last executing test programs: 8.805193018s ago: executing program 2 (id=3704): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 7.079119034s ago: executing program 2 (id=3708): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x4, 0x0, &(0x7f0000000000)) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 7.038201724s ago: executing program 2 (id=3710): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) timer_create(0x2, &(0x7f0000000140)={0x0, 0x12, 0x2}, &(0x7f0000044000)) rt_sigaction(0x12, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, {[0x400]}}, 0x0, 0x8, &(0x7f0000000180)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) close(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r4}, 0x18) listen(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b0400000000000000000200000018000400140001800a0001006d61746368000000040002800900020073797a32000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x6c}}, 0x4048010) 4.644392613s ago: executing program 2 (id=3711): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00'}, 0x18) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000380)=0xd) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) unshare(0x2a020400) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x89ec, 0x9, 0x0, 0x0, 0x40000, 0x0, 0x407, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r3, 0x40}], 0x1, 0x3) 3.033221679s ago: executing program 4 (id=3737): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2.863241709s ago: executing program 4 (id=3738): r0 = syz_io_uring_setup(0x6b64, &(0x7f00000006c0)={0x0, 0x7758, 0x40, 0x2, 0x18e}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r7, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES8=r6, @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r10, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000024e, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000540)=[{}, {}], 0x10, 0x8, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000007c0)={r12, 0x1, 0x6, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x3}, 0x18) socket$packet(0x11, 0x3, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001000), 0x400040, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x44) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 2.382523532s ago: executing program 0 (id=3741): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00'}, 0x18) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000380)=0xd) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) unshare(0x2a020400) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) perf_event_open(&(0x7f0000000700)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x89ec, 0x9, 0x0, 0x0, 0x40000, 0x0, 0x407, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r3, 0x40}], 0x1, 0x3) 2.292838212s ago: executing program 0 (id=3743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c006600000011352c64010101ac14143c00004e2000089078"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_macvtap\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x12, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x1, 0x2, 0x10, 0x66499309243a9c76}, {0x1, 0x3, 0x7, 0x3}], 0x10, 0x9}, 0x94) 2.186732502s ago: executing program 1 (id=3745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c006600000011352c64010101ac14143c00004e2000089078"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_macvtap\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x12, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x1, 0x2, 0x10, 0x66499309243a9c76}, {0x1, 0x3, 0x7, 0x3}], 0x10, 0x9}, 0x94) 2.146664232s ago: executing program 0 (id=3746): r0 = syz_io_uring_setup(0x6b64, &(0x7f00000006c0)={0x0, 0x7758, 0x40, 0x2, 0x18e}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r7, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES8=r6, @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r10, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000024e, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000540)=[{}, {}], 0x10, 0x8, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000007c0)={r12, 0x1, 0x6, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x3}, 0x18) openat$ptp0(0xffffffffffffff9c, &(0x7f0000001000), 0x400040, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x44) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 2.041089663s ago: executing program 1 (id=3748): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$tipc(0x1e, 0x2, 0x0) unshare(0x22020600) socket$tipc(0x1e, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x3, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc8002}, {0x1, 0xf, 0xd, 0x5}, {0x26a, 0x8, 0x4, 0xffffffff}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.010179813s ago: executing program 1 (id=3749): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x80000000002, 0x1) io_setup(0x200, &(0x7f00000010c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='[)\\]-\x00', 0x0) io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 1.993969493s ago: executing program 4 (id=3750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 1.605365184s ago: executing program 3 (id=3757): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r4], &(0x7f0000000240)='GPL\x00', 0x80000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x8f0, &(0x7f0000002400)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x80}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x0, 0x5a8, &(0x7f0000000680)="$eJzs3U1sHFcdAPD/rO18OAl2AxWlSGBRBJGi+iNGZINAJD0hFaM2BS5FDUuysd2svZZ3LdUuh0SotDdUxKXqCVk58CWlUhEtFKkSoohD4cAJgcK9qqlUviQQWjSzs6kbb+yETTyV/ftJTzPzZnfff/Y/M5k3b+INYNcaiYiTEdEXEUcjYiivL+UlLrZL+rrVySszaUmi1XrkrSSSiHh28spM57OSfHog/4B9EXF6NaL01MZ2G8srFyq1WnUxXx5rzi2MNZZX7p+dq0xXp6vz5XJ5vFw+fmLi9m3ro4f3H37u11/4z89f++6Hv/K93zyZxnswX7d+O26XkRjJv5OB2Luuvj+JOH+7GytIut/0RzvXN+Pu6nd+eYdD4iZ9/geXSkXHAABsv/QC4HBEfCy7/h+KvuxqLuLkoa+9PRT/fLzo+AAAAIDetYaG4nPpFAAAANixStkzsElpNH8W4GCUSqOj7Wd4PxCDpVq90Tx6vr40f679rOxwDJTOz9aq4/mzwsMxkKTLE9n8O8vHrluejIi7IuKZof3Z8ujZeu1c0Tc/AAAAYIc7GHH10W+9/MEDN+j/p/48VHSUAAAAQC/S/v+hq4PZn+r6u34+AAAA7Ehp///tb//1t6H/DwAAADtWp///0NRUPDQ11VrNf/9qvj49e2Fm4cSx8dG5pbOjZ+uLC6PT9fp09j/257b+3Fq9vjBxLJaeGGtWG82xxvLKmbn60nzzTPa7XmeqA9uwbcDWHj55tlp0DAAAwPa566Ov/jGJiIuf2Z+V1J58nb467Gx+ABx2r76iAwAK0190AEBh9PGBZIv1+2604uLtjwUAALgzPvkh4/+wWxn/h93L+D/sXsb/YffSxweM/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNZarSRaAAAAwI7WWF65UKnVqotmzJgxc22m6DuTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyXPTt5ZaZTtqvNV36xXS1xI2unImK4nf/VvLTX9Me+bLovBiJi8G9J9K97XxIRfT22/e97IkbisSdfbF1+KS2R74c9fiy34OKliLin2/GfpLtFDOd7wfX5L2V7Rm9+8sM0/6u/W18n/9url/wP9tj2yx9J8//g3evr5H/3uPfhoiOgSL9/pugIKNIf1oqOgCKdfqToCCjSlz5ddAQU6fm3io6AV09FxHi3/l8p7RZe6+Vf3//ry+4Q9ebISNr/e/ro+rqN/b/SGz02wybWTkV8NiJWN9z/K3VeMtyXLx3K7gcMJOdna9XxiHhfmsMY2JsuT2zSxuUzS491q3/wdJr/Kz9d+NMLP+uUtP10+s6rSm/07333+85VmpVet5u2tUsR9/Z3y39y7f5vcoP7v++/yTZmXv/G493qJ3+V5v+V5zfPP3dS6/sRn+h6/CfXXpPOjTXnFsYayyv3z85VpqvT1flyuTxeLh8/MTGWnQ7GOieFLobWDny1W/3XH0jz/98p+S9OevwPbp7/7PzfWF65UKnVqouNW2/jX2++vtqt/vBTaf4f+Ob/c/7fk3w5C3BPXvdEpdlcnIjYk3xxY/2xW495p+p8H53vK83/kfu6//vfuf5rn/9LG+7/D+fTdP3IJm0OHH/h6W71H78vG/+7+mLr8kuO/2Kk+T+3xfGfvOv4v/WZ5/7yjx91a/vHe9P8v/ZmZ/w3LWn7nbHgtvT4/1QWzJG8xvXf1m42QUXHCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6/0vAAD//wqlOeU=") bind(r2, &(0x7f00000004c0)=@in={0x2, 0x4e24, @broadcast}, 0x80) 1.518401325s ago: executing program 2 (id=3758): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)=ANY=[@ANYBLOB="4f3a77b5", @ANYRES16=r3, @ANYBLOB="20002bbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b0008000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x290) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) set_mempolicy(0x2, &(0x7f00000002c0)=0xffffffffffffff7f, 0x449) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) link(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x80}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x483, &(0x7f0000001040)="$eJzs28tvVNUfAPDvvX0APx7tD/EBolaJSaOxpQWVhRuNJsZgNNEFLms7kIaBGlqNIJFiDG5MDImujUujf4E7Y2LUlYlb3bgyJETZALqpuXfuLdNpp1A6ZWrn80lue869Z+ac79zXuefMBNCxBrI/ScS2iPg1Ivpq2YUFBmr/rl05O379ytnxJObmXvszyctdvXJ2vCxavm5rkRlMI9IPk6KShaZPnzk+Vq1WThX54ZkTbw1Pnz7zxDsnxo5VjlVOjh46dPDAyNNPjT7ZkjizuK7ueX9q7+4X37j48viRi2/++HXW3m3F9vo4WmUgC/yvuVzd6vxjerTVlbXZ9rp00t3GhrAiXRGR7a6e/Pzvi664sfP64oUP2to4YE1l96ZNzTfPzgEbWBLtbgHQHuWNPnv+LZc71PVYFy4/W3sAyuK+Viy1Ld2RFmV6Gp5vW2kgIo7M/v15tsQajUMAANT7ePyzw70R8d71r17K+h5981vSuCf//3v+d0cxh9IfEf+PiJ0RcVdE7IqIuyPysvdGxH2rbM/i/k96aZVvuays//dMMbe1sP9X9v6iv6vIbc/j70mOTlYr+4vPZDB6NmX5kWXq+Pb5Xz5ptq2+/5ctWf1lX7Box6XuhgG6ibGZsbxT2gKXz0fs6V4q/mR+JiCJiN0RsWdlb72jTEw+9uXeZoVuHv8yWjDPNPdFFt5sFv9sNMRfSurnJycXzU8Ob45qZf9weVQs9tPPF15tVv9AzN1+/C1wuRL/xMLjv7FIf1I/Xzu98jou/PZR02ea2zz+097k9XyeubdY9+7YzMypkYje5HCeX7B+9MZry3xZPjv+B/ctff7vLF6TxX9/RGQH8QMR8WBEPFS0/eGIeCQi9i0T/w/PNd9Wxh9pm/b/+YiJJa9/88d/w/5feaLr+PffNKv/1vb/wTw1WKzJr383sVRzsstFYwNX89kBAADAf0Wafwc+SYfm02k6NFT7Dv+u+F9anZqeefzo1NsnJ2rfle+PnrQc6eorxkOrk9XKSDJbvGNtfHS0GCsux0sPFOPGn3ZtyfND41PViTbHDp1ua5PzP/NHV7tbB6yxLUuuHe294w0B2qBxHj1dmD33SrgYwEbl99rQuZqf/5tjcXcA2Ejc/6FzLXX+n2vImwuAjcn9HzqX8x86VPpdu1sAtJH7P3Sk1fyufw0Tm9dHM9qTWK87JU9ElIl0XbRHYqWJLbdWuN1XJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNb4NwAA///Xm+pu") close_range(r1, 0xffffffffffffffff, 0x0) 1.056914056s ago: executing program 0 (id=3759): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) socket$tipc(0x1e, 0x2, 0x0) unshare(0x22020600) socket$tipc(0x1e, 0x5, 0x0) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x3, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc8002}, {0x1, 0xf, 0xd, 0x5}, {0x26a, 0x8, 0x4, 0xffffffff}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 921.170077ms ago: executing program 0 (id=3760): r0 = syz_io_uring_setup(0x6b64, &(0x7f00000006c0)={0x0, 0x7758, 0x40, 0x2, 0x18e}, &(0x7f00000004c0)=0x0, &(0x7f0000000680)=0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r7, &(0x7f00000019c0)=""/4097, 0x1001) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYRES8=r6, @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r10, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000024e, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000540)=[{}, {}], 0x10, 0x8, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xf5, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) setsockopt$packet_add_memb(r11, 0x107, 0x1, &(0x7f00000007c0)={r12, 0x1, 0x6, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x3}, 0x18) socket$packet(0x11, 0x3, 0x300) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x44) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 835.251747ms ago: executing program 2 (id=3761): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) unshare(0x6a040000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) 669.268937ms ago: executing program 1 (id=3762): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88"], 0xdd12}], 0x1}, 0x0) 619.191798ms ago: executing program 1 (id=3763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c006600000011352c64010101ac14143c00004e2000089078"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_macvtap\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x12, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x1, 0x2, 0x10, 0x66499309243a9c76}, {0x1, 0x3, 0x7, 0x3}], 0x10, 0x9}, 0x94) 531.800178ms ago: executing program 3 (id=3764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)=0x0) io_submit(r3, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500001c006600000011352c64010101ac14143c00004e2000089078"], 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x1, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_macvtap\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x16, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x12, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r4], &(0x7f0000000500)=[{0x1, 0x2, 0x10, 0x66499309243a9c76}, {0x1, 0x3, 0x7, 0x3}], 0x10, 0x9}, 0x94) 519.758219ms ago: executing program 4 (id=3765): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000008500000008000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) execve(0x0, 0x0, 0x0) 379.686079ms ago: executing program 1 (id=3766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) io_setup(0x5, &(0x7f0000000040)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x2400, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) 377.828789ms ago: executing program 3 (id=3767): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0x0, 0x0}, 0x10) 331.393999ms ago: executing program 3 (id=3768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) 330.887589ms ago: executing program 3 (id=3769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) 274.887209ms ago: executing program 3 (id=3770): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="00e40cefc074bc9300808af8ff00000000bfa200000000000007020000f8ffffffb7000000606b16000004000000000000850000005700000095abbe2aa714283e8834bf529515f02c6204c9a2cf43a2bbed84ce380000f89f4202", @ANYRES32=r1], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) keyctl$negate(0xd, 0x0, 0x9, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_setup(0x9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89f1, &(0x7f0000000080)) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) 274.673259ms ago: executing program 4 (id=3771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x4, 0x0, &(0x7f0000000000)) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000000, [{0xffff4a0c, 0x7}, {0x2}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 274.382409ms ago: executing program 4 (id=3772): sendmsg$NFC_CMD_DEP_LINK_UP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x20008080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=3773): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) madvise(&(0x7f00006f5000/0x2000)=nil, 0x2000, 0xa) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 319.834004][ T29] audit: type=1400 audit(1761704348.306:11348): avc: denied { allowed } for pid=13835 comm="syz.4.3303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 319.853592][ T29] audit: type=1400 audit(1761704348.346:11349): avc: denied { create } for pid=13854 comm="syz.0.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 319.873642][ T29] audit: type=1400 audit(1761704348.356:11350): avc: denied { map_create } for pid=13854 comm="syz.0.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 319.893037][ T29] audit: type=1400 audit(1761704348.356:11351): avc: denied { perfmon } for pid=13854 comm="syz.0.3309" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.914222][ T29] audit: type=1400 audit(1761704348.356:11352): avc: denied { map_read map_write } for pid=13854 comm="syz.0.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 320.020773][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'. [ 320.047024][ T3581] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 320.070205][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3311'. [ 320.166226][T13874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3314'. [ 320.177849][T13874] bridge_slave_1: left allmulticast mode [ 320.183617][T13874] bridge_slave_1: left promiscuous mode [ 320.189529][T13874] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.197886][T13874] bridge_slave_0: left allmulticast mode [ 320.203738][T13874] bridge_slave_0: left promiscuous mode [ 320.209486][T13874] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.457326][T13887] loop2: detected capacity change from 0 to 1024 [ 320.464337][T13887] EXT4-fs: Ignoring removed orlov option [ 320.549309][T13888] lo speed is unknown, defaulting to 1000 [ 320.555589][T13888] lo speed is unknown, defaulting to 1000 [ 320.923190][T13887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.952131][T13887] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.140517][T13909] loop1: detected capacity change from 0 to 128 [ 321.147854][T13909] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.160226][T13909] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.176456][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3329'. [ 321.190642][T13912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3329'. [ 321.279024][ T3626] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.297032][T13921] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.322817][T13901] lo speed is unknown, defaulting to 1000 [ 321.328835][T13901] lo speed is unknown, defaulting to 1000 [ 321.377333][T13921] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.414324][T13931] loop4: detected capacity change from 0 to 128 [ 321.427675][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3332'. [ 321.428369][T13931] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 321.448705][T13931] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 321.459828][T13921] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.532280][T13921] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.611677][ T3583] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.628314][ T3583] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.666946][ T3613] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.686341][ T3612] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.240968][T13945] loop1: detected capacity change from 0 to 1024 [ 322.247933][T13945] EXT4-fs: Ignoring removed orlov option [ 322.282241][T13945] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.300228][ T3632] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 322.320035][T13945] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.438262][T13954] siw: device registration error -23 [ 322.458956][T13954] loop1: detected capacity change from 0 to 512 [ 322.474527][T13954] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3340: EA inode hash validation failed [ 322.474750][T13954] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3340: corrupted inode contents [ 322.474861][T13954] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.3340: mark_inode_dirty error [ 322.475034][T13954] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3340: corrupted inode contents [ 322.475197][T13954] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.3340: mark_inode_dirty error [ 322.475339][T13954] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.3340: mark inode dirty (error -117) [ 322.475448][T13954] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 322.475493][T13954] EXT4-fs (loop1): 1 orphan inode deleted [ 322.476146][T13954] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.521260][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.906254][T13972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3346'. [ 322.924565][T13973] lo speed is unknown, defaulting to 1000 [ 322.938959][T13972] 8021q: adding VLAN 0 to HW filter on device ipvlan19 [ 322.964032][T13973] lo speed is unknown, defaulting to 1000 [ 323.059095][T13976] loop1: detected capacity change from 0 to 1024 [ 323.078472][T13976] EXT4-fs: Ignoring removed orlov option [ 323.104177][T13976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.126978][T13976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.353360][T13996] loop1: detected capacity change from 0 to 128 [ 323.353793][T13995] loop4: detected capacity change from 0 to 1024 [ 323.366601][T13996] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 323.388565][T13995] EXT4-fs: Ignoring removed orlov option [ 323.396511][T13996] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 323.403109][T13995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.431521][T13995] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.578267][T14001] lo speed is unknown, defaulting to 1000 [ 323.591359][T14001] lo speed is unknown, defaulting to 1000 [ 323.907384][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 323.907399][ T29] audit: type=1400 audit(1761704352.437:11518): avc: denied { mount } for pid=14005 comm="syz.3.3354" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 323.939668][ T29] audit: type=1400 audit(1761704352.467:11519): avc: denied { create } for pid=14005 comm="syz.3.3354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 323.959567][ T29] audit: type=1400 audit(1761704352.467:11520): avc: denied { module_request } for pid=14005 comm="syz.3.3354" kmod="net-pf-2-proto-3-type-2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 323.995699][ T29] audit: type=1400 audit(1761704352.467:11521): avc: denied { open } for pid=14007 comm="syz.0.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 324.015271][ T29] audit: type=1400 audit(1761704352.467:11522): avc: denied { kernel } for pid=14007 comm="syz.0.3355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 324.128405][ T29] audit: type=1400 audit(1761704352.657:11523): avc: denied { create } for pid=14022 comm="syz.2.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.151932][T14023] __nla_validate_parse: 1 callbacks suppressed [ 324.151948][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 324.167240][ T29] audit: type=1400 audit(1761704352.667:11524): avc: denied { tracepoint } for pid=14020 comm="syz.3.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 324.187356][ T29] audit: type=1400 audit(1761704352.677:11525): avc: denied { write } for pid=14022 comm="syz.2.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 324.213076][T14023] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 324.238367][ T29] audit: type=1400 audit(1761704352.767:11526): avc: denied { read write } for pid=14025 comm="syz.2.3360" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 324.238408][ T29] audit: type=1400 audit(1761704352.767:11527): avc: denied { open } for pid=14025 comm="syz.2.3360" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 324.291151][ T3609] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 324.342716][T14028] loop2: detected capacity change from 0 to 128 [ 324.344415][T14028] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.362347][T14028] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 325.100382][T14037] lo speed is unknown, defaulting to 1000 [ 325.106917][T14037] lo speed is unknown, defaulting to 1000 [ 325.300078][ T37] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 325.580537][T14043] loop3: detected capacity change from 0 to 1024 [ 325.612909][T14043] EXT4-fs: Ignoring removed bh option [ 325.744346][T14043] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.816823][T14047] lo speed is unknown, defaulting to 1000 [ 325.839951][T14048] loop2: detected capacity change from 0 to 512 [ 325.880143][T14047] lo speed is unknown, defaulting to 1000 [ 325.931635][T14048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.560130][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.631135][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3370'. [ 326.677823][T14064] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 326.697560][T14066] lo speed is unknown, defaulting to 1000 [ 326.711382][T14066] lo speed is unknown, defaulting to 1000 [ 326.746923][T14073] IPv6: NLM_F_CREATE should be specified when creating new route [ 326.776796][T14073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.784117][T14073] IPv6: NLM_F_CREATE should be set when creating new route [ 326.844382][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 326.853358][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3374'. [ 326.945388][T14082] siw: device registration error -23 [ 326.957173][T14083] netlink: 'syz.3.3375': attribute type 10 has an invalid length. [ 327.007094][T14083] team0: Port device dummy0 added [ 327.012655][T14084] netlink: 'syz.3.3375': attribute type 10 has an invalid length. [ 327.050265][T14084] team0: Port device dummy0 removed [ 327.073309][T14084] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 327.328145][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.410779][T14088] loop2: detected capacity change from 0 to 1024 [ 327.417602][T14088] EXT4-fs: Ignoring removed bh option [ 327.444057][T14088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.572308][T14095] loop4: detected capacity change from 0 to 128 [ 327.580958][T14095] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 327.611088][T14095] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 327.772267][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.926852][T14110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3383'. [ 327.974147][T14109] lo speed is unknown, defaulting to 1000 [ 327.988231][T14110] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 328.025889][T14109] lo speed is unknown, defaulting to 1000 [ 328.169848][T14116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 328.178901][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3386'. [ 328.362239][T14121] pim6reg1: entered promiscuous mode [ 328.367580][T14121] pim6reg1: entered allmulticast mode [ 328.989766][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 328.989783][ T29] audit: type=1400 audit(1761704357.517:11703): avc: denied { ioctl } for pid=14124 comm="syz.0.3389" path="socket:[55600]" dev="sockfs" ino=55600 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 329.030741][ T29] audit: type=1400 audit(1761704357.567:11704): avc: denied { write } for pid=14124 comm="syz.0.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 329.082820][ T29] audit: type=1400 audit(1761704357.617:11705): avc: denied { bind } for pid=14126 comm="syz.0.3390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.130432][T14127] lo speed is unknown, defaulting to 1000 [ 329.130692][T14127] lo speed is unknown, defaulting to 1000 [ 329.340133][ T29] audit: type=1326 audit(1761704357.867:11706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1396efc9 code=0x7ffc0000 [ 329.363802][ T29] audit: type=1326 audit(1761704357.867:11707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1396efc9 code=0x7ffc0000 [ 329.372165][ T29] audit: type=1326 audit(1761704357.867:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fad1396efc9 code=0x7ffc0000 [ 329.411027][ T29] audit: type=1326 audit(1761704357.877:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1396efc9 code=0x7ffc0000 [ 329.434607][ T29] audit: type=1326 audit(1761704357.877:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1396efc9 code=0x7ffc0000 [ 329.490795][ T29] audit: type=1326 audit(1761704357.917:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14131 comm="syz.0.3392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fad1396efc9 code=0x7ffc0000 [ 329.514335][ T29] audit: type=1326 audit(1761704358.017:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.1.3394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 329.603634][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3396'. [ 329.630832][T14142] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 329.666461][T14145] lo speed is unknown, defaulting to 1000 [ 329.674278][T14145] lo speed is unknown, defaulting to 1000 [ 329.787691][T14151] pim6reg1: entered promiscuous mode [ 329.793094][T14151] pim6reg1: entered allmulticast mode [ 329.852710][T14154] siw: device registration error -23 [ 329.863311][T14154] loop1: detected capacity change from 0 to 512 [ 329.871748][T14154] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3401: EA inode hash validation failed [ 329.884704][T14154] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3401: corrupted inode contents [ 329.896715][T14154] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.3401: mark_inode_dirty error [ 329.908309][T14154] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3401: corrupted inode contents [ 329.920489][T14154] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.3401: mark_inode_dirty error [ 329.965619][T14156] lo speed is unknown, defaulting to 1000 [ 329.972175][T14156] lo speed is unknown, defaulting to 1000 [ 330.020692][T14158] loop2: detected capacity change from 0 to 512 [ 330.053171][T14154] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.3401: mark inode dirty (error -117) [ 330.069487][T14158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.195862][T14154] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 330.211071][T14154] EXT4-fs (loop1): 1 orphan inode deleted [ 330.217863][T14154] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.256202][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.566111][ T3593] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 330.677059][T14173] lo speed is unknown, defaulting to 1000 [ 330.697839][T14173] lo speed is unknown, defaulting to 1000 [ 330.710104][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.807036][T14178] loop4: detected capacity change from 0 to 1024 [ 330.821016][T14178] EXT4-fs: Ignoring removed bh option [ 330.831983][T14178] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.911574][T14184] loop2: detected capacity change from 0 to 128 [ 330.930960][T14184] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 330.985457][T14184] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.087041][T14190] lo speed is unknown, defaulting to 1000 [ 331.100825][T14190] lo speed is unknown, defaulting to 1000 [ 331.122227][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.446929][T14197] lo speed is unknown, defaulting to 1000 [ 331.463489][T14197] lo speed is unknown, defaulting to 1000 [ 331.480100][T14199] siw: device registration error -23 [ 331.497649][T14199] loop1: detected capacity change from 0 to 512 [ 331.524137][T14199] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3413: EA inode hash validation failed [ 331.567643][T14199] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3413: corrupted inode contents [ 331.606516][T14199] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.3413: mark_inode_dirty error [ 331.652777][T14199] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3413: corrupted inode contents [ 331.673184][ T350] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 331.692251][T14199] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.3413: mark_inode_dirty error [ 331.730546][T14199] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.3413: mark inode dirty (error -117) [ 331.765691][T14199] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 331.784773][T14199] EXT4-fs (loop1): 1 orphan inode deleted [ 331.798290][T14199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.847746][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.961165][T14210] loop2: detected capacity change from 0 to 128 [ 331.984732][T14210] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 332.120257][T14210] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.205217][T14216] loop1: detected capacity change from 0 to 512 [ 332.226375][T14214] lo speed is unknown, defaulting to 1000 [ 332.226771][T14214] lo speed is unknown, defaulting to 1000 [ 332.280921][T14216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.308466][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.377598][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3420'. [ 333.420514][T14226] 8021q: adding VLAN 0 to HW filter on device ipvlan20 [ 333.468617][ T3610] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.641571][T14230] loop1: detected capacity change from 0 to 1024 [ 333.648237][T14230] EXT4-fs: Ignoring removed bh option [ 333.696636][T14230] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.753529][T14238] netlink: 'syz.0.3424': attribute type 10 has an invalid length. [ 333.782603][T14238] bond0: (slave dummy0): Releasing backup interface [ 333.809800][T14239] netlink: 'syz.0.3424': attribute type 10 has an invalid length. [ 333.811557][T14238] team0: Port device dummy0 added [ 333.860418][T14239] team0: Port device dummy0 removed [ 333.868205][T14239] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 334.002364][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 334.002378][ T29] audit: type=1326 audit(1761704362.538:11856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.095231][ T29] audit: type=1326 audit(1761704362.568:11857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.119003][ T29] audit: type=1326 audit(1761704362.568:11858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.142583][ T29] audit: type=1326 audit(1761704362.568:11859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.166197][ T29] audit: type=1326 audit(1761704362.568:11860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.190141][ T29] audit: type=1326 audit(1761704362.568:11861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.215446][ T29] audit: type=1326 audit(1761704362.568:11862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.239096][ T29] audit: type=1326 audit(1761704362.568:11863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.263038][ T29] audit: type=1326 audit(1761704362.568:11864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.286744][ T29] audit: type=1326 audit(1761704362.568:11865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14229 comm="syz.1.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 334.311385][T14242] IPv6: NLM_F_CREATE should be specified when creating new route [ 334.315598][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.321775][T14242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 334.335362][T14242] IPv6: NLM_F_CREATE should be set when creating new route [ 334.364261][T14248] loop3: detected capacity change from 0 to 512 [ 334.372232][T14248] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 334.387378][T14248] EXT4-fs (loop3): invalid journal inode [ 334.393715][T14248] EXT4-fs (loop3): can't get journal size [ 334.401303][T14248] EXT4-fs (loop3): 1 truncate cleaned up [ 334.509759][T14248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.554530][T14248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.600873][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 334.615211][T14259] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 334.665910][T14260] lo speed is unknown, defaulting to 1000 [ 334.672665][T14260] lo speed is unknown, defaulting to 1000 [ 334.845408][T14257] siw: device registration error -23 [ 334.860156][T14257] loop3: detected capacity change from 0 to 512 [ 334.872258][T14257] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3431: EA inode hash validation failed [ 334.901549][T14257] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3431: corrupted inode contents [ 334.980787][T14257] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.3431: mark_inode_dirty error [ 335.166157][T14257] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3431: corrupted inode contents [ 335.431862][T14257] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.3431: mark_inode_dirty error [ 335.503414][T14257] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3431: mark inode dirty (error -117) [ 335.553964][T14268] lo speed is unknown, defaulting to 1000 [ 335.587269][T14257] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 335.606149][T14268] lo speed is unknown, defaulting to 1000 [ 335.655971][T14257] EXT4-fs (loop3): 1 orphan inode deleted [ 335.703045][T14257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.859346][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.085206][T14286] loop3: detected capacity change from 0 to 128 [ 336.113710][T14286] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 336.156312][T14287] netlink: 'syz.2.3441': attribute type 10 has an invalid length. [ 336.181379][T14286] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 336.199836][T14287] bond0: (slave dummy0): Releasing backup interface [ 336.207413][T14288] netlink: 'syz.2.3441': attribute type 10 has an invalid length. [ 336.234157][T14287] team0: Port device dummy0 added [ 336.267388][T14288] team0: Port device dummy0 removed [ 336.290262][T14288] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 336.685730][T14294] lo speed is unknown, defaulting to 1000 [ 336.691971][T14294] lo speed is unknown, defaulting to 1000 [ 337.037957][T14301] loop4: detected capacity change from 0 to 128 [ 337.081964][T14301] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 337.141771][T14301] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 337.836711][T14314] siw: device registration error -23 [ 337.846680][T14314] loop2: detected capacity change from 0 to 512 [ 337.855602][T14314] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.3450: EA inode hash validation failed [ 337.869092][T14314] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3450: corrupted inode contents [ 337.881699][T14314] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.3450: mark_inode_dirty error [ 337.893468][T14314] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3450: corrupted inode contents [ 337.905979][T14314] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.3450: mark_inode_dirty error [ 337.918274][T14314] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.3450: mark inode dirty (error -117) [ 337.931206][T14314] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 337.942571][T14314] EXT4-fs (loop2): 1 orphan inode deleted [ 337.965698][T14314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.003807][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'. [ 338.023219][T14320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3452'. [ 338.035502][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.148422][T14322] loop1: detected capacity change from 0 to 1024 [ 338.166450][T14322] EXT4-fs: Ignoring removed bh option [ 338.190663][T14322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.245013][T14327] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.291201][T14327] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.330996][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 338.353347][T14333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 338.386194][T14333] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 338.402257][T14327] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.451334][T14327] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.488778][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.501639][T14337] siw: device registration error -23 [ 338.521067][T14337] loop3: detected capacity change from 0 to 512 [ 338.530105][T14337] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3457: EA inode hash validation failed [ 338.543553][T14337] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3457: corrupted inode contents [ 338.555724][T14337] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.3457: mark_inode_dirty error [ 338.569904][T14337] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3457: corrupted inode contents [ 338.582590][T14342] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.590794][T14342] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.598084][T14342] IPv6: NLM_F_CREATE should be set when creating new route [ 338.611394][ T3569] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.612789][T14337] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.3457: mark_inode_dirty error [ 338.629265][ T3569] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.637898][T14337] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3457: mark inode dirty (error -117) [ 338.653815][T14337] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 338.673484][T14337] EXT4-fs (loop3): 1 orphan inode deleted [ 338.681811][T14337] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.693980][ T3569] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.716209][ T3569] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.717130][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.743564][T14345] loop2: detected capacity change from 0 to 1024 [ 338.750834][T14345] EXT4-fs: Ignoring removed orlov option [ 338.764569][T14345] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.778020][T14345] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.850835][T14355] siw: device registration error -23 [ 338.861297][T14355] loop2: detected capacity change from 0 to 512 [ 338.863719][T14355] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.3464: EA inode hash validation failed [ 338.881553][T14355] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3464: corrupted inode contents [ 338.881699][T14355] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.3464: mark_inode_dirty error [ 338.881818][T14355] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3464: corrupted inode contents [ 338.882000][T14355] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.3464: mark_inode_dirty error [ 338.882233][T14355] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.3464: mark inode dirty (error -117) [ 338.941895][T14355] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 338.942019][T14355] EXT4-fs (loop2): 1 orphan inode deleted [ 338.942521][T14355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.984670][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.143254][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 339.143285][ T29] audit: type=1400 audit(1761704367.668:12009): avc: denied { mount } for pid=14361 comm="syz.2.3466" name="/" dev="ramfs" ino=56181 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 339.197971][ T29] audit: type=1400 audit(1761704367.718:12010): avc: denied { ioctl } for pid=14361 comm="syz.2.3466" path="socket:[56183]" dev="sockfs" ino=56183 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 339.236729][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'. [ 339.237426][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3466'. [ 339.879925][ T3607] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 339.915581][T14373] loop4: detected capacity change from 0 to 1024 [ 339.915988][T14373] EXT4-fs: Ignoring removed bh option [ 339.945429][T14375] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.960067][T14377] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.964657][ T29] audit: type=1326 audit(1761704368.488:12011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d340efc9 code=0x7ffc0000 [ 339.968877][T14373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.991600][ T29] audit: type=1326 audit(1761704368.488:12012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d340efc9 code=0x7ffc0000 [ 340.027422][ T29] audit: type=1326 audit(1761704368.488:12013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fd8d340efc9 code=0x7ffc0000 [ 340.027461][ T29] audit: type=1326 audit(1761704368.488:12014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d340efc9 code=0x7ffc0000 [ 340.027639][ T29] audit: type=1326 audit(1761704368.488:12015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd8d340efc9 code=0x7ffc0000 [ 340.027670][ T29] audit: type=1326 audit(1761704368.488:12016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d340efc9 code=0x7ffc0000 [ 340.027742][ T29] audit: type=1326 audit(1761704368.488:12017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8d340efc9 code=0x7ffc0000 [ 340.027836][ T29] audit: type=1326 audit(1761704368.488:12018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14376 comm="syz.3.3471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8d340efc9 code=0x7ffc0000 [ 340.030209][T14375] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.039180][T14382] loop2: detected capacity change from 0 to 128 [ 340.254021][T14375] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.258831][T14386] loop3: detected capacity change from 0 to 512 [ 340.264684][T14382] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 340.291627][T14386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.291763][T14386] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.304417][T14382] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.333930][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.343923][T14375] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.391183][ T3607] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.433849][ T3607] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.460921][ T3607] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.460961][ T3607] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.481096][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.601442][T14404] loop2: detected capacity change from 0 to 128 [ 340.614784][T14404] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 340.656565][T14404] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.806139][T14408] lo speed is unknown, defaulting to 1000 [ 340.839358][ T3617] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 340.854019][T14408] lo speed is unknown, defaulting to 1000 [ 341.126186][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'. [ 341.157956][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3482'. [ 341.323531][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 341.346751][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3483'. [ 341.386798][T14425] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.458734][T14429] loop2: detected capacity change from 0 to 128 [ 341.474372][T14429] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 341.484523][T14427] lo speed is unknown, defaulting to 1000 [ 341.499242][T14429] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 341.502350][T14427] lo speed is unknown, defaulting to 1000 [ 341.568273][T14432] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.621535][T14432] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.632312][T14434] loop4: detected capacity change from 0 to 1024 [ 341.647687][T14434] EXT4-fs: Ignoring removed orlov option [ 341.662806][T14434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.685930][T14434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.697760][T14432] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.761895][T14432] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.840497][T14442] loop1: detected capacity change from 0 to 512 [ 341.881485][T14442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.911288][T14442] ext4 filesystem being mounted at /572/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.041416][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.320551][T14455] lo speed is unknown, defaulting to 1000 [ 342.326975][T14455] lo speed is unknown, defaulting to 1000 [ 343.253822][T14462] loop1: detected capacity change from 0 to 128 [ 343.260636][T14462] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.272913][T14462] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 343.360232][T14465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.440088][T14467] loop4: detected capacity change from 0 to 1024 [ 343.456914][T14467] EXT4-fs: Ignoring removed orlov option [ 343.470523][T14467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.493741][T14467] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.185064][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 344.185077][ T29] audit: type=1400 audit(1761704372.709:12108): avc: denied { unmount } for pid=6657 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 344.214358][ T3606] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 344.227351][T14475] lo speed is unknown, defaulting to 1000 [ 344.233669][T14475] lo speed is unknown, defaulting to 1000 [ 344.304153][ T29] audit: type=1400 audit(1761704372.739:12109): avc: denied { create } for pid=14474 comm="syz.3.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 344.324314][ T29] audit: type=1400 audit(1761704372.739:12110): avc: denied { setopt } for pid=14474 comm="syz.3.3501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 344.344446][ T29] audit: type=1400 audit(1761704372.779:12111): avc: denied { read write } for pid=6657 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.368748][ T29] audit: type=1400 audit(1761704372.789:12112): avc: denied { open } for pid=6657 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.393023][ T29] audit: type=1400 audit(1761704372.789:12113): avc: denied { ioctl } for pid=6657 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.418713][ T29] audit: type=1326 audit(1761704372.799:12114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14474 comm="syz.3.3501" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8d340efc9 code=0x0 [ 344.441836][ T29] audit: type=1400 audit(1761704372.809:12115): avc: denied { map_create } for pid=14479 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 344.461217][ T29] audit: type=1400 audit(1761704372.809:12116): avc: denied { bpf } for pid=14479 comm="syz.1.3500" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.481962][ T29] audit: type=1400 audit(1761704372.809:12117): avc: denied { map_read map_write } for pid=14479 comm="syz.1.3500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 344.487106][T14481] lo speed is unknown, defaulting to 1000 [ 344.518551][T14489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3500'. [ 344.532894][ T3606] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.541423][T14481] lo speed is unknown, defaulting to 1000 [ 344.541914][ T3606] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.556329][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 344.559737][ T3606] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.612258][ T3606] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.661016][T14492] loop2: detected capacity change from 0 to 512 [ 344.684108][T14492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.685082][T14492] ext4 filesystem being mounted at /540/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.211480][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.302048][T14508] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.349928][T14508] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.443346][T14508] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.491024][T14508] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.503311][T14516] loop2: detected capacity change from 0 to 128 [ 345.508637][T14516] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 345.517001][T14518] loop3: detected capacity change from 0 to 1024 [ 345.535764][T14516] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 345.536362][T14518] EXT4-fs: Ignoring removed bh option [ 345.588237][ T3620] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.588358][ T3620] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.588407][ T3620] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.600535][ T3620] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.644554][T14518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.941423][T14526] lo speed is unknown, defaulting to 1000 [ 345.948074][T14526] lo speed is unknown, defaulting to 1000 [ 346.854121][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 346.900871][T14529] loop4: detected capacity change from 0 to 512 [ 346.919906][T14529] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3513: EA inode hash validation failed [ 346.942801][T14529] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.3513: corrupted inode contents [ 346.968526][T14529] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.3513: mark_inode_dirty error [ 346.998325][T14529] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.3513: corrupted inode contents [ 347.018242][T14529] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.3513: mark_inode_dirty error [ 347.040724][T14529] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.3513: mark inode dirty (error -117) [ 347.067126][T14529] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 347.086424][T14529] EXT4-fs (loop4): 1 orphan inode deleted [ 347.098478][T14529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.146822][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.234477][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.311445][T14544] loop2: detected capacity change from 0 to 128 [ 347.321630][T14538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3516'. [ 347.331362][T14544] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.343946][T14538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3516'. [ 347.353136][T14544] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 347.489874][T14554] loop3: detected capacity change from 0 to 512 [ 347.496654][T14552] loop1: detected capacity change from 0 to 1024 [ 347.503766][T14552] EXT4-fs: Ignoring removed bh option [ 347.511172][T14554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.523819][T14554] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.535988][T14552] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.599169][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.661377][T14567] loop2: detected capacity change from 0 to 164 [ 347.676493][T14567] netlink: 'syz.2.3523': attribute type 10 has an invalid length. [ 347.811624][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.851947][T14571] siw: device registration error -23 [ 347.862531][T14571] loop1: detected capacity change from 0 to 512 [ 347.871812][T14571] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3525: EA inode hash validation failed [ 347.884912][T14571] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3525: corrupted inode contents [ 347.911501][T14571] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.3525: mark_inode_dirty error [ 347.936877][T14571] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3525: corrupted inode contents [ 347.964563][T14571] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.3525: mark_inode_dirty error [ 347.990225][T14571] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.3525: mark inode dirty (error -117) [ 348.009820][T14574] lo speed is unknown, defaulting to 1000 [ 348.020356][T14574] lo speed is unknown, defaulting to 1000 [ 348.031545][T14575] loop3: detected capacity change from 0 to 512 [ 348.041267][T14571] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 348.067696][T14575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.088059][T14571] EXT4-fs (loop1): 1 orphan inode deleted [ 348.103055][T14571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.172604][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.458991][T14586] lo speed is unknown, defaulting to 1000 [ 348.477632][T14586] lo speed is unknown, defaulting to 1000 [ 348.556375][T14592] loop2: detected capacity change from 0 to 1024 [ 348.579892][T14592] EXT4-fs: Ignoring removed bh option [ 348.613350][T14592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.820193][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.864563][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.902127][T14600] loop2: detected capacity change from 0 to 128 [ 348.916266][T14600] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 348.938321][T14600] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 348.979250][T14604] loop3: detected capacity change from 0 to 128 [ 348.985990][T14604] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 349.018185][T14604] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.051866][T14606] loop2: detected capacity change from 0 to 512 [ 349.098557][T14606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.127121][T14606] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.221576][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.282929][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 349.282944][ T29] audit: type=1400 audit(1761704377.810:12201): avc: denied { block_suspend } for pid=14614 comm="syz.2.3535" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.310747][ T29] audit: type=1400 audit(1761704377.810:12200): avc: denied { create } for pid=14616 comm="syz.0.3536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 349.381323][ T29] audit: type=1400 audit(1761704377.860:12202): avc: denied { module_load } for pid=14614 comm="syz.2.3535" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 349.420392][T14620] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.471162][T14620] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.524619][ T3577] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 349.560629][T14620] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.643851][T14620] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.983996][ T3629] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.009637][ T3629] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.021618][ T3629] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.047797][ T3629] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.080150][ T29] audit: type=1400 audit(1761704378.610:12203): avc: denied { write } for pid=14624 comm="syz.2.3538" name="rt_acct" dev="proc" ino=4026533049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 350.114065][T14625] loop2: detected capacity change from 0 to 1024 [ 350.128036][ T29] audit: type=1400 audit(1761704378.660:12204): avc: denied { mounton } for pid=14624 comm="syz.2.3538" path="/556/bus" dev="tmpfs" ino=2973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 350.128061][T14625] EXT4-fs: Ignoring removed orlov option [ 350.168940][T14625] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.188224][T14625] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.250789][ T29] audit: type=1400 audit(1761704378.780:12205): avc: denied { read write } for pid=5210 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.293131][T14630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 350.302096][ T29] audit: type=1400 audit(1761704378.780:12206): avc: denied { open } for pid=5210 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.326483][ T29] audit: type=1400 audit(1761704378.780:12207): avc: denied { ioctl } for pid=5210 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 350.352139][ T29] audit: type=1400 audit(1761704378.820:12208): avc: denied { map_create } for pid=14629 comm="syz.2.3539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 350.371600][ T29] audit: type=1400 audit(1761704378.820:12209): avc: denied { bpf } for pid=14629 comm="syz.2.3539" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 350.414755][T14631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3539'. [ 350.435769][T14631] 8021q: adding VLAN 0 to HW filter on device ipvlan14 [ 350.656500][T14637] lo speed is unknown, defaulting to 1000 [ 350.662879][T14637] lo speed is unknown, defaulting to 1000 [ 350.680272][T14642] loop1: detected capacity change from 0 to 128 [ 350.702738][T14642] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.733777][T14646] lo speed is unknown, defaulting to 1000 [ 350.740437][T14642] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.749763][T14646] lo speed is unknown, defaulting to 1000 [ 350.875478][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3548'. [ 350.891000][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3548'. [ 351.158254][T14663] loop1: detected capacity change from 0 to 128 [ 351.175105][T14663] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.197678][T14663] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.799052][T14672] loop4: detected capacity change from 0 to 128 [ 351.826235][T14672] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 351.878351][T14672] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 351.934197][T14674] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.019816][T14674] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.056212][ T3574] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.090725][ T3574] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.113074][T14674] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.132615][T14682] loop4: detected capacity change from 0 to 1024 [ 352.150409][T14682] EXT4-fs: Ignoring removed bh option [ 352.258985][T14674] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.273469][T14682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.341202][ T3614] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.368015][T14688] loop2: detected capacity change from 0 to 128 [ 352.379530][ T3614] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.388210][T14688] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 352.417708][ T3614] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.425943][ T3574] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.442195][T14689] lo speed is unknown, defaulting to 1000 [ 352.452257][T14688] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.477888][T14689] lo speed is unknown, defaulting to 1000 [ 352.661424][T14699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.789034][T14709] siw: device registration error -23 [ 352.807814][T14709] loop3: detected capacity change from 0 to 512 [ 352.834084][T14709] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3564: EA inode hash validation failed [ 352.850899][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 352.867637][T14709] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3564: corrupted inode contents [ 352.880036][T14709] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.3564: mark_inode_dirty error [ 352.891861][T14709] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3564: corrupted inode contents [ 352.899501][T14712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3565'. [ 352.904204][T14709] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.3564: mark_inode_dirty error [ 352.925098][T14709] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3564: mark inode dirty (error -117) [ 352.926077][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.937973][T14709] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 352.955870][T14709] EXT4-fs (loop3): 1 orphan inode deleted [ 352.962101][T14709] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.008186][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.075671][T14718] loop4: detected capacity change from 0 to 128 [ 353.093369][T14718] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 353.107795][T14718] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 353.128933][T14721] loop2: detected capacity change from 0 to 164 [ 353.151563][T14721] netlink: 'syz.2.3568': attribute type 10 has an invalid length. [ 353.268201][T14725] loop3: detected capacity change from 0 to 1024 [ 353.313035][T14725] EXT4-fs: Ignoring removed orlov option [ 353.327590][T14725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 353.354250][T14725] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.438317][T14728] lo speed is unknown, defaulting to 1000 [ 353.444733][T14728] lo speed is unknown, defaulting to 1000 [ 354.189322][T14735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3573'. [ 354.198346][T14735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3573'. [ 354.207340][T14735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3573'. [ 354.244101][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3573'. [ 354.286070][T14734] 8021q: adding VLAN 0 to HW filter on device ipvlan15 [ 354.352778][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 354.352796][ T29] audit: type=1400 audit(1761704382.880:12278): avc: denied { read write } for pid=5210 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.384358][ T29] audit: type=1400 audit(1761704382.880:12279): avc: denied { open } for pid=5210 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.408853][ T29] audit: type=1400 audit(1761704382.880:12280): avc: denied { ioctl } for pid=5210 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 354.469070][T14743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 354.471493][T14746] siw: device registration error -23 [ 354.488169][T14746] loop3: detected capacity change from 0 to 512 [ 354.527923][T14746] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3577: EA inode hash validation failed [ 354.599506][ T29] audit: type=1400 audit(1761704382.970:12281): avc: denied { create } for pid=14742 comm="syz.2.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.620296][ T29] audit: type=1400 audit(1761704382.980:12282): avc: denied { create } for pid=14740 comm="syz.0.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.641197][ T29] audit: type=1400 audit(1761704382.980:12283): avc: denied { write } for pid=14740 comm="syz.0.3575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 354.661930][ T29] audit: type=1400 audit(1761704382.990:12284): avc: denied { write } for pid=14742 comm="syz.2.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.682583][ T29] audit: type=1400 audit(1761704382.990:12285): avc: denied { read } for pid=14742 comm="syz.2.3576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.703123][ T29] audit: type=1400 audit(1761704382.990:12286): avc: denied { prog_load } for pid=14745 comm="syz.3.3577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 354.722381][ T29] audit: type=1400 audit(1761704382.990:12287): avc: denied { bpf } for pid=14745 comm="syz.3.3577" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 354.750715][T14750] lo speed is unknown, defaulting to 1000 [ 354.769211][T14750] lo speed is unknown, defaulting to 1000 [ 354.938819][T14754] loop2: detected capacity change from 0 to 128 [ 354.955667][T14754] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 354.979471][T14754] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 355.338035][T14746] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3577: corrupted inode contents [ 355.358466][T14746] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.3577: mark_inode_dirty error [ 355.382951][T14746] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3577: corrupted inode contents [ 355.419999][T14746] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.3577: mark_inode_dirty error [ 355.464766][T14746] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3577: mark inode dirty (error -117) [ 355.492905][T14767] lo speed is unknown, defaulting to 1000 [ 355.532087][T14767] lo speed is unknown, defaulting to 1000 [ 355.532134][T14770] lo speed is unknown, defaulting to 1000 [ 355.538038][T14746] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 355.566781][T14770] lo speed is unknown, defaulting to 1000 [ 355.600355][T14746] EXT4-fs (loop3): 1 orphan inode deleted [ 355.606518][T14746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.688561][T14776] __nla_validate_parse: 2 callbacks suppressed [ 355.688601][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 355.740225][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3585'. [ 355.750084][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.859770][T14782] loop3: detected capacity change from 0 to 1024 [ 355.866683][T14782] EXT4-fs: Ignoring removed orlov option [ 355.887920][T14782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.926315][T14782] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.180529][T14787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.286752][T14789] lo speed is unknown, defaulting to 1000 [ 356.307355][T14789] lo speed is unknown, defaulting to 1000 [ 356.399691][T14792] loop4: detected capacity change from 0 to 1024 [ 356.426813][T14792] EXT4-fs: Ignoring removed bh option [ 356.469850][T14792] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.819747][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.874312][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 356.909121][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3592'. [ 357.119249][T14802] netlink: 'syz.4.3593': attribute type 10 has an invalid length. [ 357.148881][T14802] bond0: (slave dummy0): Releasing backup interface [ 357.169815][T14802] team0: Port device dummy0 added [ 357.175324][T14803] netlink: 'syz.4.3593': attribute type 10 has an invalid length. [ 357.205939][T14803] team0: Port device dummy0 removed [ 357.227129][T14803] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 357.924041][T14818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 358.114320][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3601'. [ 358.143533][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'. [ 358.323685][T14834] lo speed is unknown, defaulting to 1000 [ 358.342654][T14834] lo speed is unknown, defaulting to 1000 [ 358.867919][T14839] siw: device registration error -23 [ 358.944886][T14839] loop1: detected capacity change from 0 to 512 [ 358.981514][T14839] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.3605: EA inode hash validation failed [ 359.029471][T14839] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3605: corrupted inode contents [ 359.056789][T14839] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #15: comm syz.1.3605: mark_inode_dirty error [ 359.056984][T14839] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #15: comm syz.1.3605: corrupted inode contents [ 359.059901][T14839] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2996: inode #15: comm syz.1.3605: mark_inode_dirty error [ 359.060415][T14839] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.3605: mark inode dirty (error -117) [ 359.064385][T14839] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 359.064429][T14839] EXT4-fs (loop1): 1 orphan inode deleted [ 359.064823][T14839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.129292][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.207462][T14846] lo speed is unknown, defaulting to 1000 [ 359.347193][T14846] lo speed is unknown, defaulting to 1000 [ 359.476330][T14850] lo speed is unknown, defaulting to 1000 [ 359.476662][T14850] lo speed is unknown, defaulting to 1000 [ 359.624564][T14852] lo speed is unknown, defaulting to 1000 [ 359.653924][T14852] lo speed is unknown, defaulting to 1000 [ 360.203157][T14863] netlink: 'syz.1.3612': attribute type 10 has an invalid length. [ 360.221889][T14863] bond0: (slave dummy0): Releasing backup interface [ 360.239153][T14863] team0: Port device dummy0 added [ 360.253645][T14863] netlink: 'syz.1.3612': attribute type 10 has an invalid length. [ 360.273720][T14863] team0: Port device dummy0 removed [ 360.288788][T14863] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 361.368882][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 361.368896][ T29] audit: type=1400 audit(1761704389.901:12383): avc: denied { create } for pid=14873 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.417199][ T29] audit: type=1400 audit(1761704389.951:12384): avc: denied { bind } for pid=14873 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.461830][ T29] audit: type=1400 audit(1761704389.951:12385): avc: denied { setopt } for pid=14873 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.481729][ T29] audit: type=1400 audit(1761704389.951:12386): avc: denied { write } for pid=14873 comm="syz.1.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 361.521841][T14880] lo speed is unknown, defaulting to 1000 [ 361.528002][T14880] lo speed is unknown, defaulting to 1000 [ 361.556540][T14879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3615'. [ 361.592899][T14880] loop1: detected capacity change from 0 to 512 [ 361.608235][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3615'. [ 361.626860][T14880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 361.726584][ T6657] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.769214][ T29] audit: type=1400 audit(1761704390.301:12387): avc: denied { read } for pid=14887 comm="syz.1.3618" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 361.792904][ T29] audit: type=1400 audit(1761704390.301:12388): avc: denied { create } for pid=14887 comm="syz.1.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.841874][ T29] audit: type=1400 audit(1761704390.351:12389): avc: denied { bind } for pid=14887 comm="syz.1.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.861409][ T29] audit: type=1400 audit(1761704390.351:12390): avc: denied { setopt } for pid=14887 comm="syz.1.3618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 361.881192][ T29] audit: type=1326 audit(1761704390.351:12391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 361.904787][ T29] audit: type=1326 audit(1761704390.351:12392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14887 comm="syz.1.3618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b0198efc9 code=0x7ffc0000 [ 362.178288][T14891] lo speed is unknown, defaulting to 1000 [ 362.204545][T14891] lo speed is unknown, defaulting to 1000 [ 362.215333][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.373137][T14908] loop3: detected capacity change from 0 to 128 [ 362.383496][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.386748][T14908] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 362.557112][T14908] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 362.616551][T14910] lo speed is unknown, defaulting to 1000 [ 362.622696][T14910] lo speed is unknown, defaulting to 1000 [ 362.688973][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.760720][T14891] chnl_net:caif_netlink_parms(): no params data found [ 362.802146][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.120278][T14891] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.127427][T14891] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.155146][T14891] bridge_slave_0: entered allmulticast mode [ 363.189381][T14891] bridge_slave_0: entered promiscuous mode [ 363.228251][T14891] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.235340][T14891] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.276379][T14891] bridge_slave_1: entered allmulticast mode [ 363.300279][T14891] bridge_slave_1: entered promiscuous mode [ 363.307245][T14919] siw: device registration error -23 [ 363.336497][ T3569] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 363.770956][T14925] loop2: detected capacity change from 0 to 1024 [ 363.788280][T14925] EXT4-fs: Ignoring removed bh option [ 363.818016][T14925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.843556][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.858268][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.878910][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 363.892107][ T12] bond0 (unregistering): Released all slaves [ 363.944677][T14891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.965890][ T12] hsr_slave_0: left promiscuous mode [ 363.966362][ T12] hsr_slave_1: left promiscuous mode [ 363.966685][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.984737][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.997101][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.997113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.008110][ T12] veth1_macvtap: left promiscuous mode [ 364.008134][ T12] veth0_macvtap: left promiscuous mode [ 364.008253][ T12] veth1_vlan: left promiscuous mode [ 364.008285][ T12] veth0_vlan: left promiscuous mode [ 364.086844][T14934] siw: device registration error -23 [ 364.250122][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.262168][ T12] team0 (unregistering): Port device team_slave_1 removed [ 364.269645][ T12] team0 (unregistering): Port device team_slave_0 removed [ 364.334765][T14891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.366231][T14891] team0: Port device team_slave_0 added [ 364.372976][T14891] team0: Port device team_slave_1 added [ 364.429840][T14891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.436862][T14891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.462795][T14891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.465244][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3629'. [ 364.474444][T14891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.489384][T14891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.489418][T14891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.516687][T14942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3629'. [ 364.517400][T14954] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.562907][T14954] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.582026][T14891] hsr_slave_0: entered promiscuous mode [ 364.602906][T14891] hsr_slave_1: entered promiscuous mode [ 364.615714][T14891] debugfs: 'hsr0' already exists in 'hsr' [ 364.621541][T14891] Cannot create hsr debugfs directory [ 364.628219][T14954] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.721103][T14954] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.783897][ T3599] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.814456][ T3599] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.831804][ T3599] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.848304][ T3599] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.187389][T14966] lo speed is unknown, defaulting to 1000 [ 365.194075][T14966] lo speed is unknown, defaulting to 1000 [ 365.686909][T14969] loop2: detected capacity change from 0 to 1024 [ 365.717500][T14891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.734480][T14969] EXT4-fs: Ignoring removed bh option [ 365.743179][T14891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.762098][T14969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.811650][T14891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.835486][T14891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 365.931208][T14978] lo speed is unknown, defaulting to 1000 [ 365.968865][T14978] lo speed is unknown, defaulting to 1000 [ 366.008799][T14891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.062848][T14891] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.115361][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.122456][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.185316][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.192501][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.264289][T14891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.274792][T14891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.376893][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 366.376908][ T29] audit: type=1326 audit(1761704394.912:12443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14968 comm="syz.2.3638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1abd37efc9 code=0x7ffc0000 [ 366.465994][T14891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.548306][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.638349][T15001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3643'. [ 366.652838][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3642'. [ 366.667182][T14891] veth0_vlan: entered promiscuous mode [ 366.678400][T15003] 8021q: adding VLAN 0 to HW filter on device ipvlan16 [ 366.687848][T14891] veth1_vlan: entered promiscuous mode [ 366.708919][T14891] veth0_macvtap: entered promiscuous mode [ 366.718375][T14891] veth1_macvtap: entered promiscuous mode [ 366.742617][T15007] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.768987][T14891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.781158][T14891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.793063][ T3620] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.803044][T15007] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.817390][ T3620] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.831090][ T3620] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.842887][ T3612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.861813][ T29] audit: type=1400 audit(1761704395.392:12444): avc: denied { mounton } for pid=14891 comm="syz-executor" path="/root/syzkaller.VJcEHo/syz-tmp" dev="sda1" ino=2069 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 366.886537][ T29] audit: type=1400 audit(1761704395.392:12445): avc: denied { mount } for pid=14891 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 366.896368][T15013] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3647'. [ 366.908881][ T29] audit: type=1400 audit(1761704395.392:12446): avc: denied { mount } for pid=14891 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 366.939993][ T29] audit: type=1400 audit(1761704395.392:12447): avc: denied { mounton } for pid=14891 comm="syz-executor" path="/root/syzkaller.VJcEHo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 366.967065][ T29] audit: type=1400 audit(1761704395.392:12448): avc: denied { mounton } for pid=14891 comm="syz-executor" path="/root/syzkaller.VJcEHo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=61779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 366.997575][ T29] audit: type=1400 audit(1761704395.522:12449): avc: denied { mounton } for pid=14891 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 367.021879][ T29] audit: type=1400 audit(1761704395.532:12450): avc: denied { mount } for pid=14891 comm="syz-executor" name="/" dev="gadgetfs" ino=4724 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 367.048611][T15007] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.094328][ T29] audit: type=1326 audit(1761704395.622:12451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4630b9efc9 code=0x7ffc0000 [ 367.118048][ T29] audit: type=1326 audit(1761704395.622:12452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.1.3648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4630b9efc9 code=0x7ffc0000 [ 367.130608][T15026] loop1: detected capacity change from 0 to 1024 [ 367.150259][T15007] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.162983][T15026] EXT4-fs: Ignoring removed bh option [ 367.177589][T15026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.366867][T14891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.686813][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 367.715161][T15033] lo speed is unknown, defaulting to 1000 [ 367.728575][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3653'. [ 367.738145][T15033] lo speed is unknown, defaulting to 1000 [ 367.833732][T15033] chnl_net:caif_netlink_parms(): no params data found [ 367.893300][T15051] loop2: detected capacity change from 0 to 512 [ 367.933089][T15051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.962929][T15033] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.962959][T15033] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.963046][T15033] bridge_slave_0: entered allmulticast mode [ 367.963517][T15033] bridge_slave_0: entered promiscuous mode [ 367.964517][T15033] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.964545][T15033] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.964609][T15033] bridge_slave_1: entered allmulticast mode [ 367.965216][T15033] bridge_slave_1: entered promiscuous mode [ 367.978629][T15051] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 368.002556][T15033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.003866][T15033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.023334][T15033] team0: Port device team_slave_0 added [ 368.024489][T15033] team0: Port device team_slave_1 added [ 368.045070][T15051] pim6reg1: entered promiscuous mode [ 368.045085][T15051] pim6reg1: entered allmulticast mode [ 368.047080][T15033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.047095][T15033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.047121][T15033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.047947][T15033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.047961][T15033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 368.047995][T15033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.088414][T15033] hsr_slave_0: entered promiscuous mode [ 368.088931][T15033] hsr_slave_1: entered promiscuous mode [ 368.089323][T15033] debugfs: 'hsr0' already exists in 'hsr' [ 368.089340][T15033] Cannot create hsr debugfs directory [ 368.143378][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.204280][T15033] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.276568][T15033] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.328534][T15033] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.369580][T15033] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.423039][T15033] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 368.443100][T15033] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 368.460179][T15033] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 368.478037][T15033] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 368.504250][T15033] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.511333][T15033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.518654][T15033] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.525745][T15033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.562200][T15033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.575194][T15033] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.720906][T15033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.829056][T15085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3661'. [ 368.869888][T15033] veth0_vlan: entered promiscuous mode [ 368.876735][T15033] veth1_vlan: entered promiscuous mode [ 368.898387][T15033] veth0_macvtap: entered promiscuous mode [ 368.901918][T15033] veth1_macvtap: entered promiscuous mode [ 368.931917][T15033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.935166][T15033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.966081][ T3570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.966112][ T3570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.966137][ T3570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.966203][ T3570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.265291][T15095] lo speed is unknown, defaulting to 1000 [ 369.271697][T15095] lo speed is unknown, defaulting to 1000 [ 369.727113][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3663'. [ 369.752734][T15100] loop2: detected capacity change from 0 to 1024 [ 370.145075][ T3612] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.155234][ T3612] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.164303][ T3612] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.172781][ T3612] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.206008][T15100] EXT4-fs: Ignoring removed bh option [ 370.298764][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3663'. [ 370.320041][T15100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.385170][T15109] loop3: detected capacity change from 0 to 512 [ 370.417410][T15109] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.480705][T15109] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.552319][T15109] pim6reg1: entered promiscuous mode [ 370.557676][T15109] pim6reg1: entered allmulticast mode [ 370.927863][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.113041][T15118] lo speed is unknown, defaulting to 1000 [ 371.119528][T15118] lo speed is unknown, defaulting to 1000 [ 372.320908][T15135] loop2: detected capacity change from 0 to 512 [ 372.457143][T15134] lo speed is unknown, defaulting to 1000 [ 372.463359][T15134] lo speed is unknown, defaulting to 1000 [ 372.499282][T15135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.722523][T15142] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.763034][T15143] netlink: 'syz.0.3673': attribute type 10 has an invalid length. [ 372.826747][T15143] team0: Port device dummy0 added [ 372.836793][T15143] netlink: 'syz.0.3673': attribute type 10 has an invalid length. [ 372.849219][T15142] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.860423][ T5210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.876991][T15143] team0: Port device dummy0 removed [ 372.886019][T15143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 372.927998][T15142] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.068110][T15142] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.168760][ T3620] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.188126][ T3620] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.205991][ T3620] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.224860][ T3620] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.478454][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3678'. [ 374.458191][T15149] lo speed is unknown, defaulting to 1000 [ 374.464729][T15149] lo speed is unknown, defaulting to 1000 [ 374.589619][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3682'. [ 374.682580][T15167] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 375.000788][T15178] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.034094][T15178] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.041372][T15178] IPv6: NLM_F_CREATE should be set when creating new route [ 375.069229][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 375.069256][ T29] audit: type=1326 audit(1761704403.603:12507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15177 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ddd1efc9 code=0x7ffc0000 [ 375.099177][ T29] audit: type=1326 audit(1761704403.603:12508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15177 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ddd1efc9 code=0x7ffc0000 [ 375.199845][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3689'. [ 375.208785][T15184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3689'. [ 375.218326][T15182] netlink: 'syz.2.3688': attribute type 10 has an invalid length. [ 375.234737][T15182] bond0: (slave dummy0): Releasing backup interface [ 375.244581][ T29] audit: type=1326 audit(1761704403.663:12509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15177 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f80ddd1efc9 code=0x7ffc0000 [ 375.268355][ T29] audit: type=1326 audit(1761704403.663:12510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15177 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ddd1efc9 code=0x7ffc0000 [ 375.291936][ T29] audit: type=1326 audit(1761704403.663:12511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15177 comm="syz.0.3687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ddd1efc9 code=0x7ffc0000 [ 375.315604][ T29] audit: type=1400 audit(1761704403.673:12512): avc: denied { create } for pid=15177 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.335350][ T29] audit: type=1400 audit(1761704403.673:12513): avc: denied { bind } for pid=15177 comm="syz.0.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.355639][T15185] netlink: 'syz.2.3688': attribute type 10 has an invalid length. [ 375.388280][T15182] team0: Port device dummy0 added [ 375.396473][T15185] team0: Port device dummy0 removed [ 375.404080][T15185] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 375.656558][T15200] siw: device registration error -23 [ 375.666761][T15202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'. [ 375.675904][T15202] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3696'. [ 375.744808][ T29] audit: type=1326 audit(1761704404.263:12514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ddd1efc9 code=0x7ffc0000 [ 375.768705][ T29] audit: type=1326 audit(1761704404.263:12515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80ddd1efc9 code=0x7ffc0000 [ 375.792401][ T29] audit: type=1326 audit(1761704404.263:12516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15210 comm="syz.0.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f80ddd1efc9 code=0x7ffc0000 [ 375.855157][T15209] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3697'. [ 375.865022][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3697'. [ 375.905179][T15216] loop2: detected capacity change from 0 to 128 [ 375.911944][T15216] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 375.955520][T15216] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 376.015550][T15218] lo speed is unknown, defaulting to 1000 [ 376.028597][T15221] loop1: detected capacity change from 0 to 512 [ 376.035886][T15218] lo speed is unknown, defaulting to 1000 [ 376.068092][T15221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.554570][T15239] lo speed is unknown, defaulting to 1000 [ 376.561025][T15239] lo speed is unknown, defaulting to 1000 [ 377.395806][T15243] lo speed is unknown, defaulting to 1000 [ 377.401905][T15243] lo speed is unknown, defaulting to 1000 [ 377.913153][T15247] loop4: detected capacity change from 0 to 512 [ 377.946594][T15247] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.3709: EA inode hash validation failed [ 377.969632][T15247] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.3709: corrupted inode contents [ 378.026694][T15247] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.3709: mark_inode_dirty error [ 378.065325][T15247] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.3709: corrupted inode contents [ 378.105625][T15247] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #15: comm syz.4.3709: mark_inode_dirty error [ 378.124625][T15247] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.3709: mark inode dirty (error -117) [ 378.164551][T15247] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 378.183843][T15247] EXT4-fs (loop4): 1 orphan inode deleted [ 378.202807][T15247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.250924][T15252] lo speed is unknown, defaulting to 1000 [ 378.259868][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.270534][T15252] lo speed is unknown, defaulting to 1000 [ 378.287895][T14891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.321058][T15262] loop4: detected capacity change from 0 to 1024 [ 378.361381][T15262] EXT4-fs: Ignoring removed bh option [ 378.387489][T15262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.406448][T15252] chnl_net:caif_netlink_parms(): no params data found [ 378.435474][T15269] netlink: 'syz.1.3713': attribute type 10 has an invalid length. [ 378.477378][T15269] team0: Port device dummy0 added [ 378.485408][T15271] netlink: 'syz.1.3713': attribute type 10 has an invalid length. [ 378.503768][T15271] team0: Port device dummy0 removed [ 378.512330][T15271] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 378.570503][T15252] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.577843][T15252] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.585125][T15252] bridge_slave_0: entered allmulticast mode [ 378.591658][T15252] bridge_slave_0: entered promiscuous mode [ 378.598395][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.598628][T15252] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.614553][T15252] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.622091][T15252] bridge_slave_1: entered allmulticast mode [ 378.628946][T15252] bridge_slave_1: entered promiscuous mode [ 378.660000][T15252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.680279][T15252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.703469][T15252] team0: Port device team_slave_0 added [ 378.711095][T15252] team0: Port device team_slave_1 added [ 378.729922][T15252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.737121][T15252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.752023][T15287] netlink: 'syz.0.3717': attribute type 10 has an invalid length. [ 378.763030][T15252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.764095][T15252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.788463][T15252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.802647][T15290] netlink: 'syz.0.3717': attribute type 10 has an invalid length. [ 378.814371][T15252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.833299][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.842606][T15287] bond0: (slave dummy0): Releasing backup interface [ 378.851898][T15287] team0: Port device dummy0 added [ 378.861210][T15290] team0: Port device dummy0 removed [ 378.867259][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3718'. [ 378.872676][T15290] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 378.895547][T15293] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 378.900374][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3715'. [ 378.906740][T15252] hsr_slave_0: entered promiscuous mode [ 378.918833][T15285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3715'. [ 378.927567][T15252] hsr_slave_1: entered promiscuous mode [ 378.933805][T15252] debugfs: 'hsr0' already exists in 'hsr' [ 378.939600][T15252] Cannot create hsr debugfs directory [ 378.940349][T15296] loop4: detected capacity change from 0 to 1024 [ 378.951806][T15296] EXT4-fs: Ignoring removed bh option [ 378.966280][T15296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.016681][T15252] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.076003][T15252] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.140677][T15252] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.151900][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.196813][T15252] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.230055][T15306] lo speed is unknown, defaulting to 1000 [ 379.236536][T15306] lo speed is unknown, defaulting to 1000 [ 379.292197][T15252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.301701][T15252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.311072][T15252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.320210][T15252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.366186][T15252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.380163][T15252] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.390777][ T3629] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.397884][ T3629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.410332][ T3629] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.417558][ T3629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.492063][T15252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.528444][T15319] lo speed is unknown, defaulting to 1000 [ 379.536285][T15319] lo speed is unknown, defaulting to 1000 [ 379.594823][T15252] veth0_vlan: entered promiscuous mode [ 379.603786][T15252] veth1_vlan: entered promiscuous mode [ 379.633955][T15252] veth0_macvtap: entered promiscuous mode [ 379.689206][T15333] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.701430][T15252] veth1_macvtap: entered promiscuous mode [ 379.716022][T15252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.728228][T15252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.947075][ T3612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.979930][T15335] lo speed is unknown, defaulting to 1000 [ 379.986519][T15335] lo speed is unknown, defaulting to 1000 [ 380.168614][T15333] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.232956][T15341] loop1: detected capacity change from 0 to 512 [ 380.247328][T15342] loop4: detected capacity change from 0 to 1024 [ 380.277064][ T3612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.298324][T15342] EXT4-fs: Ignoring removed bh option [ 380.312605][ T3612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.325838][T15344] loop2: detected capacity change from 0 to 512 [ 380.340446][T15342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.356687][T15341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.372871][ T3612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.387916][T15341] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.560014][T15344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.585699][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 380.585718][ T29] audit: type=1326 audit(1761704409.103:12564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 380.615641][ T29] audit: type=1326 audit(1761704409.103:12565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 380.639317][ T29] audit: type=1326 audit(1761704409.103:12566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 380.662943][ T29] audit: type=1326 audit(1761704409.103:12567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 380.686521][ T29] audit: type=1326 audit(1761704409.103:12568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 380.710110][ T29] audit: type=1326 audit(1761704409.103:12569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 380.744445][T15344] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.795342][T15333] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.834217][T15344] pim6reg1: entered promiscuous mode [ 380.839744][T15344] pim6reg1: entered allmulticast mode [ 380.855880][T15341] pim6reg1: entered promiscuous mode [ 380.861210][T15341] pim6reg1: entered allmulticast mode [ 380.877482][T15333] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.925491][ T29] audit: type=1326 audit(1761704409.463:12570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 381.025864][ T3629] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.052682][T14891] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.082757][ T5854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.099319][ T3629] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.108396][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3730'. [ 381.117409][ T3629] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.129402][T15355] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 381.142999][ T3629] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.751281][ T29] audit: type=1326 audit(1761704409.463:12571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 381.775283][ T29] audit: type=1326 audit(1761704409.463:12572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 381.799004][ T29] audit: type=1326 audit(1761704409.463:12573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15340 comm="syz.4.3727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc99840efc9 code=0x7ffc0000 [ 381.904636][T13645] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 381.915748][T13645] CPU: 1 UID: 0 PID: 13645 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 381.915843][T13645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 381.915858][T13645] Call Trace: [ 381.915865][T13645] [ 381.915874][T13645] __dump_stack+0x1d/0x30 [ 381.915896][T13645] dump_stack_lvl+0xe8/0x140 [ 381.915991][T13645] dump_stack+0x15/0x1b [ 381.916007][T13645] dump_header+0x81/0x220 [ 381.916027][T13645] oom_kill_process+0x342/0x400 [ 381.916089][T13645] out_of_memory+0x979/0xb80 [ 381.916131][T13645] try_charge_memcg+0x610/0xa10 [ 381.916238][T13645] charge_memcg+0x51/0xc0 [ 381.916278][T13645] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 381.916311][T13645] __read_swap_cache_async+0x17b/0x2d0 [ 381.916342][T13645] swap_cluster_readahead+0x262/0x3c0 [ 381.916374][T13645] swapin_readahead+0xde/0x6f0 [ 381.916398][T13645] ? strncpy_from_user_nofault+0xa7/0xf0 [ 381.916470][T13645] ? bpf_probe_read_compat_str+0x126/0x130 [ 381.916494][T13645] ? __rcu_read_unlock+0x4f/0x70 [ 381.916564][T13645] ? swap_cache_get_folio+0x277/0x280 [ 381.916584][T13645] do_swap_page+0x2ae/0x2370 [ 381.916606][T13645] ? _raw_spin_unlock+0x26/0x50 [ 381.916635][T13645] ? finish_task_switch+0xad/0x2b0 [ 381.916785][T13645] ? __pfx_default_wake_function+0x10/0x10 [ 381.916815][T13645] handle_mm_fault+0x9a5/0x2be0 [ 381.916841][T13645] ? vma_start_read+0x141/0x1f0 [ 381.916888][T13645] do_user_addr_fault+0x630/0x1080 [ 381.916941][T13645] ? fpregs_restore_userregs+0xe2/0x1d0 [ 381.916980][T13645] ? switch_fpu_return+0xe/0x20 [ 381.917011][T13645] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 381.917061][T13645] exc_page_fault+0x62/0xa0 [ 381.917098][T13645] asm_exc_page_fault+0x26/0x30 [ 381.917121][T13645] RIP: 0033:0x7fd8d3441845 [ 381.917185][T13645] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 1e 6d 1f 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 381.917206][T13645] RSP: 002b:00007ffe2b2b82f8 EFLAGS: 00010246 [ 381.917226][T13645] RAX: 0000000000000000 RBX: 00000000000000fe RCX: 00007fd8d3441843 [ 381.917242][T13645] RDX: 00007ffe2b2b8310 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.917257][T13645] RBP: 00007ffe2b2b837c R08: 000000002f13afe5 R09: 0000000000000000 [ 381.917272][T13645] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 381.917284][T13645] R13: 00000000000927c0 R14: 000000000005d11a R15: 00007ffe2b2b83d0 [ 381.917305][T13645] [ 381.917380][T13645] memory: usage 307200kB, limit 307200kB, failcnt 4729 [ 382.143561][T15380] netlink: 'syz.4.3738': attribute type 10 has an invalid length. [ 382.148735][T13645] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 382.148786][T13645] kmem: usage 307084kB, limit 9007199254740988kB, failcnt 0 [ 382.148798][T13645] Memory cgroup stats for /syz3: [ 382.149965][T13645] cache 0 [ 382.198081][T13645] rss 0 [ 382.198209][T15383] netlink: 'syz.4.3738': attribute type 10 has an invalid length. [ 382.200856][T13645] shmem 0 [ 382.200866][T13645] mapped_file 0 [ 382.200876][T13645] dirty 0 [ 382.200884][T13645] writeback 0 [ 382.221305][T13645] workingset_refault_anon 1175 [ 382.226089][T13645] workingset_refault_file 9788 [ 382.230839][T13645] swap 196608 [ 382.234138][T13645] swapcached 0 [ 382.237503][T13645] pgpgin 353929 [ 382.241026][T13645] pgpgout 353900 [ 382.244663][T13645] pgfault 364780 [ 382.248221][T13645] pgmajfault 752 [ 382.251773][T13645] inactive_anon 0 [ 382.255442][T13645] active_anon 0 [ 382.258914][T13645] inactive_file 0 [ 382.262534][T13645] active_file 118784 [ 382.266491][T13645] unevictable 0 [ 382.270014][T13645] hierarchical_memory_limit 314572800 [ 382.275388][T13645] hierarchical_memsw_limit 9223372036854771712 [ 382.281522][T13645] total_cache 0 [ 382.285009][T13645] total_rss 0 [ 382.288284][T13645] total_shmem 0 [ 382.291820][T13645] total_mapped_file 0 [ 382.295811][T13645] total_dirty 0 [ 382.299258][T13645] total_writeback 0 [ 382.303057][T13645] total_workingset_refault_anon 1175 [ 382.305085][T15385] siw: device registration error -23 [ 382.308498][T13645] total_workingset_refault_file 9788 [ 382.319031][T13645] total_swap 196608 [ 382.322928][T13645] total_swapcached 0 [ 382.326841][T13645] total_pgpgin 353929 [ 382.330859][T13645] total_pgpgout 353900 [ 382.334932][T13645] total_pgfault 364780 [ 382.339046][T13645] total_pgmajfault 752 [ 382.343111][T13645] total_inactive_anon 0 [ 382.347270][T13645] total_active_anon 0 [ 382.351317][T13645] total_inactive_file 0 [ 382.355484][T13645] total_active_file 118784 [ 382.359903][T13645] total_unevictable 0 [ 382.363872][T13645] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.3734,pid=15358,uid=0 [ 382.378580][T13645] Memory cgroup out of memory: Killed process 15358 (syz.3.3734) total-vm:95860kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 382.396458][T15380] bond0: (slave dummy0): Releasing backup interface [ 382.406057][T15380] team0: Port device dummy0 added [ 382.427648][T15383] team0: Port device dummy0 removed [ 382.439965][T15383] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 382.482112][T15387] netlink: 'syz.0.3740': attribute type 10 has an invalid length. [ 382.492900][T15387] bond0: (slave dummy0): Releasing backup interface [ 382.502736][T15387] team0: Port device dummy0 added [ 382.510320][T15387] netlink: 'syz.0.3740': attribute type 10 has an invalid length. [ 382.521377][T15387] team0: Port device dummy0 removed [ 382.529376][T15387] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 382.569411][T15389] pim6reg1: entered promiscuous mode [ 382.574899][T15389] pim6reg1: entered allmulticast mode [ 382.603329][T15391] loop3: detected capacity change from 0 to 1024 [ 382.610038][T15391] EXT4-fs: Ignoring removed orlov option [ 382.617754][T15391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.630861][T15391] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.648839][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3743'. [ 382.661480][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3743'. [ 382.680309][T15398] siw: device registration error -23 [ 382.689845][T15398] loop3: detected capacity change from 0 to 512 [ 382.698524][T15398] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.3744: EA inode hash validation failed [ 382.711433][T15398] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3744: corrupted inode contents [ 382.723583][T15398] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.3744: mark_inode_dirty error [ 382.735307][T15398] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3744: corrupted inode contents [ 382.747585][T15398] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.3744: mark_inode_dirty error [ 382.761168][T15398] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.3744: mark inode dirty (error -117) [ 382.777395][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 382.789454][T15401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3745'. [ 382.790782][T15398] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 382.807943][T15398] EXT4-fs (loop3): 1 orphan inode deleted [ 382.815769][T15398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.841701][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.863858][T15406] netlink: 'syz.0.3746': attribute type 10 has an invalid length. [ 382.873855][T15406] bond0: (slave dummy0): Releasing backup interface [ 382.883231][T15406] team0: Port device dummy0 added [ 382.896871][T15406] netlink: 'syz.0.3746': attribute type 10 has an invalid length. [ 382.915728][T15406] team0: Port device dummy0 removed [ 382.923633][T15406] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 383.003393][T15420] bond0: (slave dummy0): Releasing backup interface [ 383.013378][T15420] team0: Port device dummy0 added [ 383.024817][T15420] team0: Port device dummy0 removed [ 383.033101][T15420] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 383.415708][T15252] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.439670][T15434] siw: device registration error -23 [ 383.450041][T15434] loop2: detected capacity change from 0 to 512 [ 383.459119][T15434] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.3758: EA inode hash validation failed [ 383.476215][T15434] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3758: corrupted inode contents [ 383.488579][T15434] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.3758: mark_inode_dirty error [ 383.500961][T15434] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.3758: corrupted inode contents [ 383.514588][T15434] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.3758: mark_inode_dirty error [ 383.557953][T15436] lo speed is unknown, defaulting to 1000 [ 383.564243][T15436] lo speed is unknown, defaulting to 1000 [ 383.612507][T15438] loop3: detected capacity change from 0 to 512 [ 383.622579][T15434] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.3758: mark inode dirty (error -117) [ 383.638844][T15438] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.842485][T15434] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 383.916488][T15434] EXT4-fs (loop2): 1 orphan inode deleted [ 383.964720][T15434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.100575][T15252] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.258482][T15446] validate_nla: 2 callbacks suppressed [ 384.258502][T15446] netlink: 'syz.0.3760': attribute type 10 has an invalid length. [ 384.275185][T15446] bond0: (slave dummy0): Releasing backup interface [ 384.284421][T15446] team0: Port device dummy0 added [ 384.300928][T15446] netlink: 'syz.0.3760': attribute type 10 has an invalid length. [ 384.328930][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 384.339336][T15446] team0: Port device dummy0 removed [ 384.390874][T15452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 384.396215][T15446] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 384.409861][T13645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.419339][T15450] lo speed is unknown, defaulting to 1000 [ 384.425916][T15450] lo speed is unknown, defaulting to 1000 [ 384.460649][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 384.471687][T15458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 384.630246][T15469] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.705626][T15469] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.766134][T15469] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.847044][T15469] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.953734][T14891] ================================================================== [ 384.961861][T14891] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 384.971728][T14891] [ 384.974054][T14891] read-write to 0xffffffff868099c0 of 8 bytes by interrupt on cpu 0: [ 384.982108][T14891] tick_do_update_jiffies64+0x113/0x1c0 [ 384.987675][T14891] tick_nohz_handler+0x7f/0x2d0 [ 384.992566][T14891] __hrtimer_run_queues+0x20f/0x5a0 [ 384.997778][T14891] hrtimer_interrupt+0x21a/0x460 [ 385.002723][T14891] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 385.008665][T14891] sysvec_apic_timer_interrupt+0x6f/0x80 [ 385.014316][T14891] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 385.020303][T14891] fdget+0x0/0x110 [ 385.024038][T14891] __se_sys_ioctl+0x20/0x140 [ 385.028635][T14891] __x64_sys_ioctl+0x43/0x50 [ 385.033232][T14891] x64_sys_call+0x1816/0x3000 [ 385.037917][T14891] do_syscall_64+0xd2/0x200 [ 385.042425][T14891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.048335][T14891] [ 385.050669][T14891] read to 0xffffffff868099c0 of 8 bytes by task 14891 on cpu 1: [ 385.058299][T14891] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 385.064589][T14891] count_shadow_nodes+0x6a/0x230 [ 385.069550][T14891] do_shrink_slab+0x63/0x680 [ 385.074160][T14891] shrink_slab+0x448/0x760 [ 385.078598][T14891] shrink_node+0x6c3/0x2120 [ 385.083104][T14891] do_try_to_free_pages+0x3f6/0xcd0 [ 385.088304][T14891] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 385.094247][T14891] try_charge_memcg+0x383/0xa10 [ 385.099112][T14891] charge_memcg+0x51/0xc0 [ 385.103447][T14891] __mem_cgroup_charge+0x28/0xb0 [ 385.108394][T14891] filemap_add_folio+0x111/0x360 [ 385.113337][T14891] page_cache_ra_unbounded+0x203/0x450 [ 385.118806][T14891] page_cache_ra_order+0x145/0x220 [ 385.123935][T14891] do_sync_mmap_readahead+0x315/0x320 [ 385.129399][T14891] filemap_fault+0x333/0xb60 [ 385.133998][T14891] __do_fault+0xbc/0x200 [ 385.138263][T14891] handle_mm_fault+0xf78/0x2be0 [ 385.143209][T14891] do_user_addr_fault+0x630/0x1080 [ 385.148336][T14891] exc_page_fault+0x62/0xa0 [ 385.152867][T14891] asm_exc_page_fault+0x26/0x30 [ 385.157814][T14891] [ 385.160142][T14891] value changed: 0x00000001000020fd -> 0x00000001000020fe [ 385.167261][T14891] [ 385.169593][T14891] Reported by Kernel Concurrency Sanitizer on: [ 385.175747][T14891] CPU: 1 UID: 0 PID: 14891 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 385.185731][T14891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.195792][T14891] ================================================================== [ 385.205386][T15477] lo speed is unknown, defaulting to 1000 [ 385.211589][T15477] lo speed is unknown, defaulting to 1000 [ 385.261456][T15462] syz.1.3766 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 385.272489][T15462] CPU: 1 UID: 0 PID: 15462 Comm: syz.1.3766 Not tainted syzkaller #0 PREEMPT(voluntary) [ 385.272521][T15462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 385.272537][T15462] Call Trace: [ 385.272553][T15462] [ 385.272562][T15462] __dump_stack+0x1d/0x30 [ 385.272586][T15462] dump_stack_lvl+0xe8/0x140 [ 385.272606][T15462] dump_stack+0x15/0x1b [ 385.272622][T15462] dump_header+0x81/0x220 [ 385.272640][T15462] oom_kill_process+0x342/0x400 [ 385.272700][T15462] out_of_memory+0x979/0xb80 [ 385.272773][T15462] try_charge_memcg+0x610/0xa10 [ 385.272807][T15462] charge_memcg+0x51/0xc0 [ 385.272832][T15462] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 385.272865][T15462] __read_swap_cache_async+0x17b/0x2d0 [ 385.272930][T15462] swap_cluster_readahead+0x262/0x3c0 [ 385.272964][T15462] swapin_readahead+0xde/0x6f0 [ 385.272989][T15462] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 385.273021][T15462] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 385.273102][T15462] ? __rcu_read_unlock+0x4f/0x70 [ 385.273149][T15462] ? swap_cache_get_folio+0x277/0x280 [ 385.273208][T15462] do_swap_page+0x2ae/0x2370 [ 385.273317][T15462] ? css_rstat_updated+0xb7/0x240 [ 385.273344][T15462] ? __pfx_default_wake_function+0x10/0x10 [ 385.273378][T15462] handle_mm_fault+0x9a5/0x2be0 [ 385.273403][T15462] ? vma_start_read+0x141/0x1f0 [ 385.273448][T15462] do_user_addr_fault+0x630/0x1080 [ 385.273532][T15462] ? fpregs_restore_userregs+0xe2/0x1d0 [ 385.273563][T15462] ? switch_fpu_return+0xe/0x20 [ 385.273620][T15462] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 385.273729][T15462] exc_page_fault+0x62/0xa0 [ 385.273809][T15462] asm_exc_page_fault+0x26/0x30 [ 385.273830][T15462] RIP: 0033:0x7f4630a758ec [ 385.273847][T15462] Code: 66 0f 1f 44 00 00 69 3d c6 fd ea 00 e8 03 00 00 48 8d 1d c7 06 38 00 e8 42 96 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 385.273866][T15462] RSP: 002b:00007ffc8417c040 EFLAGS: 00010202 [ 385.273882][T15462] RAX: 0000000000000000 RBX: 00007f4630df5fa0 RCX: 0000000000000000 [ 385.273910][T15462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055556bbaa808 [ 385.273923][T15462] RBP: 00007f4630df7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 385.274013][T15462] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000005e17b [ 385.274025][T15462] R13: 00007ffc8417c130 R14: ffffffffffffffff R15: 00007ffc8417c150 [ 385.274104][T15462] [ 385.509432][T15462] memory: usage 307200kB, limit 307200kB, failcnt 20183 [ 385.517049][T15462] memory+swap: usage 306864kB, limit 9007199254740988kB, failcnt 0 [ 385.524970][T15462] kmem: usage 289884kB, limit 9007199254740988kB, failcnt 0 [ 385.532318][T15462] Memory cgroup stats for /syz1: [ 385.584365][T15462] cache 528384 [ 385.592792][T15462] rss 0 [ 385.595620][T15462] shmem 0 [ 385.598556][T15462] mapped_file 0 [ 385.602091][T15462] dirty 0 [ 385.605088][T15462] writeback 8192 [ 385.608925][T15462] workingset_refault_anon 1013 [ 385.614127][T15462] workingset_refault_file 5802 [ 385.620413][T15462] swap 188416 [ 385.624445][T15462] swapcached 12288 [ 385.628235][T15462] pgpgin 339379 [ 385.631746][T15462] pgpgout 339227 [ 385.635377][T15462] pgfault 383321 [ 385.638920][T15462] pgmajfault 546 [ 385.642473][T15462] inactive_anon 12288 [ 385.646472][T15462] active_anon 0 [ 385.649933][T15462] inactive_file 86016 [ 385.653933][T15462] active_file 507904 [ 385.657923][T15462] unevictable 0 [ 385.661382][T15462] hierarchical_memory_limit 314572800 [ 385.666777][T15462] hierarchical_memsw_limit 9223372036854771712 [ 385.672999][T15462] total_cache 528384 [ 385.676917][T15462] total_rss 0 [ 385.680219][T15462] total_shmem 0 [ 385.683722][T15462] total_mapped_file 0 [ 385.687704][T15462] total_dirty 0 [ 385.691168][T15462] total_writeback 8192 [ 385.695410][T15462] total_workingset_refault_anon 1013 [ 385.700720][T15462] total_workingset_refault_file 5802 [ 385.706115][T15462] total_swap 188416 [ 385.709980][T15462] total_swapcached 12288 [ 385.714278][T15462] total_pgpgin 339379 [ 385.718256][T15462] total_pgpgout 339227 [ 385.722383][T15462] total_pgfault 383321 [ 385.726468][T15462] total_pgmajfault 546 [ 385.730537][T15462] total_inactive_anon 12288 [ 385.735054][T15462] total_active_anon 0 [ 385.739037][T15462] total_inactive_file 86016 [ 385.743564][T15462] total_active_file 507904 [ 385.747992][T15462] total_unevictable 0 [ 385.752022][T15462] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.3766,pid=15462,uid=0 [ 385.766898][T15462] Memory cgroup out of memory: Killed process 15462 (syz.1.3766) total-vm:95876kB, anon-rss:1264kB, file-rss:22380kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 386.729583][ T3612] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.748935][ T3612] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.765794][ T3612] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.777908][ T3612] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0