last executing test programs: 2.241061239s ago: executing program 2 (id=239): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x7fff}, 0x1184c, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1002002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) r2 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fremovexattr(r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x2, &(0x7f0000000080)={0x0}) fcntl$setown(r0, 0x8, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FITRIM(r4, 0xc0185879, 0x0) 1.903114132s ago: executing program 3 (id=245): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fffffffffffffff5000000000000000000000000000000001d795c92b9714b5a2897e86e8f35a90000000038327cfe7918edbb8fe9189f3f2f192439db4ac8281d2a715d7ddfd28f7e23dc36b49ee43542c40a79956a19ebef681ae64771a6e874c72059bd20b2cc3d82afae5a7098dc8504fe344db2557c93a1524ad0eb51c3b74e76756438d527d56b912d589d67c89590583754d2100b807e29143e43e504d3cc36e4b68cfd9358b0adade84c85233e"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000020000000000000001000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x87, 0x700, 0x3c4, 0x3, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x66, 0x0, 0x40, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0xc6, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x22}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x4}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x5, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000014) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9c650000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf25150000005400018008000300010000000800030000000000140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e00000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300020000002000018014000200767863616e310000000000000000000008000300030000004400018006000300020000001400020064766d727030000000000000000000000800030000000000000002006261746164765f736c6176655f31000014000200687372300000000000000000000000001c000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="4c0001800800030003000000", @ANYRES32=r6, @ANYBLOB="1400020070696d3672656700000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020064756d6d793000000000000000000000000002006272696467655f736c6176655f3100000000020065727370616e3000000000000000000000000100", @ANYRES32=r6, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0x2000}, 0x20000004) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) 1.813283011s ago: executing program 2 (id=248): r0 = socket(0x10, 0x803, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) r1 = signalfd4(r0, &(0x7f0000000040)={[0x3]}, 0x8, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffffd8}}]}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={0x0, r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={0x0, 0x16b0}, 0x1, 0x0, 0x0, 0x4001}, 0x8050) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x90}}, 0x0) 1.812151371s ago: executing program 3 (id=249): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000b7ae587881f822c83f345cd4c8d5a1934c2ec66a269223b387a5d611f07cb611b987b963df49df376864c8adfea61c8040230657e609a45e8ff04461ff66681c14cb985cb104bc951ff13758b3a5bb47215ae1a1b7239ae98bd18ca20718fca74c8827e2cffe97ffc26acafa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) 1.777578954s ago: executing program 3 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3], 0x44}}, 0x0) 1.745530728s ago: executing program 3 (id=252): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x24000810) 1.681579134s ago: executing program 3 (id=253): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r2, 0x0, 0x65) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0xd3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r4, 0x0, 0x1}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 1.508297931s ago: executing program 3 (id=258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000005c0), 0x802, 0x0) write$UHID_CREATE(r2, &(0x7f0000000840)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000600)=""/125, 0x7d, 0xe, 0x8, 0x81, 0x4, 0x1}}, 0x120) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='rxrpc_skb\x00', r1, 0x0, 0x4}, 0x18) socketpair(0xf, 0x3, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000200)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00', 0x5) syz_mount_image$msdos(&(0x7f0000000900), &(0x7f0000000040)='./file0\x00', 0x3000002, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0], 0x1, 0x26f, &(0x7f0000000280)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fsetxattr$security_selinux(r4, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000180)='./file0\x00', 0x1000802, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d697865642c636f6465706167653d3821332c696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41eff157cfdfcef90a6010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d041a99ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f4436383ee21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4ceafb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9eeeb2d0c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5caa71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d5756c9e5442fa3692127266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f32a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75a6901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b45ea2408d1da65a2ed8cf55a"], 0x4, 0x24e, &(0x7f0000000a00)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getrandom(&(0x7f0000000c80)=""/4096, 0x1000, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000140)='./file2\x00', 0x147842, 0x184) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.393475372s ago: executing program 4 (id=260): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0xd3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x1}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x12, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000070020009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 1.186755343s ago: executing program 4 (id=264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000100)={0x29, 0x1}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r4) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf250100000014000500fe880000000c000000000000000000010e0001006e65742f6c326361700000000800020005000400"], 0x40}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) 1.101901211s ago: executing program 2 (id=266): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) 924.145559ms ago: executing program 4 (id=268): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) mount$nfs4(&(0x7f0000000580)='\x00', &(0x7f0000000500)='.\x00', &(0x7f00000003c0), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8c1}, 0x810) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket(0x10, 0x3, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x0) 865.264154ms ago: executing program 2 (id=270): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)={0x20000016}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000008000000000000000180000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) keyctl$assume_authority(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) getgroups(0x2, &(0x7f0000001280)=[0xee01, 0x0]) lchown(&(0x7f0000001240)='./file0\x00', 0x0, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0x200000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x8}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0xffffffff}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {0xfffffffd, 0x0, 0x0, 0x0, 0x9c4}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xfffffffd}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0xfffffffc, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0xffff234f}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 834.334437ms ago: executing program 2 (id=271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4, 0xe}, {0x4, 0xf}}}, 0x24}}, 0x14000000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0xf9, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x1, 0x3, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x8}, 0x94) socket$packet(0x11, 0x3, 0x300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x7, 0x9) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) syz_emit_ethernet(0x5e, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB="0000000012000000003600a2d8429c88a2f504d413919b821e76c8c89aa2fd758c8170488c4ba2c628c6ad8f42c1f23a5bf1380e9fd6513915cee95cef5c93bcb2ccd6f07f19bbdd97db69aadc5f5dc445862703a11564494dcc14438648d208f53b28ee35a98c82a039bf9462ddb358d4c05c9c65f16ce39057c8a19135884877028debbbfbd727313fa58bf85105b5ef307089e224ee0d9d020c22f73825bff9ddf15403000000702610a152844825e8583266b059df1c692f", @ANYRES32=r4], 0xb4}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x80) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) 805.8213ms ago: executing program 4 (id=272): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)={0x20000016}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000008000000000000000180000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) keyctl$assume_authority(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) getgroups(0x2, &(0x7f0000001280)=[0xee01, 0x0]) lchown(&(0x7f0000001240)='./file0\x00', 0x0, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0x200000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x8}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0xffffffff}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {0xfffffffd, 0x0, 0x0, 0x0, 0x9c4}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xfffffffd}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0xfffffffc, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0xffff234f}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 732.567508ms ago: executing program 4 (id=275): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0xd3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, 0x0, &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x1}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x12, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000070020009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x18) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x2) 582.375242ms ago: executing program 1 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth0_to_team\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x24000810) 520.103298ms ago: executing program 1 (id=279): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fffffffffffffff5000000000000000000000000000000001d795c92b9714b5a2897e86e8f35a90000000038327cfe7918edbb8fe9189f3f2f192439db4ac8281d2a715d7ddfd28f7e23dc36b49ee43542c40a79956a19ebef681ae64771a6e874c72059bd20b2cc3d82afae5a7098dc8504fe344db2557c93a1524ad0eb51c3b74e76756438d527d56b912d589d67c89590583754d2100b807e29143e43e504d3cc36e4b68cfd9358b0adade84c85233e"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="701500003c0007010300000000000000017c0000040042800c0003"], 0x1570}, 0x1, 0x0, 0x0, 0x20000000}, 0xc800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000002000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000580)={'ip_vti0\x00', 0x0, 0x87, 0x700, 0x3c4, 0x3, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x66, 0x0, 0x40, 0x4, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x17, 0xc6, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2a}, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x22}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000600)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r0, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400000000000700000000", @ANYRES32=r8, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x4}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x5, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40098}, 0x4000014) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000000a00)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9c650000", @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf25150000005400018008000300010000000800030000000000140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f766c616e00000000000008000100", @ANYRES32=r3, @ANYBLOB="08000300020000002000018014000200767863616e310000000000000000000008000300030000004400018006000300020000001400020064766d727030000000000000000000000800030000000000000002006261746164765f736c6176655f31000014000200687372300000000000000000000000001c000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="4c0001800800030003000000", @ANYRES32=r6, @ANYBLOB="1400020070696d3672656700000000000000000008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="1400020064756d6d793000000000000000000000000002006272696467655f736c6176655f3100000000020065727370616e3000000000000000000000000100", @ANYRES32=r6, @ANYBLOB], 0x134}, 0x1, 0x0, 0x0, 0x2000}, 0x20000004) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x0) 518.353149ms ago: executing program 4 (id=280): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1900000004"], 0x48) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r3, 0x541b, 0xf0ff1f00000002) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r5, @ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r6, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r8, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r8, r1, 0x0, 0x3ffff) sendfile(r8, r1, 0x0, 0x7ffffffffffffffd) 495.682121ms ago: executing program 2 (id=281): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x100003c}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) sendmmsg$inet6(r0, &(0x7f0000000780), 0x0, 0x4048884) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 493.782741ms ago: executing program 0 (id=282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x94}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x110}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000340)={0x0, 0x2924, 0x40, 0x3, 0x44a}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000001ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x105) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 402.18573ms ago: executing program 0 (id=283): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00'}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000b80)={0x20000016}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000008000000000000000180000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) keyctl$assume_authority(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) getgroups(0x2, &(0x7f0000001280)=[0xee01, 0x0]) lchown(&(0x7f0000001240)='./file0\x00', 0x0, r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000, 0x0, 0x200000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x8}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0xffffffff}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {0xfffffffd, 0x0, 0x0, 0x0, 0x9c4}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xfffffffd}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0xfffffffc, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0xffff234f}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 384.937042ms ago: executing program 1 (id=284): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r2, 0x0, 0x65) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x80000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0xd3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x1}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) 314.141559ms ago: executing program 1 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5f86702e625a1658f2bb09e1c7a178ec27081bb8e0f3febf700a1663374325bbb17a17c6178fbc0424f83cfafdd8ed301450bc6822105e6033bc999c833ce3f60814f9db98c3880aae837027cc4fd82a1aa61d1c7fbacf0e5da0c820f97e35f52abb212dcfd77c7e159ef4f777a2cbf61508539660a577974291852a3dfdcb0706961faf65f62745240e281e9c1ea25a2bf29729008b59b5bac92c8ffc53b240761c0021edb53bad82a322510f480a53945c63803abb0b5947aa32a7ad5cf8059933ae4dc5d18a261b8d4a126dadd1d7f186cc0f3bc00c82c15516ea2a4b5a5517395d2a16a3beb920b16c706381bae273443ebfa3c37778596177de18a62cb96c08a35459a897ac87bcd87cdbcecae83c95cd4b5eb878a8d31e75955eb11e0cb58c6ad2b39f8f9350ff95778a961b07b4b0e4ff6b58caab6db44c6345c8ad9da0aef0c2b4a09e459a027d774da684ce2defd0b23b6e15ec573268050cba4cd1be4d899672ea3562f280df3b3ee878bd2e9989357829c363b4b47eacadeee76144957f4d76c3ea703aa5bf32f75a0370f49ae371f001eced8bbdaa781f66c83f959af0cb0ecbabeeeb0f91c26a22b430d5cae34e470f79f01446cdca5b70ba6448a8d9e4722dba03369b3204253eea942de2fb7b4408212a4c6a5d36c7e82417edd052a59d6d1ce2b0a2bd94f334647712cc2296e75db316be650195dd28a360e2e44fd32951b2b983d673bce51eea778d2ed2a2468c3b6b94b67ee175aa08f757d5522b43cefd5969511579cd79300802c811adad7b6bdf789f70bc76e94f8ea317043cf29b562a2041c553122ec338834455be1b68fe7470808451b0e1f1d444ae1e430c51c718a751142fa675a663e9d9f66a8a6199b56d18e4167e54942a37366fa0b5242de86bf1af6c758b2f0bb1f0fda16dc5241e3cc442326fdb501b95fe768c45781c8b60fbe576c7e790e2d5a2a76085cdca098fb3209b30a017eefbf6f8b315b38d8f8f194e456d1776cf6c9c4f4a99e9b50ca4bbc57ff1f035f13a3d8261617b5d55387488f9456a32400a84f95320e722c7abed22b9f8b574da8322fe104c12fb35c9d0c600dde78c47cd46647a8e24aafa53c68e2119ed1473bb3b7c9873d0a256e8eec8dc9f57820a7e23d49deb4041beae704b3fb527ce57316ff238515c248c80d51fd44e31dbb2d2e1d6b8007a03bf9b981fee094ee82f413698af66a3057621490d60207bca2e7a11e96cfb850a9a371ce672d0c4826be044acaa0a0a04fab4f2807eac896c48db2c35caf97fdf8bacb854f5351328cfbab2c3b251fc0abe20ba4b8fe8f4a98dfb76a0b1ea6b6463bdd900e23114c94f205f492a4acb30cc8a6efe6f73a96d3688853c60dce92732440db5ec245478bb64ebe9b60e7469ffb253febcda05613a8c1dbf72634e68d912e2fc98501d99c7dafb50081edcc60dc74daf9cecbcf65aa57661451fc6131f8c879b2181984bc4e0973ad6984837e19595caa35ff4713266b6a6c090a50afeb1461590c4c36f7fead0c9620af82302616c154e74199ee11353f6e9861472e2f1826afd0ce1a2ce9712b50019b32397960f54f4fce3c6655e13d8ef3ba20eaa3ca03a831a39732203dc3d2d3bf8de63fb4c96b3ec10cc852401f25a2575e98d9a25bf0767fc180f6fef5928565fa9ffdd620b6713f85bbc140060df1b50607b4eb51c0c71dac8ee2c19b9bd03b1840bb4d1f8a767d788a31926c9c39be4709dd57e856cb417d3947ce825f194fac18323f36a3b7743603abc628d477b3292a6b3f4965e882a110728f2a9f4fa8fd9d9d50859c48fe0f07f6a826bd5c5d8d645c0f7d8d03cf49be2419e2986f8ad55a228cacd0838f867a8612fd1c4b04d54dc9d5b05cc9395f5bb7fe918083bedfa33734a3f6afaf70379f4d423fa592dcfdeef84161df3f8f42204116442fc815a3cb3c79348d489296014fb8d4334c4ad776e14207ed2115781a0caac4cbfddf8f788f58cd9da9c33f145d87a187d7db78ce4368c5bdbba67fde5264a53a65a027a52aa09fd4943aeeae146a769a26a0f3597fd5004b60c179ce2bcafc78220d691c44c153c883bf942f01586b5321e4bbb28ab44d97bea3368f7c5d0c3dda0ef359065fd31f62060beb0b2a31f7164867e4b78f89f5ea0131aed7014ef3385f0b350ff847f4321b81c7dc9a484605ee397a2d5ea8ad9593020cea3acb6a106a560b4bf675c89aa3b14678dfef6602fdfa9afeeb6f16cb1b3cc944ad5d0492a3d07308c07dfc204c071d92f6b8b5694c70d166fe29f7894ceee7554dc32c71f3b971c8f20f2cafa4399a8755684090f90e6b45ee924d1205e0a075fd2259b6ca6430d28c780735353be38578b3cf1badcba4dae86419d4a0c1ec21f4a7510a08018e90974f0757aab8b51dc0fc068193d040cbd9706eeec02360da646b11cc5f1a544ecf24ce87c7165a0cb9bdb6990db03320ecf2f65fb6dfd1f3d32b2ae10723707cf5f30ea387f677aea100649c72e795b5f7d652e0e2fd0ae19eaf96f1b6453d056e01c97aa5c271b5e5f303fa4013f686cfbf64a1c1fe4263786b835e46a98699b8d5262520c4947987748ab21a48aef3", 0xfd1, 0x6, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) acct(&(0x7f0000000040)='./file0\x00') 312.637829ms ago: executing program 0 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x24102, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x152, @time={0x95}}) 307.306559ms ago: executing program 1 (id=287): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000b7ae587881f822c83f345cd4c8d5a1934c2ec66a269223b387a5d611f07cb611b987b963df49df376864c8adfea61c8040230657e609a45e8ff04461ff66681c14cb985cb104bc951ff13758b3a5bb47215ae1a1b7239ae98bd18ca20718fca74c8827e2cffe97ffc26acafa", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x533201, 0x80) 260.837584ms ago: executing program 1 (id=288): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000192c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4000090) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff04ff810000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r5, 0x560a, &(0x7f0000001040)={0x0, 0x3, 0x0, 0x20, 0x2, "08000000f28f00"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019500)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff8}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x9}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 214.567539ms ago: executing program 0 (id=289): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d61637674617000", @ANYRES32=r3], 0x44}}, 0x0) 165.113863ms ago: executing program 0 (id=290): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0xd3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 0s ago: executing program 0 (id=291): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0xd3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x1}, 0x18) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000080)=0x12, 0x80800) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000070020009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x18) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.37' (ED25519) to the list of known hosts. [ 34.522707][ T29] audit: type=1400 audit(1760853452.379:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.546726][ T3301] cgroup: Unknown subsys name 'net' [ 34.549846][ T29] audit: type=1400 audit(1760853452.399:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.574268][ T29] audit: type=1400 audit(1760853452.409:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.720246][ T3301] cgroup: Unknown subsys name 'cpuset' [ 34.726695][ T3301] cgroup: Unknown subsys name 'rlimit' [ 34.829242][ T29] audit: type=1400 audit(1760853452.679:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.852759][ T29] audit: type=1400 audit(1760853452.689:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.873803][ T29] audit: type=1400 audit(1760853452.689:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.894429][ T29] audit: type=1400 audit(1760853452.689:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.898275][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.915055][ T29] audit: type=1400 audit(1760853452.709:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.948173][ T29] audit: type=1400 audit(1760853452.709:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.971450][ T29] audit: type=1400 audit(1760853452.789:71): avc: denied { relabelto } for pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.981913][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 37.409587][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 37.438264][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 37.485460][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.517428][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.524648][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.531836][ T3319] bridge_slave_0: entered allmulticast mode [ 37.538265][ T3319] bridge_slave_0: entered promiscuous mode [ 37.546381][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.553669][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.560991][ T3319] bridge_slave_1: entered allmulticast mode [ 37.567524][ T3319] bridge_slave_1: entered promiscuous mode [ 37.612475][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 37.628017][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.652943][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.660254][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.667628][ T3315] bridge_slave_0: entered allmulticast mode [ 37.674082][ T3315] bridge_slave_0: entered promiscuous mode [ 37.682018][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.695690][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.702838][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.709991][ T3321] bridge_slave_0: entered allmulticast mode [ 37.716654][ T3321] bridge_slave_0: entered promiscuous mode [ 37.723546][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.730819][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.738070][ T3321] bridge_slave_1: entered allmulticast mode [ 37.744694][ T3321] bridge_slave_1: entered promiscuous mode [ 37.760165][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.767331][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.774884][ T3315] bridge_slave_1: entered allmulticast mode [ 37.781505][ T3315] bridge_slave_1: entered promiscuous mode [ 37.822726][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.841388][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.851268][ T3319] team0: Port device team_slave_0 added [ 37.859901][ T3319] team0: Port device team_slave_1 added [ 37.867057][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.884846][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.894198][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.931963][ T3321] team0: Port device team_slave_0 added [ 37.942856][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.949935][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.976296][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.002820][ T3321] team0: Port device team_slave_1 added [ 38.011581][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.018544][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.044549][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.055547][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.062686][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.069939][ T3312] bridge_slave_0: entered allmulticast mode [ 38.076566][ T3312] bridge_slave_0: entered promiscuous mode [ 38.084168][ T3315] team0: Port device team_slave_0 added [ 38.107329][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.114696][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.122101][ T3312] bridge_slave_1: entered allmulticast mode [ 38.128725][ T3312] bridge_slave_1: entered promiscuous mode [ 38.135498][ T3315] team0: Port device team_slave_1 added [ 38.141598][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.148637][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.174739][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.186733][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.193894][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.219837][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.259793][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.266944][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.293160][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.309962][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.330635][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.337641][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.363913][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.375183][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.382459][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.389695][ T3311] bridge_slave_0: entered allmulticast mode [ 38.396509][ T3311] bridge_slave_0: entered promiscuous mode [ 38.404249][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.416120][ T3319] hsr_slave_0: entered promiscuous mode [ 38.422204][ T3319] hsr_slave_1: entered promiscuous mode [ 38.444902][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.452331][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.459712][ T3311] bridge_slave_1: entered allmulticast mode [ 38.466379][ T3311] bridge_slave_1: entered promiscuous mode [ 38.486234][ T3321] hsr_slave_0: entered promiscuous mode [ 38.492429][ T3321] hsr_slave_1: entered promiscuous mode [ 38.498341][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 38.504191][ T3321] Cannot create hsr debugfs directory [ 38.548541][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.558695][ T3312] team0: Port device team_slave_0 added [ 38.573435][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.593572][ T3312] team0: Port device team_slave_1 added [ 38.603448][ T3315] hsr_slave_0: entered promiscuous mode [ 38.609633][ T3315] hsr_slave_1: entered promiscuous mode [ 38.615705][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.621516][ T3315] Cannot create hsr debugfs directory [ 38.637221][ T3311] team0: Port device team_slave_0 added [ 38.655588][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.662655][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.688914][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.700696][ T3311] team0: Port device team_slave_1 added [ 38.716809][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.723956][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.749957][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.787371][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.794644][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.820582][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.832397][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.839353][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.865899][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.928571][ T3312] hsr_slave_0: entered promiscuous mode [ 38.934918][ T3312] hsr_slave_1: entered promiscuous mode [ 38.940844][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 38.946609][ T3312] Cannot create hsr debugfs directory [ 38.980125][ T3311] hsr_slave_0: entered promiscuous mode [ 38.986302][ T3311] hsr_slave_1: entered promiscuous mode [ 38.992487][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 38.998217][ T3311] Cannot create hsr debugfs directory [ 39.052759][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.072934][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.084093][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.093115][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.160214][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.171907][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.185185][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.203003][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.214290][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.224304][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.235008][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.246720][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.279590][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.291129][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.300724][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.324366][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.350766][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.364208][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.373547][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.382982][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.411883][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.443356][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.458377][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.472180][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.485626][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.492752][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.507909][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.521429][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.528611][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.538593][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.545755][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.554475][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.561571][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.574239][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.584579][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.591833][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.618997][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.635103][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.642333][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.666316][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.689394][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.712105][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.719243][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.727971][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.735143][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.753105][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.785655][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.793413][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.802999][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.810172][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.827547][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.841660][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.899574][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.928284][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.974237][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.995052][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.044659][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.065664][ T3321] veth0_vlan: entered promiscuous mode [ 40.079081][ T3321] veth1_vlan: entered promiscuous mode [ 40.118129][ T3321] veth0_macvtap: entered promiscuous mode [ 40.138609][ T3321] veth1_macvtap: entered promiscuous mode [ 40.189013][ T3319] veth0_vlan: entered promiscuous mode [ 40.218085][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.232256][ T3319] veth1_vlan: entered promiscuous mode [ 40.241315][ T3315] veth0_vlan: entered promiscuous mode [ 40.250485][ T3315] veth1_vlan: entered promiscuous mode [ 40.258382][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.274254][ T3312] veth0_vlan: entered promiscuous mode [ 40.287097][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.306680][ T3312] veth1_vlan: entered promiscuous mode [ 40.313160][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.328596][ T3319] veth0_macvtap: entered promiscuous mode [ 40.335941][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.344786][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.360338][ T3319] veth1_macvtap: entered promiscuous mode [ 40.374207][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.374221][ T29] audit: type=1400 audit(1760853458.229:81): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.9CL1oo/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.382138][ T3315] veth0_macvtap: entered promiscuous mode [ 40.410771][ T29] audit: type=1400 audit(1760853458.229:82): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.417500][ T3312] veth0_macvtap: entered promiscuous mode [ 40.432812][ T29] audit: type=1400 audit(1760853458.229:83): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.9CL1oo/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 40.441553][ T3312] veth1_macvtap: entered promiscuous mode [ 40.464042][ T29] audit: type=1400 audit(1760853458.229:84): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 40.491999][ T29] audit: type=1400 audit(1760853458.229:85): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.9CL1oo/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 40.499097][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.518579][ T29] audit: type=1400 audit(1760853458.229:86): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/root/syzkaller.9CL1oo/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 40.528725][ T3311] veth0_vlan: entered promiscuous mode [ 40.553521][ T29] audit: type=1400 audit(1760853458.229:87): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.567991][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.589086][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.602253][ T29] audit: type=1400 audit(1760853458.269:88): avc: denied { mounton } for pid=3321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.610274][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.626963][ T29] audit: type=1400 audit(1760853458.269:89): avc: denied { mount } for pid=3321 comm="syz-executor" name="/" dev="gadgetfs" ino=3749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 40.636664][ T3315] veth1_macvtap: entered promiscuous mode [ 40.669516][ T29] audit: type=1400 audit(1760853458.519:90): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.695236][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.713483][ T3481] loop0: detected capacity change from 0 to 512 [ 40.716012][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.729255][ T3481] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.738402][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.742410][ T3481] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 40.752652][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.770885][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.780172][ T3311] veth1_vlan: entered promiscuous mode [ 40.787219][ T3481] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.800721][ T3481] EXT4-fs (loop0): 1 truncate cleaned up [ 40.806804][ T3481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.825482][ T3465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.836199][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.844476][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.863659][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.874051][ T3311] veth0_macvtap: entered promiscuous mode [ 40.883741][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.898766][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.913433][ T3311] veth1_macvtap: entered promiscuous mode [ 40.932308][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.956224][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.965439][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.985386][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.008589][ T3486] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.3'. [ 41.027000][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.051631][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.070708][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.081435][ T3486] rdma_op ffff88811a4de180 conn xmit_rdma 0000000000000000 [ 41.093469][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.103556][ T3491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 41.115894][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.126128][ T3491] netlink: 'syz.1.2': attribute type 6 has an invalid length. [ 41.130179][ T3493] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 41.150490][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.161195][ T3491] netlink: 'syz.1.2': attribute type 6 has an invalid length. [ 41.209430][ C1] hrtimer: interrupt took 27301 ns [ 41.213929][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.366197][ T3496] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 41.396034][ T3500] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 41.414496][ T3508] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 41.444055][ T3510] netlink: 'syz.3.8': attribute type 10 has an invalid length. [ 41.492612][ T3496] team0: Port device dummy0 added [ 41.571111][ T3500] team0: Port device dummy0 added [ 41.587359][ T3509] lo speed is unknown, defaulting to 1000 [ 41.595482][ T3508] team0: Port device dummy0 removed [ 41.607869][ T3508] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.632435][ T3510] team0: Port device dummy0 removed [ 41.640403][ T3496] syz.2.6 (3496) used greatest stack depth: 9288 bytes left [ 41.662474][ T3510] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 41.690931][ T3509] lo speed is unknown, defaulting to 1000 [ 41.710542][ T3509] lo speed is unknown, defaulting to 1000 [ 41.724998][ T3509] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 41.759136][ T3517] nfs4: Bad value for 'source' [ 41.782286][ T3509] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.784372][ T3519] loop3: detected capacity change from 0 to 512 [ 41.800100][ T3517] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 41.819584][ T3509] lo speed is unknown, defaulting to 1000 [ 41.830044][ T3519] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.852205][ T3509] lo speed is unknown, defaulting to 1000 [ 41.865314][ T3509] lo speed is unknown, defaulting to 1000 [ 41.882627][ T3519] EXT4-fs (loop3): 1 truncate cleaned up [ 41.884574][ T3509] lo speed is unknown, defaulting to 1000 [ 41.888924][ T3519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.895521][ T3509] lo speed is unknown, defaulting to 1000 [ 41.913235][ T3509] lo speed is unknown, defaulting to 1000 [ 41.995848][ T3523] lo speed is unknown, defaulting to 1000 [ 42.020371][ T3526] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.15'. [ 42.051451][ T3527] loop2: detected capacity change from 0 to 764 [ 42.074799][ T3526] rdma_op ffff888106cabd80 conn xmit_rdma 0000000000000000 [ 42.089430][ T3512] loop0: detected capacity change from 0 to 256 [ 42.125067][ T3527] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 42.169757][ T3512] FAT-fs (loop0): bogus number of FAT sectors [ 42.173512][ T3529] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 42.177017][ T3512] FAT-fs (loop0): Can't find a valid FAT filesystem [ 42.205976][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 42.228720][ T3529] SELinux: failed to load policy [ 42.248576][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.273568][ T3523] Symlink component flag not implemented [ 42.283154][ T3523] Symlink component flag not implemented (7) [ 42.374422][ T3512] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 42.425862][ T3540] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 42.490472][ T3512] team0: Port device dummy0 added [ 42.539919][ T3546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.548785][ T3540] team0: Port device dummy0 removed [ 42.559718][ T3541] Falling back ldisc for ttyS3. [ 42.582467][ T3546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.593605][ T3540] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.605901][ T3546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 42.614869][ T3546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 42.620325][ T3549] nfs4: Bad value for 'source' [ 42.646685][ T3546] bridge0: entered promiscuous mode [ 42.654045][ T3546] ip6gretap0: entered promiscuous mode [ 42.672155][ T3551] loop3: detected capacity change from 0 to 1024 [ 42.692302][ T3553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.696200][ T3551] EXT4-fs: Ignoring removed bh option [ 42.701239][ T3553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.733030][ T3551] EXT4-fs: inline encryption not supported [ 42.744436][ T3555] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 42.752770][ T3555] SELinux: failed to load policy [ 42.764106][ T3553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24'. [ 42.773120][ T3553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.24'. [ 42.793496][ T3551] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.801248][ T3553] bridge0: entered promiscuous mode [ 42.811853][ T3553] ip6gretap0: entered promiscuous mode [ 42.818345][ T3553] debugfs: 'hsr1' already exists in 'hsr' [ 42.824269][ T3553] Cannot create hsr debugfs directory [ 42.833320][ T3551] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 42.850215][ T3551] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.23: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.864931][ T3551] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.23: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.879384][ T3551] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.23: Failed to acquire dquot type 0 [ 42.891238][ T3555] Falling back ldisc for ttyS3. [ 42.897208][ T3551] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 42.928624][ T3551] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.23: mark_inode_dirty error [ 42.945506][ T3551] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 42.957868][ T3558] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.26'. [ 42.969390][ T3551] EXT4-fs (loop3): 1 orphan inode deleted [ 42.976016][ T3558] rdma_op ffff8881011dfd80 conn xmit_rdma 0000000000000000 [ 42.984186][ T3551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.997190][ T3465] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.019961][ T3465] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 43.099703][ T3560] Falling back ldisc for ttyS3. [ 43.136936][ T3563] loop4: detected capacity change from 0 to 1024 [ 43.146485][ T3563] EXT4-fs: Ignoring removed bh option [ 43.157350][ T3563] EXT4-fs: inline encryption not supported [ 43.164626][ T3563] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.192762][ T3563] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 43.215012][ T3567] loop2: detected capacity change from 0 to 512 [ 43.230612][ T3563] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.28: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.239554][ T3567] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.261183][ T3563] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.28: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.415615][ T3570] loop0: detected capacity change from 0 to 1024 [ 43.491362][ T3563] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.28: Failed to acquire dquot type 0 [ 43.509523][ T3567] EXT4-fs (loop2): 1 truncate cleaned up [ 43.515888][ T3567] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.530952][ T3570] EXT4-fs: Ignoring removed bh option [ 43.536589][ T3570] EXT4-fs: inline encryption not supported [ 43.579802][ T3563] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 43.597522][ T3570] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.640248][ T3563] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.28: mark_inode_dirty error [ 43.659767][ T3570] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 43.678177][ T3563] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 43.693657][ T3570] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.30: lblock 2 mapped to illegal pblock 2 (length 1) [ 43.764579][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.792920][ T3570] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.30: lblock 0 mapped to illegal pblock 48 (length 1) [ 43.817065][ T3575] loop2: detected capacity change from 0 to 512 [ 43.831188][ T3563] EXT4-fs (loop4): 1 orphan inode deleted [ 43.839622][ T3563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.852673][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 43.873236][ T3575] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.899386][ T3570] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.30: Failed to acquire dquot type 0 [ 43.919850][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 43.942525][ T3575] EXT4-fs (loop2): 1 truncate cleaned up [ 43.948687][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.972176][ T3570] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 43.990037][ T3570] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.30: mark_inode_dirty error [ 44.062411][ T3570] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 44.073433][ T3570] EXT4-fs (loop0): 1 orphan inode deleted [ 44.089551][ T3580] loop1: detected capacity change from 0 to 512 [ 44.096133][ T3465] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.119772][ T3580] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.140093][ T3465] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 44.144227][ T3570] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.166206][ T3580] EXT4-fs (loop1): 1 truncate cleaned up [ 44.171273][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.172710][ T3580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.251106][ T3583] loop2: detected capacity change from 0 to 128 [ 44.372697][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.540619][ T3589] loop1: detected capacity change from 0 to 128 [ 44.643379][ T3583] syz.2.33: attempt to access beyond end of device [ 44.643379][ T3583] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 44.657022][ T3583] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 44.671032][ T3583] syz.2.33: attempt to access beyond end of device [ 44.671032][ T3583] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 44.684582][ T3583] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 44.718278][ T3591] loop1: detected capacity change from 0 to 512 [ 44.731027][ T3591] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.741837][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.761966][ T3591] EXT4-fs (loop1): 1 truncate cleaned up [ 44.768141][ T3591] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.778305][ T3315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 44.809549][ T3315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 44.831543][ T3315] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 44.891045][ T3594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 44.909712][ T3596] loop3: detected capacity change from 0 to 512 [ 44.928008][ T3596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 44.980815][ T3596] EXT4-fs (loop3): 1 truncate cleaned up [ 44.987130][ T3596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.011164][ T3598] vlan2: entered allmulticast mode [ 45.016905][ T3598] veth1: entered allmulticast mode [ 45.055510][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.138699][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.151666][ T3600] loop1: detected capacity change from 0 to 512 [ 45.170276][ T3600] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.180519][ T3311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.195070][ T3600] EXT4-fs (loop1): 1 truncate cleaned up [ 45.207887][ T3311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 45.218232][ T3311] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 45.230398][ T3600] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.248187][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.297243][ T3321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.313567][ T3603] loop4: detected capacity change from 0 to 512 [ 45.351706][ T3603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.355876][ T3321] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 45.364836][ T3603] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.389575][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.401015][ T3321] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 45.432219][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 45.432234][ T29] audit: type=1400 audit(1760853463.289:170): avc: denied { read write } for pid=3602 comm="syz.4.39" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.462412][ T3611] nfs4: Bad value for 'source' [ 45.471117][ T3611] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 45.480423][ T29] audit: type=1400 audit(1760853463.289:171): avc: denied { open } for pid=3602 comm="syz.4.39" path="/12/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.503299][ T29] audit: type=1400 audit(1760853463.289:172): avc: denied { tracepoint } for pid=3602 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.558991][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.572423][ T3609] loop2: detected capacity change from 0 to 8192 [ 45.582402][ T29] audit: type=1400 audit(1760853463.389:173): avc: denied { mounton } for pid=3602 comm="syz.4.39" path="/12/file1/file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.610730][ T3618] loop1: detected capacity change from 0 to 1024 [ 45.617496][ T3618] EXT4-fs: Ignoring removed bh option [ 45.623155][ T3618] EXT4-fs: inline encryption not supported [ 45.632558][ T3618] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.632735][ T3305] loop2: p1 p4 [ 45.650097][ T3618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 45.664317][ T3305] loop2: p1 size 196608 extends beyond EOD, truncated [ 45.686413][ T3623] loop0: detected capacity change from 0 to 512 [ 45.692651][ T3618] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.45: lblock 2 mapped to illegal pblock 2 (length 1) [ 45.714450][ T3618] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 45.714809][ T3305] loop2: p4 size 50331648 extends beyond EOD, truncated [ 45.724236][ T3618] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.45: lblock 0 mapped to illegal pblock 48 (length 1) [ 45.746805][ T3623] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.757079][ T3618] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 45.765972][ T3618] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.45: Failed to acquire dquot type 0 [ 45.780169][ T3618] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 45.795453][ T3623] EXT4-fs (loop0): 1 truncate cleaned up [ 45.802072][ T3623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.815319][ T3626] loop3: detected capacity change from 0 to 8192 [ 45.815498][ T3618] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.45: mark_inode_dirty error [ 45.822823][ T3609] loop2: p1 p4 [ 45.833296][ T3618] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 45.836546][ T3609] loop2: p1 size 196608 extends beyond EOD, truncated [ 45.854237][ T3618] EXT4-fs (loop1): 1 orphan inode deleted [ 45.859590][ T3609] loop2: p4 size 50331648 extends beyond EOD, truncated [ 45.860795][ T3618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.883788][ T3303] loop3: p1 p4 [ 45.887506][ T3303] loop3: p1 size 196608 extends beyond EOD, truncated [ 45.919493][ T58] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 45.936619][ T58] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 45.944104][ T3303] loop3: p4 size 50331648 extends beyond EOD, truncated [ 45.945376][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 45.971258][ T3626] loop3: p1 p4 [ 45.974820][ T3626] loop3: p1 size 196608 extends beyond EOD, truncated [ 45.988370][ T3626] loop3: p4 size 50331648 extends beyond EOD, truncated [ 45.988964][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.065676][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.066668][ T3630] nfs4: Bad value for 'source' [ 46.110496][ T3630] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 46.153249][ T29] audit: type=1400 audit(1760853464.009:174): avc: denied { read } for pid=3040 comm="dhcpcd" name="n28" dev="tmpfs" ino=1074 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.175181][ T29] audit: type=1400 audit(1760853464.009:175): avc: denied { open } for pid=3040 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=1074 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.198511][ T29] audit: type=1400 audit(1760853464.009:176): avc: denied { getattr } for pid=3040 comm="dhcpcd" path="/run/udev/data/n28" dev="tmpfs" ino=1074 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.309125][ T3644] loop0: detected capacity change from 0 to 1024 [ 46.320698][ T3644] EXT4-fs: Ignoring removed bh option [ 46.332751][ T3644] EXT4-fs: inline encryption not supported [ 46.343659][ T3644] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.354174][ T3641] Falling back ldisc for ttyS3. [ 46.409952][ T3644] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 46.433589][ T3644] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.52: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.458952][ T3644] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.52: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.473187][ T3656] Falling back ldisc for ttyS3. [ 46.489638][ T3644] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.52: Failed to acquire dquot type 0 [ 46.526794][ T3644] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 46.575514][ T3644] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.52: mark_inode_dirty error [ 46.589978][ T3662] Falling back ldisc for ttyS3. [ 46.610869][ T3670] loop2: detected capacity change from 0 to 128 [ 46.635399][ T3644] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 46.682435][ T3644] EXT4-fs (loop0): 1 orphan inode deleted [ 46.688562][ T3644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.701846][ T58] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.745581][ T58] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 46.789877][ T3676] Falling back ldisc for ttyS3. [ 46.853947][ T3687] nfs4: Bad value for 'source' [ 46.861573][ T3687] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 46.969781][ T3689] Falling back ldisc for ttyS3. [ 47.024774][ T3692] loop3: detected capacity change from 0 to 512 [ 47.048175][ T3692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.071880][ T3692] EXT4-fs (loop3): 1 truncate cleaned up [ 47.093488][ T3692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.106459][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.118968][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 47.143664][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 47.165254][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 47.216352][ T3670] syz.2.57: attempt to access beyond end of device [ 47.216352][ T3670] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 47.229989][ T3670] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 47.249966][ T3678] syz.2.57: attempt to access beyond end of device [ 47.249966][ T3678] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 47.263325][ T3678] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 47.329443][ T3697] __nla_validate_parse: 4 callbacks suppressed [ 47.329462][ T3697] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.63'. [ 47.349304][ T3697] rdma_op ffff88811a4ded80 conn xmit_rdma 0000000000000000 [ 47.359553][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.397165][ T3699] loop3: detected capacity change from 0 to 1024 [ 47.410090][ T3699] EXT4-fs: Ignoring removed bh option [ 47.418341][ T3699] EXT4-fs: inline encryption not supported [ 47.432210][ T3699] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.455122][ T3699] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 47.473043][ T3699] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.64: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.477455][ T3701] lo speed is unknown, defaulting to 1000 [ 47.494738][ T3699] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.64: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.513979][ T3703] loop1: detected capacity change from 0 to 764 [ 47.538971][ T3699] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.64: Failed to acquire dquot type 0 [ 47.557656][ T3699] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 47.568656][ T3703] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.588596][ T3699] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.64: mark_inode_dirty error [ 47.620371][ T3699] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 47.643460][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 47.645379][ T3699] EXT4-fs (loop3): 1 orphan inode deleted [ 47.664790][ T3699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.679736][ T3465] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.698855][ T3465] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 47.763641][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.781486][ T3701] Symlink component flag not implemented [ 47.787526][ T3701] Symlink component flag not implemented (7) [ 47.798973][ T3710] loop4: detected capacity change from 0 to 8192 [ 47.801490][ T3321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 47.849958][ T3303] loop4: p1 p4 [ 47.853583][ T3303] loop4: p1 size 196608 extends beyond EOD, truncated [ 47.860675][ T3321] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 47.870228][ T3303] loop4: p4 size 50331648 extends beyond EOD, truncated [ 47.870711][ T3321] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 47.893757][ T3710] loop4: p1 p4 [ 47.911070][ T3710] loop4: p1 size 196608 extends beyond EOD, truncated [ 47.919260][ T3710] loop4: p4 size 50331648 extends beyond EOD, truncated [ 47.979215][ T3717] loop0: detected capacity change from 0 to 1024 [ 48.003414][ T3717] EXT4-fs: Ignoring removed bh option [ 48.030140][ T3717] EXT4-fs: inline encryption not supported [ 48.037717][ T3719] loop1: detected capacity change from 0 to 512 [ 48.040383][ T3717] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.074548][ T3719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.079358][ T3717] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 48.129184][ T3719] EXT4-fs (loop1): 1 truncate cleaned up [ 48.146791][ T3717] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.68: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.165240][ T3719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.250915][ T3717] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.68: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.280103][ T3717] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.68: Failed to acquire dquot type 0 [ 48.299855][ T3717] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.319541][ T3717] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.68: mark_inode_dirty error [ 48.339767][ T3717] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 48.360521][ T3717] EXT4-fs (loop0): 1 orphan inode deleted [ 48.366968][ T3717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.379943][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 48.407170][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 48.421876][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.471058][ T3724] loop1: detected capacity change from 0 to 128 [ 48.592254][ T3730] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 48.608287][ T3731] loop2: detected capacity change from 0 to 1024 [ 48.619651][ T3730] SELinux: failed to load policy [ 48.673837][ T3731] EXT4-fs: Ignoring removed bh option [ 48.694663][ T3731] EXT4-fs: inline encryption not supported [ 48.741013][ T3724] syz.1.70: attempt to access beyond end of device [ 48.741013][ T3724] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 48.754326][ T3724] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 48.755478][ T3731] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.778019][ T3727] syz.1.70: attempt to access beyond end of device [ 48.778019][ T3727] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 48.791479][ T3727] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 48.810742][ T3731] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 48.818985][ T3727] syz.1.70: attempt to access beyond end of device [ 48.818985][ T3727] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 48.832322][ T3727] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 48.851457][ T3731] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.71: lblock 2 mapped to illegal pblock 2 (length 1) [ 48.889693][ T3731] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.71: lblock 0 mapped to illegal pblock 48 (length 1) [ 48.906921][ T3731] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.71: Failed to acquire dquot type 0 [ 48.963382][ T3731] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 48.992328][ T3742] netlink: 48 bytes leftover after parsing attributes in process `syz.1.75'. [ 48.993074][ T3731] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.71: mark_inode_dirty error [ 49.013692][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.023304][ T3743] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 49.033025][ T3743] SELinux: failed to load policy [ 49.036763][ T3731] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 49.048672][ T3321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 49.064150][ T3731] EXT4-fs (loop2): 1 orphan inode deleted [ 49.070217][ T3321] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 49.083413][ T3731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.083826][ T406] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.111630][ T406] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 49.112136][ T3321] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 49.153286][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.163807][ T3315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 49.189539][ T3743] Falling back ldisc for ttyS3. [ 49.202117][ T3751] loop1: detected capacity change from 0 to 512 [ 49.212523][ T3315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 49.222066][ T3751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.246006][ T3315] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 49.259937][ T3751] EXT4-fs (loop1): 1 truncate cleaned up [ 49.271092][ T3753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 49.280137][ T3753] netlink: 28 bytes leftover after parsing attributes in process `syz.4.81'. [ 49.282107][ T3751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.352071][ T3753] loop4: detected capacity change from 0 to 512 [ 49.372680][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.419843][ T3753] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.442889][ T3759] loop0: detected capacity change from 0 to 8192 [ 49.449507][ T3753] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.450338][ T3764] vhci_hcd: invalid port number 96 [ 49.465054][ T3764] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 49.478486][ T3753] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 49.528989][ T3764] vlan2: entered allmulticast mode [ 49.538969][ T3764] dummy0: entered allmulticast mode [ 49.544796][ T3303] loop0: p1 p4 [ 49.548489][ T3303] loop0: p1 size 196608 extends beyond EOD, truncated [ 49.556440][ T3303] loop0: p4 size 50331648 extends beyond EOD, truncated [ 49.566396][ T3759] loop0: p1 p4 [ 49.570342][ T3759] loop0: p1 size 196608 extends beyond EOD, truncated [ 49.615277][ T3759] loop0: p4 size 50331648 extends beyond EOD, truncated [ 49.640000][ T3764] Zero length message leads to an empty skb [ 49.651486][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.724018][ T3770] loop4: detected capacity change from 0 to 128 [ 49.762557][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.774073][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.785239][ T3774] process 'syz.3.88' launched './file1' with NULL argv: empty string added [ 49.884128][ T3774] loop3: detected capacity change from 0 to 8192 [ 49.950608][ T3774] loop3: p2 p3 p4 [ 49.954647][ T3774] loop3: p2 start 452985600 is beyond EOD, truncated [ 49.961406][ T3774] loop3: p3 size 33554432 extends beyond EOD, truncated [ 49.970987][ T3774] loop3: p4 start 8388607 is beyond EOD, truncated [ 50.051515][ T3779] syz.4.85: attempt to access beyond end of device [ 50.051515][ T3779] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 50.064807][ T3779] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 50.075544][ T3774] netlink: 'syz.3.88': attribute type 1 has an invalid length. [ 50.099588][ T3774] netlink: 28 bytes leftover after parsing attributes in process `syz.3.88'. [ 50.104634][ T3770] syz.4.85: attempt to access beyond end of device [ 50.104634][ T3770] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 50.121992][ T3770] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 50.133441][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.146349][ T3779] syz.4.85: attempt to access beyond end of device [ 50.146349][ T3779] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 50.159735][ T3779] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 50.168308][ T3319] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 50.194150][ T3319] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 50.204478][ T3319] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 50.236870][ T3781] loop3: detected capacity change from 0 to 1024 [ 50.258181][ T3781] EXT4-fs: Ignoring removed bh option [ 50.270319][ T3785] nfs4: Bad value for 'source' [ 50.277555][ T3787] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 50.278100][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 50.295815][ T3781] EXT4-fs: inline encryption not supported [ 50.302666][ T3789] netlink: 40 bytes leftover after parsing attributes in process `syz.0.93'. [ 50.319660][ T3787] SELinux: failed to load policy [ 50.347832][ T3781] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.376715][ T3781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 50.388044][ T3781] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.90: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.402109][ T3781] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.90: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.419064][ T3781] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.90: Failed to acquire dquot type 0 [ 50.431980][ T3787] Falling back ldisc for ttyS3. [ 50.437542][ T3781] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 50.468719][ T3781] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.90: mark_inode_dirty error [ 50.486306][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 50.486324][ T29] audit: type=1326 audit(1760853468.339:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.486386][ T3781] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 50.493263][ T29] audit: type=1326 audit(1760853468.339:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.516410][ T3781] EXT4-fs (loop3): 1 orphan inode deleted [ 50.562071][ T3465] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.601457][ T29] audit: type=1326 audit(1760853468.429:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.624631][ T29] audit: type=1326 audit(1760853468.429:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.648140][ T29] audit: type=1326 audit(1760853468.429:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.671649][ T29] audit: type=1326 audit(1760853468.429:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.695504][ T29] audit: type=1326 audit(1760853468.429:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.719628][ T29] audit: type=1326 audit(1760853468.429:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.743159][ T29] audit: type=1326 audit(1760853468.429:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.766682][ T29] audit: type=1326 audit(1760853468.429:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3795 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc720befc9 code=0x7ffc0000 [ 50.790290][ T3465] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 50.810172][ T3781] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.867804][ T3813] loop0: detected capacity change from 0 to 512 [ 50.901089][ T3818] loop4: detected capacity change from 0 to 128 [ 50.927277][ T3813] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.960317][ T3813] EXT4-fs (loop0): 1 truncate cleaned up [ 50.966381][ T3813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.044449][ T3822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.068458][ T3822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.125878][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.238176][ T3820] syz.4.102: attempt to access beyond end of device [ 51.238176][ T3820] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 51.251779][ T3820] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 51.271926][ T3818] syz.4.102: attempt to access beyond end of device [ 51.271926][ T3818] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 51.285565][ T3818] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 51.294472][ T3830] program syz.0.105 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.303264][ T3832] nfs4: Bad value for 'source' [ 51.303947][ T3830] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 51.337048][ T3834] veth2: entered promiscuous mode [ 51.342187][ T3834] veth2: entered allmulticast mode [ 51.393186][ T3838] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 51.401503][ T3838] SELinux: failed to load policy [ 51.469730][ T3838] Falling back ldisc for ttyS3. [ 51.519938][ T3840] Falling back ldisc for ttyS3. [ 51.571391][ T3861] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.112'. [ 51.587254][ T3861] rdma_op ffff888121220180 conn xmit_rdma 0000000000000000 [ 51.803015][ T3886] nfs4: Bad value for 'source' [ 51.830330][ T3884] siw: device registration error -23 [ 51.958921][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.969036][ T3315] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 51.982627][ T3315] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 52.047130][ T3315] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 52.047132][ T3898] netlink: 5452 bytes leftover after parsing attributes in process `syz.4.124'. [ 52.101851][ T3902] loop1: detected capacity change from 0 to 512 [ 52.116197][ T3902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.152266][ T3909] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 52.160913][ T3909] SELinux: failed to load policy [ 52.178519][ T3902] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.240124][ T3909] Falling back ldisc for ttyS3. [ 52.260351][ T3911] vhci_hcd: invalid port number 96 [ 52.265587][ T3911] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 52.274025][ T3913] nfs4: Bad value for 'source' [ 52.314929][ T3911] vlan2: entered allmulticast mode [ 52.329596][ T3911] dummy0: entered allmulticast mode [ 52.424901][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.494482][ T3929] loop0: detected capacity change from 0 to 8192 [ 52.521138][ T3946] __nla_validate_parse: 4 callbacks suppressed [ 52.521158][ T3946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.136'. [ 52.545410][ T3636] loop0: p1 p4 [ 52.549334][ T3636] loop0: p1 size 196608 extends beyond EOD, truncated [ 52.567288][ T3636] loop0: p4 size 50331648 extends beyond EOD, truncated [ 52.579599][ T3929] loop0: p1 p4 [ 52.583318][ T3929] loop0: p1 size 196608 extends beyond EOD, truncated [ 52.604005][ T3929] loop0: p4 size 50331648 extends beyond EOD, truncated [ 52.784702][ T3967] nfs4: Bad value for 'source' [ 52.859135][ T3947] ======================================================= [ 52.859135][ T3947] WARNING: The mand mount option has been deprecated and [ 52.859135][ T3947] and is ignored by this kernel. Remove the mand [ 52.859135][ T3947] option from the mount to silence this warning. [ 52.859135][ T3947] ======================================================= [ 52.936442][ T3947] program syz.3.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 52.989640][ T3947] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 53.055971][ T3986] loop2: detected capacity change from 0 to 764 [ 53.091530][ T3986] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.150614][ T3991] vhci_hcd: invalid port number 96 [ 53.155808][ T3991] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 53.224950][ T3994] loop4: detected capacity change from 0 to 512 [ 53.251415][ T3991] vlan2: entered allmulticast mode [ 53.256680][ T3991] dummy0: entered allmulticast mode [ 53.280775][ T3994] EXT4-fs (loop4): too many log groups per flexible block group [ 53.288639][ T3994] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 53.295493][ T3994] EXT4-fs (loop4): mount failed [ 53.349075][ T3999] netlink: 56 bytes leftover after parsing attributes in process `syz.2.150'. [ 53.531389][ T3993] mmap: syz.4.149 (3993) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.610083][ T4012] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 53.619648][ T4012] SELinux: failed to load policy [ 53.686290][ T4017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 53.695279][ T4012] Falling back ldisc for ttyS3. [ 53.748854][ T4023] loop0: detected capacity change from 0 to 512 [ 53.752820][ T4022] netlink: 52 bytes leftover after parsing attributes in process `syz.2.159'. [ 53.757209][ T4023] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.775905][ T4022] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.783322][ T4022] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.799627][ T4023] EXT4-fs (loop0): 1 truncate cleaned up [ 53.815587][ T4030] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.154'. [ 53.816392][ T4023] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.848187][ T4025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 53.857550][ T4025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.161'. [ 53.868044][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.890889][ T4025] loop3: detected capacity change from 0 to 512 [ 53.918484][ T4025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.946793][ T4025] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.960227][ T4032] vhci_hcd: invalid port number 96 [ 53.965496][ T4032] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 53.974834][ T4037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 53.983962][ T4037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.164'. [ 53.997364][ T4042] netlink: 56 bytes leftover after parsing attributes in process `syz.4.166'. [ 54.011310][ T4037] loop2: detected capacity change from 0 to 512 [ 54.058532][ T4032] vlan2: entered allmulticast mode [ 54.098616][ T4037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.127491][ T4037] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.209017][ T4055] rdma_op ffff88811a4ee580 conn xmit_rdma 0000000000000000 [ 54.221671][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.319155][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.371215][ T4060] loop1: detected capacity change from 0 to 512 [ 54.380362][ T4060] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.401808][ T4064] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 54.420603][ T4064] SELinux: failed to load policy [ 54.439273][ T4060] EXT4-fs (loop1): 1 truncate cleaned up [ 54.467766][ T4060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.473446][ T4062] netlink: 'syz.4.173': attribute type 10 has an invalid length. [ 54.501729][ T4064] Falling back ldisc for ttyS3. [ 54.532143][ T4069] netlink: 'syz.4.173': attribute type 10 has an invalid length. [ 54.541355][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.605535][ T4062] team0: Port device dummy0 added [ 54.619322][ T4072] lo speed is unknown, defaulting to 1000 [ 54.633237][ T4069] team0: Port device dummy0 removed [ 54.646071][ T4069] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 54.658225][ T4079] loop1: detected capacity change from 0 to 512 [ 54.665637][ T4079] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 54.677120][ T4079] EXT4-fs (loop1): 1 truncate cleaned up [ 54.683706][ T4079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.696622][ T4072] lo speed is unknown, defaulting to 1000 [ 54.706730][ T4072] lo speed is unknown, defaulting to 1000 [ 54.708174][ T4082] rdma_op ffff88811a4ed980 conn xmit_rdma 0000000000000000 [ 54.713501][ T4072] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 54.736668][ T4072] lo speed is unknown, defaulting to 1000 [ 54.750085][ T4078] lo speed is unknown, defaulting to 1000 [ 54.756429][ T4072] lo speed is unknown, defaulting to 1000 [ 54.768596][ T4072] lo speed is unknown, defaulting to 1000 [ 54.804458][ T4072] lo speed is unknown, defaulting to 1000 [ 54.836449][ T4072] lo speed is unknown, defaulting to 1000 [ 54.851666][ T4087] vhci_hcd: invalid port number 96 [ 54.856834][ T4087] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 54.866995][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.880140][ T4087] vlan2: entered allmulticast mode [ 54.911668][ T4094] rdma_op ffff88811a4dd980 conn xmit_rdma 0000000000000000 [ 55.032093][ T4108] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 55.051885][ T4108] SELinux: failed to load policy [ 55.078248][ T4114] loop0: detected capacity change from 0 to 128 [ 55.107207][ T4111] loop4: detected capacity change from 0 to 512 [ 55.132306][ T4111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.146399][ T4111] EXT4-fs (loop4): 1 truncate cleaned up [ 55.152826][ T4108] Falling back ldisc for ttyS3. [ 55.153302][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.396057][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.419919][ T4129] Falling back ldisc for ttyS3. [ 55.487820][ T4140] loop1: detected capacity change from 0 to 512 [ 55.497192][ T4140] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.570770][ T4140] EXT4-fs (loop1): 1 truncate cleaned up [ 55.573375][ T4118] syz.0.189: attempt to access beyond end of device [ 55.573375][ T4118] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 55.584600][ T4140] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.590042][ T4118] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 55.619792][ T4114] syz.0.189: attempt to access beyond end of device [ 55.619792][ T4114] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 55.633302][ T4114] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 55.670355][ T29] kauditd_printk_skb: 299 callbacks suppressed [ 55.670370][ T29] audit: type=1326 audit(1760853473.529:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.700440][ T29] audit: type=1326 audit(1760853473.559:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.724201][ T29] audit: type=1326 audit(1760853473.559:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.747600][ T29] audit: type=1326 audit(1760853473.559:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.770968][ T29] audit: type=1326 audit(1760853473.559:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.794378][ T29] audit: type=1326 audit(1760853473.559:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.817669][ T29] audit: type=1326 audit(1760853473.559:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.832443][ T4149] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 55.841611][ T29] audit: type=1326 audit(1760853473.559:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.841784][ T29] audit: type=1326 audit(1760853473.559:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.841832][ T29] audit: type=1326 audit(1760853473.569:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4139 comm="syz.1.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5e95efc9 code=0x7ffc0000 [ 55.930044][ T4152] netlink: 'syz.2.194': attribute type 10 has an invalid length. [ 55.993200][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.008117][ T4149] bond0: (slave dummy0): Releasing backup interface [ 56.110365][ T4162] loop0: detected capacity change from 0 to 1024 [ 56.117591][ T4162] EXT4-fs: Ignoring removed bh option [ 56.141704][ T4149] team0: Port device dummy0 added [ 56.148799][ T4162] EXT4-fs: inline encryption not supported [ 56.155343][ T4162] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.166999][ T4162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 56.176745][ T4162] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.197: lblock 2 mapped to illegal pblock 2 (length 1) [ 56.192615][ T4152] team0: Port device dummy0 removed [ 56.194545][ T4162] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.197: lblock 0 mapped to illegal pblock 48 (length 1) [ 56.201652][ T4152] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.216097][ T4162] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.197: Failed to acquire dquot type 0 [ 56.234358][ T4162] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 56.247033][ T4162] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.197: mark_inode_dirty error [ 56.249234][ T4164] team0 (unregistering): Port device team_slave_0 removed [ 56.268349][ T4164] team0 (unregistering): Port device team_slave_1 removed [ 56.275850][ T4162] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 56.289994][ T4162] EXT4-fs (loop0): 1 orphan inode deleted [ 56.379563][ T3465] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.396518][ T3465] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 56.441750][ T4172] loop4: detected capacity change from 0 to 512 [ 56.455576][ T4176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.468443][ T4176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.476595][ T4173] Falling back ldisc for ttyS3. [ 56.503188][ T4172] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.515531][ T4181] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 56.536663][ T4181] SELinux: failed to load policy [ 56.619605][ T4181] Falling back ldisc for ttyS3. [ 56.728263][ T4200] rdma_op ffff88811a4ef580 conn xmit_rdma 0000000000000000 [ 56.777871][ T4207] nfs4: Bad value for 'source' [ 56.789304][ T4207] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.866785][ T4212] netlink: 'syz.4.211': attribute type 10 has an invalid length. [ 56.915701][ T4221] netlink: 'syz.4.211': attribute type 10 has an invalid length. [ 56.934918][ T4212] bond0: (slave dummy0): Releasing backup interface [ 57.006683][ T4212] team0: Port device dummy0 added [ 57.046173][ T4221] team0: Port device dummy0 removed [ 57.055944][ T4221] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.070565][ T4231] nfs4: Bad value for 'source' [ 57.086588][ T4212] syz.4.211 (4212) used greatest stack depth: 9096 bytes left [ 57.119993][ T4234] loop3: detected capacity change from 0 to 128 [ 57.325515][ T3321] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 57.339960][ T3321] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 57.356896][ T3321] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 57.390469][ T4252] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 57.400221][ T4252] SELinux: failed to load policy [ 57.444421][ T4254] loop1: detected capacity change from 0 to 512 [ 57.475317][ T4254] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.488867][ T4252] Falling back ldisc for ttyS3. [ 57.603297][ T4234] syz.3.214: attempt to access beyond end of device [ 57.603297][ T4234] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 57.616722][ T4234] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 57.654240][ T4277] nfs4: Bad value for 'source' [ 57.704303][ T4268] loop4: detected capacity change from 0 to 8192 [ 57.707988][ T4234] syz.3.214: attempt to access beyond end of device [ 57.707988][ T4234] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 57.724092][ T4234] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 57.736637][ T4277] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.762858][ T4283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.771867][ T4283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.786934][ T4268] loop4: p1 p4 [ 57.792986][ T4268] loop4: p1 size 196608 extends beyond EOD, truncated [ 57.808651][ T4268] loop4: p4 size 50331648 extends beyond EOD, truncated [ 57.902842][ T4289] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 57.929753][ T4297] __nla_validate_parse: 14 callbacks suppressed [ 57.929774][ T4297] netlink: 36 bytes leftover after parsing attributes in process `syz.2.226'. [ 57.949944][ T4299] netlink: 'syz.0.225': attribute type 10 has an invalid length. [ 58.004342][ T4289] bond0: (slave dummy0): Releasing backup interface [ 58.020950][ T4289] team0: Port device dummy0 added [ 58.033811][ T4299] team0: Port device dummy0 removed [ 58.044653][ T4299] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.070574][ T4304] loop3: detected capacity change from 0 to 128 [ 58.077933][ T4306] nfs4: Bad value for 'source' [ 58.142358][ T4314] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 58.150816][ T4314] SELinux: failed to load policy [ 58.187588][ T4317] netlink: 5452 bytes leftover after parsing attributes in process `syz.0.233'. [ 58.198479][ T4317] rdma_op ffff888121220580 conn xmit_rdma 0000000000000000 [ 58.249775][ T4314] Falling back ldisc for ttyS3. [ 58.250169][ T4321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 58.263601][ T4321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 58.305673][ T4321] loop0: detected capacity change from 0 to 512 [ 58.352534][ T4321] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.368656][ T4328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.237'. [ 58.409083][ T4332] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 58.425754][ T4321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'. [ 58.446940][ T4321] 9pnet_fd: Insufficient options for proto=fd [ 58.454451][ T4334] loop1: detected capacity change from 0 to 128 [ 58.465200][ T4338] netlink: 'syz.2.239': attribute type 10 has an invalid length. [ 58.504398][ T4332] bond0: (slave dummy0): Releasing backup interface [ 58.514700][ T4304] syz.3.228: attempt to access beyond end of device [ 58.514700][ T4304] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 58.528340][ T4304] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 58.557157][ T4315] syz.3.228: attempt to access beyond end of device [ 58.557157][ T4315] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 58.570572][ T4315] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 58.638617][ T4332] team0: Port device dummy0 added [ 58.688301][ T4338] team0: Port device dummy0 removed [ 58.698327][ T4338] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.766419][ T4355] netlink: 5452 bytes leftover after parsing attributes in process `syz.3.245'. [ 58.792006][ T4355] rdma_op ffff888106cab980 conn xmit_rdma 0000000000000000 [ 58.806032][ T4360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.830289][ T4360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.855015][ T4367] netlink: 36 bytes leftover after parsing attributes in process `syz.3.251'. [ 58.919696][ T4334] syz.1.241: attempt to access beyond end of device [ 58.919696][ T4334] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 58.933345][ T4334] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 58.945582][ T4340] syz.1.241: attempt to access beyond end of device [ 58.945582][ T4340] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 58.959052][ T4340] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 59.041817][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.255'. [ 59.062150][ T4371] Falling back ldisc for ttyS3. [ 59.062393][ T4381] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 59.069004][ T4376] team0 (unregistering): Port device team_slave_0 removed [ 59.079879][ T4381] SELinux: failed to load policy [ 59.117813][ T4376] team0 (unregistering): Port device team_slave_1 removed [ 59.170319][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.177835][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.185358][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.192852][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.200420][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.207834][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.215322][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.222792][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.230389][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.237905][ T1045] hid-generic 000E:0008:0081.0001: unknown main item tag 0x0 [ 59.252336][ T1045] hid-generic 000E:0008:0081.0001: hidraw0: HID v0.04 Device [syz0] on syz0 [ 59.269783][ T4390] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 59.305645][ T4390] SELinux: failed to load policy [ 59.366205][ T4404] siw: device registration error -23 [ 59.380459][ T4390] Falling back ldisc for ttyS3. [ 59.403623][ T4384] loop3: detected capacity change from 0 to 512 [ 59.418973][ T4404] lo speed is unknown, defaulting to 1000 [ 59.460216][ T4384] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.480268][ T4411] vhci_hcd: invalid port number 96 [ 59.485458][ T4411] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 59.506583][ T4414] netlink: 5452 bytes leftover after parsing attributes in process `syz.1.265'. [ 59.566822][ T4411] vlan2: entered allmulticast mode [ 59.589846][ T4426] FAT-fs (loop3): FAT read failed (blocknr 1568) [ 59.602792][ T4420] syzkaller1: entered promiscuous mode [ 59.608338][ T4420] syzkaller1: entered allmulticast mode [ 59.680732][ T4414] rdma_op ffff888121230580 conn xmit_rdma 0000000000000000 [ 59.747639][ T4439] nfs4: Bad value for 'source' [ 59.799124][ T4384] lo speed is unknown, defaulting to 1000 [ 59.901678][ T4454] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 59.910210][ T4454] SELinux: failed to load policy [ 59.996482][ T4456] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.051762][ T4454] Falling back ldisc for ttyS3. [ 60.135450][ T4470] loop4: detected capacity change from 0 to 128 [ 60.209898][ T4463] rdma_op ffff88811a4ef580 conn xmit_rdma 0000000000000000 [ 60.411094][ T4500] loop1: detected capacity change from 0 to 1024 [ 60.419948][ T4500] EXT4-fs: Ignoring removed bh option [ 60.426349][ T4500] EXT4-fs: inline encryption not supported [ 60.435480][ T4500] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.477237][ T4500] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 60.502868][ T4500] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.288: lblock 2 mapped to illegal pblock 2 (length 1) [ 60.541369][ T4500] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.288: lblock 0 mapped to illegal pblock 48 (length 1) [ 60.579793][ T4514] Falling back ldisc for ttyS3. [ 60.585066][ T4500] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.288: Failed to acquire dquot type 0 [ 60.616983][ T4481] ================================================================== [ 60.625138][ T4481] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 60.633172][ T4481] [ 60.635518][ T4481] write to 0xffff888119d2eb28 of 4 bytes by task 4470 on cpu 1: [ 60.643170][ T4481] writeback_single_inode+0x150/0x3f0 [ 60.648575][ T4481] sync_inode_metadata+0x5b/0x90 [ 60.653540][ T4481] __generic_file_fsync+0xf8/0x140 [ 60.658669][ T4481] fat_file_fsync+0x49/0x100 [ 60.663284][ T4481] vfs_fsync_range+0x10d/0x130 [ 60.668074][ T4481] generic_file_write_iter+0x1b8/0x2f0 [ 60.673555][ T4481] iter_file_splice_write+0x666/0xa60 [ 60.678978][ T4481] direct_splice_actor+0x156/0x2a0 [ 60.684118][ T4481] splice_direct_to_actor+0x312/0x680 [ 60.689597][ T4481] do_splice_direct+0xda/0x150 [ 60.694386][ T4481] do_sendfile+0x380/0x650 [ 60.698827][ T4481] __x64_sys_sendfile64+0x105/0x150 [ 60.704049][ T4481] x64_sys_call+0x2bb4/0x3000 [ 60.708746][ T4481] do_syscall_64+0xd2/0x200 [ 60.713270][ T4481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.719177][ T4481] [ 60.721516][ T4481] read to 0xffff888119d2eb28 of 4 bytes by task 4481 on cpu 0: [ 60.729066][ T4481] vfs_fsync_range+0x9b/0x130 [ 60.733764][ T4481] generic_file_write_iter+0x1b8/0x2f0 [ 60.739240][ T4481] iter_file_splice_write+0x666/0xa60 [ 60.744625][ T4481] direct_splice_actor+0x156/0x2a0 [ 60.749750][ T4481] splice_direct_to_actor+0x312/0x680 [ 60.755150][ T4481] do_splice_direct+0xda/0x150 [ 60.759936][ T4481] do_sendfile+0x380/0x650 [ 60.764373][ T4481] __x64_sys_sendfile64+0x105/0x150 [ 60.769644][ T4481] x64_sys_call+0x2bb4/0x3000 [ 60.774342][ T4481] do_syscall_64+0xd2/0x200 [ 60.778861][ T4481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.784769][ T4481] [ 60.787099][ T4481] value changed: 0x00000070 -> 0x00000042 [ 60.792821][ T4481] [ 60.795162][ T4481] Reported by Kernel Concurrency Sanitizer on: [ 60.801436][ T4481] CPU: 0 UID: 0 PID: 4481 Comm: syz.4.280 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.811172][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.821279][ T4481] ================================================================== [ 60.832031][ T4500] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 60.845349][ T4500] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.288: mark_inode_dirty error [ 60.858923][ T4500] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 60.870549][ T4523] SELinux: policydb table sizes (133,14) do not match mine (8,7) [ 60.873921][ T4500] EXT4-fs (loop1): 1 orphan inode deleted [ 60.878555][ T4523] SELinux: failed to load policy [ 60.890864][ T58] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 60.917686][ T58] __quota_error: 273 callbacks suppressed [ 60.917703][ T58] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 60.932135][ T58] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 60.999654][ T4523] Falling back ldisc for ttyS3. [ 61.426258][ T3312] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 61.439314][ T3312] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 61.449039][ T3312] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error