last executing test programs: 4.251058254s ago: executing program 4 (id=710): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r2, 0x15f1, 0xff98, 0x23, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x468}}, 0x0) mount(&(0x7f0000000640)=@sr0, &(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='ocfs2_dlmfs\x00', 0x8, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180d0000209920702500000010000022ccf16c01291fff00000000bfa100000000000007010000f8ffffffb7ff000000000000b70300000000fd38850000007200000095000000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x4b, '\x00', r1, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) 3.791516321s ago: executing program 3 (id=713): r0 = epoll_create1(0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10) listen(r1, 0x0) socket(0x28, 0x5, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, 0x0, 0x0) dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000580)=ANY=[]) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000080)) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x5, 0x47f9833d}, 0x0, 0x10000, 0xfffffff9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000003c0)={0x0, 0xfff, 0x3}) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x2000000005}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 3.756525542s ago: executing program 4 (id=714): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) semop(0x0, 0x0, 0x0) creat(0x0, 0x0) r1 = gettid() r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) read$ptp(r2, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) 3.672705773s ago: executing program 3 (id=715): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpgid(r2) unshare(0x60000480) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x0) 2.937387094s ago: executing program 1 (id=720): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_secret(0x80000) fcntl$setlease(r3, 0x400, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = dup3(r2, r3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e80)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r7, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) 2.908127895s ago: executing program 0 (id=722): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.907575425s ago: executing program 1 (id=723): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03", 0x2, 0x0, &(0x7f0000000140)={0x11, 0x3, r5}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x26}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, 0x0, 0x0) 2.773299597s ago: executing program 1 (id=724): timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_pgetevents(r0, 0x3, 0x3, &(0x7f0000000440)=[{}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000dc0)="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", &(0x7f0000000a80)=""/245, &(0x7f00000005c0)="5dabacae41f5a3983daecb5c3c186c656946ec4c4d8dc03e4bf8b04c05069303a5adeef67950f519978b65dfdd68369543a7b1ceee4a527c08c50edc393d2968685c761be0e77f77fba1f7fd6e85818fc99c0a861da0eb6b463f092f886e17a0994c22ccd82f43546e13894f2fa8d1c18873479b8d7b7f0d1bcf406979c5e9dcb35ee570", &(0x7f0000000b80)="3f6388c3b9516b28a9fcbf507c730597821b47e5e377d4309ce8619b4a53d998b7625a29a355bc73ea97c9e68ae1b9297eb26a301c5c4d239b21fee40274a914172cdc2be5f361ac5ce761f8d115d51537e606cc91cbceb746f275bca6ad253276a29976413e0f78ecb4fb1ebbe9211dfcf29ba1a0cf4d270e43070aa1872f18789eb620c6841a48", 0xb, 0xffffffffffffffff, 0x4}, 0x38) fgetxattr(0xffffffffffffffff, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3}, 0x4) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0xffff, 0x0, 0x1, 0x8, 0x20002, 0xf, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x330, r5, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x308, 0x8, 0x0, 0x1, [{0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x5c, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1c1a71c8743d2f6dd9218ad21b44b472e44f1d0807ee6675c00"}]}, {0x210, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x330}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 2.772709657s ago: executing program 3 (id=725): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x7, 0x0, 0x0, 0x7, 0x2510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$SMC_PNETID_GET(r8, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 2.772280527s ago: executing program 4 (id=726): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x29, 0x1f, 0x5, 0x8, 0x2, @empty, @mcast1, 0x8000, 0x7800, 0x0, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r5 = socket(0x26, 0x1, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r6) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @remote}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x29, 0xc4, 0x0, 0xe, 0x43, @dev={0xfe, 0x80, '\x00', 0x33}, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x10, 0x9, 0xffffffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6_vti0\x00', 0x0, 0x29, 0x8, 0x6, 0x1, 0x4, @local, @private0, 0x0, 0x7800, 0x3, 0x80}}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r13, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000001180)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r0, @ANYBLOB="43469d96f716774ce4551307ddcd26a62a50969708d0981a215e5239cab4a8f25a04789f16e4ec2b31519850f3bd21920aab5cee3451d1fc092c3b058b1935c561cdba5c15f5fcdd6b5264f440796638e80a67e52c558246c39f27e1be0b18e4f7c311b1012df7fa0dd5e82bb04ea689d682075bbba5ff239880062f93f1271d50b1923ac3bb09cbc408c9d1ca5870534dc3bdf4ff592c591b4305a2cb8adcfe0691906163f77c3f21c9d356c0d193ac9efaf25be9fe5f041090dc1f7c9d309511af2e1087656e8c82fac992e560", @ANYRES32=r2, @ANYRESOCT=r7, @ANYRES32, @ANYBLOB="080003000000000008000100", @ANYRES32=r3, @ANYRESDEC=r11, @ANYRES32=r0, @ANYBLOB="140002006272696467655f736c6176655f3100001400020076657468305f746f5f7465616d00000008000300010000001400018008000100", @ANYRES32=r4, @ANYBLOB="08000300000000007800018008000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="080003000000000008000100", @ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="1400020076657468bf0000005f7465616d0000000800030000000000140002006261746164763000000000007e327c7c000000008a2cbd03b7578e423e17e59126801a44501ef0f083dfd2db1664cebd1634bb67eef55ce10d3eb3da9c686c8ca0f58993aa70f6cb3a1afa48ee0dd2bdbe84ad1910836cc9e81966f25dfc9cd2203ab47a53935d4acf9b97c0399ff1b2efb3a744339eae24659c02c005579a9bec0956882d171be0298bbdd490613995c3b5f48a20c6dfa6f2ce629f06cd8a9978837030bf4ca8"], 0x16c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2.339509844s ago: executing program 4 (id=727): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRESOCT=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) lsm_get_self_attr(0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x8b, ""/139}, &(0x7f0000000040)=0xab, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) setsockopt(r3, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x5e21, @loopback}}, 0xfffffffc, 0x0, 0x3f, 0x0, 0x30}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r5, 0x2) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020500000000000000100000000000082de243ffd6044000"/36], 0x24, 0x0) 1.945258499s ago: executing program 1 (id=729): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000001a000000cda41110bb2edc0d7ee02994c41400000000004fadaffe31", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x2, 0x0, 0x0, 0x7, 0x407bc, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000000), 0x3}, 0x445b, 0x10000, 0x7, 0x8, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x3) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x2c040000) 1.815627112s ago: executing program 3 (id=730): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) 1.427431468s ago: executing program 1 (id=731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffff8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000040), &(0x7f0000000080)=r4}, 0x20) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$nci(r5, 0x0, 0xfffffeea) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0) accept(r1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000041bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc8, &(0x7f0000000380)=""/200, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r6, 0x0, 0x0, 0x4000000, &(0x7f0000000140)={0xa, 0x4e23, 0x100, @mcast2, 0x8000}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.395757388s ago: executing program 4 (id=732): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000001010101"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x5, 0x2, 0x9) 1.054870054s ago: executing program 0 (id=734): socket$inet6_udp(0xa, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4810, &(0x7f0000000340)={[{@sysvgroups}, {@max_batch_time}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_writeback}], [{@flag='async'}]}, 0x0, 0x4ec, &(0x7f0000000c40)="$eJzs3ElvHMUeAPB/j5fEL8mzX957QBbIQEBYIOLYWQ8cCAIpFyQkEApHYztRiJOg2EhJZBGzKEgcQPkEAW5IfAJOcEGAOIC4EsERIUXIBxw4oEE10zOMPTPe4iWxfz9pnKru6q6q7q64lmkHsGEV048sYmtE/BgR3ZXozATFyj+3piaG/piaGMqiVHrht6ycbnpq4sNq0upxW/JIbyGi8E4Wu5rkO3bp8pnB0dGRC5Xo2zfGC/mes4OnRk6NnBs4evTgga4jhwcOLUs9U5mmd75xfveO4y9fe27oxLVXvv40lbeU75+emhiaeUTPInNoa9hSjOLMa1nnkUWe/U63rS6ctaefhbUrDAuWntp0uzrK7b872sqxiu549q1aImDdKZVKpU0NW2sNfrJUL8sqBwDrRKZJwwa0ve43/vRUGqlODDWOg9e3m8eiPAJK9b6Vfyp72ssj2GJPZWzUsUL5/y8iTkz+eT19ouk8BADA8vr8WETp5987Ur+j+qnsKcQ9den+na8N9UTEfyIi9R3/m/df/h9RTntvRNxXd0zqUW6eJ//irHhj/+f7rjyQuqxLrmcrqf/3ZL62NbP/V1u/6GnLY9vK9e/ITp4eHdmfX5Pe6NiU4v2Np65Nq33xzA8ftMq/WNf/S5+Uf7UvmJfj1/ZZE3TDg+ODt1vvqptvli/slcb6Z9GeVUMROyJi5xLOn67Z6cc+2d1qf63+bXH9RKpnQ/3fb33y9iUUaJbSRxGPVu7/ZMyqf9KZh/rGz77WN3bp8hOn69cn+48cHjjUtzlGR/b3VZ+KRt98d/X5PNgwjJj//q+sdP//1fT5r61c9mT167Vji8/j6o13W45plvr8d2YvlsOd+baLg+PjF/ojOrPJxu0D/xx7cbBrRvpU/969zdv/9oi/qovbuyIiPcT3R8QDEbEnL/uDEfFQROydo/5fPf3wq62GkHfC/R9e1P1vFXjq24jmu9rOfPlZQ8bvFRdY/3T/D5ZDvfmW4cHx+X6txFwlrQ/c9gUEAACAu8CeiNgaWWFfPse5NQqFffsittRmUMbGHz95/vVzw5V3BHqio1Cd6equmw/tz+eGUzwdNVAXT/sPlOeNS6VSqSvF0/h9dNvaVh02vC0t2n/yi+/9w/q3qHW0Vm+0AXelpa+jL/8XMoDVtQzfowHuUto/bFwLbv8r9RYcsGaatf8rEbfWoCjAKmvW/l9ag3IAq8/4HzYu7R82Lu0fNqQFvSS/hMD247O31OWVta9Mpq0DhZj7rwD0RFS3VL/gOPcJfypELE8J25a1pl0z7mmhaZrNsRx5RWHeNO2L+EMMqxso3BnFqAQ2RcQ8T2/tYbtSDVxe6YKVG8HHa/u/EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO37OwAA//8GPdEz") open(0x0, 0x64842, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0) 1.037515704s ago: executing program 2 (id=736): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) msgget$private(0x0, 0x9d) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000400, &(0x7f0000000400)={[{@resgid}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x800, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) eventfd2(0x9, 0x100001) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) request_key(&(0x7f0000000240)='asymmetric\x00', 0x0, &(0x7f0000000740)='logon\x00', 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) link(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) 966.243865ms ago: executing program 2 (id=737): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r3 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs/../file0\x00', 0x84800, 0x24) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) listen(r4, 0x3) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) recvfrom$inet6(r4, &(0x7f0000000140)=""/4, 0x4, 0x1, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 965.235925ms ago: executing program 2 (id=738): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, 0x0) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) getdents64(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 964.456175ms ago: executing program 3 (id=739): socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) creat(0x0, 0x5c351178c085b978) bpf$PROG_LOAD(0x5, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) openat$ptp0(0xffffffffffffff9c, 0x0, 0x60442, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 935.866056ms ago: executing program 2 (id=740): timerfd_create(0x0, 0x0) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0xf2cccc7fae7881b8, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/179) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000002c0004802800018008000100666962001c00028008000240000000020800014000000014080003400000000a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000aab2e1a0de054"], 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, 0x0, 0x38) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/245, 0xf5}, {&(0x7f00000007c0)=""/31, 0x1f}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000880)=""/126, 0x7e}, {&(0x7f0000000900)=""/122, 0x7a}, {0x0}, {&(0x7f0000000ac0)=""/57, 0x39}, {&(0x7f0000000c00)=""/136, 0x88}], 0x9) sendmmsg$inet(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 927.066276ms ago: executing program 0 (id=741): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x2, 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0xb}}, @TCA_CT_MARK={0x8, 0x10, 0xfffffffc}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x10000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="8b3320000000000200001500000008000300", @ANYRES32=0x0, @ANYBLOB="2400fc001400d88f36ed3c8b59000000060005003b00"/36], 0x40}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 910.093906ms ago: executing program 2 (id=742): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpgid(r2) unshare(0x60000480) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x701}, 0x14}}, 0x0) 895.640256ms ago: executing program 0 (id=743): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x6}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) accept4(r1, &(0x7f0000000040)=@un=@abs, &(0x7f0000000180)=0x80, 0x1c0000) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1}, @in={0x2, 0x0, @remote}], 0x2c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r3 = gettid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x502) syz_pidfd_open(0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r4, 0x0, 0xeffd) 876.781326ms ago: executing program 0 (id=744): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="17e2000000000000000000000000000218110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x42, 0xfffffffffffffffc}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000001980)=[{0x10}, {0x10, 0x84, 0x8}], 0x20}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r6, 0x0, 0x9, 0xc) splice(r5, 0x0, r9, 0x0, 0x80, 0x7) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0xcc, &(0x7f0000000700)}, &(0x7f0000000040)="ff33501ef663", 0x0, 0x800804, 0x10032, 0x1000, 0x0}) 418.697643ms ago: executing program 1 (id=745): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0) r3 = accept(r1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 417.853523ms ago: executing program 3 (id=746): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sys_enter\x00'}, 0x18) rename(0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000efcf2d975b3b6b0a0a952b2f8b4f6b740a88dde1afcba911ee00080000c90001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640), 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x40020000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') 513.99µs ago: executing program 0 (id=748): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000580)='./file1\x00', 0x1000840, &(0x7f00000005c0)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,nfs,iocharset=cp936,shortname=lower,rodir,nocase,codepage=860,shortname=lower,shortname=lower,shortname=win95,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c73686f72746e616d653d77696e39352c756e695f786c6174653d302c0061a98eed20cb46078e5a4a40eed4c77e7462b84482aa7061236bf6bf5f48d7580feb45e35df449cbc10bccc2d8eb7a405ecd33c7efe0552ac1485c1dc47fec07062af9772ce17f7fed7c51b26811fd16e28ca3f29cfad88fc4c5504243392e01cbdde7b5c763979598f95f09b95d2c45628665902b30ddfbf9bbd38185eabec1312bac0ff85a1ffbe2a612f453253bf5fcac7dd1e683bf671e2c5362e5a7"], 0x43, 0x357, &(0x7f0000000140)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() creat(&(0x7f00000004c0)='./file1\x00', 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 0s ago: executing program 2 (id=749): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f0000000480)=ANY=[], 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) kernel console output (not intermixed with test programs): rocess permissive=1 [ 25.152552][ T29] audit: type=1400 audit(1751252306.262:61): avc: denied { siginh } for pid=3267 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.150' (ED25519) to the list of known hosts. [ 33.675572][ T29] audit: type=1400 audit(1751252314.872:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.676750][ T3294] cgroup: Unknown subsys name 'net' [ 33.698361][ T29] audit: type=1400 audit(1751252314.872:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.725788][ T29] audit: type=1400 audit(1751252314.902:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.821693][ T3294] cgroup: Unknown subsys name 'cpuset' [ 33.828024][ T3294] cgroup: Unknown subsys name 'rlimit' [ 33.950742][ T29] audit: type=1400 audit(1751252315.152:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.974094][ T29] audit: type=1400 audit(1751252315.152:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.989452][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.994555][ T29] audit: type=1400 audit(1751252315.152:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.023643][ T29] audit: type=1400 audit(1751252315.152:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.024476][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.044020][ T29] audit: type=1400 audit(1751252315.152:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.077636][ T29] audit: type=1400 audit(1751252315.152:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.101447][ T29] audit: type=1400 audit(1751252315.202:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.214072][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.244471][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.317120][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.324265][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.331492][ T3304] bridge_slave_0: entered allmulticast mode [ 35.337967][ T3304] bridge_slave_0: entered promiscuous mode [ 35.344562][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.353407][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.360479][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.367644][ T3304] bridge_slave_1: entered allmulticast mode [ 35.374124][ T3304] bridge_slave_1: entered promiscuous mode [ 35.416481][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.426890][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.444134][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.451329][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.458645][ T3306] bridge_slave_0: entered allmulticast mode [ 35.465091][ T3306] bridge_slave_0: entered promiscuous mode [ 35.476622][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.483782][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.491269][ T3306] bridge_slave_1: entered allmulticast mode [ 35.497768][ T3306] bridge_slave_1: entered promiscuous mode [ 35.538222][ T3304] team0: Port device team_slave_0 added [ 35.546717][ T3304] team0: Port device team_slave_1 added [ 35.569584][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.579615][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.608470][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.615491][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.641471][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.653461][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.674357][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.681484][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.688718][ T3314] bridge_slave_0: entered allmulticast mode [ 35.695412][ T3314] bridge_slave_0: entered promiscuous mode [ 35.706350][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.713390][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.739524][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.750342][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.760156][ T3306] team0: Port device team_slave_0 added [ 35.765966][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.773117][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.780441][ T3314] bridge_slave_1: entered allmulticast mode [ 35.786769][ T3314] bridge_slave_1: entered promiscuous mode [ 35.808673][ T3306] team0: Port device team_slave_1 added [ 35.845727][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.852769][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.878876][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.890905][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.912684][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.919746][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.945858][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.957736][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.988122][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.995487][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.002835][ T3313] bridge_slave_0: entered allmulticast mode [ 36.009301][ T3313] bridge_slave_0: entered promiscuous mode [ 36.020661][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.027792][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.035088][ T3310] bridge_slave_0: entered allmulticast mode [ 36.041619][ T3310] bridge_slave_0: entered promiscuous mode [ 36.050213][ T3304] hsr_slave_0: entered promiscuous mode [ 36.056299][ T3304] hsr_slave_1: entered promiscuous mode [ 36.063774][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.070984][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.078114][ T3313] bridge_slave_1: entered allmulticast mode [ 36.084635][ T3313] bridge_slave_1: entered promiscuous mode [ 36.100710][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.107832][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.115104][ T3310] bridge_slave_1: entered allmulticast mode [ 36.121587][ T3310] bridge_slave_1: entered promiscuous mode [ 36.145017][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.154885][ T3314] team0: Port device team_slave_0 added [ 36.182134][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.191806][ T3314] team0: Port device team_slave_1 added [ 36.204588][ T3306] hsr_slave_0: entered promiscuous mode [ 36.210488][ T3306] hsr_slave_1: entered promiscuous mode [ 36.216383][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.224096][ T3306] Cannot create hsr debugfs directory [ 36.230832][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.259069][ T3313] team0: Port device team_slave_0 added [ 36.266152][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.292383][ T3313] team0: Port device team_slave_1 added [ 36.311755][ T3310] team0: Port device team_slave_0 added [ 36.317697][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.324696][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.350737][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.375158][ T3310] team0: Port device team_slave_1 added [ 36.386152][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.393206][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.419274][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.437371][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.444447][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.470552][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.481824][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.488798][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.514871][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.541928][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.548890][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.574980][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.612796][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.619823][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.645866][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.670765][ T3314] hsr_slave_0: entered promiscuous mode [ 36.676752][ T3314] hsr_slave_1: entered promiscuous mode [ 36.682824][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.690387][ T3314] Cannot create hsr debugfs directory [ 36.718727][ T3313] hsr_slave_0: entered promiscuous mode [ 36.724876][ T3313] hsr_slave_1: entered promiscuous mode [ 36.730927][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.738500][ T3313] Cannot create hsr debugfs directory [ 36.785672][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.796780][ T3310] hsr_slave_0: entered promiscuous mode [ 36.802808][ T3310] hsr_slave_1: entered promiscuous mode [ 36.808619][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.816245][ T3310] Cannot create hsr debugfs directory [ 36.830298][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.854640][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.872375][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.947198][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.958528][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.974724][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.983874][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.023864][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.033118][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.042201][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.051970][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.100677][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.117181][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.124942][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.134517][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.143364][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.188351][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.202146][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.210356][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.222175][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.229458][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.238401][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.245479][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.260388][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.269786][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.288847][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.301686][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.323508][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.330648][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.343828][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.361326][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.368452][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.377597][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.397817][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.410019][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.417146][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.448568][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.462230][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.469370][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.488938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.496035][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.513362][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.520423][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.544159][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.569550][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.584263][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.602213][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.620689][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.627790][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.682880][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.690014][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.719929][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.736680][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.774544][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.855513][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.869948][ T3304] veth0_vlan: entered promiscuous mode [ 37.886236][ T3304] veth1_vlan: entered promiscuous mode [ 37.926849][ T3304] veth0_macvtap: entered promiscuous mode [ 37.948249][ T3313] veth0_vlan: entered promiscuous mode [ 37.961256][ T3304] veth1_macvtap: entered promiscuous mode [ 37.979065][ T3313] veth1_vlan: entered promiscuous mode [ 37.986633][ T3306] veth0_vlan: entered promiscuous mode [ 37.992912][ T3314] veth0_vlan: entered promiscuous mode [ 38.005516][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.014530][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.023308][ T3306] veth1_vlan: entered promiscuous mode [ 38.030728][ T3314] veth1_vlan: entered promiscuous mode [ 38.043484][ T3304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.052319][ T3304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.061095][ T3304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.069870][ T3304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.108629][ T3314] veth0_macvtap: entered promiscuous mode [ 38.116272][ T3313] veth0_macvtap: entered promiscuous mode [ 38.130204][ T3313] veth1_macvtap: entered promiscuous mode [ 38.149306][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.157244][ T3314] veth1_macvtap: entered promiscuous mode [ 38.176747][ T3306] veth0_macvtap: entered promiscuous mode [ 38.187674][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.203496][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.212330][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.221130][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.229863][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.241806][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.250932][ T3310] veth0_vlan: entered promiscuous mode [ 38.263555][ T3306] veth1_macvtap: entered promiscuous mode [ 38.273929][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.289387][ T3310] veth1_vlan: entered promiscuous mode [ 38.299661][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.316040][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.330434][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.339258][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.348063][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.356938][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.381111][ T3310] veth0_macvtap: entered promiscuous mode [ 38.388508][ T3310] veth1_macvtap: entered promiscuous mode [ 38.398721][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.432932][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.451483][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.460331][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.469203][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.478119][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.499270][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.544246][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.553143][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.561957][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.570804][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.860692][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 38.860710][ T29] audit: type=1400 audit(1751252320.032:109): avc: denied { create } for pid=3482 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.886151][ T29] audit: type=1400 audit(1751252320.042:110): avc: denied { getopt } for pid=3482 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.905338][ T29] audit: type=1400 audit(1751252320.052:111): avc: denied { create } for pid=3509 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.924594][ T29] audit: type=1400 audit(1751252320.052:112): avc: denied { ioctl } for pid=3509 comm="syz.4.13" path="socket:[5234]" dev="sockfs" ino=5234 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.948822][ T29] audit: type=1400 audit(1751252320.052:113): avc: denied { bind } for pid=3509 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.986404][ T29] audit: type=1400 audit(1751252320.182:114): avc: denied { setopt } for pid=3509 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.007474][ T3511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 39.048236][ T29] audit: type=1400 audit(1751252320.202:115): avc: denied { write } for pid=3509 comm="syz.4.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.149667][ T29] audit: type=1400 audit(1751252320.332:116): avc: denied { setopt } for pid=3510 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.169044][ T29] audit: type=1400 audit(1751252320.332:117): avc: denied { connect } for pid=3510 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.246693][ T29] audit: type=1400 audit(1751252320.442:118): avc: denied { create } for pid=3513 comm="syz.3.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.520314][ T3518] loop2: detected capacity change from 0 to 8192 [ 39.557444][ T3524] loop0: detected capacity change from 0 to 512 [ 39.568975][ T3524] EXT4-fs: Ignoring removed i_version option [ 39.575182][ T3524] EXT4-fs: Ignoring removed nobh option [ 39.604854][ T3524] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.618028][ T3524] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.650904][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.657560][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.664277][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.670939][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.677971][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.689262][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.696021][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.702871][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.704779][ T3524] EXT4-fs (loop0): 1 truncate cleaned up [ 39.709354][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.722159][ C0] IPv4: Oversized IP packet from 172.20.20.170 [ 39.733924][ T3524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.808313][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.874089][ T3537] macvlan1: entered promiscuous mode [ 39.880673][ T3537] ipvlan0: entered promiscuous mode [ 39.893373][ T3537] ipvlan0: left promiscuous mode [ 39.898509][ T3537] macvlan1: left promiscuous mode [ 40.033262][ T3558] netlink: 168 bytes leftover after parsing attributes in process `syz.3.34'. [ 40.114017][ T3565] netlink: 'syz.3.37': attribute type 13 has an invalid length. [ 40.154545][ T3567] bridge: RTM_NEWNEIGH with invalid ether address [ 40.230544][ T3569] loop3: detected capacity change from 0 to 1024 [ 40.238118][ T3569] EXT4-fs: Ignoring removed orlov option [ 40.257912][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.342908][ T3578] loop2: detected capacity change from 0 to 512 [ 40.359593][ T3578] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.42: Parent and EA inode have the same ino 15 [ 40.376929][ T3578] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.390476][ T3578] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.42: Parent and EA inode have the same ino 15 [ 40.416402][ T3578] EXT4-fs (loop2): 1 orphan inode deleted [ 40.423855][ T3578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.463610][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.546446][ T3585] bridge: RTM_NEWNEIGH with invalid ether address [ 40.619801][ T3593] loop2: detected capacity change from 0 to 128 [ 40.629849][ T3593] EXT4-fs: Ignoring removed nobh option [ 40.640420][ T3593] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.656646][ T3593] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.687051][ T3313] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.702150][ T3599] netlink: 'syz.4.50': attribute type 13 has an invalid length. [ 40.763938][ T3601] loop2: detected capacity change from 0 to 2048 [ 40.816703][ T3601] Alternate GPT is invalid, using primary GPT. [ 40.823162][ T3601] loop2: p2 p3 p7 [ 41.028638][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 41.051845][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 41.062860][ T3609] udevd[3609]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 41.144570][ T3626] netlink: 532 bytes leftover after parsing attributes in process `syz.4.70'. [ 41.168192][ T3623] netlink: 168 bytes leftover after parsing attributes in process `syz.2.61'. [ 41.199362][ T3629] bridge: RTM_NEWNEIGH with invalid ether address [ 41.211061][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.240071][ T3632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.65'. [ 41.260083][ T3632] netlink: 32 bytes leftover after parsing attributes in process `syz.0.65'. [ 41.277372][ T3633] netlink: 96 bytes leftover after parsing attributes in process `syz.2.63'. [ 41.293211][ T3637] bridge: RTM_NEWNEIGH with invalid ether address [ 41.375605][ T3642] bridge: RTM_NEWNEIGH with invalid ether address [ 41.537167][ T3657] loop4: detected capacity change from 0 to 512 [ 41.607575][ T3657] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.74: Parent and EA inode have the same ino 15 [ 41.625746][ T3663] loop2: detected capacity change from 0 to 1024 [ 41.672480][ T3663] EXT4-fs: Ignoring removed orlov option [ 41.685912][ T3657] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.74: Parent and EA inode have the same ino 15 [ 41.728877][ T3663] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.743183][ T3657] EXT4-fs (loop4): 1 orphan inode deleted [ 41.762296][ T3657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.864824][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.932320][ T3671] loop1: detected capacity change from 0 to 128 [ 41.965042][ T3671] EXT4-fs: Ignoring removed nobh option [ 41.989725][ T3675] loop4: detected capacity change from 0 to 1024 [ 42.001069][ T3671] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.013772][ T3671] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 42.036059][ T3675] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 42.059069][ T3675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.062545][ T3659] syz.3.86 (3659) used greatest stack depth: 10776 bytes left [ 42.105544][ T3675] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.81: missing EA_INODE flag [ 42.141163][ T3675] EXT4-fs (loop4): Remounting filesystem read-only [ 42.219393][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.562289][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.640006][ T3702] loop4: detected capacity change from 0 to 1024 [ 42.659557][ T3702] ======================================================= [ 42.659557][ T3702] WARNING: The mand mount option has been deprecated and [ 42.659557][ T3702] and is ignored by this kernel. Remove the mand [ 42.659557][ T3702] option from the mount to silence this warning. [ 42.659557][ T3702] ======================================================= [ 42.715807][ T3705] loop2: detected capacity change from 0 to 128 [ 42.739955][ T3702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.994702][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.096992][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.291670][ T3714] netlink: 96 bytes leftover after parsing attributes in process `syz.4.96'. [ 43.492197][ T3794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.107'. [ 43.617333][ T3801] syz.0.110 uses obsolete (PF_INET,SOCK_PACKET) [ 43.878322][ T3810] loop0: detected capacity change from 0 to 1024 [ 43.892030][ T3812] loop2: detected capacity change from 0 to 512 [ 43.908465][ T3812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.947274][ T3810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.964678][ T3812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.980944][ T3810] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.993487][ T3812] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.027396][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 44.027409][ T29] audit: type=1400 audit(1751252325.222:358): avc: denied { write } for pid=3809 comm="syz.0.113" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.056989][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.066573][ T3810] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.113: bg 0: block 393: padding at end of block bitmap is not set [ 44.083230][ T3810] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 44.095999][ T3810] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.095999][ T3810] [ 44.109450][ T3810] syz.0.113 (3810) used greatest stack depth: 9600 bytes left [ 44.130348][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.224902][ T29] audit: type=1400 audit(1751252325.402:359): avc: denied { setopt } for pid=3825 comm="syz.2.116" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.245311][ T29] audit: type=1326 audit(1751252325.402:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e0c1958e7 code=0x7ffc0000 [ 44.268630][ T29] audit: type=1326 audit(1751252325.402:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e0c13ab19 code=0x7ffc0000 [ 44.291910][ T29] audit: type=1326 audit(1751252325.402:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6e0c1958e7 code=0x7ffc0000 [ 44.315178][ T29] audit: type=1326 audit(1751252325.402:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6e0c13ab19 code=0x7ffc0000 [ 44.338474][ T29] audit: type=1326 audit(1751252325.402:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 44.361864][ T29] audit: type=1326 audit(1751252325.402:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 44.385285][ T29] audit: type=1326 audit(1751252325.412:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 44.408725][ T29] audit: type=1326 audit(1751252325.412:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3825 comm="syz.2.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 44.746900][ T3836] netlink: 96 bytes leftover after parsing attributes in process `syz.1.119'. [ 45.165870][ T3853] syzkaller0: entered promiscuous mode [ 45.171827][ T3853] syzkaller0: entered allmulticast mode [ 45.189642][ T3782] syzkaller0: tun_net_xmit 48 [ 45.195776][ C0] hrtimer: interrupt took 30368 ns [ 45.352707][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 45.361868][ T3889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.134'. [ 45.505024][ T3909] Zero length message leads to an empty skb [ 45.907054][ T3926] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.016453][ T3928] loop4: detected capacity change from 0 to 8192 [ 46.039345][ T3929] syzkaller0: entered promiscuous mode [ 46.044938][ T3929] syzkaller0: entered allmulticast mode [ 46.111170][ T3782] syzkaller0: tun_net_xmit 48 [ 46.193242][ T3929] syzkaller0: tun_net_xmit 1280 [ 46.198255][ T3929] syzkaller0: create flow: hash 262713644 index 1 [ 46.277576][ T3939] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.151' sets config #0 [ 46.288337][ T3939] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.151' sets config #1 [ 46.424208][ T3921] syzkaller0: delete flow: hash 262713644 index 1 [ 46.580770][ T3963] netlink: 96 bytes leftover after parsing attributes in process `syz.4.161'. [ 46.600219][ T3961] loop0: detected capacity change from 0 to 512 [ 46.653927][ T3969] loop1: detected capacity change from 0 to 1024 [ 46.661863][ T3971] xt_hashlimit: max too large, truncated to 1048576 [ 46.670775][ T3969] EXT4-fs: Ignoring removed orlov option [ 46.694688][ T3972] loop4: detected capacity change from 0 to 1024 [ 46.703326][ T3972] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 46.714332][ T3972] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 46.730368][ T3972] JBD2: no valid journal superblock found [ 46.736213][ T3972] EXT4-fs (loop4): Could not load journal inode [ 46.746239][ T3969] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.796473][ T3961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.833141][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.860266][ T3961] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.931425][ T3961] syz.0.159 (3961) used greatest stack depth: 9416 bytes left [ 46.941547][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.968913][ T3988] loop4: detected capacity change from 0 to 2048 [ 46.994762][ T3991] loop0: detected capacity change from 0 to 512 [ 47.013300][ T3988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.029075][ T3991] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.060138][ T3991] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.180: bad orphan inode 131083 [ 47.107460][ T3310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 47.131209][ T3991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.147121][ T3998] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.171'. [ 47.159025][ T3310] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 47.183577][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.197097][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.200771][ T3998] net_ratelimit: 24 callbacks suppressed [ 47.200788][ T3998] netlink: zone id is out of range [ 47.217277][ T3998] netlink: zone id is out of range [ 47.231918][ T3998] netlink: zone id is out of range [ 47.241911][ T3998] netlink: zone id is out of range [ 47.298764][ T3998] netlink: del zone limit has 8 unknown bytes [ 47.346223][ T4006] netlink: 96 bytes leftover after parsing attributes in process `syz.2.174'. [ 47.698832][ T4023] loop3: detected capacity change from 0 to 2048 [ 47.712293][ T4023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.775324][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.811251][ T4032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 47.875127][ T4033] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 47.882925][ T4033] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 47.917064][ T4037] loop1: detected capacity change from 0 to 256 [ 48.053155][ T4050] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.065381][ T4050] 8021q: VLANs not supported on ip6gre0 [ 48.127676][ T4052] loop0: detected capacity change from 0 to 4096 [ 48.254467][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'. [ 48.284403][ T4070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.201'. [ 48.413322][ T4086] loop3: detected capacity change from 0 to 2048 [ 48.421602][ T4086] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.453469][ T4086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.506119][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.876176][ T4113] pim6reg: entered allmulticast mode [ 48.885318][ T4113] pim6reg: left allmulticast mode [ 48.896551][ T4115] loop0: detected capacity change from 0 to 256 [ 48.944652][ T4117] IPv4: Oversized IP packet from 127.202.26.0 [ 49.168886][ T4129] netlink: 'syz.3.226': attribute type 12 has an invalid length. [ 49.303016][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 49.303034][ T29] audit: type=1400 audit(1751252330.502:457): avc: denied { read } for pid=4133 comm="syz.4.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.348349][ T4139] loop3: detected capacity change from 0 to 512 [ 49.459203][ T4139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.490748][ T4139] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.569128][ T29] audit: type=1400 audit(1751252330.762:458): avc: denied { setattr } for pid=4138 comm="syz.3.231" path="/54/bus/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.584258][ T4153] netlink: 'syz.1.235': attribute type 1 has an invalid length. [ 49.651445][ T29] audit: type=1400 audit(1751252330.852:459): avc: denied { ioctl } for pid=4138 comm="syz.3.231" path="/54/bus/file1" dev="loop3" ino=15 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.687227][ T4153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.823364][ T4158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.858749][ T4158] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 49.880889][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.902046][ T4158] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 49.902563][ T4161] process 'syz.0.237' launched '/dev/fd/6' with NULL argv: empty string added [ 49.918240][ T29] audit: type=1400 audit(1751252331.102:460): avc: denied { execute } for pid=4160 comm="syz.0.237" dev="tmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.956853][ T29] audit: type=1400 audit(1751252331.142:461): avc: denied { execute_no_trans } for pid=4160 comm="syz.0.237" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 49.986474][ T29] audit: type=1400 audit(1751252331.152:462): avc: denied { append } for pid=4162 comm="syz.3.238" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 50.019523][ T29] audit: type=1400 audit(1751252331.212:463): avc: denied { read } for pid=4166 comm="syz.0.240" path="socket:[5045]" dev="sockfs" ino=5045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.067919][ T29] audit: type=1326 audit(1751252331.262:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 50.091347][ T29] audit: type=1326 audit(1751252331.262:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 50.114716][ T29] audit: type=1326 audit(1751252331.262:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4170 comm="syz.1.241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 50.207623][ T4182] bridge: RTM_NEWNEIGH with invalid ether address [ 50.317898][ T4202] loop4: detected capacity change from 0 to 2048 [ 50.362188][ T4202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.439287][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.459773][ T4221] syz.1.261 (4221) used greatest stack depth: 9280 bytes left [ 50.504577][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.262'. [ 50.525197][ T4225] hsr_slave_0 (unregistering): left promiscuous mode [ 50.830758][ T4252] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 51.004309][ T4265] IPv4: Oversized IP packet from 127.202.26.0 [ 51.131729][ T4274] tipc: Started in network mode [ 51.136646][ T4274] tipc: Node identity 5e9ddda72401, cluster identity 4711 [ 51.144104][ T4274] tipc: Enabled bearer , priority 0 [ 51.160711][ T4274] tipc: Disabling bearer [ 51.258493][ T4290] netlink: 72 bytes leftover after parsing attributes in process `syz.1.291'. [ 51.460231][ T4318] loop3: detected capacity change from 0 to 512 [ 51.493343][ T4318] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.532639][ T4318] EXT4-fs (loop3): 1 truncate cleaned up [ 51.538924][ T4318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.600427][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.384135][ T4361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.321'. [ 52.455173][ T4367] loop4: detected capacity change from 0 to 512 [ 52.517767][ T4367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.565027][ T4367] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.633771][ T4375] syz.3.327: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 52.648363][ T4375] CPU: 0 UID: 0 PID: 4375 Comm: syz.3.327 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 52.648438][ T4375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.648454][ T4375] Call Trace: [ 52.648462][ T4375] [ 52.648469][ T4375] __dump_stack+0x1d/0x30 [ 52.648490][ T4375] dump_stack_lvl+0xe8/0x140 [ 52.648510][ T4375] dump_stack+0x15/0x1b [ 52.648623][ T4375] warn_alloc+0x12b/0x1a0 [ 52.648699][ T4375] __vmalloc_node_range_noprof+0x9c/0xe00 [ 52.648731][ T4375] ? __futex_wait+0x1ff/0x260 [ 52.648863][ T4375] ? __pfx_futex_wake_mark+0x10/0x10 [ 52.648898][ T4375] ? __rcu_read_unlock+0x4f/0x70 [ 52.648926][ T4375] ? avc_has_perm_noaudit+0x1b1/0x200 [ 52.648961][ T4375] ? should_fail_ex+0x30/0x280 [ 52.649030][ T4375] ? xskq_create+0x36/0xe0 [ 52.649070][ T4375] vmalloc_user_noprof+0x7d/0xb0 [ 52.649168][ T4375] ? xskq_create+0x80/0xe0 [ 52.649197][ T4375] xskq_create+0x80/0xe0 [ 52.649227][ T4375] xsk_init_queue+0x95/0xf0 [ 52.649293][ T4375] xsk_setsockopt+0x35c/0x510 [ 52.649344][ T4375] ? __pfx_xsk_setsockopt+0x10/0x10 [ 52.649371][ T4375] __sys_setsockopt+0x181/0x200 [ 52.649415][ T4375] __x64_sys_setsockopt+0x64/0x80 [ 52.649449][ T4375] x64_sys_call+0x2bd5/0x2fb0 [ 52.649544][ T4375] do_syscall_64+0xd2/0x200 [ 52.649568][ T4375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.649625][ T4375] ? clear_bhb_loop+0x40/0x90 [ 52.649650][ T4375] ? clear_bhb_loop+0x40/0x90 [ 52.649679][ T4375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.649732][ T4375] RIP: 0033:0x7fc2441ae929 [ 52.649757][ T4375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.649780][ T4375] RSP: 002b:00007fc242817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.649804][ T4375] RAX: ffffffffffffffda RBX: 00007fc2443d5fa0 RCX: 00007fc2441ae929 [ 52.649820][ T4375] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 52.649835][ T4375] RBP: 00007fc244230b39 R08: 0000000000000004 R09: 0000000000000000 [ 52.649891][ T4375] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.649906][ T4375] R13: 0000000000000000 R14: 00007fc2443d5fa0 R15: 00007ffedd47dd18 [ 52.649926][ T4375] [ 52.649937][ T4375] Mem-Info: [ 52.879094][ T4375] active_anon:24314 inactive_anon:3 isolated_anon:0 [ 52.879094][ T4375] active_file:14866 inactive_file:2200 isolated_file:0 [ 52.879094][ T4375] unevictable:0 dirty:138 writeback:0 [ 52.879094][ T4375] slab_reclaimable:2958 slab_unreclaimable:36944 [ 52.879094][ T4375] mapped:38076 shmem:17361 pagetables:1164 [ 52.879094][ T4375] sec_pagetables:0 bounce:0 [ 52.879094][ T4375] kernel_misc_reclaimable:0 [ 52.879094][ T4375] free:1854803 free_pcp:4950 free_cma:0 [ 52.924640][ T4375] Node 0 active_anon:95864kB inactive_anon:12kB active_file:59464kB inactive_file:8800kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:152304kB dirty:552kB writeback:0kB shmem:68168kB writeback_tmp:0kB kernel_stack:4384kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 52.953653][ T4375] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 52.982318][ T4375] lowmem_reserve[]: 0 2882 7860 7860 [ 52.987760][ T4375] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 53.018089][ T4375] lowmem_reserve[]: 0 0 4978 4978 [ 53.023223][ T4375] Node 0 Normal free:4456024kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:98996kB inactive_anon:12kB active_file:59464kB inactive_file:8800kB unevictable:0kB writepending:552kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:14108kB local_pcp:4752kB free_cma:0kB [ 53.055211][ T4375] lowmem_reserve[]: 0 0 0 0 [ 53.059815][ T4375] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 53.072715][ T4375] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 53.088994][ T4375] Node 0 Normal: 18*4kB (UME) 48*8kB (UM) 3*16kB (UME) 3*32kB (UME) 5*64kB (UM) 9*128kB (UE) 26*256kB (U) 24*512kB (UME) 5*1024kB (U) 3*2048kB (UME) 1080*4096kB (UM) = 4455960kB [ 53.107028][ T4375] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 53.116393][ T4375] 36046 total pagecache pages [ 53.121114][ T4375] 3 pages in swap cache [ 53.125290][ T4375] Free swap = 124984kB [ 53.129562][ T4375] Total swap = 124996kB [ 53.133759][ T4375] 2097051 pages RAM [ 53.137593][ T4375] 0 pages HighMem/MovableOnly [ 53.142311][ T4375] 80812 pages reserved [ 53.185280][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.259650][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.266984][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.295087][ T4397] bridge0: entered allmulticast mode [ 53.343319][ T4397] bridge_slave_1: left allmulticast mode [ 53.349064][ T4397] bridge_slave_1: left promiscuous mode [ 53.354996][ T4397] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.365756][ T4397] bridge_slave_0: left allmulticast mode [ 53.371827][ T4397] bridge_slave_0: left promiscuous mode [ 53.377942][ T4397] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.314137][ T4430] loop3: detected capacity change from 0 to 256 [ 54.502264][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 54.502279][ T29] audit: type=1400 audit(1751252335.692:643): avc: denied { mount } for pid=4441 comm="syz.3.356" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.566955][ T29] audit: type=1400 audit(1751252335.762:644): avc: denied { write } for pid=4441 comm="syz.3.356" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.587725][ T29] audit: type=1400 audit(1751252335.762:645): avc: denied { open } for pid=4441 comm="syz.3.356" path="/77/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.689322][ T4456] loop3: detected capacity change from 0 to 128 [ 54.696016][ T29] audit: type=1400 audit(1751252335.792:646): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 54.763656][ T29] audit: type=1400 audit(1751252335.962:647): avc: denied { create } for pid=4462 comm="syz.3.360" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.788710][ T29] audit: type=1400 audit(1751252335.962:648): avc: denied { mounton } for pid=4462 comm="syz.3.360" path="/79/file0" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.881013][ T29] audit: type=1400 audit(1751252336.072:649): avc: denied { unlink } for pid=3304 comm="syz-executor" name="file0" dev="tmpfs" ino=428 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 54.947280][ T4470] SELinux: failed to load policy [ 54.954429][ T29] audit: type=1400 audit(1751252336.142:650): avc: denied { load_policy } for pid=4469 comm="syz.3.362" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.046871][ T29] audit: type=1400 audit(1751252336.242:651): avc: denied { create } for pid=4478 comm="syz.0.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.081950][ T4481] SELinux: failed to load policy [ 55.148075][ T29] audit: type=1400 audit(1751252336.342:652): avc: denied { unmount } for pid=4492 comm="syz.4.370" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.247972][ T4510] serio: Serial port pts0 [ 55.336358][ T4523] bridge1: entered promiscuous mode [ 55.341790][ T4523] bridge1: entered allmulticast mode [ 55.348939][ T4523] team0: Port device bridge1 added [ 55.434769][ T4535] netlink: 40 bytes leftover after parsing attributes in process `syz.2.387'. [ 55.463240][ T4535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 56.133878][ T4570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'. [ 56.203556][ T4576] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 56.374855][ T4570] bridge0: entered promiscuous mode [ 56.444859][ T4584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.407'. [ 56.471369][ T4570] bridge0: port 3(macvlan2) entered blocking state [ 56.480168][ T4570] bridge0: port 3(macvlan2) entered disabled state [ 56.520927][ T4570] macvlan2: entered allmulticast mode [ 56.527736][ T4570] bridge0: entered allmulticast mode [ 56.547663][ T4590] loop3: detected capacity change from 0 to 512 [ 56.581927][ T4570] macvlan2: left allmulticast mode [ 56.588458][ T4570] bridge0: left allmulticast mode [ 56.619432][ T4570] bridge0: left promiscuous mode [ 56.627964][ T4590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.640792][ T4590] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.690438][ T4590] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.409: corrupted inode contents [ 56.783451][ T4590] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.409: mark_inode_dirty error [ 56.796308][ T4590] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.409: corrupted inode contents [ 56.891869][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.972371][ T4597] netlink: 'syz.1.412': attribute type 1 has an invalid length. [ 57.046925][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.054166][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.081769][ T4600] bridge0: entered allmulticast mode [ 57.132873][ T4600] bridge_slave_1: left allmulticast mode [ 57.138656][ T4600] bridge_slave_1: left promiscuous mode [ 57.144475][ T4600] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.162609][ T4600] bridge_slave_0: left allmulticast mode [ 57.168398][ T4600] bridge_slave_0: left promiscuous mode [ 57.174222][ T4600] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.335016][ T4615] tipc: Started in network mode [ 57.339957][ T4615] tipc: Node identity ac1414aa, cluster identity 4711 [ 57.347559][ T4615] tipc: Enabled bearer , priority 10 [ 57.388361][ T4617] netlink: 'syz.1.419': attribute type 13 has an invalid length. [ 57.393359][ T4615] tipc: Enabled bearer , priority 0 [ 57.473433][ T4617] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.480756][ T4617] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.567294][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.577524][ T4617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.620353][ T4617] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.629371][ T4617] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.638547][ T4617] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.647660][ T4617] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.815906][ T4659] loop3: detected capacity change from 0 to 1024 [ 57.845827][ T4659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.883150][ T4659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 57.934311][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.397711][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 58.406626][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 58.490747][ T3381] tipc: Node number set to 2886997162 [ 58.674239][ T4732] netlink: 'syz.0.462': attribute type 4 has an invalid length. [ 58.685950][ T4732] netlink: 'syz.0.462': attribute type 4 has an invalid length. [ 58.819228][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a170600: rx timeout, send abort [ 58.908275][ T4750] @ÿ: renamed from bond_slave_0 (while UP) [ 59.074608][ T4770] syz.1.477 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 59.327600][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811a170600: abort rx timeout. Force session deactivation [ 59.780029][ T4787] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.483'. [ 59.789255][ T4787] netlink: 24 bytes leftover after parsing attributes in process `syz.0.483'. [ 59.868499][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 59.868518][ T29] audit: type=1400 audit(1751252341.062:953): avc: denied { ioctl } for pid=4792 comm="syz.2.486" path="socket:[7939]" dev="sockfs" ino=7939 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.922670][ T4795] loop3: detected capacity change from 0 to 128 [ 59.940016][ T4795] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.953660][ T4795] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.988471][ T4795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.487'. [ 59.997794][ T4795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.005397][ T4795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.081691][ T4795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.089170][ T4795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.142240][ T29] audit: type=1400 audit(1751252341.342:954): avc: denied { read } for pid=4815 comm="syz.1.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.255268][ T4820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.496'. [ 60.264304][ T4820] netlink: 16 bytes leftover after parsing attributes in process `syz.4.496'. [ 60.287261][ T3304] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.372433][ T29] audit: type=1400 audit(1751252341.562:955): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.396843][ T29] audit: type=1400 audit(1751252341.562:956): avc: denied { open } for pid=3304 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.420899][ T29] audit: type=1400 audit(1751252341.562:957): avc: denied { ioctl } for pid=3304 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.458052][ T29] audit: type=1400 audit(1751252341.652:958): avc: denied { prog_load } for pid=4833 comm="syz.3.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.477099][ T29] audit: type=1400 audit(1751252341.652:959): avc: denied { bpf } for pid=4833 comm="syz.3.502" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.497576][ T29] audit: type=1400 audit(1751252341.652:960): avc: denied { perfmon } for pid=4833 comm="syz.3.502" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.520086][ T4835] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 60.522566][ T29] audit: type=1400 audit(1751252341.702:961): avc: denied { prog_run } for pid=4823 comm="syz.4.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 60.546760][ T29] audit: type=1400 audit(1751252341.722:962): avc: denied { write } for pid=4821 comm="syz.1.497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 60.602174][ T4840] team0: Port device team_slave_1 removed [ 60.698237][ T4844] tipc: Enabling of bearer rejected, failed to enable media [ 60.729305][ T4847] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 60.948523][ T4854] Cannot find del_set index 0 as target [ 61.038400][ T4863] tipc: New replicast peer: 0.0.255.255 [ 61.044583][ T4863] tipc: Enabled bearer , priority 10 [ 63.363776][ T4903] 9pnet_fd: Insufficient options for proto=fd [ 63.558609][ T4912] tipc: Enabling of bearer rejected, failed to enable media [ 64.374489][ T4932] gretap0: entered promiscuous mode [ 64.384990][ T4932] macsec1: entered promiscuous mode [ 64.397602][ T4932] gretap0: left promiscuous mode [ 64.426391][ T4934] __nla_validate_parse: 3 callbacks suppressed [ 64.426409][ T4934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.537'. [ 64.458921][ T4934] vlan2: entered promiscuous mode [ 64.464066][ T4934] team0: entered promiscuous mode [ 64.504372][ T4934] team_slave_0: entered promiscuous mode [ 64.510152][ T4934] team_slave_1: entered promiscuous mode [ 64.543555][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 64.552631][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 64.563921][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 64.583662][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 64.592594][ T4938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 64.682836][ T4946] Driver unsupported XDP return value 0 on prog (id 438) dev N/A, expect packet loss! [ 64.948394][ T4955] loop3: detected capacity change from 0 to 2048 [ 64.966606][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 64.966621][ T29] audit: type=1400 audit(1751252346.162:1049): avc: denied { mounton } for pid=4954 comm="syz.3.546" path="/114/file0" dev="tmpfs" ino=614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 65.045036][ T29] audit: type=1400 audit(1751252346.242:1050): avc: denied { sys_module } for pid=4963 comm="syz.2.548" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 65.057030][ T4955] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 65.127246][ T4973] netlink: 404 bytes leftover after parsing attributes in process `syz.4.550'. [ 65.560306][ T4986] loop4: detected capacity change from 0 to 512 [ 65.634091][ T4986] EXT4-fs: Ignoring removed oldalloc option [ 65.660968][ T29] audit: type=1400 audit(1751252346.852:1051): avc: denied { setopt } for pid=4979 comm="syz.1.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.699600][ T4986] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.715972][ T29] audit: type=1326 audit(1751252346.882:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 65.739415][ T29] audit: type=1326 audit(1751252346.882:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 65.762845][ T29] audit: type=1326 audit(1751252346.882:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.1.552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 65.786230][ T29] audit: type=1326 audit(1751252346.882:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4979 comm="syz.1.552" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x0 [ 65.821765][ T4986] EXT4-fs (loop4): 1 truncate cleaned up [ 65.835344][ T4986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.848682][ T29] audit: type=1400 audit(1751252347.052:1056): avc: denied { mount } for pid=4983 comm="syz.4.553" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 65.874765][ T4991] loop3: detected capacity change from 0 to 512 [ 65.882118][ T4991] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.896932][ T29] audit: type=1400 audit(1751252347.072:1057): avc: denied { setattr } for pid=4983 comm="syz.4.553" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.925876][ T4991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.939148][ T4991] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.952038][ T29] audit: type=1400 audit(1751252347.152:1058): avc: denied { remove_name } for pid=4990 comm="syz.3.554" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.976271][ T4991] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 65.982621][ T4993] wireguard0: entered promiscuous mode [ 65.996306][ T4993] wireguard0: entered allmulticast mode [ 66.017248][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.071853][ T4998] loop3: detected capacity change from 0 to 2048 [ 66.193002][ T3298] loop3: p1 < > p3 [ 66.197753][ T3298] loop3: p3 size 134217728 extends beyond EOD, truncated [ 66.208654][ T4998] loop3: p1 < > p3 [ 66.214124][ T4998] loop3: p3 size 134217728 extends beyond EOD, truncated [ 66.253260][ T5007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 66.511157][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.699834][ T5015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.563'. [ 66.745008][ T5015] veth1_macvtap: left promiscuous mode [ 66.770892][ T5021] loop4: detected capacity change from 0 to 512 [ 66.793332][ T5021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.806277][ T5021] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.234404][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.603718][ T5049] Set syz1 is full, maxelem 65536 reached [ 67.649518][ T5058] ªªªªªª: renamed from vlan0 (while UP) [ 67.676987][ T5060] netlink: 3 bytes leftover after parsing attributes in process `syz.4.573'. [ 67.688920][ T5060] batadv1: entered promiscuous mode [ 67.694367][ T5060] batadv1: entered allmulticast mode [ 67.918224][ T5075] loop4: detected capacity change from 0 to 1024 [ 67.934001][ T5075] EXT4-fs: Invalid commit interval 67108867, must be smaller than 21474836 [ 68.842324][ T5138] SELinux: failed to load policy [ 68.943645][ T5142] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 68.953761][ T5142] dummy0: entered promiscuous mode [ 68.976706][ T5141] loop3: detected capacity change from 0 to 512 [ 68.993465][ T5143] macsec1: entered promiscuous mode [ 68.998811][ T5143] gretap0: entered promiscuous mode [ 69.004876][ T5141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.025101][ T5143] gretap0: left promiscuous mode [ 69.074666][ T5141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.112042][ T5141] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.152980][ T5141] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.592: corrupted xattr block 19: overlapping e_value [ 69.191628][ T5141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 69.216972][ T5141] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.592: corrupted xattr block 19: overlapping e_value [ 69.241669][ T5141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 69.274920][ T5141] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.592: corrupted xattr block 19: overlapping e_value [ 69.362864][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.365067][ T5153] bridge_slave_0: left allmulticast mode [ 69.377779][ T5153] bridge_slave_0: left promiscuous mode [ 69.383559][ T5153] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.423064][ T5153] bridge_slave_1: left allmulticast mode [ 69.428788][ T5153] bridge_slave_1: left promiscuous mode [ 69.434572][ T5153] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.445436][ T5153] bond0: (slave bond_slave_0): Releasing backup interface [ 69.455531][ T5153] bond0: (slave bond_slave_1): Releasing backup interface [ 69.465963][ T5153] team_slave_0: left promiscuous mode [ 69.473779][ T5153] team0: Port device team_slave_0 removed [ 69.481214][ T5153] team_slave_1: left promiscuous mode [ 69.488853][ T5153] team0: Port device team_slave_1 removed [ 69.495990][ T5153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.503664][ T5153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.514407][ T5153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.521963][ T5153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.543328][ T5155] batman_adv: batadv0: Adding interface: dummy0 [ 69.549778][ T5155] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.580539][ T5155] batman_adv: batadv0: Interface activated: dummy0 [ 69.587458][ T5161] __nla_validate_parse: 10 callbacks suppressed [ 69.587526][ T5161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.597'. [ 69.626071][ T5159] batadv0: mtu less than device minimum [ 69.632219][ T5159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.643004][ T5159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.653990][ T5159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.664823][ T5159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.675635][ T5159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.686315][ T5159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.697151][ T5159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.708112][ T5159] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 69.776317][ T5164] infiniband syz!: set down [ 69.781031][ T5164] infiniband syz!: added team_slave_0 [ 69.857649][ T5164] RDS/IB: syz!: added [ 69.865141][ T5164] smc: adding ib device syz! with port count 1 [ 69.871570][ T5164] smc: ib device syz! port 1 has pnetid [ 70.020812][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 70.020832][ T29] audit: type=1400 audit(1751252351.142:1125): avc: denied { ioctl } for pid=5162 comm="syz.3.598" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.322260][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.603'. [ 70.345753][ T5180] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 71.086001][ T5185] loop3: detected capacity change from 0 to 1024 [ 71.113896][ T29] audit: type=1326 audit(1751252352.162:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.127563][ T5185] EXT4-fs: Ignoring removed nobh option [ 71.137383][ T29] audit: type=1326 audit(1751252352.162:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.142969][ T5185] EXT4-fs: Ignoring removed bh option [ 71.166314][ T29] audit: type=1326 audit(1751252352.162:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.195123][ T29] audit: type=1326 audit(1751252352.162:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.218612][ T29] audit: type=1326 audit(1751252352.162:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.241983][ T29] audit: type=1326 audit(1751252352.162:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.265225][ T29] audit: type=1326 audit(1751252352.162:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.288606][ T29] audit: type=1326 audit(1751252352.162:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.312003][ T29] audit: type=1326 audit(1751252352.162:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5181 comm="syz.2.604" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e0c19e929 code=0x7ffc0000 [ 71.378374][ T5185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.605801][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.611'. [ 72.216143][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.325060][ T5222] loop3: detected capacity change from 0 to 1024 [ 72.344871][ T5222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.392400][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.543506][ T5231] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.661113][ T5236] loop3: detected capacity change from 0 to 1024 [ 72.673377][ T5236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.746804][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.828126][ T5242] $Hÿ: renamed from bond0 (while UP) [ 72.836125][ T5242] $Hÿ: entered promiscuous mode [ 72.841385][ T5242] bond_slave_0: entered promiscuous mode [ 72.847303][ T5242] bond_slave_1: entered promiscuous mode [ 72.920505][ T5248] program syz.3.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.995948][ T5252] loop3: detected capacity change from 0 to 512 [ 73.115045][ T5252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.140710][ T5252] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.333164][ T5262] netlink: 'syz.1.630': attribute type 13 has an invalid length. [ 73.382481][ T5262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.420578][ T5262] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.460255][ T5262] net_ratelimit: 11 callbacks suppressed [ 73.460269][ T5262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 73.585058][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.783625][ T5280] capability: warning: `syz.3.634' uses deprecated v2 capabilities in a way that may be insecure [ 73.945991][ T5286] 9pnet_fd: Insufficient options for proto=fd [ 73.977065][ T5286] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 74.192638][ T5300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 74.201755][ T5300] netlink: 16 bytes leftover after parsing attributes in process `syz.0.643'. [ 74.210712][ T5300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 74.219794][ T5300] netlink: 36 bytes leftover after parsing attributes in process `syz.0.643'. [ 74.280329][ T5306] netlink: 'syz.0.646': attribute type 6 has an invalid length. [ 74.424564][ T5320] netlink: 'syz.0.652': attribute type 1 has an invalid length. [ 74.439622][ T5320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.459349][ T5320] bond1: (slave veth3): Enslaving as an active interface with a down link [ 74.473559][ T5320] bond1: (slave veth0_to_bond): making interface the new active one [ 74.482917][ T5320] veth0_to_bond: entered promiscuous mode [ 74.489085][ T5320] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 74.572095][ T5320] vlan2: entered allmulticast mode [ 74.577296][ T5320] veth1: entered allmulticast mode [ 74.593456][ T5320] veth1: entered promiscuous mode [ 74.607292][ T5320] veth1: left promiscuous mode [ 74.613369][ T5320] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 74.792505][ T5334] netlink: 'syz.0.656': attribute type 12 has an invalid length. [ 75.172421][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 75.172459][ T29] audit: type=1400 audit(1751252356.372:1305): avc: denied { read } for pid=5347 comm="syz.3.661" dev="nsfs" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.177746][ T5348] devtmpfs: Unknown parameter '¼' [ 75.182946][ T29] audit: type=1400 audit(1751252356.372:1306): avc: denied { open } for pid=5347 comm="syz.3.661" path="net:[4026532513]" dev="nsfs" ino=4026532513 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 75.228338][ T29] audit: type=1400 audit(1751252356.372:1307): avc: denied { mount } for pid=5347 comm="syz.3.661" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.250579][ T29] audit: type=1400 audit(1751252356.372:1308): avc: denied { remount } for pid=5347 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.313467][ T29] audit: type=1400 audit(1751252356.512:1309): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.348691][ T5352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.663'. [ 75.357690][ T5352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.663'. [ 75.366647][ T5352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.663'. [ 75.420576][ T29] audit: type=1400 audit(1751252356.612:1310): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.463924][ T5360] loop7: detected capacity change from 0 to 16384 [ 75.463931][ T5352] netlink: 36 bytes leftover after parsing attributes in process `syz.1.663'. [ 75.519897][ T5363] netlink: 180 bytes leftover after parsing attributes in process `syz.0.667'. [ 75.554149][ T29] audit: type=1400 audit(1751252356.682:1311): avc: denied { getopt } for pid=5345 comm="syz.2.662" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.573702][ T29] audit: type=1400 audit(1751252356.712:1312): avc: denied { mount } for pid=5362 comm="syz.0.667" name="/" dev="ramfs" ino=8916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 75.723488][ T29] audit: type=1400 audit(1751252356.922:1313): avc: denied { read write } for pid=5369 comm="syz.3.670" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 75.759358][ T29] audit: type=1400 audit(1751252356.922:1314): avc: denied { open } for pid=5369 comm="syz.3.670" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 75.798609][ T5370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.670'. [ 75.809799][ T5370] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 75.936574][ T5383] pimreg: entered allmulticast mode [ 76.187425][ T5381] pimreg: left allmulticast mode [ 77.334831][ T5424] loop4: detected capacity change from 0 to 256 [ 77.533196][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.689'. [ 77.551208][ T5428] hsr_slave_0: left promiscuous mode [ 77.564221][ T5428] hsr_slave_1: left promiscuous mode [ 78.284331][ T5443] loop3: detected capacity change from 0 to 8192 [ 78.367943][ T5454] netlink: 14 bytes leftover after parsing attributes in process `syz.0.698'. [ 78.380807][ T5454] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 78.392244][ T5454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.403497][ T5454] bond0 (unregistering): Released all slaves [ 78.431006][ T3782] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 78.439940][ T3782] bond1: (slave vlan2): making interface the new active one [ 78.447492][ T3782] veth0_to_bond: left promiscuous mode [ 78.454717][ T3782] veth1: entered promiscuous mode [ 78.460474][ T3782] vlan2: entered promiscuous mode [ 78.982449][ T5474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.705'. [ 79.222268][ T5485] loop3: detected capacity change from 0 to 8192 [ 79.391150][ T5485] loop3: p1 p3 p4 [ 79.395116][ T5485] loop3: p1 size 8390912 extends beyond EOD, truncated [ 79.449569][ T5485] loop3: p3 size 589824 extends beyond EOD, truncated [ 79.672196][ T5495] infiniband syz2: set down [ 79.676760][ T5495] infiniband syz2: added veth0_to_bond [ 79.693144][ T5495] RDS/IB: syz2: added [ 79.697177][ T5495] smc: adding ib device syz2 with port count 1 [ 79.707472][ T5495] smc: ib device syz2 port 1 has pnetid [ 79.966251][ T5508] IPv6: Can't replace route, no match found [ 80.703015][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 80.703055][ T29] audit: type=1326 audit(1751252361.902:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 80.733442][ T29] audit: type=1326 audit(1751252361.902:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 80.818994][ T5539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 80.869938][ T5535] netlink: 344 bytes leftover after parsing attributes in process `syz.4.726'. [ 80.947530][ T5536] netlink: 76 bytes leftover after parsing attributes in process `syz.3.725'. [ 81.103197][ T5545] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 81.148037][ T5545] bond_slave_0: left promiscuous mode [ 81.159984][ T29] audit: type=1400 audit(1751252361.912:1457): avc: denied { create } for pid=5529 comm="syz.4.726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 81.179425][ T29] audit: type=1326 audit(1751252361.952:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 81.202804][ T29] audit: type=1326 audit(1751252361.952:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 81.226145][ T29] audit: type=1326 audit(1751252361.952:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 81.237174][ T5551] loop4: detected capacity change from 0 to 8192 [ 81.249532][ T29] audit: type=1326 audit(1751252361.952:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 81.279438][ T29] audit: type=1326 audit(1751252361.952:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 81.302792][ T29] audit: type=1326 audit(1751252361.952:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 81.326122][ T29] audit: type=1326 audit(1751252361.952:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5531 comm="syz.1.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9392be929 code=0x7ffc0000 [ 81.349946][ T5545] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 81.358898][ T5545] bond_slave_1: left promiscuous mode [ 81.368990][ T5545] team0: Port device team_slave_0 removed [ 81.377908][ T5545] team0: Port device team_slave_1 removed [ 81.402877][ T5545] team0: Port device bridge1 removed [ 81.491475][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 81.504036][ T5536] team0: Mode changed to "loadbalance" [ 81.531051][ T5557] batman_adv: batadv0: Interface deactivated: dummy0 [ 81.537941][ T5557] batman_adv: batadv0: Removing interface: dummy0 [ 81.708703][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.716325][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.724683][ T5557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.732160][ T5557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.828641][ T5565] Cannot find add_set index 0 as target [ 82.196208][ T5570] netlink: 48 bytes leftover after parsing attributes in process `syz.4.732'. [ 83.092644][ T5611] loop8: detected capacity change from 0 to 16384 [ 83.307941][ T5617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.410713][ T5611] loop8: detected capacity change from 16384 to 16383 [ 83.499928][ T5609] ================================================================== [ 83.508159][ T5609] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 83.515573][ T5609] [ 83.517917][ T5609] read-write to 0xffff888106fda478 of 8 bytes by interrupt on cpu 1: [ 83.526028][ T5609] __xa_clear_mark+0xf5/0x1e0 [ 83.530736][ T5609] __folio_end_writeback+0x177/0x470 [ 83.536057][ T5609] folio_end_writeback+0x71/0x3d0 [ 83.541106][ T5609] end_buffer_async_write+0x156/0x1f0 [ 83.546510][ T5609] end_bio_bh_io_sync+0x76/0xa0 [ 83.551399][ T5609] bio_endio+0x374/0x410 [ 83.555686][ T5609] blk_update_request+0x336/0x730 [ 83.560738][ T5609] blk_mq_end_request+0x26/0x50 [ 83.565624][ T5609] lo_complete_rq+0x98/0x140 [ 83.570246][ T5609] blk_done_softirq+0x77/0xb0 [ 83.574953][ T5609] handle_softirqs+0xb7/0x290 [ 83.579655][ T5609] run_ksoftirqd+0x1c/0x30 [ 83.584105][ T5609] smpboot_thread_fn+0x328/0x530 [ 83.589206][ T5609] kthread+0x489/0x510 [ 83.593333][ T5609] ret_from_fork+0xda/0x150 [ 83.597892][ T5609] ret_from_fork_asm+0x1a/0x30 [ 83.602700][ T5609] [ 83.605041][ T5609] read to 0xffff888106fda478 of 8 bytes by task 5609 on cpu 0: [ 83.612607][ T5609] xas_find_marked+0x218/0x620 [ 83.617402][ T5609] find_get_entry+0x5d/0x380 [ 83.622060][ T5609] filemap_get_folios_tag+0x13b/0x210 [ 83.627478][ T5609] filemap_write_and_wait_range+0x1d3/0x340 [ 83.633414][ T5609] bdev_release+0xeb/0x3d0 [ 83.637858][ T5609] blkdev_release+0x15/0x20 [ 83.642405][ T5609] __fput+0x298/0x650 [ 83.646443][ T5609] ____fput+0x1c/0x30 [ 83.650458][ T5609] task_work_run+0x131/0x1a0 [ 83.655076][ T5609] exit_to_user_mode_loop+0xe4/0x100 [ 83.660418][ T5609] do_syscall_64+0x1d6/0x200 [ 83.665034][ T5609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.670959][ T5609] [ 83.673305][ T5609] value changed: 0xfffe000000000000 -> 0xe000000000000000 [ 83.680455][ T5609] [ 83.682804][ T5609] Reported by Kernel Concurrency Sanitizer on: [ 83.688985][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: syz.3.746 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(voluntary) [ 83.699606][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.709694][ T5609] ================================================================== [ 90.560635][ T3730] vlan2: left promiscuous mode