last executing test programs: 1m29.563064165s ago: executing program 2 (id=33): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 1m29.465375629s ago: executing program 2 (id=35): syz_emit_ethernet(0xde, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x24ef5, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000000000)="4853ea8b", 0x4, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.023729099s ago: executing program 2 (id=39): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$inet6(0xa, 0x2, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 1m28.98925956s ago: executing program 2 (id=40): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/243, 0xfffffed7}], 0x1}, 0x0) 1m28.854806686s ago: executing program 2 (id=41): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m28.625555036s ago: executing program 2 (id=44): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = syz_io_uring_setup(0x14f5, &(0x7f0000000400)={0x0, 0xd144, 0x1000, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0xddd6, 0x4, 0x0, 0x0) 1m22.258280128s ago: executing program 4 (id=131): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x811, 0x0, 0x8000007, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810dd}) r2 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x1, 0x105}) io_setup(0x8, &(0x7f00000001c0)=0x0) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) 1m21.98973911s ago: executing program 4 (id=137): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3"], 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB="0000eb810000000000ffffffffff000000000000", @ANYRES32=r2], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r3, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{r4}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) 1m21.428847265s ago: executing program 4 (id=144): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xb, 0x5, 0x2, 0x200004, 0x5}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) 1m21.254706203s ago: executing program 4 (id=147): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@errors_continue}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@noquota}, {@resgid}, {@data_err_ignore}, {@nodiscard}, {@nobh}, {@nojournal_checksum}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x56b, &(0x7f0000000b00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read(r1, &(0x7f0000000000), 0x20f1) 1m21.009802473s ago: executing program 4 (id=153): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000480)='\xbd\x10\xe2\n\xc4\xa8\xf80\xce\x9cqa\xfeK\xc2;Y\x8b\xbbfd\xa5!\x95\x88V9g\x00\x00`V\xd5\x1c\xa8?\a\x9e[O<\xf4s\x85~\t\x00\x00\x00\x04a\xf8\xa6f\x96nB\x02\x10\xc0\xa8\xea\x16uq\xc4\xb0\xe2\xf4\x00\x00C$', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='.]:&\x00', &(0x7f0000000140)='\x00', 0x0) close(r0) 1m20.516145475s ago: executing program 4 (id=160): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 1m20.515671055s ago: executing program 32 (id=160): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) 1m18.452976696s ago: executing program 3 (id=178): bind$netlink(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10020) 1m17.579344485s ago: executing program 3 (id=183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 1m17.425543802s ago: executing program 3 (id=184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x27, 0xe, 0xf, 0x4}]}}]}}]}, 0x44}}, 0x0) 1m17.309704097s ago: executing program 3 (id=186): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@errors_continue}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@noquota}, {@resgid}, {@data_err_ignore}, {@nodiscard}, {@nobh}, {@nojournal_checksum}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x56b, &(0x7f0000000b00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read(r1, &(0x7f0000000000), 0x20f1) 1m17.050806498s ago: executing program 3 (id=187): socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, {0xa, 0x4e24, 0xfffffffb, @remote, 0x6}, 0x0, {[0x6, 0x200, 0x8000001, 0xfffffefc, 0x2d, 0x1, 0x2, 0x200003]}}, 0xffffffffffffff1f) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000011c0), 0x2401, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0ffb}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') 1m16.33016856s ago: executing program 3 (id=193): unshare(0x26000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) ppoll(&(0x7f0000000400)=[{r0, 0x2084}], 0x1, 0x0, 0x0, 0x0) 1m16.32982047s ago: executing program 33 (id=193): unshare(0x26000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), 0x14) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) ppoll(&(0x7f0000000400)=[{r0, 0x2084}], 0x1, 0x0, 0x0, 0x0) 1m13.596295841s ago: executing program 34 (id=44): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r2 = syz_io_uring_setup(0x14f5, &(0x7f0000000400)={0x0, 0xd144, 0x1000, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r2, 0x3516, 0xddd6, 0x4, 0x0, 0x0) 1m7.389109366s ago: executing program 6 (id=338): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) unshare(0x6a040000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1m7.167439656s ago: executing program 6 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1m7.128600398s ago: executing program 6 (id=344): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0xc9bc, 0x8, 0x2, 0x801ef}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749d, 0x4, 0x0, 0x0, 0x0) 1m7.038438032s ago: executing program 6 (id=347): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$eJzs3M9rHFUcAPDv7OZHfyfWWm1tdbWKxR9Jk1btwYOKggcFQQ/1GJO01mwbaSLYEjQVqUcpeBePgn+BNy+iHkTwquBRCkWD0NRTZHZm2s1mkyZpkm2znw9s9r35se99Z+btvpmXmQDaViX9k0TsiIjfI6Iny85foJK9zc5MDV+fmRpOYm7urb+T2nLXZqaGi0WL9bbnmcOliNJnSbyYLCx34vyFsaFqdfRcnu+fPPNB/8T5C8+cPjN0avTU6NnB48ePHR14/rnBZ9ckzjSua/s/Hj+w77V3Lr8xfOLyuz99m1Zr78Fsfn0ct3S9SUBNVNKt9s9cTeO8x1dQ97vBzrp00tHCirAi5YhId1dnrf33RDlu7ryeePXTllYOWFfpb1P34rOn54BNLIlW1wBojeKHPj3/LV4b1PW4I1x9KaIrT8/OTA3P3oi/I0r59M51LL8SESem//sqfcVKr0MAAKxCrW/zdLP+Xyn21t6zsY5d+RhKb0TcExG7I+LeiNgTEfdF1Ja9PyIeyFae61lm+ZWG/ML+T+lK0zqvkbT/90Jd32+2Lv78rbec53bW4u9MTp6ujh7Jt8nh6OxO8wNLlPH9K799sdi8+v5f+krLL/qCeQWudDRcoBsZmhxaq41w9WLE/o5m8Sc3RgLSI2BfROxf2UfvKhKnn/zmwGIL3Tr+JazBONPc1xFPZPt/OhriLyRLj0/2b4nq6JH+4qhY6OdfL72ZJ7sa591W/Gsg3f/b5h//+ZyL+XvPv0k2XtsZ1erouYmVl3Hpj88XPadZ7fHflbxdG7P+5b1s2kdDk5PnBiK6ktdr+WJD16YP3ly3yBfLp/EfPtS8/e/O10njfzAi0oP4YEQ8FBEP53V/JCIejYhDS8T/48uPvb9E/Ekk0dL9P9L0++/G8d+b1I/XryJRHvvhu/zTtiyMv5i01P4/FtO179pM7fvvFpZbwdvcfAAAAHBXKEXEjkhKfVm6siNKpb6+7H/498S2UnV8YvKpk+Mfnh3J7hHojc5ScaWrp+566EAynX9ilh/MrxUX84/m142/LG+t5fuGx6sjLY4d2t32+e0/ivaf+qvc6toB6879WtC+Gtt/qUX1ADbecn7/nQvA5tSk/W9tRT2Ajef8H9pXs/b/SUNe/x82p4Xt/88mj6wDNiP9f2hf2j+0L+0f2tJy7+LviojuiFj1QwDmJYqbBVa6evFFdWFsy7Lv8L/zEpV1+eTiiRfrWfmtcXNKlO6IjbmBifJYd8tKT1vMxhba5GE1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd6H/AwAA///g6dxC") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file1\x00') ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_audit(0x10, 0x3, 0x9) write$UHID_CREATE(r0, 0x0, 0x0) 1m5.979404109s ago: executing program 6 (id=364): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x3, 0x0, &(0x7f0000000140)) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m5.693469661s ago: executing program 6 (id=368): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x108) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 1m5.658689133s ago: executing program 35 (id=368): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fchmod(0xffffffffffffffff, 0x108) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) 45.588213672s ago: executing program 0 (id=675): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = io_uring_setup(0x2d9a, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, 0xdd}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0x0, 0x1000000, &(0x7f0000000480)=[r1]}, 0x1) mlockall(0x7) socket$inet6(0xa, 0x80002, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$TIOCMIWAIT(r2, 0x5453, 0x0) 45.522271914s ago: executing program 0 (id=679): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x5, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) close_range(r0, r1, 0x0) 45.478552087s ago: executing program 0 (id=681): r0 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x449395e6eaaab2a1, 0x12, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 45.452088398s ago: executing program 0 (id=683): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./file1\x00') ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) socket$nl_audit(0x10, 0x3, 0x9) write$UHID_CREATE(r0, 0x0, 0x0) 44.71433385s ago: executing program 0 (id=692): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) close(0xffffffffffffffff) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x4) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 44.651952823s ago: executing program 0 (id=694): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) unshare(0x400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) ioctl$int_in(r1, 0x5452, &(0x7f0000000680)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x4, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 44.635214914s ago: executing program 36 (id=694): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) unshare(0x400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) ioctl$int_in(r1, 0x5452, &(0x7f0000000680)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x800, 0x3, 0xe3bc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x7, 0x4, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0xaf5, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x7, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x0, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x40, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3.276128385s ago: executing program 1 (id=1478): creat(&(0x7f0000000680)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x84, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x38, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x4}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 3.209356418s ago: executing program 9 (id=1479): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1fff, 0x6, @mcast2, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) write(r1, &(0x7f0000000140)="82650000", 0x4) 3.188567339s ago: executing program 1 (id=1480): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe2(0x0, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf, 0x8) r1 = syz_io_uring_setup(0x2a09, &(0x7f0000000000)={0x0, 0x7f36, 0x800, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.16109334s ago: executing program 9 (id=1481): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.892212572s ago: executing program 1 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)="00c881d760", 0x5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 2.891282752s ago: executing program 9 (id=1487): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000000140)=""/4096, 0x1000) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000008095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe01}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.737434629s ago: executing program 9 (id=1488): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='reno', 0x4) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f19", 0x86}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001bc0)="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", 0x221}], 0x1}}], 0x2, 0x2090) r1 = socket(0xa, 0x3, 0xff) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12}, 0x2}], 0x1, 0x4020, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.432757643s ago: executing program 5 (id=1497): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001f80)=""/4102, 0x1006) getdents(r2, &(0x7f0000000100)=""/155, 0x9b) rename(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.432128933s ago: executing program 5 (id=1498): r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x200a, 0x6, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xad7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) 2.402448224s ago: executing program 5 (id=1499): socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 2.27325108s ago: executing program 5 (id=1501): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xfec4, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) 2.232323211s ago: executing program 5 (id=1502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x1}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0xfff0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 2.021287101s ago: executing program 1 (id=1503): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.862146908s ago: executing program 9 (id=1504): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x0, 0x26, 0x0, 0x10000, 0x5e50ec8b, 0x10000, @value=r0}, 0x28) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048044}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.466701725s ago: executing program 9 (id=1507): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0xfffffff8}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b8, 0x2a8, 0x98, 0x2a8, 0x130, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 895.037311ms ago: executing program 1 (id=1509): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 450.37149ms ago: executing program 7 (id=1519): setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 408.996312ms ago: executing program 7 (id=1521): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX, @ANYRES32], 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x200000) bind$rds(0xffffffffffffffff, 0x0, 0x0) 209.291641ms ago: executing program 8 (id=1524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 175.649093ms ago: executing program 5 (id=1525): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 166.558843ms ago: executing program 8 (id=1526): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6, 0x12, 0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 155.209043ms ago: executing program 7 (id=1527): timerfd_create(0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 98.668396ms ago: executing program 7 (id=1528): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x2037, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38"], 0x0, 0x41, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 98.044996ms ago: executing program 7 (id=1529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") rename(&(0x7f0000000000)='./file2\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x14b442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r2}, 0x18) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f0000000780)={0xa, 0x2, 0x398, @empty}, 0x1c) 49.326468ms ago: executing program 8 (id=1530): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000004c0)=""/55, 0x37) getdents64(r0, 0xfffffffffffffffe, 0x29) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)={{0x14, 0x3f5, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3f4}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x0) 48.761918ms ago: executing program 8 (id=1531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130720000000fcdbdf25e00000010000e2ff0000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 48.051658ms ago: executing program 7 (id=1532): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001000000000000000"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0x8b}, 0x0) socket$caif_stream(0x25, 0x1, 0x4) 34.653719ms ago: executing program 8 (id=1533): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) futex(0x0, 0x1, 0x3, 0x0, 0x0, 0xfffffffd) 653.37µs ago: executing program 8 (id=1534): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}]}, 0x40}}, 0x4048084) 0s ago: executing program 1 (id=1535): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f00000010c0)=""/57}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x15}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) 0s ago: executing program 7 (id=1536): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x24040000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000580)={0x0, 0xffffffff, 0x0, 'queue0\x00'}) kernel console output (not intermixed with test programs): 000000. [ 68.678400][ T29] audit: type=1326 audit(1764091096.933:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.701680][ T29] audit: type=1326 audit(1764091096.933:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.725035][ T29] audit: type=1326 audit(1764091096.933:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.748309][ T29] audit: type=1326 audit(1764091096.933:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.771943][ T29] audit: type=1326 audit(1764091096.933:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.795349][ T29] audit: type=1326 audit(1764091096.933:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.818656][ T29] audit: type=1326 audit(1764091096.933:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.841938][ T29] audit: type=1326 audit(1764091096.933:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.865289][ T29] audit: type=1326 audit(1764091096.933:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5626 comm="syz.7.559" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12cbbf749 code=0x7ffc0000 [ 68.896377][ T5638] netlink: 'syz.8.560': attribute type 4 has an invalid length. [ 68.908014][ T5638] netlink: 'syz.8.560': attribute type 4 has an invalid length. [ 69.102482][ T5655] loop8: detected capacity change from 0 to 512 [ 69.109766][ T5655] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 69.131374][ T5655] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.155811][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.212570][ T5666] syzkaller0: entered promiscuous mode [ 69.218059][ T5666] syzkaller0: entered allmulticast mode [ 69.328784][ T5674] netlink: 12 bytes leftover after parsing attributes in process `syz.7.578'. [ 69.356046][ T5676] loop7: detected capacity change from 0 to 512 [ 69.371350][ T5676] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.386194][ T5676] EXT4-fs (loop7): mount failed [ 69.417122][ T5680] syzkaller1: entered promiscuous mode [ 69.422642][ T5680] syzkaller1: entered allmulticast mode [ 69.447805][ T5682] kernel profiling enabled (shift: 9) [ 69.730258][ T5694] loop8: detected capacity change from 0 to 1024 [ 69.799785][ T3633] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.805943][ T3691] Bluetooth: hci0: command 0x1003 tx timeout [ 69.833293][ T5694] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.858769][ T5694] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.925879][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.937370][ T5704] netlink: 'syz.0.590': attribute type 13 has an invalid length. [ 69.990683][ T5704] program syz.0.590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 70.160094][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.591'. [ 70.205762][ T5711] netlink: 12 bytes leftover after parsing attributes in process `syz.8.591'. [ 70.427899][ T5720] syzkaller0: entered promiscuous mode [ 70.433481][ T5720] syzkaller0: entered allmulticast mode [ 70.751985][ T5731] netlink: 8 bytes leftover after parsing attributes in process `GPL'. [ 70.784698][ T5731] ip6gre1: entered allmulticast mode [ 71.234031][ T5742] loop1: detected capacity change from 0 to 512 [ 71.351282][ T5742] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.604: inode has both inline data and extents flags [ 71.366985][ T5742] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.604: couldn't read orphan inode 15 (err -117) [ 71.394211][ T5742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.283273][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.427759][ T5768] netlink: 24 bytes leftover after parsing attributes in process `syz.8.614'. [ 72.512896][ T5768] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5768 comm=syz.8.614 [ 72.669347][ T5774] loop5: detected capacity change from 0 to 512 [ 72.681268][ T5774] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.616: error while reading EA inode 32 err=-116 [ 72.723801][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.8.617'. [ 72.772719][ T5774] EXT4-fs (loop5): Remounting filesystem read-only [ 72.854919][ T5774] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.867992][ T5774] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 72.927200][ T5774] EXT4-fs (loop5): 1 orphan inode deleted [ 72.942396][ T5774] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.985495][ T5774] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.027802][ T5793] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 73.083217][ T5797] smc: net device bond0 applied user defined pnetid SYZ0 [ 73.084197][ T5793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5793 comm=syz.0.623 [ 73.173020][ T5804] bridge: RTM_NEWNEIGH with invalid ether address [ 73.195925][ T5806] netlink: 'syz.5.630': attribute type 1 has an invalid length. [ 73.336100][ T5816] syzkaller0: entered promiscuous mode [ 73.341643][ T5816] syzkaller0: entered allmulticast mode [ 73.469997][ T5822] wg2: left promiscuous mode [ 73.474629][ T5822] wg2: left allmulticast mode [ 73.524890][ T5822] wg2: entered promiscuous mode [ 73.530147][ T5822] wg2: entered allmulticast mode [ 73.564494][ T5829] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 73.571852][ T5829] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 73.582267][ T5828] lo: entered allmulticast mode [ 73.587171][ T5828] tunl0: entered allmulticast mode [ 73.592435][ T5828] gre0: entered allmulticast mode [ 73.597509][ T5828] gretap0: entered allmulticast mode [ 73.602876][ T5828] erspan0: entered allmulticast mode [ 73.608230][ T5828] ip_vti0: entered allmulticast mode [ 73.613578][ T5828] ip6_vti0: entered allmulticast mode [ 73.619004][ T5828] sit0: entered allmulticast mode [ 73.624151][ T5828] ip6tnl0: entered allmulticast mode [ 73.629509][ T5828] ip6gre0: entered allmulticast mode [ 73.634889][ T5828] syz_tun: entered allmulticast mode [ 73.640308][ T5828] ip6gretap0: entered allmulticast mode [ 73.646069][ T5828] vcan0: entered allmulticast mode [ 73.651337][ T5828] bond0: entered allmulticast mode [ 73.656466][ T5828] bond_slave_0: entered allmulticast mode [ 73.662228][ T5828] bond_slave_1: entered allmulticast mode [ 73.668077][ T5828] team0: entered allmulticast mode [ 73.673195][ T5828] team_slave_0: entered allmulticast mode [ 73.688856][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 73.688868][ T29] audit: type=1400 audit(1764091102.013:1238): avc: denied { watch } for pid=5835 comm="syz.8.642" path="/49" dev="tmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 73.709743][ T5828] dummy0: entered allmulticast mode [ 73.722562][ T5828] nlmon0: entered allmulticast mode [ 73.727894][ T5828] caif0: entered allmulticast mode [ 73.733078][ T5828] batadv0: entered allmulticast mode [ 73.738543][ T5828] vxcan0: entered allmulticast mode [ 73.743922][ T5828] vxcan1: entered allmulticast mode [ 73.749174][ T5828] veth0: entered allmulticast mode [ 73.754402][ T5828] veth1: entered allmulticast mode [ 73.759660][ T5828] wg0: entered allmulticast mode [ 73.764705][ T5828] wg1: entered allmulticast mode [ 73.769744][ T5828] wg2: entered allmulticast mode [ 73.774845][ T5828] veth0_to_bridge: entered allmulticast mode [ 73.781044][ T5828] veth1_to_bridge: entered allmulticast mode [ 73.787423][ T5828] veth0_to_bond: entered allmulticast mode [ 73.793472][ T5828] veth1_to_bond: entered allmulticast mode [ 73.799439][ T5828] veth0_to_team: entered allmulticast mode [ 73.805522][ T5828] veth0_to_batadv: entered allmulticast mode [ 73.811715][ T5828] batadv_slave_0: entered allmulticast mode [ 73.817663][ T5828] veth1_to_batadv: entered allmulticast mode [ 73.823851][ T5828] batadv_slave_1: entered allmulticast mode [ 73.829827][ T5828] xfrm0: entered allmulticast mode [ 73.835083][ T5828] veth0_to_hsr: entered allmulticast mode [ 73.841015][ T5828] hsr_slave_0: entered allmulticast mode [ 73.846702][ T5828] veth1_to_hsr: entered allmulticast mode [ 73.852589][ T5828] hsr_slave_1: entered allmulticast mode [ 73.858346][ T5828] hsr0: entered allmulticast mode [ 73.863608][ T5828] veth1_virt_wifi: entered allmulticast mode [ 73.869681][ T5828] veth0_virt_wifi: entered allmulticast mode [ 73.875940][ T5828] veth1_vlan: entered allmulticast mode [ 73.881885][ T5828] vlan0: entered allmulticast mode [ 73.887050][ T5828] vlan1: entered allmulticast mode [ 73.892259][ T5828] macvlan0: entered allmulticast mode [ 73.897713][ T5828] macvlan1: entered allmulticast mode [ 73.903200][ T5828] ipvlan0: entered allmulticast mode [ 73.908605][ T5828] ipvlan1: entered allmulticast mode [ 73.913971][ T5828] veth1_macvtap: entered allmulticast mode [ 73.919918][ T5828] veth0_macvtap: entered allmulticast mode [ 73.925781][ T5828] macvtap0: entered allmulticast mode [ 73.931298][ T5828] macsec0: left promiscuous mode [ 73.936259][ T5828] macsec0: entered allmulticast mode [ 73.941724][ T5828] geneve0: entered allmulticast mode [ 73.947077][ T5828] geneve1: entered allmulticast mode [ 73.952447][ T5828] veth2: entered allmulticast mode [ 73.957613][ T5828] veth3: entered allmulticast mode [ 73.962490][ T29] audit: type=1400 audit(1764091102.293:1239): avc: denied { write } for pid=5841 comm="syz.8.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 73.962953][ T5828] veth4: entered allmulticast mode [ 73.987290][ T5828] veth5: entered allmulticast mode [ 73.994734][ T5828] netdevsim netdevsim5 eth0: entered allmulticast mode [ 74.001806][ T5828] netdevsim netdevsim5 eth1: entered allmulticast mode [ 74.008769][ T5828] netdevsim netdevsim5 eth2: entered allmulticast mode [ 74.015955][ T5828] netdevsim netdevsim5 eth3: entered allmulticast mode [ 74.053866][ T5828] batman_adv: batadv0: Interface deactivated: macvtap1 [ 74.170498][ T29] audit: type=1400 audit(1764091102.503:1240): avc: denied { mount } for pid=5847 comm="syz.5.646" name="/" dev="ramfs" ino=13459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 74.217307][ T5840] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 74.425011][ T5850] loop0: detected capacity change from 0 to 512 [ 74.452483][ T5850] EXT4-fs: inline encryption not supported [ 74.458334][ T5850] EXT4-fs: Ignoring removed i_version option [ 74.516868][ T5850] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.647: inode has both inline data and extents flags [ 74.547612][ T5850] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.647: couldn't read orphan inode 15 (err -117) [ 74.628242][ T5859] loop8: detected capacity change from 0 to 128 [ 74.653153][ T5850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.695511][ T5861] netlink: 'syz.1.651': attribute type 12 has an invalid length. [ 74.720181][ T29] audit: type=1400 audit(1764091103.043:1241): avc: denied { mount } for pid=5858 comm="syz.8.650" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 74.742798][ T5859] bio_check_eod: 32 callbacks suppressed [ 74.742814][ T5859] syz.8.650: attempt to access beyond end of device [ 74.742814][ T5859] loop8: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 74.778928][ T5859] syz.8.650: attempt to access beyond end of device [ 74.778928][ T5859] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 74.792386][ T5859] buffer_io_error: 18 callbacks suppressed [ 74.792400][ T5859] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 74.807611][ T29] audit: type=1400 audit(1764091103.103:1242): avc: denied { read } for pid=5849 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.829216][ T5859] syz.8.650: attempt to access beyond end of device [ 74.829216][ T5859] loop8: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 74.845816][ T5859] syz.8.650: attempt to access beyond end of device [ 74.845816][ T5859] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 74.859322][ T5859] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 74.868467][ T5859] syz.8.650: attempt to access beyond end of device [ 74.868467][ T5859] loop8: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 74.890799][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.894243][ T5859] syz.8.650: attempt to access beyond end of device [ 74.894243][ T5859] loop8: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 74.913181][ T5859] Buffer I/O error on dev loop8, logical block 96, lost async page write [ 74.923361][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.654'. [ 74.937312][ T5859] syz.8.650: attempt to access beyond end of device [ 74.937312][ T5859] loop8: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 74.957982][ T29] audit: type=1400 audit(1764091103.283:1243): avc: denied { create } for pid=5869 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.969947][ T5859] syz.8.650: attempt to access beyond end of device [ 74.969947][ T5859] loop8: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 74.991421][ T5859] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 75.006791][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.655'. [ 75.030099][ T5859] syz.8.650: attempt to access beyond end of device [ 75.030099][ T5859] loop8: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 75.042997][ T29] audit: type=1400 audit(1764091103.283:1244): avc: denied { write } for pid=5869 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.063490][ T29] audit: type=1400 audit(1764091103.283:1245): avc: denied { nlmsg_write } for pid=5869 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.065483][ T5859] syz.8.650: attempt to access beyond end of device [ 75.065483][ T5859] loop8: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 75.084165][ T29] audit: type=1400 audit(1764091103.283:1246): avc: denied { read } for pid=5869 comm="syz.1.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 75.084189][ T29] audit: type=1400 audit(1764091103.333:1247): avc: denied { create } for pid=5874 comm="syz.0.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 75.097497][ T5859] Buffer I/O error on dev loop8, logical block 112, lost async page write [ 75.183113][ T5881] syzkaller0: entered promiscuous mode [ 75.188664][ T5881] syzkaller0: entered allmulticast mode [ 75.195218][ T5859] Buffer I/O error on dev loop8, logical block 116, lost async page write [ 75.251193][ T5859] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 75.260173][ T5859] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 75.273398][ T5859] Buffer I/O error on dev loop8, logical block 120, lost async page write [ 75.285156][ T5859] Buffer I/O error on dev loop8, logical block 124, lost async page write [ 75.352864][ T5895] netlink: 64 bytes leftover after parsing attributes in process `syz.5.664'. [ 75.692085][ T5917] netlink: 'syz.5.674': attribute type 12 has an invalid length. [ 75.800381][ T5921] netlink: 64 bytes leftover after parsing attributes in process `syz.8.676'. [ 75.823952][ T5924] netlink: 36 bytes leftover after parsing attributes in process `syz.5.677'. [ 75.839264][ T5924] loop5: detected capacity change from 0 to 1024 [ 75.875301][ T5924] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.907296][ T3884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.930630][ T5938] loop5: detected capacity change from 0 to 128 [ 75.942199][ T5941] loop0: detected capacity change from 0 to 512 [ 75.958154][ T5941] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.683: inode has both inline data and extents flags [ 75.971757][ T5941] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.683: couldn't read orphan inode 15 (err -117) [ 75.985221][ T5941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.090403][ T5946] loop0: detected capacity change from 512 to 64 [ 76.091891][ T5941] EXT4-fs (loop0): discard request in group:0 block:120 count:4 failed with -5 [ 76.106269][ T5941] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: IO failure [ 76.114452][ T5941] EXT4-fs error (device loop0): ext4_free_data:978: inode #18: block 37: comm syz.0.683: IO error syncing itable block [ 76.127144][ T5941] EXT4-fs error (device loop0): ext4_check_bdev_write_error:228: comm syz.0.683: Error while async write back metadata [ 76.140194][ T5941] EXT4-fs error (device loop0): ext4_splice_branch:472: inode #18: block 37: comm syz.0.683: IO error syncing itable block [ 76.153195][ T5941] EXT4-fs error (device loop0): ext4_check_bdev_write_error:228: comm syz.0.683: Error while async write back metadata [ 76.165861][ T5941] EXT4-fs (loop0): discard request in group:0 block:120 count:1 failed with -5 [ 76.174969][ T5941] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: IO failure [ 76.183279][ T5941] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 121:freeing already freed block (bit 120); block bitmap corrupt. [ 76.197932][ T5941] EXT4-fs (loop0): pa ffff8881072071c0: logic 116, phys. 113, len 12 [ 76.206110][ T5941] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 12, pa_free 11 [ 76.216969][ T5941] EXT4-fs error (device loop0): ext4_free_data:978: inode #18: block 37: comm syz.0.683: IO error syncing itable block [ 76.234060][ T5941] EXT4-fs error (device loop0): ext4_check_bdev_write_error:228: comm syz.0.683: Error while async write back metadata [ 76.254485][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 76.265773][ T5941] buffer_io_error: 86 callbacks suppressed [ 76.265788][ T5941] Buffer I/O error on device loop0, logical block 41 [ 76.278314][ T5941] Buffer I/O error on device loop0, logical block 42 [ 76.284982][ T5941] Buffer I/O error on device loop0, logical block 43 [ 76.291637][ T5941] Buffer I/O error on device loop0, logical block 44 [ 76.304291][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 76.308048][ T5955] netlink: 12 bytes leftover after parsing attributes in process `syz.8.685'. [ 76.315528][ T5941] Buffer I/O error on device loop0, logical block 49 [ 76.315548][ T5941] Buffer I/O error on device loop0, logical block 50 [ 76.315559][ T5941] Buffer I/O error on device loop0, logical block 51 [ 76.315569][ T5941] Buffer I/O error on device loop0, logical block 52 [ 76.350288][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 76.362433][ T5941] Buffer I/O error on device loop0, logical block 57 [ 76.369116][ T5941] Buffer I/O error on device loop0, logical block 58 [ 76.410012][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 76.531287][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 76.558159][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 76.572807][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 76.584462][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 76.595935][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 76.607377][ T5941] EXT4-fs warning (device loop0): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 76.711338][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.735274][ T5966] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 76.742636][ T5966] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 76.884034][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 76.920185][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.927241][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.934527][ T5972] bridge_slave_0: entered allmulticast mode [ 76.941012][ T5972] bridge_slave_0: entered promiscuous mode [ 76.947670][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.954895][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.962030][ T5972] bridge_slave_1: entered allmulticast mode [ 76.968395][ T5972] bridge_slave_1: entered promiscuous mode [ 76.986163][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.996470][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.017264][ T5972] team0: Port device team_slave_0 added [ 77.024115][ T5972] team0: Port device team_slave_1 added [ 77.039604][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.046626][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.072504][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.083678][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.090703][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.116791][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.142743][ T5972] hsr_slave_0: entered promiscuous mode [ 77.148785][ T5972] hsr_slave_1: entered promiscuous mode [ 77.154662][ T5972] debugfs: 'hsr0' already exists in 'hsr' [ 77.160401][ T5972] Cannot create hsr debugfs directory [ 77.222913][ T5972] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 77.232244][ T5972] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 77.241075][ T5972] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 77.250079][ T5972] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 77.283934][ T6000] loop1: detected capacity change from 0 to 128 [ 77.291478][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.307829][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.319722][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.326852][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.339774][ T5205] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.346851][ T5205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.534409][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.717530][ T5972] veth0_vlan: entered promiscuous mode [ 77.738845][ T5972] veth1_vlan: entered promiscuous mode [ 77.767766][ T5972] veth0_macvtap: entered promiscuous mode [ 77.787770][ T5972] veth1_macvtap: entered promiscuous mode [ 77.817936][ T6041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 77.819055][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.856737][ T6044] netem: incorrect ge model size [ 77.861792][ T6044] netem: change failed [ 77.872261][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.892777][ T5220] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.901913][ T5220] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.929957][ T5220] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.938918][ T5220] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.200002][ T6062] netlink: 16 bytes leftover after parsing attributes in process `syz.9.714'. [ 78.610791][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.7.723'. [ 78.692186][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 78.692253][ T29] audit: type=1326 audit(1764091107.013:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6043 comm="syz.8.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852652f749 code=0x7fc00000 [ 79.019613][ T29] audit: type=1400 audit(1764091107.093:1405): avc: denied { watch_reads } for pid=6087 comm="syz.7.724" path="/103" dev="tmpfs" ino=558 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 79.025409][ T6096] veth0: entered promiscuous mode [ 79.042026][ T29] audit: type=1400 audit(1764091107.163:1406): avc: denied { name_bind } for pid=6089 comm="syz.7.726" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 79.065495][ T6096] netlink: 4 bytes leftover after parsing attributes in process `syz.8.729'. [ 79.068553][ T29] audit: type=1326 audit(1764091107.173:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 79.100670][ T29] audit: type=1326 audit(1764091107.173:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 79.124056][ T29] audit: type=1326 audit(1764091107.173:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 79.147433][ T29] audit: type=1326 audit(1764091107.173:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 79.170874][ T29] audit: type=1326 audit(1764091107.193:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.8.727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 79.194233][ T29] audit: type=1326 audit(1764091107.263:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.8.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 79.217758][ T29] audit: type=1326 audit(1764091107.263:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6093 comm="syz.8.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 79.505804][ T6119] loop7: detected capacity change from 0 to 4096 [ 79.578615][ T6119] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.875487][ T6132] macvtap0: entered promiscuous mode [ 79.889593][ T6132] macvtap0: left promiscuous mode [ 80.021983][ T6138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.742'. [ 80.180211][ T4409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.278049][ T6145] veth8: entered promiscuous mode [ 80.283277][ T6145] veth8: entered allmulticast mode [ 80.440618][ T6155] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 80.561894][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.5.752'. [ 81.004657][ T6166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.013645][ T6166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.598427][ T6212] loop9: detected capacity change from 0 to 512 [ 81.622864][ T6212] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.779: bg 0: block 248: padding at end of block bitmap is not set [ 81.647645][ T6212] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.779: Failed to acquire dquot type 1 [ 81.667027][ T6212] EXT4-fs (loop9): 1 truncate cleaned up [ 81.679596][ T6212] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.704631][ T6212] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.740278][ T6232] netlink: 'syz.7.771': attribute type 10 has an invalid length. [ 81.748216][ T6232] batadv0: entered allmulticast mode [ 81.756356][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.764655][ T6232] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 81.777552][ T6232] netlink: 'syz.7.771': attribute type 10 has an invalid length. [ 81.785343][ T6232] netlink: 40 bytes leftover after parsing attributes in process `syz.7.771'. [ 81.814116][ T6232] batadv0: entered promiscuous mode [ 81.824842][ T6232] bond0: (slave batadv0): Releasing backup interface [ 81.838964][ T6232] bridge0: port 3(batadv0) entered blocking state [ 81.845509][ T6232] bridge0: port 3(batadv0) entered disabled state [ 81.888687][ T6244] netlink: 'syz.7.772': attribute type 7 has an invalid length. [ 81.896408][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.7.772'. [ 82.089823][ T5220] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 82.099153][ T5220] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 82.238806][ T6294] bridge: RTM_NEWNEIGH with invalid ether address [ 82.408442][ T6316] loop8: detected capacity change from 0 to 4096 [ 82.433687][ T6323] netlink: 'syz.7.789': attribute type 4 has an invalid length. [ 82.441483][ T6323] netlink: 152 bytes leftover after parsing attributes in process `syz.7.789'. [ 82.460899][ T6323] .`: renamed from bond0 (while UP) [ 82.566143][ T6316] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.956328][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.287161][ T5972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.700124][ T6381] netlink: 12 bytes leftover after parsing attributes in process `syz.5.782'. [ 83.852154][ T6394] netlink: 'syz.7.792': attribute type 30 has an invalid length. [ 84.014307][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 84.014323][ T29] audit: type=1400 audit(1764091112.343:1559): avc: denied { create } for pid=6395 comm="syz.5.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.040602][ T29] audit: type=1400 audit(1764091112.343:1560): avc: denied { bind } for pid=6395 comm="syz.5.793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.074704][ T29] audit: type=1400 audit(1764091112.403:1561): avc: denied { read } for pid=6399 comm="syz.7.804" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.075804][ T6398] netlink: 'syz.5.794': attribute type 10 has an invalid length. [ 84.098028][ T29] audit: type=1400 audit(1764091112.403:1562): avc: denied { open } for pid=6399 comm="syz.7.804" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 84.124008][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.145702][ T6398] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.166156][ T6398] netlink: 'syz.5.794': attribute type 10 has an invalid length. [ 84.174156][ T6398] netlink: 40 bytes leftover after parsing attributes in process `syz.5.794'. [ 84.183176][ T6398] batadv0: entered promiscuous mode [ 84.189343][ T6398] bond0: (slave batadv0): Releasing backup interface [ 84.197932][ T6398] bridge0: port 3(batadv0) entered blocking state [ 84.204484][ T6398] bridge0: port 3(batadv0) entered disabled state [ 84.214128][ T6398] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 84.291355][ T6415] veth8: entered promiscuous mode [ 84.296466][ T6415] veth8: entered allmulticast mode [ 84.434556][ T6423] loop7: detected capacity change from 0 to 256 [ 84.448842][ T6423] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.509537][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.801'. [ 84.521853][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.801'. [ 84.583121][ T29] audit: type=1400 audit(1764091112.913:1563): avc: denied { load_policy } for pid=6428 comm="syz.7.806" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 84.615989][ T6429] SELinux: ebitmap: truncated map [ 84.629328][ T6429] SELinux: failed to load policy [ 84.650511][ T29] audit: type=1326 audit(1764091112.983:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.9.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 84.683026][ T29] audit: type=1326 audit(1764091112.983:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.9.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 84.706499][ T29] audit: type=1326 audit(1764091112.983:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.9.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 84.729999][ T29] audit: type=1326 audit(1764091112.983:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.9.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 84.753428][ T29] audit: type=1326 audit(1764091112.983:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6432 comm="syz.9.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 84.765534][ T6442] netlink: 'syz.9.810': attribute type 10 has an invalid length. [ 84.793190][ T6442] batadv0: entered allmulticast mode [ 84.801449][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.810008][ T6442] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 84.819126][ T6445] netlink: 'syz.9.810': attribute type 10 has an invalid length. [ 84.826956][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.9.810'. [ 84.836203][ T6445] batadv0: entered promiscuous mode [ 84.842695][ T6445] bond0: (slave batadv0): Releasing backup interface [ 84.852245][ T6445] bridge0: port 3(batadv0) entered blocking state [ 84.858724][ T6445] bridge0: port 3(batadv0) entered disabled state [ 85.189830][ T5292] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 85.199075][ T5292] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 85.213845][ T6466] Set syz1 is full, maxelem 6117 reached [ 85.287765][ T6474] tipc: Started in network mode [ 85.292826][ T6474] tipc: Node identity ac14140f, cluster identity 4711 [ 85.299991][ T6474] tipc: New replicast peer: 255.255.255.83 [ 85.305916][ T6474] tipc: Enabled bearer , priority 10 [ 85.373345][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.8.818'. [ 85.383282][ T6468] netlink: 24 bytes leftover after parsing attributes in process `syz.8.818'. [ 85.674008][ T6495] kernel read not supported for file /!selinuxwk1ÐmÃ9Éž*T“ýâ‘ïª#j—¼ÞYÌÅmVËvm(pÉ-QZ#Ò{„¿ (pid: 6495 comm: syz.5.828) [ 85.773425][ T6499] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.257957][ T6507] syzkaller0: entered promiscuous mode [ 86.263555][ T6507] syzkaller0: entered allmulticast mode [ 86.659815][ T1036] tipc: Node number set to 2886997007 [ 87.144407][ T6518] loop9: detected capacity change from 0 to 4096 [ 87.154067][ T6522] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.167089][ T6518] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.253451][ T6522] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.312660][ T6522] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.371402][ T6522] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.450151][ T5292] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.464345][ T5972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.467010][ T5292] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.482649][ T5292] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.508190][ T5220] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.877024][ T6552] vlan2: entered allmulticast mode [ 87.954631][ T6558] netlink: 'syz.7.853': attribute type 13 has an invalid length. [ 87.968542][ T6560] vlan2: entered allmulticast mode [ 87.974751][ T6560] dummy0: entered allmulticast mode [ 88.006413][ T6562] program syz.7.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.020159][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.020628][ T6556] futex_wake_op: syz.1.852 tries to shift op by -1; fix this program [ 88.027413][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.076316][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.086383][ T6558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.097280][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 88.122994][ T5231] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.131540][ T5231] netdevsim netdevsim7 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.140184][ T5231] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.148624][ T5231] netdevsim netdevsim7 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.157236][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.855'. [ 88.171406][ T5231] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.179817][ T5231] netdevsim netdevsim7 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.188871][ T5231] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.197374][ T5231] netdevsim netdevsim7 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.263974][ T6574] loop1: detected capacity change from 0 to 2048 [ 88.279189][ T6580] loop8: detected capacity change from 0 to 128 [ 88.288368][ T6574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.301777][ T6580] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 88.315975][ T6580] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 88.380820][ T4931] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.398874][ T6589] netlink: 5 bytes leftover after parsing attributes in process `syz.8.866'. [ 88.408239][ T6589] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 88.415094][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.415843][ T6589] 0ªî{X¹¦: entered allmulticast mode [ 88.430598][ T6589] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 88.457321][ T6593] loop1: detected capacity change from 0 to 512 [ 88.467194][ T6595] netlink: 'syz.8.868': attribute type 13 has an invalid length. [ 88.487822][ T6593] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 88.503129][ T6593] EXT4-fs (loop1): mount failed [ 88.508431][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.515588][ T6595] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.531921][ T6598] program syz.8.868 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.574595][ T6591] cgroup: fork rejected by pids controller in /syz7 [ 88.611314][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.638111][ T6595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.688248][ T6595] tipc: Resetting bearer [ 88.726207][ T5220] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.734768][ T5220] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.743453][ T5220] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.754014][ T7391] netlink: 24 bytes leftover after parsing attributes in process `syz.5.874'. [ 88.761263][ T5220] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.789585][ T7391] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7391 comm=syz.5.874 [ 88.955850][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.5.879'. [ 88.964833][ T9492] netlink: 108 bytes leftover after parsing attributes in process `syz.5.879'. [ 88.974079][ T9492] netlink: 28 bytes leftover after parsing attributes in process `syz.5.879'. [ 88.983112][ T9492] netlink: 108 bytes leftover after parsing attributes in process `syz.5.879'. [ 88.992144][ T9492] netlink: 84 bytes leftover after parsing attributes in process `syz.5.879'. [ 89.026193][ T9494] loop7: detected capacity change from 0 to 2048 [ 89.026517][ T9496] loop5: detected capacity change from 0 to 512 [ 89.041590][ T9494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.050933][ T9496] __quota_error: 77 callbacks suppressed [ 89.050948][ T9496] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 89.054270][ T29] audit: type=1400 audit(1764091117.383:1645): avc: denied { mount } for pid=9493 comm="syz.7.880" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.059394][ T9496] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.110300][ T9496] EXT4-fs (loop5): mount failed [ 89.117533][ T29] audit: type=1400 audit(1764091117.443:1646): avc: denied { open } for pid=9493 comm="syz.7.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.137163][ T29] audit: type=1400 audit(1764091117.443:1647): avc: denied { kernel } for pid=9493 comm="syz.7.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 89.157236][ T29] audit: type=1400 audit(1764091117.483:1648): avc: denied { setattr } for pid=9493 comm="syz.7.880" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.186649][ T29] audit: type=1400 audit(1764091117.513:1649): avc: denied { unmount } for pid=4409 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 89.209216][ T29] audit: type=1400 audit(1764091117.533:1650): avc: denied { create } for pid=9495 comm="syz.5.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.230680][ T29] audit: type=1400 audit(1764091117.533:1651): avc: denied { write } for pid=9495 comm="syz.5.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.251282][ T29] audit: type=1400 audit(1764091117.533:1652): avc: denied { read } for pid=9495 comm="syz.5.881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.252841][ T4409] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.271564][ T29] audit: type=1326 audit(1764091117.543:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9495 comm="syz.5.881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730a71f749 code=0x7ffc0000 [ 89.716691][ T9527] loop5: detected capacity change from 0 to 512 [ 89.738801][ T9527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.773234][ T9527] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.889: bg 0: block 248: padding at end of block bitmap is not set [ 89.787742][ T9527] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.889: Failed to acquire dquot type 1 [ 89.800893][ T9527] EXT4-fs (loop5): 1 truncate cleaned up [ 89.807085][ T9527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.821010][ T9527] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.848662][ T9527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.890219][ T9538] loop5: detected capacity change from 0 to 512 [ 89.922241][ T9538] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.894: bg 0: block 248: padding at end of block bitmap is not set [ 89.936923][ T9538] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.894: Failed to acquire dquot type 1 [ 89.948740][ T9538] EXT4-fs (loop5): 1 truncate cleaned up [ 89.955400][ T9538] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.968233][ T9538] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.993787][ T3884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.003318][ T5218] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:49: Failed to release dquot type 1 [ 90.187757][ T9557] bridge: RTM_NEWNEIGH with invalid ether address [ 90.326459][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.905'. [ 90.392233][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.905'. [ 90.408898][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.905'. [ 90.445365][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.905'. [ 90.492658][ T9581] loop9: detected capacity change from 0 to 512 [ 90.510964][ T9580] No control pipe specified [ 90.542822][ T9581] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.554346][ T9581] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 90.564474][ T9581] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.907: Corrupt directory, running e2fsck is recommended [ 90.578972][ T9581] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 90.587615][ T9581] EXT4-fs error (device loop9): ext4_iget_extra_inode:5075: inode #15: comm syz.9.907: corrupted in-inode xattr: invalid ea_ino [ 90.602952][ T9581] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.907: couldn't read orphan inode 15 (err -117) [ 90.615301][ T9581] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.631301][ T9581] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.642935][ T9581] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 90.653102][ T9581] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.907: Corrupt directory, running e2fsck is recommended [ 90.685896][ T9581] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.697443][ T9581] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 90.707519][ T9581] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.907: Corrupt directory, running e2fsck is recommended [ 90.764082][ T9581] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.775629][ T9581] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 90.785852][ T9581] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.907: Corrupt directory, running e2fsck is recommended [ 90.833761][ T9581] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 90.844142][ T9598] ip6gre1: entered promiscuous mode [ 90.850598][ T9598] ip6gre1: entered allmulticast mode [ 90.859607][ T9581] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 3: comm syz.9.907: path /35/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 90.874942][ T9598] loop8: detected capacity change from 0 to 512 [ 90.885037][ T9596] team1: entered promiscuous mode [ 90.890674][ T9596] team1: entered allmulticast mode [ 90.897858][ T9596] 8021q: adding VLAN 0 to HW filter on device team1 [ 90.907194][ T9581] EXT4-fs error (device loop9): ext4_readdir:264: inode #2: block 64: comm syz.9.907: path /35/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 90.930740][ T5220] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.938343][ T5220] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.946402][ T9598] FAT-fs (loop8): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 90.955637][ T9598] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000003) [ 90.965655][ T9598] FAT-fs (loop8): Filesystem has been set read-only [ 90.972345][ T3439] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.050268][ T9601] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.073517][ T5972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.174436][ T3547] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.189916][ T3547] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 91.340917][ T3547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.800550][ T3547] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.839543][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.846235][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.852670][ T9617] syzkaller0: entered promiscuous mode [ 91.852728][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.858149][ T9617] syzkaller0: entered allmulticast mode [ 91.873875][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.896063][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.902656][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.909133][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.921348][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.928000][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 91.934531][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 92.394577][ T9648] hsr_slave_0: left promiscuous mode [ 92.400508][ T9648] hsr_slave_1: left promiscuous mode [ 92.609514][ T9662] syzkaller0: entered promiscuous mode [ 92.615140][ T9662] syzkaller0: entered allmulticast mode [ 92.739438][ T9675] loop9: detected capacity change from 0 to 1024 [ 92.758052][ T9676] loop1: detected capacity change from 0 to 256 [ 92.769462][ T9675] EXT4-fs: Ignoring removed orlov option [ 92.778076][ T9676] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.801903][ T9676] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 92.810505][ T9676] FAT-fs (loop1): Filesystem has been set read-only [ 92.821361][ T9675] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.122651][ T5972] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.710767][ T9711] bridge: RTM_NEWNEIGH with invalid ether address [ 93.762711][ T9716] loop5: detected capacity change from 0 to 512 [ 93.775982][ T9718] syz.9.957 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.786821][ T9720] syzkaller0: entered promiscuous mode [ 93.792438][ T9720] syzkaller0: entered allmulticast mode [ 93.798788][ T9716] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.814664][ T9716] EXT4-fs (loop5): mount failed [ 93.956950][ T9735] __nla_validate_parse: 7 callbacks suppressed [ 93.956968][ T9735] netlink: 96 bytes leftover after parsing attributes in process `syz.7.964'. [ 93.973739][ T9737] ÿÿÿÿÿÿ: renamed from vlan1 [ 94.056517][ T9755] netlink: 108 bytes leftover after parsing attributes in process `syz.5.973'. [ 94.132018][ T9763] loop1: detected capacity change from 0 to 1024 [ 94.139256][ T9763] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 94.150200][ T9763] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 94.161480][ T9763] JBD2: no valid journal superblock found [ 94.167228][ T9763] EXT4-fs (loop1): Could not load journal inode [ 94.180883][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 94.180898][ T29] audit: type=1400 audit(1764091122.513:1885): avc: denied { getopt } for pid=9762 comm="syz.1.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 94.245978][ T29] audit: type=1400 audit(1764091122.573:1886): avc: denied { create } for pid=9767 comm="syz.5.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 94.370082][ T9766] loop1: detected capacity change from 0 to 1024 [ 94.380587][ T9766] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 94.390952][ T9766] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.405591][ T9766] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 94.414789][ T9766] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.422572][ T9766] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.978: Inode bitmap for bg 0 marked uninitialized [ 94.441488][ T9766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.588189][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.689977][ T29] audit: type=1326 audit(1764091123.023:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 94.713377][ T29] audit: type=1326 audit(1764091123.023:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 94.735512][ T9784] netlink: 108 bytes leftover after parsing attributes in process `syz.8.986'. [ 94.738240][ T29] audit: type=1326 audit(1764091123.043:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730a71f749 code=0x7ffc0000 [ 94.769291][ T29] audit: type=1326 audit(1764091123.043:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f730a71f749 code=0x7ffc0000 [ 94.792638][ T29] audit: type=1326 audit(1764091123.043:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9786 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f730a71f749 code=0x7ffc0000 [ 94.816000][ T29] audit: type=1326 audit(1764091123.073:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 94.839351][ T29] audit: type=1326 audit(1764091123.073:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 94.862727][ T29] audit: type=1326 audit(1764091123.073:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9781 comm="syz.9.985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 94.888736][ T9788] loop5: detected capacity change from 0 to 512 [ 94.896339][ T9789] loop9: detected capacity change from 0 to 256 [ 94.909921][ T9789] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.927989][ T9783] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 94.936616][ T9783] FAT-fs (loop9): Filesystem has been set read-only [ 94.954404][ T9788] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.112053][ T3884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.136359][ T9812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.146343][ T9812] bond0 (unregistering): Released all slaves [ 95.167119][ T9818] xfrm0: entered promiscuous mode [ 95.173410][ T9818] xfrm0: entered allmulticast mode [ 95.183074][ T9819] netlink: 'syz.7.996': attribute type 10 has an invalid length. [ 95.192482][ T9819] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 95.201481][ T9819] team0: Failed to send options change via netlink (err -105) [ 95.209158][ T9819] team0: Port device dummy0 added [ 95.236517][ T9821] tipc: Enabled bearer , priority 0 [ 95.256988][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1000'. [ 95.286322][ T9821] syzkaller0: entered promiscuous mode [ 95.291914][ T9821] syzkaller0: entered allmulticast mode [ 95.303837][ T9821] tipc: Resetting bearer [ 95.325291][ T9820] tipc: Resetting bearer [ 95.364009][ T9820] tipc: Disabling bearer [ 95.399778][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 95.408902][ T9845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1009'. [ 95.428471][ T9845] netlink: 'syz.5.1009': attribute type 5 has an invalid length. [ 95.436321][ T9845] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1009'. [ 95.638945][ T9863] loop7: detected capacity change from 0 to 256 [ 95.832860][ T9874] loop9: detected capacity change from 0 to 512 [ 95.851128][ T9874] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.866578][ T9874] EXT4-fs (loop9): mount failed [ 95.876717][ T9880] loop7: detected capacity change from 0 to 512 [ 95.884621][ T9880] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.1020: inode has both inline data and extents flags [ 95.898509][ T9880] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1020: couldn't read orphan inode 15 (err -117) [ 95.911133][ T9880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.998703][ T9888] tipc: Started in network mode [ 96.003704][ T9888] tipc: Node identity 3a23a0a1e16, cluster identity 4711 [ 96.010830][ T9888] tipc: Enabled bearer , priority 0 [ 96.017511][ T9884] loop7: detected capacity change from 512 to 64 [ 96.017726][ T9880] bio_check_eod: 111 callbacks suppressed [ 96.017738][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.017738][ T9880] loop7: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 96.037838][ T9888] syzkaller0: entered promiscuous mode [ 96.043165][ T9880] buffer_io_error: 36 callbacks suppressed [ 96.043178][ T9880] Buffer I/O error on dev loop7, logical block 37, lost sync page write [ 96.048615][ T9888] syzkaller0: entered allmulticast mode [ 96.055570][ T9880] EXT4-fs error (device loop7): ext4_splice_branch:472: inode #18: block 37: comm syz.7.1020: IO error syncing itable block [ 96.069046][ T9888] tipc: Resetting bearer [ 96.086013][ T9880] EXT4-fs error (device loop7): ext4_check_bdev_write_error:228: comm syz.7.1020: Error while async write back metadata [ 96.100424][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.100424][ T9880] loop7: rw=2051, sector=348, nr_sectors = 2 limit=64 [ 96.114207][ T9880] EXT4-fs (loop7): discard request in group:0 block:173 count:1 failed with -5 [ 96.123429][ T9887] tipc: Resetting bearer [ 96.126141][ T9880] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: IO failure [ 96.137356][ T9880] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 174:freeing already freed block (bit 173); block bitmap corrupt. [ 96.152017][ T9880] EXT4-fs (loop7): pa ffff8881072a97e0: logic 132, phys. 173, len 12 [ 96.160150][ T9880] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5444: group 0, free 11, pa_free 10 [ 96.170375][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.170375][ T9880] loop7: rw=14337, sector=74, nr_sectors = 2 limit=64 [ 96.176396][ T9887] tipc: Disabling bearer [ 96.183682][ T9880] Buffer I/O error on dev loop7, logical block 37, lost sync page write [ 96.183725][ T9880] EXT4-fs error (device loop7): ext4_free_data:978: inode #18: block 37: comm syz.7.1020: IO error syncing itable block [ 96.210659][ T9880] EXT4-fs error (device loop7): ext4_check_bdev_write_error:228: comm syz.7.1020: Error while async write back metadata [ 96.223634][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.223634][ T9880] loop7: rw=2049, sector=82, nr_sectors = 8 limit=64 [ 96.236858][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 41) [ 96.248130][ T9880] buffer_io_error: 114 callbacks suppressed [ 96.248145][ T9880] Buffer I/O error on device loop7, logical block 41 [ 96.260683][ T9880] Buffer I/O error on device loop7, logical block 42 [ 96.267358][ T9880] Buffer I/O error on device loop7, logical block 43 [ 96.274025][ T9880] Buffer I/O error on device loop7, logical block 44 [ 96.282478][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.282478][ T9880] loop7: rw=2049, sector=98, nr_sectors = 8 limit=64 [ 96.295714][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 49) [ 96.306886][ T9880] Buffer I/O error on device loop7, logical block 49 [ 96.313558][ T9880] Buffer I/O error on device loop7, logical block 50 [ 96.320238][ T9880] Buffer I/O error on device loop7, logical block 51 [ 96.326907][ T9880] Buffer I/O error on device loop7, logical block 52 [ 96.334149][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.334149][ T9880] loop7: rw=2049, sector=114, nr_sectors = 8 limit=64 [ 96.347486][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 57) [ 96.358635][ T9880] Buffer I/O error on device loop7, logical block 57 [ 96.365303][ T9880] Buffer I/O error on device loop7, logical block 58 [ 96.441992][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.441992][ T9880] loop7: rw=2049, sector=130, nr_sectors = 8 limit=64 [ 96.455689][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 65) [ 96.509777][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.509777][ T9880] loop7: rw=2049, sector=90, nr_sectors = 8 limit=64 [ 96.523269][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 45) [ 96.547215][ T9906] loop5: detected capacity change from 0 to 512 [ 96.555460][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.555460][ T9880] loop7: rw=2049, sector=106, nr_sectors = 8 limit=64 [ 96.568839][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 53) [ 96.590058][ T9906] EXT4-fs: Ignoring removed i_version option [ 96.596123][ T9906] EXT4-fs: Ignoring removed bh option [ 96.611985][ T9880] syz.7.1020: attempt to access beyond end of device [ 96.611985][ T9880] loop7: rw=2049, sector=122, nr_sectors = 8 limit=64 [ 96.625375][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 61) [ 96.662291][ T9906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.662305][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 125) [ 96.662415][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 161) [ 96.681693][ T9906] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.778714][ T3884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.805151][ T9880] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 18 starting block 201) [ 96.856481][ T4409] Buffer I/O error on dev loop7, logical block 36, lost sync page write [ 96.880874][ T4409] EXT4-fs error (device loop7): ext4_handle_dirty_dirblock:409: inode #2: block 36: comm syz-executor: IO error syncing itable block [ 96.921883][ T4409] EXT4-fs error (device loop7) in ext4_delete_entry:2739: IO failure [ 96.964855][ T9838] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.978204][ T9919] loop8: detected capacity change from 0 to 512 [ 97.018375][ T9917] xfrm0: entered promiscuous mode [ 97.025747][ T9919] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.099014][ T9919] ÿÿÿÿÿÿ: renamed from vlan1 [ 97.175546][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.287710][ T5231] bridge0: port 3(batadv0) entered disabled state [ 97.302751][ T5231] bridge_slave_1: left allmulticast mode [ 97.308518][ T5231] bridge_slave_1: left promiscuous mode [ 97.313988][ T9951] netlink: 344 bytes leftover after parsing attributes in process `syz.5.1045'. [ 97.314195][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.364258][ T5231] bridge_slave_0: left allmulticast mode [ 97.369985][ T5231] bridge_slave_0: left promiscuous mode [ 97.375674][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.393531][ T9958] loop1: detected capacity change from 0 to 1024 [ 97.410074][ T9958] EXT4-fs: Ignoring removed orlov option [ 97.429807][ T9963] loop8: detected capacity change from 0 to 2048 [ 97.431090][ T9958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.471491][ T9963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.591544][ T5231] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.673327][ T5231] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.686089][ T5231] .` (unregistering): Released all slaves [ 97.750267][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.766109][ T5231] hsr_slave_0: left promiscuous mode [ 97.784423][ T5231] hsr_slave_1: left promiscuous mode [ 97.800108][ T5231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.807849][ T5231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.835333][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.876122][ T5231] team0 (unregistering): Port device team_slave_1 removed [ 97.888837][ T9977] loop1: detected capacity change from 0 to 1024 [ 97.896087][ T9977] EXT4-fs: Ignoring removed orlov option [ 97.902125][ T5231] team0 (unregistering): Port device team_slave_0 removed [ 97.903942][ T9977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.929302][ T5231] team0 (unregistering): Port device dummy0 removed [ 97.958433][ T9975] tipc: Enabled bearer , priority 0 [ 98.002049][ T9975] syzkaller0: entered promiscuous mode [ 98.007617][ T9975] syzkaller0: entered allmulticast mode [ 98.013470][ T9975] tipc: Resetting bearer [ 98.025720][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1056'. [ 98.063067][ T9974] tipc: Resetting bearer [ 98.079096][ T9974] tipc: Disabling bearer [ 98.188227][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1057'. [ 98.216194][ T9928] chnl_net:caif_netlink_parms(): no params data found [ 98.280704][T10006] loop8: detected capacity change from 0 to 512 [ 98.288065][ T9928] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.295274][ T9928] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.309861][ T9928] bridge_slave_0: entered allmulticast mode [ 98.316374][ T9928] bridge_slave_0: entered promiscuous mode [ 98.319920][T10006] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.1059: bg 0: block 248: padding at end of block bitmap is not set [ 98.323466][ T9928] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.343560][ T9928] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.350825][ T9928] bridge_slave_1: entered allmulticast mode [ 98.357409][ T9928] bridge_slave_1: entered promiscuous mode [ 98.377478][T10006] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.1059: Failed to acquire dquot type 1 [ 98.401474][T10018] loop5: detected capacity change from 0 to 1024 [ 98.408047][T10018] EXT4-fs: Ignoring removed orlov option [ 98.415795][ T9928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.424984][T10006] EXT4-fs (loop8): 1 truncate cleaned up [ 98.426127][ T9928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.451103][T10006] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.467159][T10016] veth2: entered promiscuous mode [ 98.472290][T10016] veth2: entered allmulticast mode [ 98.553136][T10018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.651116][ T9928] team0: Port device team_slave_0 added [ 98.658054][ T9928] team0: Port device team_slave_1 added [ 98.676507][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.683502][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.709411][ T9928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.743277][T10006] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.762227][ T9928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.769260][ T9928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.795273][ T9928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.884849][ T9928] hsr_slave_0: entered promiscuous mode [ 98.890993][ T9928] hsr_slave_1: entered promiscuous mode [ 98.894206][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.900010][ T9928] debugfs: 'hsr0' already exists in 'hsr' [ 98.911202][ T9928] Cannot create hsr debugfs directory [ 98.981236][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1064'. [ 99.020167][T10041] team0 (unregistering): Port device team_slave_0 removed [ 99.043389][T10041] team0 (unregistering): Port device team_slave_1 removed [ 99.132386][T10051] pim6reg: entered allmulticast mode [ 99.140306][T10051] pim6reg: left allmulticast mode [ 99.159510][ T3884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.214222][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 99.214236][ T29] audit: type=1400 audit(1764091127.543:2313): avc: denied { write } for pid=10081 comm="syz.1.1067" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.263818][ T29] audit: type=1400 audit(1764091127.593:2314): avc: denied { name_connect } for pid=10083 comm="syz.9.1066" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 99.293500][ T29] audit: type=1400 audit(1764091127.593:2315): avc: denied { listen } for pid=10083 comm="syz.9.1066" laddr=fe80::13 lport=54276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.315504][ T29] audit: type=1400 audit(1764091127.613:2316): avc: denied { accept } for pid=10083 comm="syz.9.1066" laddr=fe80::13 lport=54276 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 99.324334][T10085] infiniband !yz!: set active [ 99.337586][ T29] audit: type=1400 audit(1764091127.613:2317): avc: denied { create } for pid=10083 comm="syz.9.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.342137][T10085] infiniband !yz!: added team_slave_0 [ 99.367896][ T29] audit: type=1400 audit(1764091127.613:2318): avc: denied { write } for pid=10083 comm="syz.9.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 99.399084][T10085] RDS/IB: !yz!: added [ 99.408551][T10085] smc: adding ib device !yz! with port count 1 [ 99.422330][T10085] smc: ib device !yz! port 1 has no pnetid [ 99.459606][ T9928] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 99.502578][ T9928] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 99.558620][ T9928] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 99.641131][ T9928] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 99.747678][ T9928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.771115][ T9928] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.789599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.796723][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.828441][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.835575][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.964086][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 99.973223][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 99.976378][ T9928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.014363][T10177] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 100.023418][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1080'. [ 100.131437][T10203] veth10: entered promiscuous mode [ 100.136604][T10203] veth10: entered allmulticast mode [ 100.207419][ T9928] veth0_vlan: entered promiscuous mode [ 100.223640][ T9928] veth1_vlan: entered promiscuous mode [ 100.254356][ T9928] veth0_macvtap: entered promiscuous mode [ 100.271256][ T9928] veth1_macvtap: entered promiscuous mode [ 100.286881][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.306637][ T9928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.324001][ T5229] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.334915][ T5229] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.344127][ T5229] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.362712][ T5229] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.379399][ T29] audit: type=1400 audit(1764091128.703:2319): avc: denied { mounton } for pid=9928 comm="syz-executor" path="/root/syzkaller.COSEsS/syz-tmp" dev="sda1" ino=2057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 100.414366][ T29] audit: type=1400 audit(1764091128.733:2320): avc: denied { mount } for pid=9928 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.436601][ T29] audit: type=1400 audit(1764091128.733:2321): avc: denied { mount } for pid=9928 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.458628][ T29] audit: type=1400 audit(1764091128.733:2322): avc: denied { mounton } for pid=9928 comm="syz-executor" path="/root/syzkaller.COSEsS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 100.582841][T10227] netlink: 'syz.5.1096': attribute type 5 has an invalid length. [ 100.602663][T10227] batman_adv: batadv0: Adding interface: vxlan0 [ 100.608918][T10227] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.658805][T10227] batman_adv: batadv0: Interface activated: vxlan0 [ 100.675775][ T5229] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.684677][ T5229] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.710337][ T5229] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.751179][ T12] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.775017][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.856549][T10238] wg2: entered promiscuous mode [ 100.861461][T10238] wg2: entered allmulticast mode [ 101.710031][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1100'. [ 101.750020][T10264] sch_tbf: burst 88 is lower than device nlmon0 mtu (3776) ! [ 101.853697][T10268] loop7: detected capacity change from 0 to 512 [ 101.938991][T10268] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1103: bg 0: block 248: padding at end of block bitmap is not set [ 102.079872][T10268] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1103: Failed to acquire dquot type 1 [ 102.110951][T10268] EXT4-fs (loop7): 1 truncate cleaned up [ 102.117067][T10268] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.142563][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 102.152308][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 102.168515][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 102.179253][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 102.195567][T10268] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.550020][T10326] pim6reg1: entered promiscuous mode [ 102.555392][T10326] pim6reg1: entered allmulticast mode [ 102.879572][T10356] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 102.905930][T10356] net_ratelimit: 22 callbacks suppressed [ 102.905988][T10356] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 103.031885][T10381] loop8: detected capacity change from 0 to 128 [ 103.076183][T10381] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 103.084207][T10381] FAT-fs (loop8): Filesystem has been set read-only [ 103.091172][T10381] bio_check_eod: 27 callbacks suppressed [ 103.091186][T10381] syz.8.1125: attempt to access beyond end of device [ 103.091186][T10381] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 103.126157][T10381] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 103.134065][T10381] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 103.151438][T10388] syz.8.1125: attempt to access beyond end of device [ 103.151438][T10388] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 103.164807][T10388] Buffer I/O error on dev loop8, logical block 2065, async page read [ 103.173174][T10388] syz.8.1125: attempt to access beyond end of device [ 103.173174][T10388] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 103.186433][T10388] Buffer I/O error on dev loop8, logical block 2066, async page read [ 103.214937][T10388] syz.8.1125: attempt to access beyond end of device [ 103.214937][T10388] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 103.228278][T10388] Buffer I/O error on dev loop8, logical block 2067, async page read [ 103.266275][T10388] syz.8.1125: attempt to access beyond end of device [ 103.266275][T10388] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 103.279646][T10388] Buffer I/O error on dev loop8, logical block 2068, async page read [ 103.295210][T10388] syz.8.1125: attempt to access beyond end of device [ 103.295210][T10388] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 103.308653][T10388] Buffer I/O error on dev loop8, logical block 2069, async page read [ 103.325475][T10388] syz.8.1125: attempt to access beyond end of device [ 103.325475][T10388] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 103.338801][T10388] Buffer I/O error on dev loop8, logical block 2070, async page read [ 103.347460][T10388] syz.8.1125: attempt to access beyond end of device [ 103.347460][T10388] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 103.360790][T10388] Buffer I/O error on dev loop8, logical block 2071, async page read [ 103.369153][T10388] syz.8.1125: attempt to access beyond end of device [ 103.369153][T10388] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 103.382502][T10388] Buffer I/O error on dev loop8, logical block 2072, async page read [ 103.400743][T10381] syz.8.1125: attempt to access beyond end of device [ 103.400743][T10381] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 103.414150][T10381] Buffer I/O error on dev loop8, logical block 2065, async page read [ 103.449897][T10381] Buffer I/O error on dev loop8, logical block 2066, async page read [ 103.476716][T10412] xt_connbytes: Forcing CT accounting to be enabled [ 103.497677][T10415] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 103.539862][T10415] bond1: entered promiscuous mode [ 103.545116][T10415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.596180][T10415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.603702][T10415] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 103.614309][T10415] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 103.626442][T10415] bond1: (slave wireguard0): making interface the new active one [ 103.634262][T10415] wireguard0: entered promiscuous mode [ 103.642410][T10415] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 103.670428][T10415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.677777][T10415] IPv6: NLM_F_CREATE should be set when creating new route [ 103.685004][T10415] IPv6: NLM_F_CREATE should be set when creating new route [ 103.692954][T10415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.703651][T10415] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 103.719174][T10415] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 104.318686][T10523] syzkaller0: entered promiscuous mode [ 104.324239][T10523] syzkaller0: entered allmulticast mode [ 104.471489][T10539] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.519933][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 104.519962][ T29] audit: type=1400 audit(1764091132.853:2457): avc: denied { read } for pid=10545 comm="syz.5.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.599810][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.698267][ T9928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.733520][T10554] loop7: detected capacity change from 0 to 128 [ 104.890651][ T29] audit: type=1326 audit(1764091133.223:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.7.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 104.914295][ T29] audit: type=1326 audit(1764091133.223:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.7.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 104.946260][ T29] audit: type=1326 audit(1764091133.223:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.7.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 104.969739][ T29] audit: type=1326 audit(1764091133.223:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.7.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 104.994499][ T29] audit: type=1326 audit(1764091133.223:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10563 comm="syz.7.1170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 105.070939][T10572] __nla_validate_parse: 6 callbacks suppressed [ 105.070957][T10572] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1173'. [ 105.174420][T10586] loop8: detected capacity change from 0 to 512 [ 105.208393][T10586] EXT4-fs: Mount option(s) incompatible with ext2 [ 105.226666][ T29] audit: type=1326 audit(1764091133.553:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.8.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 105.250324][ T29] audit: type=1326 audit(1764091133.553:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.8.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 105.273839][ T29] audit: type=1326 audit(1764091133.553:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.8.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 105.297869][ T29] audit: type=1326 audit(1764091133.553:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.8.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f852652f749 code=0x7ffc0000 [ 105.328005][T10579] infiniband syz!: set down [ 105.332646][T10579] infiniband syz!: added team_slave_0 [ 105.369033][T10579] RDS/IB: syz!: added [ 105.390135][T10579] smc: adding ib device syz! with port count 1 [ 105.396377][T10579] smc: ib device syz! port 1 has no pnetid [ 105.739003][T10597] loop7: detected capacity change from 0 to 2048 [ 105.756006][T10644] xfrm0: left promiscuous mode [ 105.760855][T10644] xfrm0: left allmulticast mode [ 105.795432][T10597] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.808749][T10654] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1193'. [ 105.826599][T10654] team0 (unregistering): Port device team_slave_0 removed [ 105.856276][T10654] team0 (unregistering): Port device team_slave_1 removed [ 105.892363][ T5143] !yz!: Port: 1 Link DOWN [ 106.186360][T10691] netlink: 'syz.1.1197': attribute type 12 has an invalid length. [ 106.808765][T10747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10747 comm=syz.9.1207 [ 107.135477][T10768] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1216'. [ 107.172023][ T9928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.719257][T10802] loop7: detected capacity change from 0 to 1024 [ 107.726576][T10802] EXT4-fs: Ignoring removed bh option [ 107.739552][T10802] EXT4-fs: inline encryption not supported [ 107.772079][T10802] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.822058][T10802] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 107.836955][T10802] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1228: lblock 2 mapped to illegal pblock 2 (length 1) [ 107.851433][T10802] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1228: lblock 0 mapped to illegal pblock 48 (length 1) [ 107.868452][T10802] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1228: Failed to acquire dquot type 0 [ 107.920121][T10802] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 107.929857][T10802] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1228: mark_inode_dirty error [ 107.941376][T10802] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 107.951699][T10802] EXT4-fs (loop7): 1 orphan inode deleted [ 107.957771][T10802] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.137261][ T5231] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:60: lblock 1 mapped to illegal pblock 1 (length 1) [ 108.151894][ T5231] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:60: Failed to release dquot type 0 [ 108.166075][ T9928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.175962][ T9928] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 108.189240][ T9928] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 108.211360][ T9928] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 108.290922][T10820] wg2: left promiscuous mode [ 108.295575][T10820] wg2: left allmulticast mode [ 108.306749][T10820] wg2: entered promiscuous mode [ 108.311708][T10820] wg2: entered allmulticast mode [ 108.415875][T10829] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 108.490465][T10831] loop7: detected capacity change from 0 to 512 [ 108.742568][T10831] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.779504][T10831] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.969176][ T9928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.114460][T10843] veth0: entered promiscuous mode [ 109.119575][T10843] veth0: entered allmulticast mode [ 109.153557][T10848] macvtap0: entered promiscuous mode [ 109.159689][T10848] macvtap0: left promiscuous mode [ 109.391005][T10872] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1255'. [ 109.419465][T10872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10872 comm=syz.8.1255 [ 109.847062][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 109.847141][ T29] audit: type=1326 audit(1764091138.173:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 109.962467][ T29] audit: type=1326 audit(1764091138.173:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 109.986122][ T29] audit: type=1326 audit(1764091138.173:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1f51fdf90 code=0x7ffc0000 [ 110.009678][ T29] audit: type=1326 audit(1764091138.173:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 110.033203][ T29] audit: type=1326 audit(1764091138.173:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 110.056784][ T29] audit: type=1326 audit(1764091138.173:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 110.080174][ T29] audit: type=1326 audit(1764091138.173:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 110.103733][ T29] audit: type=1326 audit(1764091138.173:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 110.127143][ T29] audit: type=1326 audit(1764091138.173:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 110.150618][ T29] audit: type=1326 audit(1764091138.173:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10890 comm="syz.9.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1f51ff749 code=0x7ffc0000 [ 110.273458][T10906] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1267'. [ 110.282665][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'. [ 110.323766][T10906] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 110.471519][T10912] loop8: detected capacity change from 0 to 512 [ 110.493685][T10920] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1273'. [ 110.504424][T10912] EXT4-fs (loop8): orphan cleanup on readonly fs [ 110.533279][T10912] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1271: error while reading EA inode 32 err=-116 [ 110.579985][T10928] wg2: entered promiscuous mode [ 110.584874][T10928] wg2: entered allmulticast mode [ 110.598739][T10912] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 110.619883][T10912] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1271: error while reading EA inode 32 err=-116 [ 110.639104][T10912] EXT4-fs (loop8): 1 orphan inode deleted [ 110.655525][T10912] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.680588][T10912] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.764701][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1282'. [ 110.947402][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1286'. [ 110.956544][T10956] netlink: 'syz.7.1286': attribute type 30 has an invalid length. [ 110.992098][ T5231] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.002176][ T5231] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.011458][ T5231] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.042758][ T5231] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.514065][T10991] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.573027][T10991] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.602237][T10996] loop8: detected capacity change from 0 to 512 [ 111.620388][T10997] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.643562][T10996] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.679617][T10991] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.739890][T10996] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.776493][T10997] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.810808][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.839189][T11003] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1313'. [ 111.850611][T10991] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.867677][T11003] wireguard0: entered promiscuous mode [ 111.873444][T11003] wireguard0: entered allmulticast mode [ 111.897589][T10997] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.941408][ T5189] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.953333][ T5189] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.964573][ T5189] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.977769][T10997] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.005197][ T5189] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.058094][ T5229] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.086824][ T5229] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.094009][T11021] loop7: detected capacity change from 0 to 128 [ 112.111766][ T5229] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.112684][T11021] bio_check_eod: 36719 callbacks suppressed [ 112.112780][T11021] syz.7.1310: attempt to access beyond end of device [ 112.112780][T11021] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 112.140914][T11021] syz.7.1310: attempt to access beyond end of device [ 112.140914][T11021] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 112.154356][T11021] buffer_io_error: 36718 callbacks suppressed [ 112.154372][T11021] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 112.155196][ T5229] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.161699][T11021] syz.7.1310: attempt to access beyond end of device [ 112.161699][T11021] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 112.190540][T11021] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 112.200247][T11021] syz.7.1310: attempt to access beyond end of device [ 112.200247][T11021] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 112.230358][T11021] syz.7.1310: attempt to access beyond end of device [ 112.230358][T11021] loop7: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 112.243843][T11021] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 112.263168][T11021] syz.7.1310: attempt to access beyond end of device [ 112.263168][T11021] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 112.276806][T11021] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 112.287007][T11021] syz.7.1310: attempt to access beyond end of device [ 112.287007][T11021] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 112.301621][T11021] syz.7.1310: attempt to access beyond end of device [ 112.301621][T11021] loop7: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 112.315145][T11021] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 112.323831][T11021] syz.7.1310: attempt to access beyond end of device [ 112.323831][T11021] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 112.337271][T11021] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 112.347417][T11021] syz.7.1310: attempt to access beyond end of device [ 112.347417][T11021] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 112.362091][T11021] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 112.370954][T11021] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 112.380770][T11021] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 112.389591][T11021] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 112.524123][T11033] syzkaller0: entered allmulticast mode [ 112.539089][T11033] syzkaller0: entered promiscuous mode [ 112.547838][T11033] syzkaller0 (unregistering): left allmulticast mode [ 112.554681][T11033] syzkaller0 (unregistering): left promiscuous mode [ 112.677155][T11044] syzkaller0: entered promiscuous mode [ 112.773999][T11051] bridge0: entered allmulticast mode [ 112.780593][T11051] bridge_slave_1: left allmulticast mode [ 112.786251][T11051] bridge_slave_1: left promiscuous mode [ 112.792036][T11051] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.799879][T11051] bridge_slave_0: left promiscuous mode [ 112.805572][T11051] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.816489][T11053] loop7: detected capacity change from 0 to 512 [ 113.084147][T11086] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1337'. [ 113.094834][T11086] netem: change failed [ 113.181650][T11093] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1340'. [ 113.198573][T11093] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1340'. [ 113.232522][T11098] netlink: 'syz.1.1342': attribute type 1 has an invalid length. [ 113.272196][T11098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.296530][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 113.308614][T11098] bond2 (unregistering): Released all slaves [ 113.381967][T11118] bridge_slave_1: left allmulticast mode [ 113.382229][T11120] loop8: detected capacity change from 0 to 128 [ 113.387665][T11118] bridge_slave_1: left promiscuous mode [ 113.399653][T11118] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.413329][T11118] bridge_slave_0: left promiscuous mode [ 113.419008][T11118] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.481158][T11126] netlink: 'syz.5.1352': attribute type 7 has an invalid length. [ 113.523059][T11125] ip6gre1: entered promiscuous mode [ 113.528297][T11125] ip6gre1: entered allmulticast mode [ 113.614254][T11136] netlink: 'syz.7.1364': attribute type 7 has an invalid length. [ 113.814141][T11153] netlink: 'syz.5.1361': attribute type 10 has an invalid length. [ 114.067028][T11167] netlink: 'syz.7.1370': attribute type 1 has an invalid length. [ 114.113124][T11167] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.140940][T11171] bond1 (unregistering): Released all slaves [ 114.881154][T11175] Set syz1 is full, maxelem 65536 reached [ 114.970555][ T29] kauditd_printk_skb: 632 callbacks suppressed [ 114.970595][ T29] audit: type=1400 audit(1764091143.303:3212): avc: denied { cmd } for pid=11195 comm="syz.8.1381" path="socket:[22209]" dev="sockfs" ino=22209 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 115.094862][ T29] audit: type=1400 audit(1764091143.423:3213): avc: denied { read } for pid=11214 comm="syz.5.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 115.114440][T11211] loop8: detected capacity change from 0 to 8192 [ 115.162351][T11211] loop8: p1 < > p2 < > p3 p4 < > [ 115.167412][T11211] loop8: partition table partially beyond EOD, truncated [ 115.174552][T11211] loop8: p1 start 67108864 is beyond EOD, truncated [ 115.182078][T11211] loop8: p3 start 100859904 is beyond EOD, truncated [ 115.191502][ T29] audit: type=1326 audit(1764091143.523:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11210 comm="syz.8.1388" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f852652f749 code=0x0 [ 115.583922][ T29] audit: type=1326 audit(1764091143.913:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.7.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 115.607893][ T29] audit: type=1326 audit(1764091143.913:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.7.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 115.625520][T11229] loop7: detected capacity change from 0 to 512 [ 115.631569][ T29] audit: type=1326 audit(1764091143.913:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.7.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 115.661551][ T29] audit: type=1326 audit(1764091143.913:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.7.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 115.685252][ T29] audit: type=1326 audit(1764091143.913:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.7.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 115.691495][T11229] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.708927][ T29] audit: type=1326 audit(1764091143.913:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.7.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 115.723814][T11229] ext4 filesystem being mounted at /57/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.744638][ T29] audit: type=1326 audit(1764091143.913:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11226 comm="syz.7.1395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1d07bf749 code=0x7ffc0000 [ 115.780363][ T9928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.028394][T11259] ip6tnl0: entered promiscuous mode [ 116.033703][T11259] ip6tnl0: entered allmulticast mode [ 116.080099][T11264] __nla_validate_parse: 10 callbacks suppressed [ 116.080113][T11264] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1410'. [ 116.311818][T11283] loop8: detected capacity change from 0 to 2048 [ 116.343467][T11283] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.432998][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.636233][T11305] veth4: entered promiscuous mode [ 116.641333][T11305] veth4: entered allmulticast mode [ 116.721808][T11313] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 116.777588][T11319] syzkaller0: entered promiscuous mode [ 116.783236][T11319] syzkaller0: entered allmulticast mode [ 116.820098][T11323] netlink: 'syz.5.1436': attribute type 1 has an invalid length. [ 116.833155][T11323] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.842364][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1436'. [ 116.860860][T11323] bond1 (unregistering): Released all slaves [ 117.158093][T11343] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 117.412208][T11368] loop8: detected capacity change from 0 to 1024 [ 117.418942][T11368] EXT4-fs: inline encryption not supported [ 117.437736][T11368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.464203][T11368] EXT4-fs error (device loop8): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 117.482603][T11368] EXT4-fs (loop8): Remounting filesystem read-only [ 117.504950][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.516053][T11375] netlink: 'syz.5.1458': attribute type 1 has an invalid length. [ 117.532359][T11378] netlink: 'syz.9.1459': attribute type 1 has an invalid length. [ 117.550006][T11378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.563374][T11375] bond1: (slave bridge4): making interface the new active one [ 117.571547][T11375] bond1: (slave bridge4): Enslaving as an active interface with an up link [ 117.586438][T11378] veth5: entered promiscuous mode [ 117.593826][T11378] bond1: (slave veth5): Enslaving as an active interface with a down link [ 117.604802][T11378] bond1: entered allmulticast mode [ 117.732074][T11397] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.759857][T11400] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1468' sets config #1 [ 117.792492][T11397] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.832790][T11397] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.874915][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1471'. [ 117.899589][T11408] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1544 sclass=netlink_audit_socket pid=11408 comm=syz.5.1472 [ 117.931967][T11397] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.986864][T11418] loop7: detected capacity change from 0 to 128 [ 117.997508][T11418] bio_check_eod: 75 callbacks suppressed [ 117.997521][T11418] syz.7.1477: attempt to access beyond end of device [ 117.997521][T11418] loop7: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 118.017516][T11418] syz.7.1477: attempt to access beyond end of device [ 118.017516][T11418] loop7: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 118.031129][T11418] buffer_io_error: 46 callbacks suppressed [ 118.031222][T11418] Buffer I/O error on dev loop7, logical block 79, lost async page write [ 118.047917][ T5229] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.070224][T11418] syz.7.1477: attempt to access beyond end of device [ 118.070224][T11418] loop7: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 118.083691][T11418] Buffer I/O error on dev loop7, logical block 80, lost async page write [ 118.105602][ T5229] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.118050][ T5229] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.128670][ T5229] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.137902][T11418] syz.7.1477: attempt to access beyond end of device [ 118.137902][T11418] loop7: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 118.153080][T11418] syz.7.1477: attempt to access beyond end of device [ 118.153080][T11418] loop7: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 118.166625][T11418] Buffer I/O error on dev loop7, logical block 83, lost async page write [ 118.193211][T11418] syz.7.1477: attempt to access beyond end of device [ 118.193211][T11418] loop7: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 118.206722][T11418] Buffer I/O error on dev loop7, logical block 84, lost async page write [ 118.227384][T11418] syz.7.1477: attempt to access beyond end of device [ 118.227384][T11418] loop7: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 118.241312][T11418] syz.7.1477: attempt to access beyond end of device [ 118.241312][T11418] loop7: rw=2049, sector=190, nr_sectors = 2 limit=128 [ 118.254763][T11418] Buffer I/O error on dev loop7, logical block 95, lost async page write [ 118.263974][T11418] syz.7.1477: attempt to access beyond end of device [ 118.263974][T11418] loop7: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 118.277663][T11418] Buffer I/O error on dev loop7, logical block 96, lost async page write [ 118.288714][T11418] syz.7.1477: attempt to access beyond end of device [ 118.288714][T11418] loop7: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 118.303864][T11418] Buffer I/O error on dev loop7, logical block 99, lost async page write [ 118.312820][T11418] Buffer I/O error on dev loop7, logical block 100, lost async page write [ 118.338365][T11418] Buffer I/O error on dev loop7, logical block 111, lost async page write [ 118.373248][T11418] Buffer I/O error on dev loop7, logical block 112, lost async page write [ 118.828207][T11462] loop8: detected capacity change from 0 to 4096 [ 118.838593][T11462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.860874][T11466] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 118.869967][T11466] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 119.043306][ T4931] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.935757][T11504] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.936432][T11486] syz.5.1502 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 119.956390][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.5.1502 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.956417][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 119.956431][T11486] Call Trace: [ 119.956439][T11486] [ 119.956447][T11486] __dump_stack+0x1d/0x30 [ 119.956468][T11486] dump_stack_lvl+0xe8/0x140 [ 119.956520][T11486] dump_stack+0x15/0x1b [ 119.956539][T11486] dump_header+0x81/0x220 [ 119.956559][T11486] oom_kill_process+0x342/0x400 [ 119.956643][T11486] out_of_memory+0x979/0xb80 [ 119.956747][T11486] try_charge_memcg+0x610/0xa10 [ 119.956778][T11486] charge_memcg+0x51/0xc0 [ 119.956809][T11486] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 119.956846][T11486] __read_swap_cache_async+0x17b/0x2d0 [ 119.956871][T11486] swap_cluster_readahead+0x262/0x3c0 [ 119.956950][T11486] swapin_readahead+0xde/0x800 [ 119.957011][T11486] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 119.957044][T11486] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 119.957126][T11486] ? __rcu_read_unlock+0x4f/0x70 [ 119.957158][T11486] ? swap_cache_get_folio+0x277/0x280 [ 119.957186][T11486] do_swap_page+0x2ae/0x2370 [ 119.957212][T11486] ? css_rstat_updated+0xb7/0x240 [ 119.957232][T11486] ? __pfx_default_wake_function+0x10/0x10 [ 119.957337][T11486] handle_mm_fault+0x9a5/0x2be0 [ 119.957364][T11486] ? vma_start_read+0x141/0x1f0 [ 119.957397][T11486] do_user_addr_fault+0x630/0x1080 [ 119.957469][T11486] exc_page_fault+0x62/0xa0 [ 119.957502][T11486] asm_exc_page_fault+0x26/0x30 [ 119.957524][T11486] RIP: 0033:0x7f730a5f59ec [ 119.957539][T11486] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 119.957555][T11486] RSP: 002b:00007ffcfac34a90 EFLAGS: 00010287 [ 119.957641][T11486] RAX: 0000000000000000 RBX: 00007f730a976090 RCX: 0000000000000000 [ 119.957715][T11486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555587fba808 [ 119.957728][T11486] RBP: 00007f730a977da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 119.957742][T11486] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001d49a [ 119.957756][T11486] R13: 00007f730a976090 R14: ffffffffffffffff R15: 00007ffcfac34ba0 [ 119.957775][T11486] [ 119.957782][T11486] memory: usage 307200kB, limit 307200kB, failcnt 80 [ 120.182654][T11486] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 120.190556][T11486] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 120.197830][T11486] Memory cgroup stats for /syz5: [ 120.199319][T11486] cache 0 [ 120.207223][T11486] rss 0 [ 120.209991][T11486] shmem 0 [ 120.212974][T11486] mapped_file 0 [ 120.216491][T11486] dirty 0 [ 120.219418][T11486] writeback 8192 [ 120.222982][T11486] workingset_refault_anon 8 [ 120.227559][T11486] workingset_refault_file 0 [ 120.232088][T11486] swap 192512 [ 120.235431][T11486] swapcached 20480 [ 120.239141][T11486] pgpgin 83766 [ 120.242528][T11486] pgpgout 83761 [ 120.245972][T11486] pgfault 84079 [ 120.249411][T11486] pgmajfault 2 [ 120.252805][T11486] inactive_anon 8192 [ 120.256689][T11486] active_anon 12288 [ 120.260701][T11486] inactive_file 0 [ 120.264325][T11486] active_file 0 [ 120.267805][T11486] unevictable 0 [ 120.271361][T11486] hierarchical_memory_limit 314572800 [ 120.276720][T11486] hierarchical_memsw_limit 9223372036854771712 [ 120.282918][T11486] total_cache 0 [ 120.286362][T11486] total_rss 0 [ 120.289637][T11486] total_shmem 0 [ 120.293119][T11486] total_mapped_file 0 [ 120.297098][T11486] total_dirty 0 [ 120.300605][T11486] total_writeback 8192 [ 120.304665][T11486] total_workingset_refault_anon 8 [ 120.309748][T11486] total_workingset_refault_file 0 [ 120.314765][T11486] total_swap 192512 [ 120.318568][T11486] total_swapcached 20480 [ 120.322813][T11486] total_pgpgin 102822 [ 120.326778][T11486] total_pgpgout 102817 [ 120.330857][T11486] total_pgfault 84833 [ 120.334833][T11486] total_pgmajfault 2 [ 120.338710][T11486] total_inactive_anon 8192 [ 120.343136][T11486] total_active_anon 12288 [ 120.347460][T11486] total_inactive_file 0 [ 120.351625][T11486] total_active_file 0 [ 120.355586][T11486] total_unevictable 0 [ 120.359549][T11486] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1502,pid=11486,uid=0 [ 120.377881][T11486] Memory cgroup out of memory: Killed process 11486 (syz.5.1502) total-vm:96016kB, anon-rss:1140kB, file-rss:22052kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 120.424212][T11504] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.493725][ T29] kauditd_printk_skb: 593 callbacks suppressed [ 120.493741][ T29] audit: type=1326 audit(1764091148.823:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.527390][ T29] audit: type=1326 audit(1764091148.853:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.551005][ T29] audit: type=1326 audit(1764091148.853:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.574620][ T29] audit: type=1326 audit(1764091148.853:3818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.598695][ T29] audit: type=1326 audit(1764091148.853:3819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.622336][ T29] audit: type=1326 audit(1764091148.853:3820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.645823][ T29] audit: type=1326 audit(1764091148.853:3821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.669395][ T29] audit: type=1326 audit(1764091148.853:3822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.693190][ T29] audit: type=1326 audit(1764091148.853:3823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.716687][ T29] audit: type=1326 audit(1764091148.853:3824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11507 comm="syz.1.1509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd44e14f749 code=0x7ffc0000 [ 120.741325][T11504] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.811510][T11504] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.123434][T11534] netlink: 83992 bytes leftover after parsing attributes in process `syz.7.1521'. [ 121.133086][T11534] netlink: zone id is out of range [ 121.138222][T11534] netlink: zone id is out of range [ 121.144071][T11534] netlink: zone id is out of range [ 121.149178][T11534] netlink: zone id is out of range [ 121.154335][T11534] netlink: zone id is out of range [ 121.167911][T11534] netlink: set zone limit has 8 unknown bytes [ 121.190347][T11487] syz.5.1502 (11487) used greatest stack depth: 7096 bytes left [ 121.262275][T11554] loop7: detected capacity change from 0 to 512 [ 121.269040][T11554] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 121.282791][T11554] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 121.296320][T11554] EXT4-fs (loop7): 1 truncate cleaned up [ 121.305383][T11554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.328486][ T9928] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.388047][T11569] IPv6: sit1: Disabled Multicast RS [ 121.393716][T11573] ================================================================== [ 121.401805][T11573] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 121.409542][T11573] [ 121.411859][T11573] write to 0xffff888104ae2188 of 4 bytes by interrupt on cpu 1: [ 121.419482][T11573] __bpf_get_stackid+0x76b/0x800 [ 121.424416][T11573] bpf_get_stackid+0xe9/0x120 [ 121.429082][T11573] bpf_get_stackid_raw_tp+0xf6/0x120 [ 121.434361][T11573] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 121.439824][T11573] bpf_trace_run2+0x107/0x1c0 [ 121.444499][T11573] kfree+0x351/0x400 [ 121.448470][T11573] security_cred_free+0x46/0x90 [ 121.453313][T11573] put_cred_rcu+0x45/0x210 [ 121.457720][T11573] rcu_core+0x5aa/0xc30 [ 121.461867][T11573] rcu_core_si+0xd/0x20 [ 121.466010][T11573] handle_softirqs+0xba/0x290 [ 121.470673][T11573] run_ksoftirqd+0x1c/0x30 [ 121.475080][T11573] smpboot_thread_fn+0x32b/0x530 [ 121.480008][T11573] kthread+0x489/0x510 [ 121.484077][T11573] ret_from_fork+0x122/0x1b0 [ 121.488680][T11573] ret_from_fork_asm+0x1a/0x30 [ 121.493437][T11573] [ 121.495744][T11573] read to 0xffff888104ae2188 of 4 bytes by task 11573 on cpu 0: [ 121.503363][T11573] __bpf_get_stackid+0x287/0x800 [ 121.508295][T11573] bpf_get_stackid+0xe9/0x120 [ 121.512959][T11573] bpf_get_stackid_raw_tp+0xf6/0x120 [ 121.518236][T11573] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 121.523685][T11573] bpf_trace_run2+0x107/0x1c0 [ 121.528359][T11573] kfree+0x351/0x400 [ 121.532251][T11573] security_compute_sid+0x11da/0x1290 [ 121.537622][T11573] security_transition_sid+0x5a/0x70 [ 121.542907][T11573] selinux_socket_create+0x121/0x180 [ 121.548268][T11573] security_socket_create+0x50/0x90 [ 121.553454][T11573] __sock_create+0xe0/0x5b0 [ 121.557947][T11573] __sys_socket+0xb0/0x180 [ 121.562355][T11573] __x64_sys_socket+0x3f/0x50 [ 121.567027][T11573] x64_sys_call+0x1147/0x3000 [ 121.571697][T11573] do_syscall_64+0xd2/0x200 [ 121.576188][T11573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.582079][T11573] [ 121.584385][T11573] value changed: 0x7483e845 -> 0xf64f7913 [ 121.590082][T11573] [ 121.592390][T11573] Reported by Kernel Concurrency Sanitizer on: [ 121.598541][T11573] CPU: 0 UID: 0 PID: 11573 Comm: syz.7.1536 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.608595][T11573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 121.618646][T11573] ================================================================== [ 122.519804][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 123.354432][ T5229] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.365326][ T5229] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.376033][ T5229] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.386991][ T5229] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0