last executing test programs: 2m13.448503897s ago: executing program 3 (id=263): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 2m13.418450627s ago: executing program 3 (id=264): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r2}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 2m13.317865369s ago: executing program 3 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3e10, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xee8f010b3d1e850f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r2}, 0x10) setitimer(0x1, 0x0, 0x0) 2m13.285679619s ago: executing program 3 (id=266): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x0, 0x573, &(0x7f0000000ec0)="$eJzs3T1sG+UbAPDnzvG/X/mTIoEEqEMFSEWq6iT9gMLUrohKlTogsUDkuFEVJ47iBJooQ7pXiA4IUJeywcAIYmBALIysLCBmpIpGIDUdwMhfaZo4wSl1XHK/n3T2vfee/bzvnZ/XvtOdHEBmHa0/pBHPRsTFJGJoXd1AtCqPNtdbXVkq3ltZKiZRq136LYkkIu6uLBXb6yet50MRsRwRz0TEd/mI4+nmuNWFxcmxcrk02yoPz03NDFcXFk9cmRqbKE2Upk+98uqZs6fPjJ4cXf+ye7X1pfzO+nr95xvvX//h9Vs3Pv/iyHLxw7EkzsVgq259Px6l5jbJx7kNy0/3IlgfJf1uAA8l18rzeio9HUORa2V9J7WhXW0a0GO1fRE1IKMS+Q8Z1f4dUD/+bU+7+fvj9vnmAUg97mpratYMNM9NxP7GscnB35MHjkzqx5uHd7Oh7EnL1yJiZGBg8+c/aX3+Ht7Io2ggPfXt+eaO2rz/07XxJzqMP4Ptc6f/Unv8W900/t2Pn9ti/LvYZYw/3/rlky3jX4t4rmP8ZC1+0iF+GhHvdBn/5ptfn92qrvZpxLHoHL8t2f788PDlK+XSSPOxY4xvjh15bbv+H9wifvOc7f7G10yn7T/TZf+/+v7L55e3if/SC9vv/07b/0BEfNBl/CfvfvbGVnW3ryV36r8Cdrr/68tudRn/5XNHf+pyVQAAAAAAAAAAYAfSxrVsSVpYm0/TQqF5D+9TcTAtV6pzxy9X5qfHm9e8HY582r7SaqhZTurl0db1uO3yyQ3lU7lWwNyBRrlQrJTH+9x3AAAAAAAAAAAAAAAAAAAAeFwc2nD//x+5xv3/G/+uGtirtv7Lb2Cvk/+QXQ/mf9K3dgC7z/c/ZFZN/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv8AAAAAAAAAAAAAAAAAAAAAAAAAANATFy9cqE+1eytLxXp5fGBhfrLy7onxUnWyMDVfLBQrszOFiUplolwqFCtT//R+SaUyMxLT81eH50rVueHqwuLbU5X56fZ/ipbyPe8RAAAAAAAAAAAAAAAAAAAA/PcMNqYkLURE2phP00Ih4v8RcTjyyeUr5dJIRDwRET/m8vvq5dF+NxoAAAAAAAAAAAAAAAAAAAD2mOrC4uRYuVyazcjMwE5WjojlR9uM+jvu+FX51r56XLahmSzM9HlgAgAAAAAAAAAAAAAAAACADLp/02+3r/irtw0CAAAAAAAAAAAAAAAAAACATEp/TSKiPh0benFwY+3/ktVc4zki3rt56aOrY3Nzs6P15XfWls993Fp+sh/tB7rVztN2HgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3VRcWJ8fK5dJsD2f63UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAh/F3AAAA///pCdd8") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file1\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x21a509d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) 2m13.21363092s ago: executing program 3 (id=268): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) close(r0) 2m12.971913984s ago: executing program 3 (id=274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2m12.971652934s ago: executing program 32 (id=274): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000700000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 2m10.492000732s ago: executing program 5 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24040880}, 0x800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m10.321147375s ago: executing program 5 (id=350): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) 2m10.281138885s ago: executing program 5 (id=352): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000c3fb"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 2m9.416522839s ago: executing program 5 (id=378): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x60600) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 2m9.393578319s ago: executing program 5 (id=379): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.457746713s ago: executing program 5 (id=404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f00000000000000001ffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m8.457292873s ago: executing program 33 (id=404): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f00000000000000001ffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2m2.281904508s ago: executing program 0 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 2m2.1873029s ago: executing program 0 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2m1.316646063s ago: executing program 0 (id=564): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 2m1.050677917s ago: executing program 0 (id=574): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m1.030380987s ago: executing program 0 (id=575): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) unshare(0x26000400) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m0.81979323s ago: executing program 0 (id=580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1}}], 0x2, 0x9200000000000000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 2m0.81294574s ago: executing program 34 (id=580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="ea", 0x1}], 0x1}}], 0x2, 0x9200000000000000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) 1m59.807258805s ago: executing program 6 (id=602): creat(&(0x7f0000000340)='./file0\x00', 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 1m59.56017706s ago: executing program 6 (id=604): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 1m59.334250893s ago: executing program 6 (id=608): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) 1m59.103265606s ago: executing program 6 (id=613): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, 0x0, 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x84700a, 0x0) 1m59.053423038s ago: executing program 6 (id=614): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000000000000000000000001fb195d574202b200000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 1m58.84209655s ago: executing program 6 (id=617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1m58.779101431s ago: executing program 35 (id=617): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) munlockall() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 4.111963757s ago: executing program 4 (id=3941): socket$inet(0x2, 0x3, 0x8) socket$inet(0x2, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 4.043095828s ago: executing program 8 (id=3942): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000200), 0xfb, 0x497, &(0x7f0000000f40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) accept(r3, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000440), 0x0, 0x100) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r4, 0x29, 0x50, 0x0, &(0x7f0000000100)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="db", 0x1}], 0x1}, 0x40004854) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f0000000040)={0x2, 0xffffffffffffffff, 0x401, 0x9}) 2.345798124s ago: executing program 8 (id=3950): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCINQ(r3, 0x541b, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x40c5, 0x24) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) syz_emit_ethernet(0x16, &(0x7f0000000c00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@llc={0x4, {@snap={0xaa, 0x0, "dc", "898122", 0x892f}}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',msize=0x000000000000100']) 2.268066435s ago: executing program 8 (id=3951): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 2.200274216s ago: executing program 2 (id=3952): getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000040)) io_setup(0x400, &(0x7f0000000000)=0x0) io_destroy(r0) io_destroy(r0) io_cancel(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) capset(&(0x7f0000000300)={0x20071026}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 2.118915338s ago: executing program 4 (id=3953): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000002c0)={0x0, 0x0, 0xe, 0x8, 0x75, &(0x7f0000000f80)="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"}) set_mempolicy(0x3, &(0x7f0000000040)=0x3, 0xb) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x6, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000000)=0xa, 0x83, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4089, 0xff9}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000004540)=""/4100, 0x1004}, {&(0x7f0000000080)=""/88, 0x58}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f0000002040)=""/111, 0x6f}], 0x6}, 0x100) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) bind$bt_sco(r1, &(0x7f0000000140), 0x8) 2.080628738s ago: executing program 2 (id=3954): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x9ef}, 0x1040e8, 0x800, 0xfffffffc, 0x9, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./bus/file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r0, &(0x7f00000004c0)='./file0/file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) unshare(0x22020600) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) sync() perf_event_open(&(0x7f00000001c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x420}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.92020131s ago: executing program 2 (id=3955): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000cd28001600000001000000940000000fad"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = getpgrp(0xffffffffffffffff) r5 = gettid() rt_tgsigqueueinfo(r4, r5, 0x0, &(0x7f0000000780)={0x11, 0x0, 0x80}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r1}}, './file0/file0\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x8a, &(0x7f00000002c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv1, 0x22}, {@errors_continue}, {@journal_dev={'journal_dev', 0x3d, 0xb83}}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0xfd, 0x44e, &(0x7f0000000900)="$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") socket$nl_generic(0x10, 0x3, 0x10) 1.91981767s ago: executing program 1 (id=3956): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000400)=[{&(0x7f0000000340)="b9d7d7057f0e84f0d7824db14f0f7ca046a0dff9dc46e7af27877ba9b8aae9e70e854f10", 0x24}], 0x1, 0x9) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.919564601s ago: executing program 2 (id=3957): openat$pidfd(0xffffffffffffff9c, 0x0, 0x58900, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0xb6e1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}}}, 0x108) socket(0x400000000010, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pread64(0xffffffffffffffff, &(0x7f00000013c0)=""/208, 0x31, 0x401) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) read$ptp(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) flock(r2, 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r4, 0x2) 1.906332901s ago: executing program 1 (id=3958): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="85100000f9ffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000c50000000000000d00"/55], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="24000000190001002bbd70000000000080200009000400050000000008002500af2b03ebebb3736bd2ae958187ed79c7eb2fd8cc34e956bc1040786b9cafee4d7c5b0100000000000000625e7d1c3bc5a64e3488ed00002df2573280c63722b2bd5c1156ac4cec6189d4195975f39702e5", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x13040, &(0x7f0000000180), 0x0, 0x253, &(0x7f00000010c0)="$eJzs3T1oJGUcBvBnZneNuVvk1EYQVBDxIxDOTrA5G4UDOQ4RQYWIiI2SCPnALrGysdBaJZVNEDujpaYJNopgIVFTxEbQYGFIocLK7iQh6vi5665kfj+YyUzm4/8OM88727y7ARrrQpJLSVpJZpJ0khSnd7itmi4cra5Pb88lvd4j3xeD/ar1yvFx55OsJbkvyVZZ5Ll2srL5xN7hzkN3vrLcueOtzcenx3qRR/b3dh8+ePPKy+9evnflk8++vVLkUrq/uq7RK2r+1y6SG/6LYv8TRXvSLeDvuPriO1/0c39jktsH+e+kTHXzXl28ZquTe974o2Nf++7Tm8fZVmD0er1O/x241gMap0zSTVHOJqmWy3J2tvoM/2XrXPn8wuLSzLMLy/PPTLqnAkalm+w++P7Ue+d/k/9vWlX+gbOrm+LnR69ufNVfPmhNujXAOPXf/zNPrd4d+YfGkX9oLvmH5pJ/aC75h+aSf2gu+YcmmhrM5R8a63P5h+aSfzjb6saeHzudfwCgWXpTNYOCTzYCZ9lkex8AAAAAAAAAAAAAAAAAAKDO+vT23PE0rpofvZ7sP5CkXVe/Nfg94uTawfzcD0V/txNFddhQnrx1yBMM6e0Jj76+7ut8eNfh0sTqf3zLxEoPrM4nay8ludhu//75K46ev3/v+r/Y3nl6yAJDuv+xkZ7uz75urNZPGyOt/49d3kk+6Pc/F+v6nzI3Df7W9z/d/v0bsv4LPw55AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMbmlwAAAP//DcpohA==") sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x330}}, 0x0) 1.863723141s ago: executing program 4 (id=3959): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='rxrpc_conn\x00'}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0x7}, &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x2, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.684178524s ago: executing program 7 (id=3961): memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x10, 0x4, 0xc, 0xfffffffe, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x7, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f0000001c80), 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000020}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 1.617237565s ago: executing program 7 (id=3962): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) truncate(&(0x7f0000000140)='./file1\x00', 0x7ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r2, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) 1.529356147s ago: executing program 7 (id=3963): io_setup(0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kfree\x00', r0}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r2) 1.504975757s ago: executing program 7 (id=3964): socket$inet(0x2, 0x3, 0x8) socket$inet(0x2, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="88010000170a0101"], 0x188}}, 0x0) 1.151093542s ago: executing program 8 (id=3965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004002}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000005c0)={r4, 0x11, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.063970554s ago: executing program 2 (id=3966): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x8) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) pwrite64(r1, &(0x7f0000000140), 0x0, 0x8000c61) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 1.028744184s ago: executing program 1 (id=3967): r0 = syz_io_uring_setup(0xd3c, &(0x7f00000003c0)={0x0, 0x576, 0x0, 0x0, 0x221}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) rseq(0x0, 0x0, 0x0, 0x0) r4 = msgget(0x0, 0x2c4) msgsnd(r4, 0x0, 0x2000, 0x0) msgctl$IPC_RMID(r4, 0x0) io_uring_enter(r0, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x4ac9, 0x3900, 0x1800000000000000, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4008085) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 615.655391ms ago: executing program 8 (id=3968): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f00000003c0)=0x10000000, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000eeffffffffffffff00"/28], 0x48) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 416.674403ms ago: executing program 8 (id=3969): socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) preadv2(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, 0x0, 0x24018004) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r5, &(0x7f0000000080)={0x1a, 0x0, 0x2, 0x0, 0x20}, 0x10) listen(r5, 0x0) listen(r5, 0x7) syz_emit_ethernet(0x6a, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c200000050a245d5cde008004500001c000007000002907800"], 0x0) 293.711135ms ago: executing program 4 (id=3970): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioperm(0x1, 0x2, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x5}, 0x18) fsmount(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x9, 0xfd}, 0x10) close_range(r4, 0xffffffffffffffff, 0x200000000000000) setresuid(0x0, 0x0, 0x0) 236.708176ms ago: executing program 4 (id=3971): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x19f2, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x8000000, 0x331}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 211.503857ms ago: executing program 4 (id=3972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000020000a03000000000000000000030000000900010073797a300000000034000000030a030000000000000000000300000008000b40000000080900010073797a30000000000400048008000540ff001100010000000000000000000000000a000000000000"], 0x7c}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) unlink(&(0x7f0000000240)='./file0\x00') bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}, {&(0x7f0000000300)="439e9c06fc666cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2}}], 0x2, 0x4048884) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r2, 0x11, 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0]}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) 135.798588ms ago: executing program 2 (id=3973): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x148) close(r3) r4 = timerfd_create(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 135.205858ms ago: executing program 7 (id=3974): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$autofs(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000040000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 84.038059ms ago: executing program 1 (id=3975): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f00000002c0)='\x04\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000940)="ad", 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x6}, 0x18) close(r1) 83.341119ms ago: executing program 1 (id=3976): socket$inet_tcp(0x2, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x10, 0x0, 0x7ffc0002}]}) lseek(0xffffffffffffffff, 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) shmdt(0x0) 893.08µs ago: executing program 7 (id=3977): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000300)='syzkaller\x00', 0xfff, 0x26, &(0x7f0000000380)=""/38, 0x40f00, 0x7, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000001c0)='mm_page_free\x00', r2, 0x0, 0x6}, 0x18) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x400000000000003, 0x20, 0x0, 0x23, 0x0, 0x0, 0x0, [@sadb_key={0x19, 0x8, 0x5d8, 0x0, "26235081d3205d53728bdf07aa22d9ca938e5b319ae49f03326ad1419c9e63134cc1c17c2b85dd5c61c1d3302ed76dd6138758845f597e18c54111a32d0608adf09e4510cbb08098ee309764c2eedfaa8fc868f2b99c737a5de2682d2bbac7290c19825522199ce5dfdca71f08f404d6befc4f7200450e41f0ea87db6ac1a08a0c23f17bd4f07743c1930666c0fc0f4435a7ac3b1928aec187cbfe116fc02edcb347c2cd1e7a4495e4defe2e3d36368675eacbcae462061fa2d238"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x118}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x1f, 0xfe, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="756c5312f593cad7f8b3464a8b877aa9cf78af5357da8c28964d3bf3292e89c292b53fc43659313c399b2c9336b98ad7f7395af10ebce0a0ec484b52f915fc35526f02d3c673a742e539ad3596f0405696433a0e96d90c3209a4fe5eca056f7e6765e3964376a117dca382b0d69f389c11be32a35b2a8180f7258e82145e1b74d4372b2704f919b806350acbdf0dbb3fd76d6611e4b1c00c43a94642e978b27b01a9e0a5386f60f934b7f45808657c844c9699561c597228ab5cd5ee913f6f79235ea437e3268ddadf3489397316e1a0071cae8169e635fb8590ba002eca9075eb3ff0846d34a9e4", 0xe8, r1}, 0x68) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000f40)={'filter\x00', 0x10, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e5fce0c960bc", @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, 0xf, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @broadcast, @loopback, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 0s ago: executing program 1 (id=3978): getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000005c0)={[{@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x1}}, {@quota}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@sysvgroups}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0x100000001}}], [{@appraise}]}, 0x1, 0x56f, &(0x7f0000003780)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r2, 0x20, 0x0, 0x8) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) kernel console output (not intermixed with test programs): 625] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #18: comm syz.7.1660: mark_inode_dirty error [ 101.152484][ T7625] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #18: comm syz.7.1660: corrupted inode contents [ 101.167664][ T7625] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2991: inode #18: comm syz.7.1660: mark_inode_dirty error [ 101.184042][ T7625] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2994: inode #18: comm syz.7.1660: mark inode dirty (error -117) [ 101.197405][ T7625] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 101.361121][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1667'. [ 101.549334][ T7668] loop4: detected capacity change from 0 to 512 [ 101.584316][ T7668] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.628417][ T7673] netem: change failed [ 101.633350][ T7668] EXT4-fs (loop4): 1 truncate cleaned up [ 101.825551][ T7698] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1685'. [ 101.883860][ T7711] loop4: detected capacity change from 0 to 256 [ 101.900685][ T7711] FAT-fs (loop4): bogus number of FAT sectors [ 101.906899][ T7711] FAT-fs (loop4): Can't find a valid FAT filesystem [ 102.044957][ T7721] tipc: Started in network mode [ 102.049969][ T7721] tipc: Node identity ac14140f, cluster identity 4711 [ 102.062436][ T7721] tipc: New replicast peer: 0.0.255.255 [ 102.068286][ T7721] tipc: Enabled bearer , priority 10 [ 102.152989][ T7732] loop4: detected capacity change from 0 to 512 [ 102.220091][ T7732] ext4 filesystem being mounted at /385/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.341773][ T7741] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1701: corrupted inode contents [ 102.387564][ T7741] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #18: comm syz.4.1701: mark_inode_dirty error [ 102.440868][ T7741] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #18: comm syz.4.1701: corrupted inode contents [ 102.509705][ T7741] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #18: comm syz.4.1701: mark_inode_dirty error [ 102.524588][ T7741] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #18: comm syz.4.1701: mark inode dirty (error -117) [ 102.531971][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 102.540323][ T7741] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 102.548383][ T7760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 102.781736][ T7788] netlink: 'syz.7.1725': attribute type 39 has an invalid length. [ 102.884111][ T7799] loop1: detected capacity change from 0 to 512 [ 102.910217][ T7799] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 103.027666][ T7799] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.1729: corrupted inode contents [ 103.043376][ T7799] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.1729: mark_inode_dirty error [ 103.055995][ T7799] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.1729: corrupted inode contents [ 103.076794][ T7799] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.1729: mark_inode_dirty error [ 103.101404][ T7799] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.1729: mark inode dirty (error -117) [ 103.116256][ T7799] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 103.180432][ T7833] loop8: detected capacity change from 0 to 512 [ 103.187438][ T7833] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 103.197398][ T10] tipc: Node number set to 2886997007 [ 103.213355][ T7833] EXT4-fs (loop8): 1 truncate cleaned up [ 103.224088][ T7839] ref_ctr increment failed for inode: 0x816 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005f300 [ 103.225195][ T7833] EXT4-fs mount: 10 callbacks suppressed [ 103.225214][ T7833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.256821][ T7838] uprobe: syz.4.1745:7838 failed to unregister, leaking uprobe [ 103.278816][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.505090][ T7864] loop4: detected capacity change from 0 to 8192 [ 103.520650][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 103.520667][ T29] audit: type=1400 audit(1750360629.128:1837): avc: denied { mount } for pid=7863 comm="syz.4.1756" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 103.583932][ T29] audit: type=1400 audit(1750360629.188:1838): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 103.681973][ T29] audit: type=1400 audit(1750360629.288:1839): avc: denied { bind } for pid=7878 comm="syz.7.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 103.701915][ T29] audit: type=1400 audit(1750360629.288:1840): avc: denied { name_bind } for pid=7878 comm="syz.7.1761" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 103.723806][ T29] audit: type=1400 audit(1750360629.288:1841): avc: denied { node_bind } for pid=7878 comm="syz.7.1761" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 103.795408][ T7888] __nla_validate_parse: 5 callbacks suppressed [ 103.795429][ T7888] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1764'. [ 103.866656][ T29] audit: type=1400 audit(1750360629.468:1842): avc: denied { mount } for pid=7894 comm="syz.4.1767" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 103.925789][ T7901] Set syz1 is full, maxelem 65536 reached [ 103.934602][ T7903] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 103.945289][ T29] audit: type=1400 audit(1750360629.538:1843): avc: denied { mount } for pid=7900 comm="syz.7.1771" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 103.967596][ T29] audit: type=1400 audit(1750360629.538:1844): avc: denied { mac_admin } for pid=7900 comm="syz.7.1771" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 103.988907][ T29] audit: type=1400 audit(1750360629.548:1845): avc: denied { relabelto } for pid=7900 comm="syz.7.1771" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 104.016298][ T29] audit: type=1400 audit(1750360629.548:1846): avc: denied { associate } for pid=7900 comm="syz.7.1771" name="/" dev="tmpfs" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 104.077209][ T7907] netlink: 'syz.7.1772': attribute type 3 has an invalid length. [ 104.222261][ T7932] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1784'. [ 104.308061][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1782'. [ 104.363102][ T7946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 104.393928][ T7950] lo: entered allmulticast mode [ 104.401560][ T7951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1791'. [ 104.412411][ T7951] IPVS: Error joining to the multicast group [ 104.420259][ T7948] lo: left allmulticast mode [ 104.529814][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1798'. [ 104.773708][ T7988] syzkaller0: entered promiscuous mode [ 104.779483][ T7988] syzkaller0: entered allmulticast mode [ 104.830529][ T7995] netlink: zone id is out of range [ 104.835824][ T7995] netlink: zone id is out of range [ 104.841094][ T7995] netlink: zone id is out of range [ 104.846428][ T7995] netlink: zone id is out of range [ 104.851918][ T7995] netlink: zone id is out of range [ 104.857074][ T7995] netlink: zone id is out of range [ 104.862237][ T7995] netlink: zone id is out of range [ 104.867411][ T7995] netlink: zone id is out of range [ 104.872566][ T7995] netlink: zone id is out of range [ 104.877882][ T7995] netlink: zone id is out of range [ 105.063371][ T8013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1817'. [ 105.073565][ T8013] netem: change failed [ 105.341670][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1832'. [ 105.413481][ T8053] geneve0: entered allmulticast mode [ 105.536131][ T8061] syz.4.1838 (8061): attempted to duplicate a private mapping with mremap. This is not supported. [ 105.663723][ T8079] loop4: detected capacity change from 0 to 1024 [ 105.680529][ T8079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.712221][ T8079] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.1844: Allocating blocks 449-513 which overlap fs metadata [ 105.733565][ T8078] EXT4-fs (loop4): pa ffff888106dde7e0: logic 48, phys. 177, len 21 [ 105.743004][ T8078] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 105.764656][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.876747][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.885730][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.069839][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 106.083187][ T8101] IPVS: Error joining to the multicast group [ 106.121404][ T8107] loop1: detected capacity change from 0 to 1024 [ 106.128346][ T8107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.135078][ T8107] EXT4-fs: Ignoring removed bh option [ 106.150858][ T8107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.204648][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.290353][ T8127] loop8: detected capacity change from 0 to 164 [ 106.311210][ T8127] syz.8.1864: attempt to access beyond end of device [ 106.311210][ T8127] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 106.516187][ T8146] loop8: detected capacity change from 0 to 164 [ 106.555807][ T8149] 9pnet_fd: Insufficient options for proto=fd [ 106.602959][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1877'. [ 106.704847][ T8169] syzkaller0: entered promiscuous mode [ 106.710527][ T8169] syzkaller0: entered allmulticast mode [ 108.172666][ T8352] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8352 comm=syz.7.1939 [ 108.185893][ T8352] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8352 comm=syz.7.1939 [ 108.332278][ T8374] loop8: detected capacity change from 0 to 164 [ 108.348171][ T8374] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.381845][ T8374] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 108.392386][ T8374] Symlink component flag not implemented [ 108.398225][ T8374] Symlink component flag not implemented [ 108.407379][ T8374] Symlink component flag not implemented (7) [ 108.414039][ T8374] Symlink component flag not implemented (116) [ 108.542304][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 108.542323][ T29] audit: type=1400 audit(1750360634.148:2090): avc: denied { create } for pid=8406 comm="syz.8.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.600065][ T29] audit: type=1400 audit(1750360634.178:2091): avc: denied { connect } for pid=8406 comm="syz.8.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.620482][ T29] audit: type=1400 audit(1750360634.178:2092): avc: denied { write } for pid=8406 comm="syz.8.1954" path="socket:[21171]" dev="sockfs" ino=21171 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.878158][ T8448] netlink: 'syz.8.1962': attribute type 10 has an invalid length. [ 108.887086][ T8448] __nla_validate_parse: 6 callbacks suppressed [ 108.887101][ T8448] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1962'. [ 108.909333][ T8448] dummy0: entered promiscuous mode [ 108.915778][ T8448] bridge0: port 3(dummy0) entered blocking state [ 108.923106][ T8448] bridge0: port 3(dummy0) entered disabled state [ 108.945283][ T8448] dummy0: entered allmulticast mode [ 108.969578][ T8448] bridge0: port 3(dummy0) entered blocking state [ 108.976328][ T8448] bridge0: port 3(dummy0) entered forwarding state [ 109.075206][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1970'. [ 109.149649][ T29] audit: type=1400 audit(1750360634.748:2093): avc: denied { create } for pid=8477 comm="syz.8.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 109.186937][ T29] audit: type=1400 audit(1750360634.778:2094): avc: denied { sys_admin } for pid=8477 comm="syz.8.1972" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 109.227577][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.255907][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.611628][ T29] audit: type=1326 audit(1750360635.218:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8536 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 109.637867][ T29] audit: type=1326 audit(1750360635.218:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8536 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 109.661784][ T29] audit: type=1326 audit(1750360635.218:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8536 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 109.686193][ T29] audit: type=1326 audit(1750360635.218:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8536 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 109.709997][ T29] audit: type=1326 audit(1750360635.218:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8536 comm="syz.2.1990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 110.173583][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2008'. [ 110.211527][ T8585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.219144][ T8585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.249767][ T8585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.257243][ T8585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.283786][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2012'. [ 110.741946][ T8627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2026'. [ 111.290179][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2044'. [ 111.383994][ T8676] loop8: detected capacity change from 0 to 256 [ 111.467859][ T8686] : renamed from vlan1 [ 111.569220][ T8693] loop1: detected capacity change from 0 to 2048 [ 111.590306][ T8693] EXT4-fs: Ignoring removed bh option [ 111.604769][ T8693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.781293][ T8710] netlink: 'syz.4.2061': attribute type 3 has an invalid length. [ 111.981316][ T8729] loop8: detected capacity change from 0 to 512 [ 112.096204][ T8729] EXT4-fs (loop8): 1 orphan inode deleted [ 112.109338][ T8729] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.122003][ T4896] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 112.138982][ T8729] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.178151][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.208170][ T8735] veth1_macvtap: left promiscuous mode [ 112.214715][ T5857] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 112.229924][ T8735] macsec0: entered promiscuous mode [ 112.249645][ T5857] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 112.262145][ T5857] EXT4-fs (loop1): This should not happen!! Data will be lost [ 112.262145][ T5857] [ 112.271933][ T5857] EXT4-fs (loop1): Total free blocks count 0 [ 112.277946][ T5857] EXT4-fs (loop1): Free/Dirty block details [ 112.283878][ T5857] EXT4-fs (loop1): free_blocks=2415919104 [ 112.289657][ T5857] EXT4-fs (loop1): dirty_blocks=8224 [ 112.295021][ T5857] EXT4-fs (loop1): Block reservation details [ 112.301362][ T5857] EXT4-fs (loop1): i_reserved_data_blocks=514 [ 112.330271][ T5857] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 112.351432][ T8742] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2075'. [ 112.360489][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2075'. [ 112.381845][ T8742] wireguard0: entered promiscuous mode [ 112.387528][ T8742] wireguard0: entered allmulticast mode [ 112.655296][ T8769] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 113.001518][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2102'. [ 113.024256][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2108'. [ 113.034751][ T8812] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.043634][ T8812] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.052425][ T8812] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.061363][ T8812] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.070471][ T8812] vxlan0: entered promiscuous mode [ 113.349686][ T8845] syz.2.2121: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 113.364420][ T8845] CPU: 0 UID: 0 PID: 8845 Comm: syz.2.2121 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 113.364451][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.364493][ T8845] Call Trace: [ 113.364500][ T8845] [ 113.364510][ T8845] __dump_stack+0x1d/0x30 [ 113.364535][ T8845] dump_stack_lvl+0xe8/0x140 [ 113.364561][ T8845] dump_stack+0x15/0x1b [ 113.364583][ T8845] warn_alloc+0x12b/0x1a0 [ 113.364615][ T8845] ? update_curr+0x27f/0x320 [ 113.364695][ T8845] ? perf_callchain_user+0xae0/0xb50 [ 113.364736][ T8845] __vmalloc_node_range_noprof+0x9c/0xe00 [ 113.364778][ T8845] ? __bpf_get_stackid+0x721/0x800 [ 113.364855][ T8845] ? __rcu_read_unlock+0x4f/0x70 [ 113.364880][ T8845] ? avc_has_perm_noaudit+0x1b1/0x200 [ 113.364914][ T8845] ? should_fail_ex+0x30/0x280 [ 113.365029][ T8845] ? xskq_create+0x36/0xe0 [ 113.365060][ T8845] vmalloc_user_noprof+0x7d/0xb0 [ 113.365151][ T8845] ? xskq_create+0x80/0xe0 [ 113.365178][ T8845] xskq_create+0x80/0xe0 [ 113.365201][ T8845] xsk_init_queue+0x95/0xf0 [ 113.365286][ T8845] xsk_setsockopt+0x3de/0x510 [ 113.365308][ T8845] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.365327][ T8845] __sys_setsockopt+0x181/0x200 [ 113.365439][ T8845] __x64_sys_setsockopt+0x64/0x80 [ 113.365547][ T8845] x64_sys_call+0x2bd5/0x2fb0 [ 113.365650][ T8845] do_syscall_64+0xd2/0x200 [ 113.365676][ T8845] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 113.365708][ T8845] ? clear_bhb_loop+0x40/0x90 [ 113.365736][ T8845] ? clear_bhb_loop+0x40/0x90 [ 113.365764][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.365809][ T8845] RIP: 0033:0x7fd54299e929 [ 113.365829][ T8845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.365852][ T8845] RSP: 002b:00007fd541007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.365878][ T8845] RAX: ffffffffffffffda RBX: 00007fd542bc5fa0 RCX: 00007fd54299e929 [ 113.365920][ T8845] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 113.365936][ T8845] RBP: 00007fd542a20b39 R08: 0000000000000004 R09: 0000000000000000 [ 113.365987][ T8845] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 113.366002][ T8845] R13: 0000000000000000 R14: 00007fd542bc5fa0 R15: 00007ffdcbb4c1a8 [ 113.366025][ T8845] [ 113.366034][ T8845] Mem-Info: [ 113.604001][ T8845] active_anon:21549 inactive_anon:11 isolated_anon:0 [ 113.604001][ T8845] active_file:21037 inactive_file:2439 isolated_file:0 [ 113.604001][ T8845] unevictable:0 dirty:312 writeback:0 [ 113.604001][ T8845] slab_reclaimable:3183 slab_unreclaimable:15319 [ 113.604001][ T8845] mapped:29665 shmem:17939 pagetables:1246 [ 113.604001][ T8845] sec_pagetables:0 bounce:0 [ 113.604001][ T8845] kernel_misc_reclaimable:0 [ 113.604001][ T8845] free:1810652 free_pcp:51713 free_cma:0 [ 113.649560][ T8845] Node 0 active_anon:86196kB inactive_anon:44kB active_file:84148kB inactive_file:9756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118660kB dirty:1248kB writeback:0kB shmem:71756kB writeback_tmp:0kB kernel_stack:4304kB pagetables:5216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 113.678686][ T8845] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.707560][ T8845] lowmem_reserve[]: 0 2882 7860 7860 [ 113.712984][ T8845] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 113.743873][ T8845] lowmem_reserve[]: 0 0 4978 4978 [ 113.748995][ T8845] Node 0 Normal free:4283268kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:86288kB inactive_anon:44kB active_file:84148kB inactive_file:9768kB unevictable:0kB writepending:1244kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:195092kB local_pcp:43496kB free_cma:0kB [ 113.781917][ T8845] lowmem_reserve[]: 0 0 0 0 [ 113.788117][ T8845] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.801431][ T8845] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 113.817908][ T8845] Node 0 Normal: 265*4kB (UME) 80*8kB (UME) 44*16kB (UME) 348*32kB (UME) 109*64kB (UME) 40*128kB (UME) 64*256kB (UE) 51*512kB (UME) 12*1024kB (UM) 24*2048kB (UM) 1015*4096kB (UM) = 4287012kB [ 113.837435][ T8845] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 113.847212][ T8845] 40653 total pagecache pages [ 113.852180][ T8845] 10 pages in swap cache [ 113.856453][ T8845] Free swap = 124956kB [ 113.860645][ T8845] Total swap = 124996kB [ 113.864879][ T8845] 2097051 pages RAM [ 113.868741][ T8845] 0 pages HighMem/MovableOnly [ 113.873453][ T8845] 80812 pages reserved [ 114.012254][ T8878] loop8: detected capacity change from 0 to 128 [ 114.091968][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 114.091983][ T29] audit: type=1326 audit(1750360639.698:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.156346][ T29] audit: type=1326 audit(1750360639.728:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.180035][ T29] audit: type=1326 audit(1750360639.728:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.203569][ T29] audit: type=1326 audit(1750360639.728:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.227149][ T29] audit: type=1326 audit(1750360639.738:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.251129][ T29] audit: type=1326 audit(1750360639.738:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.274868][ T29] audit: type=1326 audit(1750360639.738:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.298808][ T29] audit: type=1326 audit(1750360639.748:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.322512][ T29] audit: type=1326 audit(1750360639.748:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.346334][ T29] audit: type=1326 audit(1750360639.748:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8887 comm="syz.7.2140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061ff1e929 code=0x7ffc0000 [ 114.406918][ T8890] bond0: entered promiscuous mode [ 114.412490][ T8890] bond0: entered allmulticast mode [ 114.420134][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.440535][ T8890] bond0 (unregistering): Released all slaves [ 114.570308][ T8918] net_ratelimit: 257 callbacks suppressed [ 114.570327][ T8918] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 5 [ 114.694852][ T8934] __nla_validate_parse: 2 callbacks suppressed [ 114.694947][ T8934] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2162'. [ 114.732215][ T8942] loop1: detected capacity change from 0 to 1024 [ 114.757185][ T8942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.775007][ T8942] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 114.788374][ T8942] EXT4-fs (loop1): This should not happen!! Data will be lost [ 114.788374][ T8942] [ 114.798401][ T8942] EXT4-fs (loop1): Total free blocks count 0 [ 114.804542][ T8942] EXT4-fs (loop1): Free/Dirty block details [ 114.810502][ T8942] EXT4-fs (loop1): free_blocks=0 [ 114.817152][ T8942] EXT4-fs (loop1): dirty_blocks=0 [ 114.822399][ T8942] EXT4-fs (loop1): Block reservation details [ 114.828490][ T8942] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 114.849231][ T8956] loop8: detected capacity change from 0 to 1024 [ 114.857892][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.868456][ T8956] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 114.879964][ T8956] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 114.894596][ T8956] JBD2: no valid journal superblock found [ 114.900724][ T8956] EXT4-fs (loop8): Could not load journal inode [ 115.168982][ T8991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 115.180982][ T8991] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.190048][ T8991] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.199150][ T8991] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.208239][ T8991] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.218264][ T8991] vxlan0: entered promiscuous mode [ 115.402532][ T9003] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 5 [ 115.487831][ T9012] loop8: detected capacity change from 0 to 512 [ 115.494853][ T9012] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 115.506956][ T9012] EXT4-fs (loop8): 1 truncate cleaned up [ 115.514789][ T9012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.554990][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.641730][ T9024] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2198'. [ 115.986015][ T9046] 9pnet: p9_errstr2errno: server reported unknown error [ 116.060623][ T9056] vlan2: entered allmulticast mode [ 116.078199][ T9056] dummy0: entered allmulticast mode [ 116.119114][ T9065] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2217'. [ 116.155191][ T9065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.184072][ T9065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.204397][ T9065] bond0 (unregistering): Released all slaves [ 116.400148][ T9088] macvlan1: entered promiscuous mode [ 116.406940][ T9088] ipvlan0: entered promiscuous mode [ 116.413141][ T9088] ipvlan0: left promiscuous mode [ 116.418840][ T9088] macvlan1: left promiscuous mode [ 116.504307][ T9098] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2233'. [ 116.630413][ T9109] SELinux: failed to load policy [ 116.928120][ T9143] netlink: 'syz.2.2264': attribute type 1 has an invalid length. [ 116.928744][ T9141] loop8: detected capacity change from 0 to 1024 [ 116.960994][ T9141] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.003665][ T9141] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.2253: Allocating blocks 449-513 which overlap fs metadata [ 117.032726][ T9140] EXT4-fs (loop8): pa ffff888106e29310: logic 48, phys. 177, len 21 [ 117.040965][ T9140] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 117.108794][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.734260][ T9210] netlink: 'syz.7.2284': attribute type 10 has an invalid length. [ 117.742526][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.749895][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.782238][ T9210] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2284'. [ 117.803837][ T9210] bridge_slave_1: left allmulticast mode [ 117.809631][ T9210] bridge_slave_1: left promiscuous mode [ 117.815394][ T9210] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.823957][ T9210] bridge_slave_0: left promiscuous mode [ 117.829740][ T9210] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.109110][ T9230] vlan2: entered allmulticast mode [ 118.170372][ T9232] loop1: detected capacity change from 0 to 2048 [ 118.199886][ T9232] loop1: p1 < > p4 [ 118.204866][ T9232] loop1: p4 size 8388608 extends beyond EOD, truncated [ 118.484621][ T9258] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2302'. [ 118.856912][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2315'. [ 118.877102][ T9289] IPVS: Unknown mcast interface: vcan0 [ 118.885118][ T9291] 9pnet_fd: Insufficient options for proto=fd [ 118.929272][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2319'. [ 119.104476][ T9313] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2327'. [ 119.643147][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 119.643166][ T29] audit: type=1326 audit(1750360645.248:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 119.696500][ T29] audit: type=1326 audit(1750360645.278:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.1.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7fc00000 [ 119.720505][ T29] audit: type=1326 audit(1750360645.288:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 119.744013][ T29] audit: type=1326 audit(1750360645.288:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9347 comm="syz.2.2342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 119.942509][ T9361] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.009886][ T9361] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.049969][ T29] audit: type=1400 audit(1750360645.658:2394): avc: denied { connect } for pid=9367 comm="syz.7.2349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 120.080635][ T9361] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.242776][ T9361] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.355409][ T9361] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.399601][ T29] audit: type=1326 audit(1750360645.988:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9340 comm="syz.1.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f461e1ee929 code=0x7fc00000 [ 120.439860][ T9361] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.489882][ T9361] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.562397][ T9361] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.636414][ T29] audit: type=1400 audit(1750360646.238:2396): avc: denied { read } for pid=9386 comm="syz.8.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 121.006971][ T9409] vlan2: entered allmulticast mode [ 121.039906][ T9409] dummy0: entered allmulticast mode [ 121.189574][ T9418] SELinux: ebitmap: truncated map [ 121.221966][ T9418] SELinux: failed to load policy [ 121.320010][ T9428] IPVS: stopping master sync thread 9429 ... [ 121.432054][ T9435] __nla_validate_parse: 2 callbacks suppressed [ 121.432075][ T9435] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2377'. [ 121.447537][ T9435] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2377'. [ 121.640783][ T29] audit: type=1326 audit(1750360647.248:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.4.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 121.664551][ T29] audit: type=1326 audit(1750360647.248:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.4.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 121.763926][ T29] audit: type=1326 audit(1750360647.298:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9452 comm="syz.4.2386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 121.964651][ T9472] loop1: detected capacity change from 0 to 764 [ 121.990130][ T9472] iso9660: Unknown parameter '017777777777777777777770177777777777777777777701777777777777777777777' [ 122.035592][ T9472] loop1: detected capacity change from 0 to 1024 [ 122.054723][ T9472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.086260][ T9472] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 122.132096][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.619233][ T9532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9532 comm=syz.7.2419 [ 122.758033][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 122.775037][ T9548] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2426'. [ 123.970948][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2481'. [ 124.003590][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2481'. [ 124.017095][ T9674] netlink: 'syz.7.2482': attribute type 1 has an invalid length. [ 124.256346][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2489'. [ 124.633146][ T9720] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2503'. [ 124.698017][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 124.698036][ T29] audit: type=1400 audit(1750360650.298:2771): avc: denied { mount } for pid=9727 comm="syz.7.2508" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 124.793027][ T29] audit: type=1326 audit(1750360650.348:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.1.2479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f461e1ee929 code=0x7fc00000 [ 124.919855][ T9749] bridge: RTM_NEWNEIGH with invalid ether address [ 124.939552][ T9751] loop1: detected capacity change from 0 to 128 [ 124.950335][ T9751] EXT4-fs: Ignoring removed nobh option [ 124.959609][ T9751] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.972901][ T9751] ext4 filesystem being mounted at /403/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.988900][ T29] audit: type=1400 audit(1750360650.598:2773): avc: denied { write } for pid=9750 comm="syz.1.2517" path="/403/mnt/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 125.077776][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.171338][ T9763] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.199528][ T9764] @: renamed from vlan0 (while UP) [ 125.247709][ T9763] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.321879][ T9763] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.425938][ T9763] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.530911][ T9763] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.562743][ T9763] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.596579][ T9763] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.652393][ T9763] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.678200][ T29] audit: type=1400 audit(1750360651.278:2774): avc: denied { create } for pid=9782 comm="syz.1.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.720435][ T29] audit: type=1400 audit(1750360651.288:2775): avc: denied { read } for pid=9782 comm="syz.1.2530" path="socket:[25007]" dev="sockfs" ino=25007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.785417][ T29] audit: type=1400 audit(1750360651.388:2776): avc: denied { write } for pid=9782 comm="syz.1.2530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 125.896384][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2537'. [ 125.959461][ T9799] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.984781][ T29] audit: type=1326 audit(1750360651.588:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9802 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 126.008340][ T29] audit: type=1326 audit(1750360651.588:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9802 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 126.032095][ T29] audit: type=1326 audit(1750360651.588:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9802 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 126.055873][ T29] audit: type=1326 audit(1750360651.588:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9802 comm="syz.1.2538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 126.080774][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2537'. [ 126.117296][ T9804] bond1 (unregistering): Released all slaves [ 126.265156][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'. [ 126.580181][ T9872] __nla_validate_parse: 1 callbacks suppressed [ 126.580201][ T9872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'. [ 127.125884][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'. [ 127.205785][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2591'. [ 127.225222][ T9927] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2591'. [ 127.300305][ T9942] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2597'. [ 127.333236][ T9950] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 127.355178][ T9947] IPVS: stopping master sync thread 9950 ... [ 127.464136][ T9960] vhci_hcd: invalid port number 65 [ 127.469739][ T9960] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 127.760670][ T9992] netlink: 'syz.1.2619': attribute type 1 has an invalid length. [ 127.799183][ T9992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.807018][ T9998] loop8: detected capacity change from 0 to 128 [ 127.836352][ T9992] bond1: (slave veth3): Enslaving as an active interface with a down link [ 127.856374][ T9998] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 127.883705][ T9998] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.896320][ T9992] bond1: (slave dummy0): making interface the new active one [ 127.930461][ T9992] dummy0: entered promiscuous mode [ 127.935919][ T9992] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 128.151920][ T5077] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.343193][T10050] loop8: detected capacity change from 0 to 164 [ 128.350811][T10050] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 128.360942][T10050] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 128.369919][T10050] rock: directory entry would overflow storage [ 128.376201][T10050] rock: sig=0x4f50, size=4, remaining=3 [ 128.381850][T10050] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 128.457029][T10058] loop8: detected capacity change from 0 to 128 [ 128.470369][T10058] EXT4-fs: Ignoring removed nobh option [ 128.484807][T10058] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 128.510427][T10058] ext4 filesystem being mounted at /413/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 128.568983][ T5077] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.704402][T10066] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2649'. [ 128.869615][T10084] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2658'. [ 129.005627][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2664'. [ 129.312169][T10135] wg2: left promiscuous mode [ 129.316866][T10135] wg2: left allmulticast mode [ 129.361065][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.371406][T10135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.411976][T10135] macsec0: left promiscuous mode [ 129.425003][T10135] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.434100][T10135] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.443127][T10135] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.452101][T10135] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.643617][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2685'. [ 129.870617][T10183] netlink: 'syz.8.2691': attribute type 1 has an invalid length. [ 129.879556][T10183] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2691'. [ 130.193666][T10221] netlink: 'syz.7.2707': attribute type 12 has an invalid length. [ 130.255571][T10231] tipc: New replicast peer: 10.1.1.2 [ 130.261054][T10231] tipc: Enabled bearer , priority 10 [ 131.032470][T10264] wg2: left promiscuous mode [ 131.037176][T10264] wg2: left allmulticast mode [ 131.046022][T10264] wg2: entered promiscuous mode [ 131.051597][T10264] wg2: entered allmulticast mode [ 131.082512][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 131.082530][ T29] audit: type=1326 audit(1750360656.688:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.120049][ T29] audit: type=1326 audit(1750360656.698:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.144974][ T29] audit: type=1326 audit(1750360656.698:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.168823][ T29] audit: type=1326 audit(1750360656.718:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.170175][T10270] loop8: detected capacity change from 0 to 512 [ 131.192426][ T29] audit: type=1326 audit(1750360656.718:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.222546][ T29] audit: type=1326 audit(1750360656.718:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.247328][ T29] audit: type=1326 audit(1750360656.718:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.271724][ T29] audit: type=1326 audit(1750360656.718:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.295753][ T29] audit: type=1326 audit(1750360656.718:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.319392][ T29] audit: type=1326 audit(1750360656.718:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10267 comm="syz.1.2725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 131.352465][T10270] EXT4-fs (loop8): orphan cleanup on readonly fs [ 131.362307][T10270] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm wg1: bad orphan inode 13 [ 131.390800][T10270] ext4_test_bit(bit=12, block=18) = 1 [ 131.396315][T10270] is_bad_inode(inode)=0 [ 131.400537][T10270] NEXT_ORPHAN(inode)=2130706432 [ 131.405413][T10270] max_ino=32 [ 131.408790][T10270] i_nlink=1 [ 131.422905][T10270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.494338][T10270] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 131.530408][T10270] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm wg1: bg 0: block 248: padding at end of block bitmap is not set [ 131.546859][T10270] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm wg1: Failed to acquire dquot type 1 [ 131.561993][T10270] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.597893][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.695111][T10304] ip6gre1: entered allmulticast mode [ 132.082383][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2757'. [ 132.182607][T10356] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2764'. [ 132.337760][T10377] pimreg: entered allmulticast mode [ 132.345086][T10377] pimreg: left allmulticast mode [ 132.523004][T10394] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2781'. [ 132.572203][T10396] hub 6-0:1.0: USB hub found [ 132.577094][T10396] hub 6-0:1.0: 8 ports detected [ 133.191099][T10499] loop8: detected capacity change from 0 to 512 [ 133.193452][T10500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10500 comm=syz.4.2786 [ 133.197993][T10499] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.218178][T10499] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 133.241775][T10499] EXT4-fs (loop8): 1 truncate cleaned up [ 133.247990][T10499] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.304687][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.455393][T10533] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2795'. [ 133.477235][T10536] loop8: detected capacity change from 0 to 512 [ 133.549355][T10536] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.571116][T10536] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.639518][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.807910][T10579] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2809'. [ 134.043135][T10617] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2824'. [ 134.147395][T10636] netlink: 'syz.8.2833': attribute type 10 has an invalid length. [ 134.161114][T10636] ipvlan0: entered allmulticast mode [ 134.166461][T10636] veth0_vlan: entered allmulticast mode [ 134.186706][T10636] team0: Device ipvlan0 failed to register rx_handler [ 134.465981][T10659] loop1: detected capacity change from 0 to 2048 [ 134.499701][T10668] netlink: 'syz.4.2848': attribute type 3 has an invalid length. [ 134.507525][T10668] netlink: 'syz.4.2848': attribute type 1 has an invalid length. [ 134.515327][T10668] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2848'. [ 134.548162][T10659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.578185][T10672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10672 comm=syz.8.2849 [ 134.651689][T10680] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2853'. [ 134.688699][T10686] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 135.029408][T10719] syzkaller1: entered promiscuous mode [ 135.035058][T10719] syzkaller1: entered allmulticast mode [ 135.304974][T10744] netlink: 'syz.8.2878': attribute type 4 has an invalid length. [ 135.430145][ T5839] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 135.442748][ T5839] EXT4-fs (loop1): This should not happen!! Data will be lost [ 135.442748][ T5839] [ 135.452528][ T5839] EXT4-fs (loop1): Total free blocks count 0 [ 135.458564][ T5839] EXT4-fs (loop1): Free/Dirty block details [ 135.464543][ T5839] EXT4-fs (loop1): free_blocks=2415919504 [ 135.470388][ T5839] EXT4-fs (loop1): dirty_blocks=11424 [ 135.475980][ T5839] EXT4-fs (loop1): Block reservation details [ 135.482059][ T5839] EXT4-fs (loop1): i_reserved_data_blocks=714 [ 135.520797][ T5839] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 136.190650][T10829] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2914'. [ 136.440324][T10868] macsec1: entered allmulticast mode [ 136.445758][T10868] bridge0: entered allmulticast mode [ 136.453521][T10868] bridge0: port 1(macsec1) entered blocking state [ 136.460055][T10868] bridge0: port 1(macsec1) entered disabled state [ 136.467953][T10868] bridge0: left allmulticast mode [ 136.501606][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 136.501624][ T29] audit: type=1400 audit(1750360662.108:3045): avc: denied { read } for pid=10872 comm="syz.7.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 136.668034][ T29] audit: type=1326 audit(1750360662.268:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.701691][T10894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10894 comm=syz.7.2943 [ 136.723502][ T29] audit: type=1326 audit(1750360662.298:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.747145][ T29] audit: type=1326 audit(1750360662.298:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.770984][ T29] audit: type=1326 audit(1750360662.308:3049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.794685][ T29] audit: type=1326 audit(1750360662.308:3050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.818767][ T29] audit: type=1326 audit(1750360662.308:3051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.842396][ T29] audit: type=1326 audit(1750360662.308:3052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.866018][ T29] audit: type=1326 audit(1750360662.308:3053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.889580][ T29] audit: type=1326 audit(1750360662.308:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10889 comm="syz.2.2941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 136.900003][T10892] IPVS: stopping master sync thread 10899 ... [ 136.965757][T10909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10909 comm=syz.4.2950 [ 136.986137][T10911] loop1: detected capacity change from 0 to 512 [ 137.006849][T10911] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.020661][T10911] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.104349][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2958'. [ 137.116695][T10930] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.2948: corrupted inode contents [ 137.130419][T10930] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #18: comm syz.1.2948: mark_inode_dirty error [ 137.146825][T10930] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #18: comm syz.1.2948: corrupted inode contents [ 137.160371][T10930] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #18: comm syz.1.2948: mark_inode_dirty error [ 137.172850][T10930] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #18: comm syz.1.2948: mark inode dirty (error -117) [ 137.188668][T10930] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 137.842161][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.130169][T11009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2994'. [ 138.229052][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 138.250891][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2997'. [ 138.304611][T11022] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2998'. [ 138.313839][T11022] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2998'. [ 138.494267][T11038] loop1: detected capacity change from 0 to 256 [ 138.513586][T11038] vfat: Bad value for 'fmask' [ 139.041793][ T4896] dummy0: left promiscuous mode [ 139.463256][T11119] loop1: detected capacity change from 0 to 2048 [ 139.482748][T11119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 139.653331][T11132] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 139.672429][T11132] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1174 with error 28 [ 139.685104][T11132] EXT4-fs (loop1): This should not happen!! Data will be lost [ 139.685104][T11132] [ 139.694836][T11132] EXT4-fs (loop1): Total free blocks count 0 [ 139.701030][T11132] EXT4-fs (loop1): Free/Dirty block details [ 139.707091][T11132] EXT4-fs (loop1): free_blocks=2415919104 [ 139.712894][T11132] EXT4-fs (loop1): dirty_blocks=1184 [ 139.718343][T11132] EXT4-fs (loop1): Block reservation details [ 139.724416][T11132] EXT4-fs (loop1): i_reserved_data_blocks=74 [ 139.739313][T11143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11143 comm=syz.7.3050 [ 139.807493][T11146] loop8: detected capacity change from 0 to 2048 [ 139.889117][T11152] netlink: 'syz.7.3055': attribute type 3 has an invalid length. [ 140.006207][T11146] loop8: p1 < > p3 p4 < > [ 140.014119][T11146] loop8: p3 start 4284289 is beyond EOD, truncated [ 140.307055][ T5883] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 140.977332][T11242] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3095'. [ 141.039259][T11245] netlink: 'syz.7.3096': attribute type 10 has an invalid length. [ 141.047228][T11245] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3096'. [ 141.059413][T11245] batman_adv: batadv0: Adding interface: macvlan0 [ 141.065937][T11245] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 141.087133][T11245] batman_adv: batadv0: Interface activated: macvlan0 [ 141.345857][T10141] IPVS: starting estimator thread 0... [ 141.368074][T11272] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3108'. [ 141.377204][T11272] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3108'. [ 141.413766][T11277] netlink: 'syz.1.3109': attribute type 10 has an invalid length. [ 141.421929][T11277] dummy0: entered promiscuous mode [ 141.428277][T11277] bond1: (slave dummy0): Releasing active interface [ 141.430262][T11272] loop8: detected capacity change from 0 to 512 [ 141.438598][T11270] IPVS: using max 1968 ests per chain, 98400 per kthread [ 141.529754][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 141.529772][ T29] audit: type=1400 audit(1750360667.138:3204): avc: denied { write } for pid=11284 comm="syz.8.3113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 141.578312][T11288] loop1: detected capacity change from 0 to 164 [ 141.589758][T11288] syz.1.3114: attempt to access beyond end of device [ 141.589758][T11288] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 141.604209][T11288] syz.1.3114: attempt to access beyond end of device [ 141.604209][T11288] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 141.641034][T11292] netlink: 'syz.1.3116': attribute type 12 has an invalid length. [ 141.751138][T11300] 9pnet_fd: Insufficient options for proto=fd [ 141.771341][ T29] audit: type=1326 audit(1750360667.378:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 141.799386][ T29] audit: type=1326 audit(1750360667.378:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 141.823987][ T29] audit: type=1326 audit(1750360667.408:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 141.847606][ T29] audit: type=1326 audit(1750360667.408:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 141.871215][ T29] audit: type=1326 audit(1750360667.408:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 141.894899][ T29] audit: type=1326 audit(1750360667.428:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 141.923937][ T29] audit: type=1326 audit(1750360667.528:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 141.947898][ T29] audit: type=1326 audit(1750360667.528:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 141.971798][ T29] audit: type=1326 audit(1750360667.548:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11301 comm="syz.8.3121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 142.047088][T11318] netlink: 'syz.1.3127': attribute type 21 has an invalid length. [ 142.101317][T11318] netlink: 'syz.1.3127': attribute type 1 has an invalid length. [ 142.109246][T11318] __nla_validate_parse: 8 callbacks suppressed [ 142.109260][T11318] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3127'. [ 142.211160][T11328] veth5: entered promiscuous mode [ 142.216448][T11330] tipc: Started in network mode [ 142.221443][T11330] tipc: Node identity ac14140f, cluster identity 4711 [ 142.231955][T11330] tipc: New replicast peer: 255.255.255.255 [ 142.238790][T11330] tipc: Enabled bearer , priority 10 [ 142.277405][T11334] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 142.346785][T11340] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 142.771165][T11309] syz.4.3124 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 142.782008][T11309] CPU: 0 UID: 0 PID: 11309 Comm: syz.4.3124 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 142.782040][T11309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.782057][T11309] Call Trace: [ 142.782066][T11309] [ 142.782076][T11309] __dump_stack+0x1d/0x30 [ 142.782103][T11309] dump_stack_lvl+0xe8/0x140 [ 142.782128][T11309] dump_stack+0x15/0x1b [ 142.782201][T11309] dump_header+0x81/0x220 [ 142.782234][T11309] oom_kill_process+0x334/0x3f0 [ 142.782346][T11309] out_of_memory+0x979/0xb80 [ 142.782428][T11309] try_charge_memcg+0x5e6/0x9e0 [ 142.782457][T11309] charge_memcg+0x51/0xc0 [ 142.782488][T11309] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 142.782528][T11309] __read_swap_cache_async+0x1df/0x350 [ 142.782638][T11309] swap_cluster_readahead+0x376/0x3e0 [ 142.782687][T11309] swapin_readahead+0xde/0x6f0 [ 142.782804][T11309] ? __filemap_get_folio+0x4f7/0x6b0 [ 142.782839][T11309] ? __rcu_read_unlock+0x34/0x70 [ 142.782868][T11309] ? swap_cache_get_folio+0x77/0x200 [ 142.782923][T11309] do_swap_page+0x301/0x2430 [ 142.782950][T11309] ? css_rstat_updated+0xcd/0x5b0 [ 142.782981][T11309] ? __pfx_default_wake_function+0x10/0x10 [ 142.783022][T11309] handle_mm_fault+0x9a5/0x2be0 [ 142.783045][T11309] ? mas_walk+0xf2/0x120 [ 142.783089][T11309] do_user_addr_fault+0x636/0x1090 [ 142.783301][T11309] exc_page_fault+0x62/0xa0 [ 142.783340][T11309] asm_exc_page_fault+0x26/0x30 [ 142.783366][T11309] RIP: 0033:0x7fa85a6011b4 [ 142.783384][T11309] Code: ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 <48> 89 54 24 10 89 74 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff [ 142.783413][T11309] RSP: 002b:00007fff09f52c10 EFLAGS: 00010202 [ 142.783451][T11309] RAX: 00000000fffffffa RBX: 00007fa85a7f5fa0 RCX: 0000000000000000 [ 142.783463][T11309] RDX: 00007fff09f52c50 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.783475][T11309] RBP: 00007fa85a7f7ba0 R08: 000000002b54f0e9 R09: 7fffffffffffffff [ 142.783489][T11309] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000022dba [ 142.783500][T11309] R13: 00007fff09f52d70 R14: ffffffffffffffff R15: 00007fff09f52d90 [ 142.783522][T11309] [ 142.783531][T11309] memory: usage 307200kB, limit 307200kB, failcnt 407 [ 143.005954][T11309] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 143.013921][T11309] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 143.021309][T11309] Memory cgroup stats for /syz4: [ 143.021570][T11309] cache 0 [ 143.029671][T11309] rss 0 [ 143.032457][T11309] shmem 0 [ 143.035398][T11309] mapped_file 0 [ 143.038922][T11309] dirty 0 [ 143.041868][T11309] writeback 0 [ 143.045149][T11309] workingset_refault_anon 53 [ 143.049878][T11309] workingset_refault_file 178 [ 143.054619][T11309] swap 192512 [ 143.057957][T11309] swapcached 0 [ 143.061377][T11309] pgpgin 124774 [ 143.064907][T11309] pgpgout 124772 [ 143.068449][T11309] pgfault 120332 [ 143.072020][T11309] pgmajfault 46 [ 143.075481][T11309] inactive_anon 0 [ 143.079135][T11309] active_anon 0 [ 143.082626][T11309] inactive_file 8192 [ 143.086535][T11309] active_file 0 [ 143.090015][T11309] unevictable 0 [ 143.093473][T11309] hierarchical_memory_limit 314572800 [ 143.098873][T11309] hierarchical_memsw_limit 9223372036854771712 [ 143.105076][T11309] total_cache 0 [ 143.108589][T11309] total_rss 0 [ 143.111944][T11309] total_shmem 0 [ 143.115404][T11309] total_mapped_file 0 [ 143.119502][T11309] total_dirty 0 [ 143.123005][T11309] total_writeback 0 [ 143.126815][T11309] total_workingset_refault_anon 53 [ 143.132095][T11309] total_workingset_refault_file 178 [ 143.137379][T11309] total_swap 192512 [ 143.141296][T11309] total_swapcached 0 [ 143.145192][T11309] total_pgpgin 124774 [ 143.149299][T11309] total_pgpgout 124772 [ 143.153366][T11309] total_pgfault 120332 [ 143.157486][T11309] total_pgmajfault 46 [ 143.161491][T11309] total_inactive_anon 0 [ 143.165646][T11309] total_active_anon 0 [ 143.169664][T11309] total_inactive_file 8192 [ 143.174130][T11309] total_active_file 0 [ 143.178111][T11309] total_unevictable 0 [ 143.182266][T11309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.3124,pid=11309,uid=0 [ 143.197091][T11309] Memory cgroup out of memory: Killed process 11309 (syz.4.3124) total-vm:95668kB, anon-rss:936kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:0 [ 143.228587][T10146] tipc: Node number set to 2886997007 [ 143.452389][T11373] team0 (unregistering): Port device team_slave_0 removed [ 143.469988][T11373] team0 (unregistering): Port device team_slave_1 removed [ 143.501479][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 143.510542][T11381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3157'. [ 143.643612][T11399] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 143.657130][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3167'. [ 143.678986][T11401] loop1: detected capacity change from 0 to 2048 [ 143.690188][T11405] bridge0: port 4(vlan2) entered blocking state [ 143.696529][T11405] bridge0: port 4(vlan2) entered disabled state [ 143.703379][T11405] vlan2: entered allmulticast mode [ 143.708563][T11405] bridge0: entered allmulticast mode [ 143.719673][T11405] vlan2: left allmulticast mode [ 143.724595][T11405] bridge0: left allmulticast mode [ 143.869751][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 143.878727][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 143.888652][T11412] netlink: 'syz.7.3170': attribute type 21 has an invalid length. [ 143.896573][T11412] netlink: 'syz.7.3170': attribute type 1 has an invalid length. [ 143.904429][T11412] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3170'. [ 143.918596][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 143.954334][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 143.963321][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 144.585514][T11477] bridge0: port 1(vlan1) entered blocking state [ 144.591886][T11477] bridge0: port 1(vlan1) entered disabled state [ 144.604769][T11477] vlan1: entered allmulticast mode [ 144.610145][T11477] bridge0: entered allmulticast mode [ 144.619471][T11477] vlan1: left allmulticast mode [ 144.624461][T11477] bridge0: left allmulticast mode [ 144.905063][T11512] netlink: 'syz.8.3211': attribute type 32 has an invalid length. [ 145.156098][T11540] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 145.602612][T11565] xt_hashlimit: size too large, truncated to 1048576 [ 145.976726][T11574] ref_ctr_offset mismatch. inode: 0xdde offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 146.110103][T11577] netlink: 'syz.1.3233': attribute type 1 has an invalid length. [ 146.133601][T11577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.154969][T11577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.162773][T11577] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 146.174928][T11577] bond2: (slave vti0): Error -95 calling set_mac_address [ 146.320889][T11590] IPv4: Oversized IP packet from 127.202.26.0 [ 146.554796][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 146.554815][ T29] audit: type=1326 audit(1750360672.148:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.584925][ T29] audit: type=1326 audit(1750360672.148:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.608589][ T29] audit: type=1326 audit(1750360672.148:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.632047][ T29] audit: type=1326 audit(1750360672.148:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.655652][ T29] audit: type=1326 audit(1750360672.148:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.679242][ T29] audit: type=1326 audit(1750360672.148:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.703449][ T29] audit: type=1326 audit(1750360672.148:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.726975][ T29] audit: type=1326 audit(1750360672.158:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.750502][ T29] audit: type=1326 audit(1750360672.158:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11613 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 146.774075][ T29] audit: type=1326 audit(1750360672.158:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11615 comm="syz.1.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f461e2211e5 code=0x7ffc0000 [ 146.841941][T11630] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 148.945401][T11764] program syz.8.3303 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.984065][T11761] __nla_validate_parse: 9 callbacks suppressed [ 148.984085][T11761] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3310'. [ 149.025560][T11773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3312'. [ 149.059888][T11775] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11775 comm=syz.1.3313 [ 149.072562][T11775] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11775 comm=syz.1.3313 [ 149.158123][T11787] loop1: detected capacity change from 0 to 736 [ 149.178956][T11787] iso9660: Unknown parameter 'Q{UaND?sM00000000000000000000' [ 149.861227][T11856] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3343'. [ 150.761934][T11900] tipc: New replicast peer: 0.0.255.255 [ 150.767585][T11900] tipc: Enabled bearer , priority 10 [ 151.015202][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3365'. [ 151.066526][T11907] team2: entered promiscuous mode [ 151.079091][T11907] team2: entered allmulticast mode [ 151.089798][T11909] netlink: 'syz.8.3366': attribute type 10 has an invalid length. [ 151.097857][T11909] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3366'. [ 151.180470][T11919] wg2: entered promiscuous mode [ 151.185399][T11919] wg2: entered allmulticast mode [ 151.666063][T11962] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3386'. [ 151.776406][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 151.776423][ T29] audit: type=1326 audit(1750360677.378:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 151.822322][ T29] audit: type=1326 audit(1750360677.378:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 151.845890][ T29] audit: type=1326 audit(1750360677.378:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 151.869599][ T29] audit: type=1326 audit(1750360677.378:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 151.893118][ T29] audit: type=1326 audit(1750360677.378:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 151.916805][ T29] audit: type=1326 audit(1750360677.378:3539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 151.940371][ T29] audit: type=1326 audit(1750360677.378:3540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 151.964087][ T29] audit: type=1326 audit(1750360677.388:3541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.4.3393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 151.987742][ T3409] tipc: Node number set to 1076760312 [ 151.996048][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3396'. [ 152.093454][ T29] audit: type=1326 audit(1750360677.698:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.8.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 152.131515][ T29] audit: type=1326 audit(1750360677.698:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11988 comm="syz.8.3400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 152.277517][T12009] veth1_to_bond: entered allmulticast mode [ 152.284253][T12009] veth1_to_bond: entered promiscuous mode [ 152.291216][T12009] veth1_to_bond: left promiscuous mode [ 152.296923][T12009] veth1_to_bond: left allmulticast mode [ 152.362676][T12017] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3412'. [ 152.654448][T12053] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3429'. [ 152.870841][T12061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3433'. [ 153.521755][T12090] bridge0: port 3(dummy0) entered disabled state [ 153.539706][T12090] bridge_slave_1: left allmulticast mode [ 153.545422][T12090] bridge_slave_1: left promiscuous mode [ 153.551218][T12090] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.589918][T12090] bridge_slave_0: left allmulticast mode [ 153.595637][T12090] bridge_slave_0: left promiscuous mode [ 153.601367][T12090] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.487125][T12139] __nla_validate_parse: 7 callbacks suppressed [ 154.487145][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'. [ 154.617405][T12143] bridge: RTM_NEWNEIGH with invalid ether address [ 154.800716][T12156] netlink: 'syz.2.3469': attribute type 4 has an invalid length. [ 154.825805][T12156] netlink: 'syz.2.3469': attribute type 4 has an invalid length. [ 154.826897][T12158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 154.840949][T12158] IPv6: NLM_F_CREATE should be set when creating new route [ 155.059236][T12182] rdma_op ffff888143016980 conn xmit_rdma 0000000000000000 [ 155.223417][T12192] loop8: detected capacity change from 0 to 128 [ 155.407522][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3490'. [ 155.524669][T12201] sch_fq: defrate 0 ignored. [ 155.557568][T12215] rdma_op ffff888143014980 conn xmit_rdma 0000000000000000 [ 155.565128][T12216] syzkaller0: entered promiscuous mode [ 155.570759][T12216] syzkaller0: entered allmulticast mode [ 155.685874][T12229] 9pnet_fd: Insufficient options for proto=fd [ 155.968023][T12262] tipc: Enabling of bearer rejected, failed to enable media [ 155.989007][T12264] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3516'. [ 156.032114][T12266] syzkaller0: entered promiscuous mode [ 156.037742][T12266] syzkaller0: entered allmulticast mode [ 156.643823][T12323] loop8: detected capacity change from 0 to 1024 [ 156.654962][T12323] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.688248][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.782405][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 156.782423][ T29] audit: type=1326 audit(1750360682.388:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 156.827754][ T29] audit: type=1326 audit(1750360682.388:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12338 comm="syz.4.3544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85a5ce929 code=0x7ffc0000 [ 156.865965][T12342] loop8: detected capacity change from 0 to 2048 [ 156.891812][T12342] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.920186][ T29] audit: type=1400 audit(1750360682.518:3719): avc: denied { read } for pid=12341 comm="syz.8.3545" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 156.961421][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.971642][ T29] audit: type=1400 audit(1750360682.578:3720): avc: denied { write } for pid=12349 comm="syz.4.3548" name="file0" dev="tmpfs" ino=3982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 157.031860][ T29] audit: type=1326 audit(1750360682.638:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.2.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 157.055619][ T29] audit: type=1326 audit(1750360682.638:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12357 comm="syz.2.3552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 157.147592][ T29] audit: type=1326 audit(1750360682.748:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12365 comm="syz.1.3556" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x0 [ 157.352228][ T29] audit: type=1400 audit(1750360682.958:3724): avc: denied { mount } for pid=12380 comm="syz.4.3562" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 157.641615][T12401] netlink: 'syz.4.3570': attribute type 10 has an invalid length. [ 157.653602][T12401] team0: Port device dummy0 added [ 157.662102][T12401] netlink: 'syz.4.3570': attribute type 10 has an invalid length. [ 157.672783][T12401] team0: Port device dummy0 removed [ 157.680247][T12401] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 157.747623][T12405] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3572'. [ 157.801948][ T29] audit: type=1400 audit(1750360683.408:3725): avc: denied { mounton } for pid=12416 comm="syz.7.3576" path="/" dev="rootfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 158.105518][T12445] loop1: detected capacity change from 0 to 128 [ 158.153659][ T29] audit: type=1326 audit(1750360683.758:3726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12447 comm="syz.2.3590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 158.167131][T12449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3590'. [ 158.265203][T12457] team0 (unregistering): Port device team_slave_0 removed [ 158.280748][T12457] team0 (unregistering): Port device team_slave_1 removed [ 158.391433][T12455] hub 6-0:1.0: USB hub found [ 158.396226][T12455] hub 6-0:1.0: 8 ports detected [ 158.527570][T12477] IPv4: Oversized IP packet from 127.202.26.0 [ 158.830845][T12487] loop8: detected capacity change from 0 to 164 [ 158.847189][T12487] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 158.874908][T12500] wireguard0: entered promiscuous mode [ 158.880485][T12500] wireguard0: entered allmulticast mode [ 159.054267][T12521] loop8: detected capacity change from 0 to 8192 [ 159.112293][T12527] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.179906][T12527] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.240067][T12527] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.300210][T12527] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.367233][T12527] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.380543][T12527] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.404684][T12527] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.416849][T12527] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.485502][T12540] syzkaller0: entered promiscuous mode [ 159.491260][T12540] syzkaller0: entered allmulticast mode [ 160.023047][T12568] netlink: 'syz.4.3637': attribute type 1 has an invalid length. [ 160.177018][T12587] netlink: 'syz.1.3643': attribute type 10 has an invalid length. [ 160.188661][T12587] dummy0: left promiscuous mode [ 160.195922][T12587] team0: Port device dummy0 added [ 160.209799][T12587] netlink: 'syz.1.3643': attribute type 10 has an invalid length. [ 160.229315][T12587] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.255237][T12587] team0: Failed to send options change via netlink (err -105) [ 160.269346][T12587] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 160.289800][T12587] team0: Port device dummy0 removed [ 160.314109][T12587] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 160.430371][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3647'. [ 160.824458][T12613] netlink: 'syz.1.3652': attribute type 4 has an invalid length. [ 160.835085][T12613] netlink: 'syz.1.3652': attribute type 4 has an invalid length. [ 160.892086][T12615] loop8: detected capacity change from 0 to 1024 [ 160.899174][T12615] EXT4-fs: Ignoring removed oldalloc option [ 160.905240][T12615] EXT4-fs: Ignoring removed bh option [ 160.923460][T12615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.097180][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.514589][T12635] tipc: Enabling of bearer rejected, failed to enable media [ 161.579246][T12637] vhci_hcd: invalid port number 96 [ 161.584457][T12637] vhci_hcd: default hub control req: 0400 v1b14 i0060 l0 [ 161.619332][T12644] loop8: detected capacity change from 0 to 164 [ 161.703602][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3665'. [ 161.721233][T12648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3665'. [ 161.874648][T12652] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 161.884811][T12652] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 161.950372][T12654] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3668'. [ 161.985965][T12658] __vm_enough_memory: pid: 12658, comm: syz.1.3670, bytes: 21200232894464 not enough memory for the allocation [ 162.014975][T12658] loop1: detected capacity change from 0 to 512 [ 162.023599][T12658] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 162.066805][T12658] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 162.075063][T12658] System zones: 1-12 [ 162.080505][T12658] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.3670: missing EA_INODE flag [ 162.095606][T12658] EXT4-fs (loop1): Remounting filesystem read-only [ 162.102367][T12658] EXT4-fs (loop1): 1 orphan inode deleted [ 162.108779][T12658] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.128909][T12658] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.172937][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 162.172954][ T29] audit: type=1400 audit(1750360687.778:3850): avc: denied { read } for pid=12664 comm="syz.1.3672" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.203704][ T29] audit: type=1400 audit(1750360687.778:3851): avc: denied { open } for pid=12664 comm="syz.1.3672" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.303505][ T29] audit: type=1400 audit(1750360687.888:3852): avc: denied { ioctl } for pid=12664 comm="syz.1.3672" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 162.377613][T12671] netlink: 43 bytes leftover after parsing attributes in process `syz.7.3674'. [ 162.386792][T12671] tipc: Enabling of bearer rejected, failed to enable media [ 162.472026][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 162.493377][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3677'. [ 162.761337][T12698] veth0: entered promiscuous mode [ 162.766787][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3684'. [ 162.776454][T12698] veth0 (unregistering): left promiscuous mode [ 163.024408][ T29] audit: type=1326 audit(1750360688.628:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 163.051328][ T29] audit: type=1326 audit(1750360688.628:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 163.075106][ T29] audit: type=1326 audit(1750360688.628:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 163.098764][ T29] audit: type=1326 audit(1750360688.628:3856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 163.122400][ T29] audit: type=1326 audit(1750360688.628:3857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 163.145941][ T29] audit: type=1326 audit(1750360688.628:3858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 163.169677][ T29] audit: type=1326 audit(1750360688.628:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12710 comm="syz.1.3689" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 163.264549][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3691'. [ 163.281406][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3691'. [ 163.440054][T12726] loop1: detected capacity change from 0 to 512 [ 163.533649][T12730] loop8: detected capacity change from 0 to 8192 [ 163.568801][T12734] loop1: detected capacity change from 0 to 512 [ 163.587482][T12734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.621016][T12734] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.669542][T12752] loop8: detected capacity change from 0 to 128 [ 163.676489][T12752] EXT4-fs: test_dummy_encryption option not supported [ 163.693020][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.715019][T12754] netlink: 'syz.2.3706': attribute type 1 has an invalid length. [ 163.730205][T12757] pim6reg: entered allmulticast mode [ 164.187313][T12772] netlink: 'syz.1.3712': attribute type 4 has an invalid length. [ 164.224767][T12772] netlink: 'syz.1.3712': attribute type 4 has an invalid length. [ 164.375899][T12780] loop1: detected capacity change from 0 to 512 [ 164.390551][T12780] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 164.405707][T12780] EXT4-fs (loop1): mount failed [ 164.509255][T12792] loop7: detected capacity change from 0 to 16384 [ 165.014317][T12825] batman_adv: batadv0: Interface deactivated: macvlan0 [ 165.026864][T12825] batman_adv: batadv0: Removing interface: macvlan0 [ 165.058759][T12828] dvmrp1: entered allmulticast mode [ 165.541101][T12841] random: crng reseeded on system resumption [ 165.695488][T12845] can0: slcan on ptm0. [ 165.966188][T12847] infiniband syz!: set down [ 165.970856][T12847] infiniband syz!: added team_slave_0 [ 166.064238][T12847] RDS/IB: syz!: added [ 166.090364][T12847] smc: adding ib device syz! with port count 1 [ 166.126324][T12847] smc: ib device syz! port 1 has pnetid [ 166.318743][T12837] can0 (unregistered): slcan off ptm0. [ 166.343966][T12851] __nla_validate_parse: 7 callbacks suppressed [ 166.343981][T12851] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3742'. [ 166.359417][T12851] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3742'. [ 166.380891][T12851] netlink: 'syz.4.3742': attribute type 21 has an invalid length. [ 166.388813][T12851] netlink: 'syz.4.3742': attribute type 20 has an invalid length. [ 166.702944][T12873] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 166.758826][T12877] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3754'. [ 166.987746][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3765'. [ 167.050363][T12907] $H: renamed from bond0 (while UP) [ 167.070160][T12907] $H: entered promiscuous mode [ 167.075356][T12907] bond_slave_0: entered promiscuous mode [ 167.081176][T12907] bond_slave_1: entered promiscuous mode [ 167.089062][T12907] dummy0: entered promiscuous mode [ 167.152390][T12909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12909 comm=syz.7.3768 [ 167.165103][T12909] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5 sclass=netlink_audit_socket pid=12909 comm=syz.7.3768 [ 167.180337][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 167.180349][ T29] audit: type=1326 audit(1750360692.788:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.2.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 167.210323][ T29] audit: type=1326 audit(1750360692.788:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12904 comm="syz.2.3766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 167.329903][T12924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3769'. [ 167.397458][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3774'. [ 167.406593][T12929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.414308][T12929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.448936][T12929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.456754][T12929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.592664][T12940] netlink: 'syz.8.3778': attribute type 10 has an invalid length. [ 167.702382][T12946] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3781'. [ 167.766191][T12954] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3783'. [ 167.809391][ T29] audit: type=1326 audit(1750360693.418:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 167.833087][ T29] audit: type=1326 audit(1750360693.418:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 167.892090][T12962] netlink: 'syz.8.3787': attribute type 4 has an invalid length. [ 167.948674][ T29] audit: type=1326 audit(1750360693.418:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 167.972471][ T29] audit: type=1326 audit(1750360693.418:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 167.996236][ T29] audit: type=1326 audit(1750360693.418:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 168.020020][ T29] audit: type=1326 audit(1750360693.418:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12959 comm="syz.1.3786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 168.032111][T12971] netlink: 'syz.4.3784': attribute type 10 has an invalid length. [ 168.043648][ T29] audit: type=1326 audit(1750360693.438:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12957 comm="syz.2.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 168.075150][ T29] audit: type=1326 audit(1750360693.438:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12957 comm="syz.2.3785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 168.120123][T12971] bond0: (slave dummy0): Releasing backup interface [ 168.122650][T12960] loop1: detected capacity change from 0 to 164 [ 168.152770][T12971] team0: Failed to send options change via netlink (err -105) [ 168.160392][T12971] team0: Port device dummy0 added [ 168.187448][T12956] netlink: 'syz.4.3784': attribute type 10 has an invalid length. [ 168.208755][T12956] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.217912][T12977] loop1: detected capacity change from 0 to 1024 [ 168.237011][T12956] team0: Failed to send options change via netlink (err -105) [ 168.237267][T12977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.258282][T12977] ext4 filesystem being mounted at /575/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.269656][T12956] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 168.283215][T12956] team0: Port device dummy0 removed [ 168.293794][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.306480][T12956] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 168.487111][T13000] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 168.496693][T13000] netlink: 'syz.2.3798': attribute type 1 has an invalid length. [ 168.504492][T13000] netlink: 'syz.2.3798': attribute type 2 has an invalid length. [ 168.550654][T13007] loop1: detected capacity change from 0 to 256 [ 168.557983][T13007] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.569699][T13007] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 168.578262][T13007] FAT-fs (loop1): Filesystem has been set read-only [ 169.690397][T13042] loop1: detected capacity change from 0 to 512 [ 169.722418][T13042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.737292][T13042] ext4 filesystem being mounted at /580/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 169.760459][T13042] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.3815: corrupted inode contents [ 169.774889][T13042] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #2: comm syz.1.3815: mark_inode_dirty error [ 169.787750][T13042] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #2: comm syz.1.3815: corrupted inode contents [ 169.801886][T13042] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.3815: mark_inode_dirty error [ 170.001135][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.040607][T13053] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3817'. [ 170.059984][T13055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 170.061186][T13053] bridge0: port 1(ip6gretap1) entered blocking state [ 170.075908][T13053] bridge0: port 1(ip6gretap1) entered disabled state [ 170.083291][T13053] ip6gretap1: entered allmulticast mode [ 170.089744][T13053] ip6gretap1: entered promiscuous mode [ 170.109725][T13053] veth1: entered promiscuous mode [ 170.114914][T13053] bridge0: port 2(veth1) entered blocking state [ 170.121239][T13053] bridge0: port 2(veth1) entered disabled state [ 170.127645][T13053] veth1: entered allmulticast mode [ 170.404936][T13068] loop1: detected capacity change from 0 to 764 [ 170.411746][T13068] iso9660: Unknown parameter 'm8e' [ 170.422248][T13068] loop1: detected capacity change from 0 to 512 [ 170.435090][T13068] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.442795][T13068] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.461628][T13068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.488997][T13068] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.543287][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.570153][T13079] netlink: 'syz.1.3828': attribute type 27 has an invalid length. [ 170.615944][T13079] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.623247][T13079] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.649245][T13079] $H: left promiscuous mode [ 170.654212][T13079] bond_slave_0: left promiscuous mode [ 170.659862][T13079] bond_slave_1: left promiscuous mode [ 170.668192][T13079] dummy0: left promiscuous mode [ 170.709521][T13079] wg2: left promiscuous mode [ 170.714205][T13079] wg2: left allmulticast mode [ 170.744561][T13079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.755603][T13079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.783885][T13079] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.793000][T13079] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.802114][T13079] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.811100][T13079] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.827008][T13079] veth5: left promiscuous mode [ 171.360254][T13100] loop8: detected capacity change from 0 to 512 [ 171.368237][T13100] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 171.385013][T13100] EXT4-fs (loop8): 1 truncate cleaned up [ 171.392297][T13100] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.432971][T13100] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 171.453190][T13100] EXT4-fs (loop8): Remounting filesystem read-only [ 171.461508][T13100] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -30) [ 171.491980][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.530003][T13118] __nla_validate_parse: 2 callbacks suppressed [ 171.530019][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3841'. [ 171.603446][T13131] loop8: detected capacity change from 0 to 128 [ 171.605155][T10156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10156 comm=kworker/0:11 [ 171.623172][T13133] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 173.566008][T13172] netlink: 'syz.7.3860': attribute type 27 has an invalid length. [ 173.660182][ T29] kauditd_printk_skb: 1141 callbacks suppressed [ 173.660200][ T29] audit: type=1326 audit(1750360699.268:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.696774][ T29] audit: type=1326 audit(1750360699.268:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.720425][ T29] audit: type=1326 audit(1750360699.268:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.744016][ T29] audit: type=1326 audit(1750360699.268:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.767755][ T29] audit: type=1326 audit(1750360699.268:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.791476][ T29] audit: type=1326 audit(1750360699.268:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.815184][ T29] audit: type=1326 audit(1750360699.268:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.838818][ T29] audit: type=1326 audit(1750360699.298:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.862361][ T29] audit: type=1326 audit(1750360699.298:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.886064][ T29] audit: type=1326 audit(1750360699.298:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13178 comm="syz.1.3863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f461e1ee929 code=0x7ffc0000 [ 173.944616][T13181] loop1: detected capacity change from 0 to 1024 [ 173.952516][T13181] EXT4-fs: Ignoring removed nobh option [ 173.958185][T13181] EXT4-fs: Ignoring removed bh option [ 174.002219][T13188] netlink: 'syz.2.3867': attribute type 4 has an invalid length. [ 174.016198][T13181] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.203890][T13194] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3868'. [ 174.231650][T13194] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13194 comm=syz.7.3868 [ 174.770724][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.075660][T13224] wireguard0: entered promiscuous mode [ 175.100960][T13224] wireguard0: entered allmulticast mode [ 176.044562][T13255] loop8: detected capacity change from 0 to 512 [ 176.052730][T13255] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.071534][T13255] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.084373][T13255] ext4 filesystem being mounted at /650/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.291115][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'. [ 176.300085][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3891'. [ 176.310942][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.678816][T13253] Set syz1 is full, maxelem 65536 reached [ 176.708726][T13278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13278 comm=syz.2.3895 [ 176.897564][T13267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.961954][T13267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.190478][T13308] loop8: detected capacity change from 0 to 512 [ 178.231071][T13308] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.255043][T13308] ext4 filesystem being mounted at /653/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.349674][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3906'. [ 178.384175][T13311] team0: entered promiscuous mode [ 178.401280][T13311] team0: entered allmulticast mode [ 178.827163][T13316] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3907'. [ 179.015065][ T29] kauditd_printk_skb: 651 callbacks suppressed [ 179.015080][ T29] audit: type=1400 audit(1750360704.618:5898): avc: denied { read } for pid=13328 comm="syz.1.3911" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 179.044712][ T29] audit: type=1400 audit(1750360704.618:5899): avc: denied { ioctl } for pid=13328 comm="syz.1.3911" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 179.071595][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.121072][T13340] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3914'. [ 179.156874][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3912'. [ 179.158645][T13340] 0{X: renamed from gretap0 [ 179.193328][T13340] 0{X: entered allmulticast mode [ 179.239409][T13340] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 179.607873][T13352] loop8: detected capacity change from 0 to 1024 [ 179.612075][T13351] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 179.622607][T13352] EXT4-fs: Ignoring removed bh option [ 179.647372][T13352] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 179.674877][T13353] netlink: 240 bytes leftover after parsing attributes in process `syz.7.3916'. [ 179.720188][T13352] EXT4-fs error (device loop8): ext4_quota_enable:7124: comm syz.8.3917: inode #2304: comm syz.8.3917: iget: illegal inode # [ 179.752754][T13352] EXT4-fs (loop8): Remounting filesystem read-only [ 179.759381][T13352] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 179.799873][T13351] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 179.841411][T13352] EXT4-fs (loop8): mount failed [ 179.991115][T13356] netlink: 'syz.7.3918': attribute type 1 has an invalid length. [ 180.179779][T13358] wireguard0: entered promiscuous mode [ 180.185687][ T29] audit: type=1326 audit(1750360705.778:5900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.8.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 180.185722][ T29] audit: type=1326 audit(1750360705.788:5901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.8.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 180.232775][ T29] audit: type=1326 audit(1750360705.788:5902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.8.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 180.233074][T13358] wireguard0: entered allmulticast mode [ 180.386730][ T29] audit: type=1326 audit(1750360705.858:5903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.8.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 180.410427][ T29] audit: type=1326 audit(1750360705.858:5904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.8.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 180.433962][ T29] audit: type=1326 audit(1750360705.858:5905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.8.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 180.457503][ T29] audit: type=1326 audit(1750360705.888:5906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.8.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 180.481081][ T29] audit: type=1326 audit(1750360705.888:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13364 comm="syz.8.3922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca6536e929 code=0x7ffc0000 [ 180.529909][T13373] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 180.542084][T13340] syz.1.3914 (13340) used greatest stack depth: 6960 bytes left [ 180.589983][T13377] loop8: detected capacity change from 0 to 256 [ 180.620038][T13379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3927'. [ 180.729210][T13379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.740210][T13379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.759707][T13379] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.769310][T13379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.804731][T13379] bridge0: port 3(geneve2) entered blocking state [ 180.811806][T13379] bridge0: port 3(geneve2) entered disabled state [ 180.865322][T13379] geneve2: entered allmulticast mode [ 180.903128][T13389] loop8: detected capacity change from 0 to 512 [ 180.921060][T13389] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.943415][T13379] geneve2: entered promiscuous mode [ 180.989873][T13389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.002964][T13389] ext4 filesystem being mounted at /660/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.068973][T13385] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 181.078305][T13385] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 181.311078][T13416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 181.489918][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.561194][T13422] loop8: detected capacity change from 0 to 512 [ 181.589506][T13422] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.3942: bad orphan inode 17 [ 181.612731][T13422] ext4_test_bit(bit=16, block=4) = 1 [ 181.618081][T13422] is_bad_inode(inode)=0 [ 181.622307][T13422] NEXT_ORPHAN(inode)=0 [ 181.626406][T13422] max_ino=32 [ 181.629644][T13422] i_nlink=1 [ 181.663295][T13422] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.749394][T13430] netlink: 372 bytes leftover after parsing attributes in process `syz.4.3941'. [ 183.157882][ T5077] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.565311][T13466] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3953'. [ 183.582581][T13463] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3953'. [ 183.659344][T13478] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3959'. [ 183.698639][T13478] 0{X: renamed from gretap0 (while UP) [ 183.710701][T13478] 0{X: entered allmulticast mode [ 183.713522][T13479] loop1: detected capacity change from 0 to 128 [ 183.716699][T13478] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 183.744266][T13479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3958'. [ 183.753372][T13479] netlink: 212 bytes leftover after parsing attributes in process `syz.1.3958'. [ 183.787358][T13484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.800526][T13484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.810295][T13484] ip6gretap1: left allmulticast mode [ 183.815680][T13484] ip6gretap1: left promiscuous mode [ 183.821220][T13484] bridge0: port 1(ip6gretap1) entered disabled state [ 183.837641][T13484] veth1: left allmulticast mode [ 183.842629][T13484] veth1: left promiscuous mode [ 183.847662][T13484] bridge0: port 2(veth1) entered disabled state [ 184.124067][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 184.124085][ T29] audit: type=1326 audit(1750360709.668:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5429958e7 code=0x7ffc0000 [ 184.153832][ T29] audit: type=1326 audit(1750360709.668:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd54293ab19 code=0x7ffc0000 [ 184.177493][ T29] audit: type=1326 audit(1750360709.668:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 184.200993][ T29] audit: type=1326 audit(1750360709.668:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5429958e7 code=0x7ffc0000 [ 184.224447][ T29] audit: type=1326 audit(1750360709.668:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd54293ab19 code=0x7ffc0000 [ 184.247883][ T29] audit: type=1326 audit(1750360709.668:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 184.271402][ T29] audit: type=1326 audit(1750360709.678:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5429958e7 code=0x7ffc0000 [ 184.272874][T13493] netlink: 372 bytes leftover after parsing attributes in process `syz.7.3964'. [ 184.294846][ T29] audit: type=1326 audit(1750360709.678:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd54293ab19 code=0x7ffc0000 [ 184.294887][ T29] audit: type=1326 audit(1750360709.678:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7fd54299e929 code=0x7ffc0000 [ 184.454671][T13495] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3965'. [ 184.566988][ T29] audit: type=1326 audit(1750360709.788:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13473 comm="syz.2.3957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5429958e7 code=0x7ffc0000 [ 184.770846][T13495] $H: (slave bond_slave_1): Releasing backup interface [ 184.799649][T13495] bond_slave_1 (unregistering): left promiscuous mode [ 185.180323][T13482] syz.4.3959 (13482) used greatest stack depth: 5880 bytes left [ 185.369902][T10156] page_pool_release_retry() stalled pool shutdown: id 83, 1 inflight 60 sec [ 185.516966][T13534] loop1: detected capacity change from 0 to 1024 [ 185.524505][T13534] EXT4-fs: inline encryption not supported [ 185.531188][T13534] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.537928][T13534] ext4: Bad value for 'barrier' [ 185.553508][T13534] loop1: detected capacity change from 0 to 1024 [ 185.560272][T13534] EXT4-fs: Ignoring removed orlov option [ 185.569729][T13534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.948490][T13542] loop8: detected capacity change from 0 to 128 [ 185.956015][T13539] ================================================================== [ 185.964165][T13539] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 185.972205][T13539] [ 185.974553][T13539] write to 0xffff888106f1dc9c of 4 bytes by task 13534 on cpu 0: [ 185.982292][T13539] xas_set_mark+0x12b/0x140 [ 185.986850][T13539] __folio_start_writeback+0x1dd/0x440 [ 185.992366][T13539] ext4_bio_write_folio+0x5ad/0x9f0 [ 185.997604][T13539] mpage_submit_folio+0xe4/0x170 [ 186.002581][T13539] mpage_process_page_bufs+0x39b/0x4a0 [ 186.008083][T13539] mpage_prepare_extent_to_map+0x741/0xaa0 [ 186.013920][T13539] ext4_do_writepages+0xa1a/0x21c0 [ 186.019070][T13539] ext4_writepages+0x176/0x300 [ 186.023879][T13539] do_writepages+0x1c6/0x310 [ 186.028495][T13539] file_write_and_wait_range+0x156/0x2c0 [ 186.034172][T13539] generic_buffers_fsync_noflush+0x45/0x120 [ 186.040111][T13539] ext4_sync_file+0x1ab/0x690 [ 186.044816][T13539] vfs_fsync_range+0x10d/0x130 [ 186.049617][T13539] ext4_buffered_write_iter+0x34f/0x3c0 [ 186.055194][T13539] ext4_file_write_iter+0x383/0xf00 [ 186.060415][T13539] iter_file_splice_write+0x5f2/0x970 [ 186.065822][T13539] direct_splice_actor+0x156/0x2a0 [ 186.070975][T13539] splice_direct_to_actor+0x312/0x680 [ 186.076385][T13539] do_splice_direct+0xda/0x150 [ 186.081184][T13539] do_sendfile+0x380/0x650 [ 186.085644][T13539] __x64_sys_sendfile64+0x105/0x150 [ 186.090890][T13539] x64_sys_call+0xb39/0x2fb0 [ 186.095505][T13539] do_syscall_64+0xd2/0x200 [ 186.100033][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.105976][T13539] [ 186.108320][T13539] read to 0xffff888106f1dc9c of 4 bytes by task 13539 on cpu 1: [ 186.115975][T13539] file_write_and_wait_range+0x10e/0x2c0 [ 186.121671][T13539] generic_buffers_fsync_noflush+0x45/0x120 [ 186.127607][T13539] ext4_sync_file+0x1ab/0x690 [ 186.132323][T13539] vfs_fsync_range+0x10d/0x130 [ 186.137125][T13539] ext4_buffered_write_iter+0x34f/0x3c0 [ 186.142712][T13539] ext4_file_write_iter+0x383/0xf00 [ 186.147963][T13539] iter_file_splice_write+0x5f2/0x970 [ 186.153379][T13539] direct_splice_actor+0x156/0x2a0 [ 186.158538][T13539] splice_direct_to_actor+0x312/0x680 [ 186.163959][T13539] do_splice_direct+0xda/0x150 [ 186.168790][T13539] do_sendfile+0x380/0x650 [ 186.173244][T13539] __x64_sys_sendfile64+0x105/0x150 [ 186.178467][T13539] x64_sys_call+0xb39/0x2fb0 [ 186.183078][T13539] do_syscall_64+0xd2/0x200 [ 186.187597][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.193508][T13539] [ 186.195837][T13539] value changed: 0x0a000021 -> 0x04000021 [ 186.201565][T13539] [ 186.203896][T13539] Reported by Kernel Concurrency Sanitizer on: [ 186.210086][T13539] CPU: 1 UID: 0 PID: 13539 Comm: syz.1.3978 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(voluntary) [ 186.222601][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.232676][T13539] ================================================================== [ 186.440667][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.