectors = 8 limit=128 [ 312.643903][T18968] syz.6.5551: attempt to access beyond end of device [ 312.643903][T18968] loop6: rw=0, sector=154, nr_sectors = 8 limit=128 [ 312.657813][T18968] syz.6.5551: attempt to access beyond end of device [ 312.657813][T18968] loop6: rw=0, sector=154, nr_sectors = 8 limit=128 [ 312.693588][T18968] syz.6.5551: attempt to access beyond end of device [ 312.693588][T18968] loop6: rw=0, sector=154, nr_sectors = 8 limit=128 [ 312.733915][T18968] syz.6.5551: attempt to access beyond end of device [ 312.733915][T18968] loop6: rw=0, sector=154, nr_sectors = 8 limit=128 [ 312.750069][T18968] syz.6.5551: attempt to access beyond end of device [ 312.750069][T18968] loop6: rw=0, sector=154, nr_sectors = 8 limit=128 [ 312.888959][T18980] _cac speed is unknown, defaulting to 1000 [ 312.895959][T18980] lo speed is unknown, defaulting to 1000 [ 313.115318][T19082] netlink: 'syz.6.5558': attribute type 10 has an invalid length. [ 313.143036][T19082] ÿÿÿÿÿÿ: entered promiscuous mode [ 313.155473][T19082] bridge0: port 1(ÿÿÿÿÿÿ) entered blocking state [ 313.162963][T19082] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 313.174862][T19088] loop6: detected capacity change from 0 to 512 [ 313.193932][T19082] bridge0: port 1(ÿÿÿÿÿÿ) entered blocking state [ 313.201079][T19082] bridge0: port 1(ÿÿÿÿÿÿ) entered forwarding state [ 313.225034][T19088] EXT4-fs (loop6): too many log groups per flexible block group [ 313.234682][T19088] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 313.242542][T19088] EXT4-fs (loop6): mount failed [ 313.321786][T19100] _cac speed is unknown, defaulting to 1000 [ 313.335762][T19100] lo speed is unknown, defaulting to 1000 [ 313.369120][T19109] loop6: detected capacity change from 0 to 512 [ 313.376649][T19109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 313.383830][T19109] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 313.397241][T19109] EXT4-fs (loop6): 1 truncate cleaned up [ 313.403618][T19109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.462686][T19115] netlink: 'syz.1.5567': attribute type 1 has an invalid length. [ 313.482182][T19115] 8021q: adding VLAN 0 to HW filter on device bond12 [ 313.511133][T19115] bond12 (unregistering): Released all slaves [ 313.648023][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.761288][T19140] _cac speed is unknown, defaulting to 1000 [ 313.768566][T19140] lo speed is unknown, defaulting to 1000 [ 313.785640][T19142] __nla_validate_parse: 7 callbacks suppressed [ 313.785658][T19142] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5576'. [ 314.160438][T19173] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5586'. [ 314.292086][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5591'. [ 314.315807][T19185] loop9: detected capacity change from 0 to 512 [ 314.334734][T19185] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.358717][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5591'. [ 314.404656][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.467989][T19176] netlink: 'syz.4.5587': attribute type 10 has an invalid length. [ 314.562582][T19201] loop6: detected capacity change from 0 to 1024 [ 314.574338][T19201] EXT4-fs: Ignoring removed nobh option [ 314.580050][T19201] EXT4-fs: inline encryption not supported [ 314.586349][T19201] EXT4-fs: Ignoring removed nobh option [ 314.592015][T19201] EXT4-fs: Ignoring removed bh option [ 314.597447][T19201] ext4: Unknown parameter 'audit' [ 314.885426][T19226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5605'. [ 314.894611][T19226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5605'. [ 314.903771][T19226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5605'. [ 315.027465][T19231] _cac speed is unknown, defaulting to 1000 [ 315.027985][T19226] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5605'. [ 315.045466][T19231] lo speed is unknown, defaulting to 1000 [ 315.291507][T19261] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5615'. [ 315.356384][T19269] netlink: 'syz.1.5613': attribute type 10 has an invalid length. [ 316.537211][T19348] _cac speed is unknown, defaulting to 1000 [ 316.549773][T19348] lo speed is unknown, defaulting to 1000 [ 316.625068][T19351] _cac speed is unknown, defaulting to 1000 [ 316.631695][T19351] lo speed is unknown, defaulting to 1000 [ 316.637995][T19349] _cac speed is unknown, defaulting to 1000 [ 316.666272][T19362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19362 comm=syz.6.5629 [ 316.690219][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5629'. [ 316.719162][T19344] _cac speed is unknown, defaulting to 1000 [ 316.729989][T19349] lo speed is unknown, defaulting to 1000 [ 316.748731][T19344] lo speed is unknown, defaulting to 1000 [ 317.066388][T19385] netlink: 'syz.3.5638': attribute type 1 has an invalid length. [ 317.086768][T19385] 8021q: adding VLAN 0 to HW filter on device bond5 [ 317.102725][T19385] bond5 (unregistering): Released all slaves [ 317.662047][T19409] _cac speed is unknown, defaulting to 1000 [ 317.669038][T19409] lo speed is unknown, defaulting to 1000 [ 318.035359][T19423] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 318.687793][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 318.687811][ T29] audit: type=1400 audit(1760837269.288:12018): avc: denied { cmd } for pid=19437 comm="syz.3.5656" path="socket:[67234]" dev="sockfs" ino=67234 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 318.883628][T19444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19444 comm=syz.1.5658 [ 318.931484][T19447] lo: Caught tx_queue_len zero misconfig [ 319.098086][T19458] loop6: detected capacity change from 0 to 128 [ 319.170155][T19462] veth22: entered promiscuous mode [ 319.175337][T19462] veth22: entered allmulticast mode [ 319.675965][T19473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.781706][T19473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.786053][T19475] __nla_validate_parse: 4 callbacks suppressed [ 319.786091][T19475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5672'. [ 319.810700][T19473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.830032][T19473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.345292][T19491] loop9: detected capacity change from 0 to 512 [ 320.463123][T19491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.475832][T19491] ext4 filesystem being mounted at /841/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.554266][ T8046] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.565064][T19505] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5693'. [ 320.606076][ T29] audit: type=1326 audit(1760837271.208:12019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 320.663688][ T29] audit: type=1326 audit(1760837271.238:12020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f0b92d810 code=0x7ffc0000 [ 320.687356][ T29] audit: type=1326 audit(1760837271.238:12021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 320.711265][ T29] audit: type=1326 audit(1760837271.238:12022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 320.734915][ T29] audit: type=1326 audit(1760837271.238:12023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 320.758524][ T29] audit: type=1326 audit(1760837271.238:12024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 320.782152][ T29] audit: type=1326 audit(1760837271.238:12025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 320.805782][ T29] audit: type=1326 audit(1760837271.238:12026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19506 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f3f0b92efc9 code=0x7ffc0000 [ 320.829342][ T29] audit: type=1326 audit(1760837271.248:12027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19510 comm="syz.4.5685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3f0b961885 code=0x7ffc0000 [ 320.904592][T19524] netlink: 'syz.6.5689': attribute type 4 has an invalid length. [ 320.921493][T19514] loop9: detected capacity change from 0 to 2048 [ 320.969478][T19514] loop9: p2 p3 p7 [ 320.989978][T19528] loop6: detected capacity change from 0 to 1024 [ 321.012399][T19528] EXT4-fs: Ignoring removed oldalloc option [ 321.018460][T19528] EXT4-fs: Ignoring removed bh option [ 321.081928][ T3918] batman_adv: batadv1: IGMP Querier appeared [ 321.087983][ T3918] batman_adv: batadv1: MLD Querier appeared [ 321.113251][T19528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.263927][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5692'. [ 321.343957][T19543] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5697'. [ 321.594187][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5702'. [ 321.709780][T19561] loop3: detected capacity change from 0 to 128 [ 321.842917][T19560] _cac speed is unknown, defaulting to 1000 [ 321.976743][T19560] lo speed is unknown, defaulting to 1000 [ 321.982912][T19575] netlink: 180 bytes leftover after parsing attributes in process `syz.9.5710'. [ 322.034021][T19533] ================================================================== [ 322.042243][T19533] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 322.050177][T19533] [ 322.052504][T19533] write to 0xffff8881295a9844 of 4 bytes by task 19528 on cpu 0: [ 322.060313][T19533] xas_set_mark+0x12b/0x140 [ 322.064823][T19533] __folio_start_writeback+0x155/0x390 [ 322.070297][T19533] ext4_bio_write_folio+0x5ad/0x9f0 [ 322.075516][T19533] mpage_process_page_bufs+0x4a1/0x620 [ 322.080976][T19533] mpage_prepare_extent_to_map+0x786/0xc00 [ 322.086782][T19533] ext4_do_writepages+0xa05/0x2750 [ 322.091909][T19533] ext4_writepages+0x176/0x300 [ 322.096682][T19533] do_writepages+0x1c6/0x310 [ 322.101272][T19533] file_write_and_wait_range+0x156/0x2c0 [ 322.106910][T19533] generic_buffers_fsync_noflush+0x45/0x120 [ 322.112814][T19533] ext4_sync_file+0x1ab/0x690 [ 322.117498][T19533] vfs_fsync_range+0x10d/0x130 [ 322.122271][T19533] ext4_buffered_write_iter+0x34f/0x3c0 [ 322.127827][T19533] ext4_file_write_iter+0x387/0xf60 [ 322.133038][T19533] iter_file_splice_write+0x666/0xa60 [ 322.138423][T19533] direct_splice_actor+0x156/0x2a0 [ 322.143537][T19533] splice_direct_to_actor+0x312/0x680 [ 322.148915][T19533] do_splice_direct+0xda/0x150 [ 322.153680][T19533] do_sendfile+0x380/0x650 [ 322.158115][T19533] __x64_sys_sendfile64+0x105/0x150 [ 322.163319][T19533] x64_sys_call+0x2bb4/0x3000 [ 322.168011][T19533] do_syscall_64+0xd2/0x200 [ 322.172525][T19533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.178427][T19533] [ 322.180744][T19533] read to 0xffff8881295a9844 of 4 bytes by task 19533 on cpu 1: [ 322.188368][T19533] __writeback_single_inode+0x1f9/0x7c0 [ 322.193933][T19533] writeback_single_inode+0x16d/0x3f0 [ 322.199325][T19533] sync_inode_metadata+0x5b/0x90 [ 322.204370][T19533] generic_buffers_fsync_noflush+0xd9/0x120 [ 322.210273][T19533] ext4_sync_file+0x1ab/0x690 [ 322.214954][T19533] vfs_fsync_range+0x10d/0x130 [ 322.219729][T19533] ext4_buffered_write_iter+0x34f/0x3c0 [ 322.225278][T19533] ext4_file_write_iter+0x387/0xf60 [ 322.230509][T19533] iter_file_splice_write+0x666/0xa60 [ 322.235879][T19533] direct_splice_actor+0x156/0x2a0 [ 322.240991][T19533] splice_direct_to_actor+0x312/0x680 [ 322.246375][T19533] do_splice_direct+0xda/0x150 [ 322.251141][T19533] do_sendfile+0x380/0x650 [ 322.255661][T19533] __x64_sys_sendfile64+0x105/0x150 [ 322.260868][T19533] x64_sys_call+0x2bb4/0x3000 [ 322.265544][T19533] do_syscall_64+0xd2/0x200 [ 322.270049][T19533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.275942][T19533] [ 322.278257][T19533] value changed: 0x0a000021 -> 0x04000021 [ 322.284062][T19533] [ 322.286390][T19533] Reported by Kernel Concurrency Sanitizer on: [ 322.292543][T19533] CPU: 1 UID: 0 PID: 19533 Comm: syz.6.5691 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 322.303924][T19533] Tainted: [W]=WARN [ 322.307728][T19533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.317862][T19533] ================================================================== [ 322.404465][ T4510] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.