last executing test programs: 6.774467654s ago: executing program 0 (id=197): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES32], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = socket(0x2, 0x80805, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='tlb_flush\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000050000e3000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xed41d0969ec4053c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x2000, 0x40000002, 0x0, 0x8, 0x103fb, 0x1fc, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000005}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCFLSH(r10, 0x540b, 0xffffffffffffffff) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="c01800002000010a00000000000000000a0000002c01018028014880ed00a90013466820cd76bb221fbb4acd690c6a8b9c760a61eeec7793b579aefdb936d00f403d3f04637cdb9ac70e28c5dd66ddedde2d0930650e6821f9a26a4a193c1d06a3e75523f901e44fe087ae32c836c6d6ddba3af8e9a2beae8936168f9fa38c395f5cf7408df69c60bf584bee86a6312e9ce866e456c3eda6f2924082d78a2f385bdbd0c9afb54758c102bf13094645fb6aa34d424ec776691fee3d25307f61fed2752babf7c686e8a3d9b59a8343bcf4121bf5cf400a0c1070855fac565cad8968a97ce0a12a1161054d82d0a240b7de", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97", @ANYRESHEX=r10, @ANYRES16, @ANYRES32, @ANYRES32, @ANYRES64=r2], 0x18c0}}, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='ext4_drop_inode\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind(r11, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff950000000016001b049cb83bd81ee7a5588a00"], &(0x7f0000000080)='GPL\x00', 0x4, 0x91, &(0x7f00000001c0)=""/145, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6.586235021s ago: executing program 0 (id=200): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r1, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000140)=0x0) r5 = geteuid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0xb81001, &(0x7f00000004c0)={[{@mpol={'mpol', 0x3d, {'prefer', '', @void}}}, {@huge_within_size}, {@size={'size', 0x3d, [0x67, 0x33]}}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33, 0x30, 0x67, 0x34, 0x38]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x6b, 0x65, 0x65, 0x57, 0x32, 0x36, 0x34, 0x5c]}}, {@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x74, 0x39, 0x37, 0x25, 0x25, 0x20]}}], [{@fowner_gt={'fowner>', r4}}, {@euid_gt={'euid>', r5}}, {@appraise_type}, {@dont_appraise}, {@euid_lt={'euid<', r6}}, {@subj_user={'subj_user', 0x3d, 'cpuacct.usage_percpu_user\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x9, 0xff, 0xb, 0x5, 0x0, 0x778b, 0x80000, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x1, 0x2, 0x1, 0x9, 0x45b, 0x3, 0x401, 0x500, 0x7, 0x0, 0x4fac}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r8, 0x0, 0x4}, 0x18) r9 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r9, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r11}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000180)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@nojournal_checksum}, {@dax_never}, {@nodiscard}], [{@obj_user={'obj_user', 0x3d, 'nodiscard'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x32, 0x34, 0x33, 0x33, 0x39, 0x37, 0x62], 0x2d, [0x66, 0x30, 0x65, 0x1], 0x2d, [0x65, 0x33, 0x38, 0x61], 0x2d, [0x33, 0x34, 0x35, 0x35], 0x2d, [0x61, 0x32, 0x64, 0x63, 0x66, 0x64, 0x36, 0x39]}}}, {@fowner_eq}, {@func={'func', 0x3d, 'FILE_MMAP'}}]}, 0x0, 0x479, &(0x7f0000001300)="$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") ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000e80)) 5.289321845s ago: executing program 0 (id=224): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x5e, &(0x7f0000000500)={@multicast, @random="e801260000b4", @val={@val={0x88a8, 0x4, 0x0, 0x3}, {0x8100, 0x2, 0x0, 0x2}}, {@canfd={0xd, {{0x4, 0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "fc8362eaf22be74dd4c65ee4b62b8c1683ca8186eba4baaad8493e04b0b8340bcf484d3ef397a0b2a9aa8ab096a62096e2b7982427b2647549a3a76a871a0794"}}}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x71864369b3666c7c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r8}, 0x10) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r10 = signalfd4(r9, &(0x7f00000004c0)={[0x7]}, 0x8, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x0, 0x1, 0x9, 0x4, 0x50, 0x1}], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x40, &(0x7f0000000400)=""/64, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, r10, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x6, 0x2, 0x8}, 0x10, r11, r8, 0x0, &(0x7f0000000680)=[r6, r6, r6], 0x0, 0x10, 0x6}, 0xd6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x12, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc66b}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x0, 0x5}, 0x10, r11, 0xffffffffffffffff, 0x8, 0x0, &(0x7f00000003c0)=[{0x5, 0x3, 0x10, 0x3}, {0x0, 0x2, 0xc, 0x8}, {0x1, 0x5, 0x1}, {0x4, 0x1, 0x4, 0xa}, {0x0, 0x2, 0xf, 0x8}, {0x4, 0x3, 0x6, 0x3}, {0x3, 0x5, 0x8, 0x5}, {0x4, 0x1, 0x10, 0x2}], 0x10, 0x6}, 0x94) umount2(&(0x7f00000000c0)='./file0\x00', 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@errors_remount}, {@acl}, {@delalloc}]}, 0x0, 0x465, &(0x7f0000000740)="$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") 4.066129633s ago: executing program 2 (id=246): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x2200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140ffffffff0c0001800800010000000000050014001f00080005000500020000000500010006"], 0x6c}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) ioctl$RTC_IRQP_READ(r7, 0x8008700b, &(0x7f0000000340)) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x4c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0xda}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x10001}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="040028bd7013b82e772507000000050014000700000006000a0000000000060003000000000008000906001d000b000000fe8000000000400000000000000000aa06001b004e21000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x40014}, 0x8004) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "3d186e85f3a07d09", "a373047e6878fdb57fc2596912f8bdfd", "27edd157", "3684fa3381fd0182"}, 0x28) writev(r9, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r10, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r11, 0x200, 0x70bd2d, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0xc054) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e0000000000000002000000fbffff7f14000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0, @ANYRES32, @ANYBLOB="0400000002000000000000000300"/28], 0x50) 3.98516957s ago: executing program 0 (id=247): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 3.930283964s ago: executing program 2 (id=249): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) (async) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) (rerun: 64) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r4, &(0x7f0000000380), 0x0, 0x810) (async) pipe(&(0x7f00000002c0)) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x4000000000008}, 0x18) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async) lseek(r0, 0x0, 0x4) (async) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) (async, rerun: 64) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async, rerun: 64) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, &(0x7f0000000040)=0x4) 3.566415786s ago: executing program 2 (id=252): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async, rerun: 64) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x4, 0x0, @void}, 0x10) (rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000e00)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004084) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) (async) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) (async, rerun: 32) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="d8000000150081044e81f782db44b9040a1d080206000000040000a118000200ff05000000000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async, rerun: 32) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) r10 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r10, 0xc0404806, &(0x7f0000000040)) (async) write$UHID_SET_REPORT_REPLY(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x2}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 3.558544937s ago: executing program 4 (id=254): r0 = getpid() syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x2, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xf, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x4084) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[], 0x40000) r4 = accept4$unix(r1, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c000280080001"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) getsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), &(0x7f0000000100)=0x4) recvfrom$unix(r4, &(0x7f00000008c0)=""/239, 0x40000, 0x0, 0x0, 0x0) 3.556903537s ago: executing program 2 (id=255): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec81d6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751", @ANYRES16], 0x1, 0x2c2, &(0x7f00000006c0)="$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") creat(&(0x7f0000000800)='./file1\x00', 0x182) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$getregs(0xc, r0, 0xfffffffffffffff8, &(0x7f0000000040)=""/210) ioctl$TIOCSETD(r1, 0x5423, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 3.508826372s ago: executing program 4 (id=256): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x85}], 0x1, 0x40, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x9}, 0x2000, 0x37, 0x9, 0x0, 0x0, 0x0, 0xefff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 3.41405578s ago: executing program 2 (id=259): r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x25) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x200000004000000}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x68200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r6 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppoe(0x18, 0x1, 0x0) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 3.41305766s ago: executing program 4 (id=260): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x400100, 0x0, 0x5f, 0x0, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x40000004, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYRES16], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) fsopen(0x0, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x240}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000007a03000018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000b8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x4) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)="9b", 0x1, 0xfffffffffffffffc) keyctl$describe(0x6, r4, &(0x7f00000010c0)=""/69, 0x45) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800900390400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5, 0x0}, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='xprtrdma_cb_setup\x00', r6, 0x0, 0x3}, 0x18) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r7, &(0x7f0000000000)=""/149, 0x95, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 3.116393296s ago: executing program 2 (id=264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x8000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x81, 0x18, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 3.06634815s ago: executing program 32 (id=264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x8000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x81, 0x18, '\x00', 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) 2.457783374s ago: executing program 4 (id=274): r0 = socket$netlink(0x10, 0x3, 0x12) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000080)=0xc, 0x25) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x200000004000000}, 0x18) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x97a3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@subj_type={'subj_type', 0x3d, '\xe1[]*:['}}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x68200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x538, 0xffffffff, 0x398, 0xe8, 0x398, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xff000000, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0x270, 0x2b0, 0x0, {}, [@common=@srh1={{0x90}, {0x2, 0xe, 0x6, 0x5, 0x9, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff, 0xffffff00, 0xffffff00], [0xff, 0xffffff00, 0xff, 0xffffff00], [0x0, 0xffffffff, 0x0, 0xff], 0x4000, 0x11}}, @common=@rt={{0x138}, {0x401, [0xfffffffe], 0x1, 0x2, 0x3, [@remote, @empty, @remote, @remote, @remote, @mcast1, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @remote, @rand_addr=' \x01\x00', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}], 0x9}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) r6 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppoe(0x18, 0x1, 0x0) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2.135098132s ago: executing program 1 (id=276): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x4900009) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r4) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000180)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c0003800c0001"], 0x50}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 1.997954225s ago: executing program 1 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_IFALIASn={0x4}]}, 0x38}}, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e20, @multicast2}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x81, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='macsec0\x00', 0x5, 0x8, 0x5}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x17}) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/vlan/vlan0\x00') setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000640)=@req={0x3, 0x6, 0x4a, 0xffff}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x271}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0xa, 0x1, 0x3, 0x4, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x7, 0x1, 0xc, 0x0, 0x4, 0x20, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x7, 0xe1, &(0x7f00000003c0)=""/225, 0x41100, 0x40, '\x00', 0x0, @sk_reuseport=0x27, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0xc, 0x3, 0xffffff31}, 0x10, 0xffffffffffffffff, r0, 0x0, &(0x7f0000000600)=[r5], &(0x7f0000000640), 0x10, 0xbcee}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x1000000000800000}, 0x18) timer_getoverrun(0x0) 1.854299577s ago: executing program 1 (id=280): setresgid(0xee00, 0xee01, 0x0) setregid(0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8c51de8c7955ef6b, @perf_config_ext={0x7, 0x3}, 0x10824a, 0x0, 0x3, 0x0, 0x9, 0xd68d}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7ffe}, 0x18) r5 = memfd_create(&(0x7f0000000200)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9{L\xa2\xd28\xd6\x06\a\x0e\xfd\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9Or\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8\xf0_o\x16Oy\x00\x16h\xcc\x81.F/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb8\xde\xf9s\xcb\x89\xf2\xf6a\xcb[\xcc+\x1a`.\x00\xcf\x1c\x14\x1d$\x98\xf3\xed\x1cA\xc1+0\x87\xd1\xf2\xc6\x8fs>\x16\x8b\xdeV\b$e\xe5\x8d/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x16\xe1\xa3\xe0\x18\xe5\xee\xb0\x93\xfe\xac\x98m\xaf\xb9K\xac\xa0\x1a\xe2\xb4\xfd\x1cO5\xce9\xf9\x02h\x0e%\xa1\x11COf\xed[z\xc6\xc1:L\xdb\xac\x84Ru=E\xf7\x94\xae\x18v\v\xcc\xcd\b\xa5\x19\xb5idBc\xf1S\x93\x0f\x82me\x9a\xb8\a\xff\x91\xed\x9d|\xa7D\xf1\xb2\x14\xff\xc5\xaf[\x86\xca!E\x9a<\x00', 0x5) fsetxattr$security_selinux(r5, &(0x7f0000000480), &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1a, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000041c0)='net/packet\x00') preadv(r6, &(0x7f0000004300)=[{&(0x7f0000004200)=""/221, 0xdd}], 0x1, 0x10001, 0xfffffffd) pread64(r6, &(0x7f0000004380)=""/246, 0xf6, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c8, 0x1c8, 0x3e0, 0x0, 0xf8, 0x3e0, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, &(0x7f0000000000), {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff], [0xffffff00, 0xff000000, 0xffffffff, 0xff], 'bond_slave_1\x00', 'ip6_vti0\x00', {0x1fe}, {0xff}, 0xe, 0x7f, 0x5, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x25}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@remote, 0x36, 0xc, 0x9}}}, {{@ipv6={@rand_addr=' \x01\x00', @local, [0xff000000, 0x0, 0xffffffff, 0xffffff00], [0xffffff00, 0xff000000], 'wlan1\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x3a, 0xfb, 0x6, 0x12}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x3b, 0x8, 0xdf, 0x8, 0x9, 0x101, 0x20}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc, 0x3a, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33"], 0x0) 1.839211598s ago: executing program 1 (id=281): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x43, 0xa0, 0x1a8, 0x98, 0x1a8, 0x178, 0x178, 0x1a8, 0x178, 0x49, 0x0, {[{{@ip={@multicast2, @local, 0x0, 0xff000000, 'veth0_to_bond\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x9, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @common=@SET={0x0, 'SET\x00', 0x0, {{0x4, [0x5, 0x0, 0x2, 0x6, 0x2, 0x2], 0x3, 0x4}, {0x3, [0x6, 0x4, 0x2, 0x0, 0x2, 0x4], 0x4, 0xf5bd8247a5d786aa}}}}, {{@uncond, 0x0, 0x70, 0xfffffffffffffeea}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x2, 0x200af76, 0x1, '\x00', 'syz0\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x8000000000000001) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x100000000000000) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.7022369s ago: executing program 1 (id=282): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x0, 0x66f, @remote, 0x1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000"], 0x18, 0x9000000}}], 0x1, 0x4000010) 1.59290351s ago: executing program 1 (id=284): socket$caif_stream(0x25, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x8) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x7, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x0) 1.338279132s ago: executing program 3 (id=287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080086dd4803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x105002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.234375512s ago: executing program 3 (id=288): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) (fail_nth: 1) 915.626229ms ago: executing program 3 (id=289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x2c, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x2c}}, 0x40000c0) 914.658109ms ago: executing program 3 (id=290): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x4aa82, 0x0) r0 = syz_io_uring_setup(0xd1, &(0x7f0000000280)={0x0, 0x8a73, 0x8, 0x22, 0x1b7}, &(0x7f0000000300), &(0x7f00000001c0)) io_uring_enter(r0, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5323, 0x1000, 0x1, 0x100002cf, 0x0, r0}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14) setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f0000000080)={@remote, r8}, 0x14) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r10, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x2, &(0x7f0000000100)=[{0x7, 0x4, 0x5, 0x5}, {0xfffa, 0x2, 0x6, 0x1}]}) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) socket(0x840000000002, 0x3, 0xff) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x448d3}, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 809.319499ms ago: executing program 4 (id=291): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x402100, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xf, 0x4, 0x2, 0x80000001, 0xa9f, 0xf}, {0x5d, 0x2c60, 0xf5, 0x4, 0xffff, 0x1}], ['\x00', '\x00']}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r6, 0x0, 0x2144}, 0x18) r7 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r8, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 17.967153][ T29] audit: type=1400 audit(1767538863.296:62): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.989098][ T29] audit: type=1400 audit(1767538863.296:63): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.011706][ T29] audit: type=1400 audit(1767538863.296:64): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.034558][ T29] audit: type=1400 audit(1767538863.296:65): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.057532][ T29] audit: type=1400 audit(1767538863.296:66): avc: denied { read open } for pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 21.986202][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 21.986216][ T29] audit: type=1400 audit(1767538867.316:70): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.015121][ T29] audit: type=1400 audit(1767538867.346:71): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.015875][ T3303] cgroup: Unknown subsys name 'net' [ 22.042736][ T29] audit: type=1400 audit(1767538867.376:72): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.139646][ T3303] cgroup: Unknown subsys name 'cpuset' [ 22.145697][ T3303] cgroup: Unknown subsys name 'rlimit' [ 22.254984][ T29] audit: type=1400 audit(1767538867.586:73): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.278318][ T29] audit: type=1400 audit(1767538867.586:74): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.298803][ T29] audit: type=1400 audit(1767538867.586:75): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.319192][ T29] audit: type=1400 audit(1767538867.586:76): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.339442][ T29] audit: type=1400 audit(1767538867.586:77): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 22.360440][ T29] audit: type=1400 audit(1767538867.616:78): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.367316][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.385230][ T29] audit: type=1400 audit(1767538867.616:79): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.432487][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.718373][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 24.730732][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 24.809838][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 24.831232][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.838347][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.845491][ T3321] bridge_slave_0: entered allmulticast mode [ 24.851859][ T3321] bridge_slave_0: entered promiscuous mode [ 24.870455][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.877508][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.884761][ T3321] bridge_slave_1: entered allmulticast mode [ 24.891099][ T3321] bridge_slave_1: entered promiscuous mode [ 24.901517][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 24.918519][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.925568][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.932712][ T3317] bridge_slave_0: entered allmulticast mode [ 24.939024][ T3317] bridge_slave_0: entered promiscuous mode [ 24.961192][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.968269][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.975518][ T3317] bridge_slave_1: entered allmulticast mode [ 24.981761][ T3317] bridge_slave_1: entered promiscuous mode [ 24.987865][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 25.003875][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.024937][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.053546][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.078035][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.093628][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.100792][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.107890][ T3318] bridge_slave_0: entered allmulticast mode [ 25.114312][ T3318] bridge_slave_0: entered promiscuous mode [ 25.121414][ T3321] team0: Port device team_slave_0 added [ 25.137580][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.144647][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.151742][ T3318] bridge_slave_1: entered allmulticast mode [ 25.158086][ T3318] bridge_slave_1: entered promiscuous mode [ 25.164978][ T3321] team0: Port device team_slave_1 added [ 25.176402][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.183532][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.190782][ T3316] bridge_slave_0: entered allmulticast mode [ 25.197045][ T3316] bridge_slave_0: entered promiscuous mode [ 25.212710][ T3317] team0: Port device team_slave_0 added [ 25.222655][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.229732][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.236887][ T3316] bridge_slave_1: entered allmulticast mode [ 25.243287][ T3316] bridge_slave_1: entered promiscuous mode [ 25.259461][ T3317] team0: Port device team_slave_1 added [ 25.273862][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.283115][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.290077][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.315955][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.331242][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.338285][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.345564][ T3327] bridge_slave_0: entered allmulticast mode [ 25.351972][ T3327] bridge_slave_0: entered promiscuous mode [ 25.363598][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.372889][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.379842][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.405764][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.421854][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.428945][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.436155][ T3327] bridge_slave_1: entered allmulticast mode [ 25.442543][ T3327] bridge_slave_1: entered promiscuous mode [ 25.449740][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.465994][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.472969][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.498855][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.515014][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.529591][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.536525][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.562428][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.582569][ T3318] team0: Port device team_slave_0 added [ 25.592179][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.606070][ T3318] team0: Port device team_slave_1 added [ 25.618862][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.628695][ T3316] team0: Port device team_slave_0 added [ 25.651766][ T3316] team0: Port device team_slave_1 added [ 25.663859][ T3321] hsr_slave_0: entered promiscuous mode [ 25.670053][ T3321] hsr_slave_1: entered promiscuous mode [ 25.689937][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.696913][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.722851][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.734053][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.741038][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.766909][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.779557][ T3317] hsr_slave_0: entered promiscuous mode [ 25.785501][ T3317] hsr_slave_1: entered promiscuous mode [ 25.791363][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 25.797067][ T3317] Cannot create hsr debugfs directory [ 25.803027][ T3327] team0: Port device team_slave_0 added [ 25.828449][ T3327] team0: Port device team_slave_1 added [ 25.834667][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.841693][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.867613][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.899670][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.906620][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.932591][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.957038][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.964011][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.990016][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.009663][ T3318] hsr_slave_0: entered promiscuous mode [ 26.015526][ T3318] hsr_slave_1: entered promiscuous mode [ 26.021361][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 26.027066][ T3318] Cannot create hsr debugfs directory [ 26.033704][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.040655][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.066557][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.121850][ T3316] hsr_slave_0: entered promiscuous mode [ 26.127714][ T3316] hsr_slave_1: entered promiscuous mode [ 26.133498][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 26.139249][ T3316] Cannot create hsr debugfs directory [ 26.172833][ T3327] hsr_slave_0: entered promiscuous mode [ 26.178859][ T3327] hsr_slave_1: entered promiscuous mode [ 26.184683][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 26.190424][ T3327] Cannot create hsr debugfs directory [ 26.299290][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.310451][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.327607][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.341184][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.364903][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.374568][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.383432][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.392238][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.419106][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.428010][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.437593][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.450659][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.479893][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.496232][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.504918][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.516717][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.562167][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.572018][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.581146][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.589860][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.600457][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.628090][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.637398][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.646470][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.662546][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.669601][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.682414][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.689460][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.704975][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.716300][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.725554][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.732601][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.747223][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.754287][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.762868][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.769897][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.780467][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.787522][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.821413][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.851317][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.865049][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.872212][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.893711][ T2041] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.900862][ T2041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.939395][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.969906][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.982187][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.989276][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.999565][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.014074][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.022715][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.039176][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.046220][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.076938][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.094027][ T3327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.104467][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.226450][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.258274][ T3316] veth0_vlan: entered promiscuous mode [ 27.275771][ T3317] veth0_vlan: entered promiscuous mode [ 27.284912][ T3318] veth0_vlan: entered promiscuous mode [ 27.291943][ T3321] veth0_vlan: entered promiscuous mode [ 27.300878][ T3316] veth1_vlan: entered promiscuous mode [ 27.308592][ T3317] veth1_vlan: entered promiscuous mode [ 27.318348][ T3318] veth1_vlan: entered promiscuous mode [ 27.327234][ T3321] veth1_vlan: entered promiscuous mode [ 27.359516][ T3317] veth0_macvtap: entered promiscuous mode [ 27.368078][ T3316] veth0_macvtap: entered promiscuous mode [ 27.382075][ T3317] veth1_macvtap: entered promiscuous mode [ 27.390225][ T3327] veth0_vlan: entered promiscuous mode [ 27.396480][ T3316] veth1_macvtap: entered promiscuous mode [ 27.403779][ T3321] veth0_macvtap: entered promiscuous mode [ 27.417232][ T3318] veth0_macvtap: entered promiscuous mode [ 27.424918][ T3321] veth1_macvtap: entered promiscuous mode [ 27.433171][ T3327] veth1_vlan: entered promiscuous mode [ 27.440491][ T3318] veth1_macvtap: entered promiscuous mode [ 27.450471][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.458604][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.474462][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.482874][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.491314][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.506996][ T2041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.515952][ T2041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.525891][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.533702][ T2041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.544177][ T2041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.553696][ T2041] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.565701][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.574762][ T2041] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.583611][ T2041] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.595404][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.602939][ T2041] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.618236][ T2041] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.630198][ T2041] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.643635][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 27.643648][ T29] audit: type=1400 audit(1767538872.976:90): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.G20ZT8/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.676672][ T29] audit: type=1400 audit(1767538872.976:91): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.698635][ T29] audit: type=1400 audit(1767538872.976:92): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.G20ZT8/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.723840][ T29] audit: type=1400 audit(1767538872.976:93): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.746279][ T29] audit: type=1400 audit(1767538872.976:94): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.G20ZT8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.772901][ T29] audit: type=1400 audit(1767538872.976:95): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.G20ZT8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.800335][ T29] audit: type=1400 audit(1767538872.976:96): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.821621][ T2041] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.822759][ T29] audit: type=1400 audit(1767538873.006:97): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 27.853180][ T29] audit: type=1400 audit(1767538873.006:98): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=4012 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 27.854003][ T3327] veth0_macvtap: entered promiscuous mode [ 27.891899][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.906775][ T2041] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.920098][ T2041] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.931989][ T3327] veth1_macvtap: entered promiscuous mode [ 27.940136][ T2041] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.954121][ T29] audit: type=1400 audit(1767538873.286:99): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 27.983449][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.000297][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.017919][ T2041] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.048689][ T2041] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.073123][ T2041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.093416][ T2041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.102941][ T2041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.113851][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 28.136520][ T3500] netlink: 'syz.0.1': attribute type 4 has an invalid length. [ 28.138892][ T2041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.144035][ T3500] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1'. [ 28.171007][ T3504] mmap: syz.4.5 (3504): VmData 29007872 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data. [ 28.189190][ T3500] .`: renamed from bond0 (while UP) [ 28.253290][ T3513] xt_TCPMSS: Only works on TCP SYN packets [ 28.319009][ T3514] netlink: 'syz.4.8': attribute type 1 has an invalid length. [ 28.400230][ T3516] IPv6: NLM_F_CREATE should be specified when creating new route [ 28.411289][ T3520] loop2: detected capacity change from 0 to 512 [ 28.436099][ T3520] EXT4-fs: Ignoring removed nobh option [ 28.461778][ T3520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 28.471028][ T3520] System zones: 1-12 [ 28.476152][ T3520] EXT4-fs (loop2): orphan cleanup on readonly fs [ 28.485007][ T3520] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 28.556737][ T3520] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.7: corrupted inode contents [ 28.579954][ T3520] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.7: mark_inode_dirty error [ 28.605460][ T3520] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.7: corrupted inode contents [ 28.632500][ T3520] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.7: mark_inode_dirty error [ 28.659517][ T3520] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.7: mark inode dirty (error -117) [ 28.692449][ T3520] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 28.704215][ T3520] EXT4-fs (loop2): 1 orphan inode deleted [ 28.710603][ T3520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 28.733302][ T3513] ======================================================= [ 28.733302][ T3513] WARNING: The mand mount option has been deprecated and [ 28.733302][ T3513] and is ignored by this kernel. Remove the mand [ 28.733302][ T3513] option from the mount to silence this warning. [ 28.733302][ T3513] ======================================================= [ 28.817287][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b999400: rx timeout, send abort [ 28.825554][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b999600: rx timeout, send abort [ 28.833810][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b999400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 28.848121][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b999600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 28.852951][ T3525] loop3: detected capacity change from 0 to 8192 [ 28.875804][ T3496] kernel write not supported for file /7/uid_map (pid: 3496 comm: kworker/1:9) [ 28.903596][ T3526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11'. [ 28.990841][ T3535] netlink: 830 bytes leftover after parsing attributes in process `syz.3.15'. [ 29.029972][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.037886][ T3537] loop4: detected capacity change from 0 to 1024 [ 29.048367][ T3537] EXT4-fs: Ignoring removed orlov option [ 29.071365][ T3537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.087656][ T3541] 9p: Bad value for 'wfdno' [ 29.150610][ T3554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 29.182063][ T3552] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.185425][ T3537] syz.4.16 uses obsolete (PF_INET,SOCK_PACKET) [ 29.300396][ T3563] loop2: detected capacity change from 0 to 512 [ 29.309726][ T3563] EXT4-fs: Ignoring removed i_version option [ 29.315794][ T3563] EXT4-fs: Ignoring removed bh option [ 29.341506][ T3563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.354805][ T3563] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 29.482061][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.517935][ T3571] loop4: detected capacity change from 0 to 1024 [ 29.525268][ T3571] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 29.536479][ T3571] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 29.544828][ T3571] EXT4-fs (loop4): orphan cleanup on readonly fs [ 29.551824][ T3571] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.26: Invalid inode table block 0 in block_group 0 [ 29.564674][ T3571] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 29.574476][ T3571] EXT4-fs error (device loop4): ext4_quota_write:7375: inode #3: comm syz.4.26: mark_inode_dirty error [ 29.585707][ T3571] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.26: Failed to acquire dquot type 0 [ 29.596984][ T3571] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.26: Invalid inode table block 0 in block_group 0 [ 29.609688][ T3571] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 29.619186][ T3571] EXT4-fs error (device loop4): ext4_ext_truncate:4475: inode #15: comm syz.4.26: mark_inode_dirty error [ 29.630973][ T3571] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.26: Invalid inode table block 0 in block_group 0 [ 29.644183][ T3571] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 29.653756][ T3571] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 29.662956][ T3571] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz.4.26: Invalid inode table block 0 in block_group 0 [ 29.675643][ T3571] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 29.685121][ T3571] EXT4-fs error (device loop4): ext4_truncate:4635: inode #15: comm syz.4.26: mark_inode_dirty error [ 29.696193][ T3571] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 29.705378][ T3571] EXT4-fs (loop4): 1 truncate cleaned up [ 29.711431][ T3571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.733879][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.782407][ T3574] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 29.799114][ T3574] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 29.825631][ T3574] loop1: detected capacity change from 0 to 2048 [ 29.839936][ T3574] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=8842c128, mo2=0002] [ 29.849994][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.867499][ T3574] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.28: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 29.887738][ T3574] EXT4-fs (loop1): Remounting filesystem read-only [ 29.971242][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.980276][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bb5ca00: rx timeout, send abort [ 29.980318][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bb5c800: rx timeout, send abort [ 29.980500][ T3554] syz.3.22 (3554) used greatest stack depth: 10192 bytes left [ 29.988571][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb5ca00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 30.018432][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb5c800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 30.079601][ T3595] loop0: detected capacity change from 0 to 1024 [ 30.086381][ T3595] EXT4-fs: Ignoring removed orlov option [ 30.101986][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.234059][ T3602] netlink: 7 bytes leftover after parsing attributes in process `syz.1.33'. [ 30.243221][ T3590] loop3: detected capacity change from 0 to 512 [ 30.264577][ T3590] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 30.276837][ T3602] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33'. [ 30.285915][ T3602] netlink: 60 bytes leftover after parsing attributes in process `syz.1.33'. [ 30.304725][ T3590] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.31: iget: bad i_size value: 12154757448730 [ 30.318825][ T3590] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.31: couldn't read orphan inode 13 (err -117) [ 30.331572][ T3590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.361430][ T3552] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.386604][ T3590] ip6t_srh: unknown srh match flags 4000 [ 30.388408][ T3606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.34'. [ 30.422538][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.454578][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.467180][ T3552] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.501676][ T3611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 30.532520][ T3552] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.552240][ T3613] loop1: detected capacity change from 0 to 512 [ 30.560494][ T3613] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 30.569216][ T3613] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 30.580554][ T3613] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.37: Allocating blocks 41-42 which overlap fs metadata [ 30.594449][ T3613] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.37: Allocating blocks 41-42 which overlap fs metadata [ 30.608497][ T3613] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.37: Failed to acquire dquot type 1 [ 30.619824][ T3613] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 30.634375][ T3613] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.37: corrupted inode contents [ 30.646063][ T2041] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.654508][ T3613] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.37: mark_inode_dirty error [ 30.656667][ T2041] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.666086][ T3613] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.37: corrupted inode contents [ 30.686133][ T2041] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.689181][ T3613] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.37: mark_inode_dirty error [ 30.696176][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.715301][ T2041] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.723835][ T3613] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.37: corrupted inode contents [ 30.736387][ T3613] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 30.745486][ T3613] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.37: corrupted inode contents [ 30.763817][ T3613] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.37: mark_inode_dirty error [ 30.774998][ T3613] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 30.784955][ T3613] EXT4-fs (loop1): 1 truncate cleaned up [ 30.792512][ T3613] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.825305][ T3613] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 30.859364][ T3613] syz.1.37 (3613) used greatest stack depth: 9440 bytes left [ 30.889709][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.966885][ T3643] Zero length message leads to an empty skb [ 31.011908][ T3649] loop1: detected capacity change from 0 to 1024 [ 31.018660][ T3649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.031585][ T3649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.047449][ T3649] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.586526][ T3664] netlink: 'syz.0.53': attribute type 30 has an invalid length. [ 31.632533][ T3670] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.641336][ T3670] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.660603][ T3670] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.55: Allocating blocks 41-42 which overlap fs metadata [ 31.674606][ T3670] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.55: Allocating blocks 41-42 which overlap fs metadata [ 31.688525][ T3670] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.55: Failed to acquire dquot type 1 [ 31.700219][ T3670] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 31.727279][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.55: corrupted inode contents [ 31.746741][ T3670] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.55: mark_inode_dirty error [ 31.758161][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.55: corrupted inode contents [ 31.772813][ T3670] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.55: mark_inode_dirty error [ 31.816912][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.55: corrupted inode contents [ 31.830521][ T3670] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 31.839451][ T3670] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.55: corrupted inode contents [ 31.857770][ T3670] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.55: mark_inode_dirty error [ 31.859544][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.885030][ T3670] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 31.894764][ T3670] EXT4-fs (loop2): 1 truncate cleaned up [ 31.901516][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.067941][ T3670] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 32.101441][ T3690] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.114525][ T3690] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.174607][ T3690] EXT4-fs (loop0): 1 truncate cleaned up [ 32.181091][ T3690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.315975][ T3702] IPv6: addrconf: prefix option has invalid lifetime [ 32.328149][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.376747][ T3710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.392088][ T3715] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.425037][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.462444][ T3715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.483925][ T3715] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.516324][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.527219][ C0] hrtimer: interrupt took 26837 ns [ 32.597010][ T3743] smc: net device bond0 applied user defined pnetid SYZ0 [ 32.606215][ T3743] smc: net device bond0 erased user defined pnetid SYZ0 [ 32.622701][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.672386][ T29] kauditd_printk_skb: 934 callbacks suppressed [ 32.672401][ T29] audit: type=1400 audit(1767538877.998:1024): avc: denied { create } for pid=3744 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.725055][ T29] audit: type=1400 audit(1767538877.998:1025): avc: denied { write } for pid=3744 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.745099][ T29] audit: type=1400 audit(1767538877.998:1026): avc: denied { nlmsg_write } for pid=3744 comm="syz.0.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.766963][ T3738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.787530][ T3738] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.804864][ T3751] netlink: 'syz.1.79': attribute type 4 has an invalid length. [ 32.809690][ T3751] .`: renamed from bond0 (while UP) [ 32.821810][ T29] audit: type=1400 audit(1767538878.148:1027): avc: denied { create } for pid=3737 comm="syz.4.76" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 32.921953][ T29] audit: type=1400 audit(1767538878.238:1028): avc: denied { create } for pid=3756 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 32.942249][ T29] audit: type=1400 audit(1767538878.238:1029): avc: denied { read } for pid=3756 comm="syz.1.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 32.963987][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.978141][ T29] audit: type=1400 audit(1767538878.298:1030): avc: denied { create } for pid=3759 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 33.000037][ T29] audit: type=1400 audit(1767538878.328:1031): avc: denied { setopt } for pid=3759 comm="syz.1.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 33.235458][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811bb45a00: rx timeout, send abort [ 33.243696][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b9c6400: rx timeout, send abort [ 33.252890][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb45a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.267179][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b9c6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.350657][ T29] audit: type=1400 audit(1767538878.618:1032): avc: denied { setopt } for pid=3764 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.370742][ T29] audit: type=1326 audit(1767538878.628:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.1.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 33.444567][ T3769] process 'syz.2.85' launched '/dev/fd/7' with NULL argv: empty string added [ 33.480482][ T3771] syzkaller0: entered promiscuous mode [ 33.485972][ T3771] syzkaller0: entered allmulticast mode [ 33.573162][ T3778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.706403][ T3778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.716179][ T3778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.717987][ T3787] __nla_validate_parse: 5 callbacks suppressed [ 33.717999][ T3787] netlink: 96 bytes leftover after parsing attributes in process `syz.4.94'. [ 33.725070][ T3778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.788020][ T3778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 33.997541][ T3796] set_capacity_and_notify: 5 callbacks suppressed [ 33.997556][ T3796] loop3: detected capacity change from 0 to 1024 [ 34.076539][ T3796] EXT4-fs: Ignoring removed orlov option [ 34.143375][ T3796] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.502557][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.564047][ T3848] loop1: detected capacity change from 0 to 256 [ 34.593845][ T3848] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 34.642399][ T3863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'. [ 34.660953][ T3867] netlink: 4 bytes leftover after parsing attributes in process `syz.1.101'. [ 34.683904][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bb65600: rx timeout, send abort [ 34.692132][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811bb65800: rx timeout, send abort [ 34.700500][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb65600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.714790][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811bb65800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.752704][ T3870] loop4: detected capacity change from 0 to 512 [ 34.775680][ T3870] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.103: corrupted in-inode xattr: bad e_name length [ 34.791759][ T3870] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.103: couldn't read orphan inode 15 (err -117) [ 34.804831][ T3870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.822390][ T3870] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.888506][ T3887] netlink: 'syz.4.105': attribute type 4 has an invalid length. [ 34.896423][ T3887] netlink: 152 bytes leftover after parsing attributes in process `syz.4.105'. [ 34.920348][ T3887] .`: renamed from bond0 (while UP) [ 35.001406][ T3902] loop4: detected capacity change from 0 to 1024 [ 35.008337][ T3902] EXT4-fs: Ignoring removed nobh option [ 35.013969][ T3902] EXT4-fs: inline encryption not supported [ 35.031982][ T3902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.060051][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.336160][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b98e800: rx timeout, send abort [ 35.344406][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b98ee00: rx timeout, send abort [ 35.353333][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b98e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 35.367643][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b98ee00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 35.470984][ T3965] loop3: detected capacity change from 0 to 128 [ 35.564071][ T3977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.115'. [ 35.573245][ T3977] netem: change failed [ 35.580387][ T3980] netlink: 'syz.3.114': attribute type 6 has an invalid length. [ 35.580920][ T3977] netlink: 'syz.4.115': attribute type 10 has an invalid length. [ 35.610505][ T3977] team0: Port device dummy0 added [ 35.625397][ T3977] netlink: 'syz.4.115': attribute type 10 has an invalid length. [ 35.647325][ T3977] team0: Port device dummy0 removed [ 35.655043][ T3977] .`: (slave dummy0): Enslaving as an active interface with an up link [ 35.670254][ T3977] loop4: detected capacity change from 0 to 1024 [ 35.690631][ T3977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.705323][ T3977] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.115: missing EA_INODE flag [ 35.717722][ T3977] EXT4-fs (loop4): Remounting filesystem read-only [ 35.724290][ T3977] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.751903][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.786932][ T4000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.818423][ T4002] netlink: 'syz.2.117': attribute type 4 has an invalid length. [ 35.826284][ T4002] netlink: 152 bytes leftover after parsing attributes in process `syz.2.117'. [ 35.841140][ T4002] .`: renamed from bond0 (while UP) [ 35.952311][ T4000] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 36.175350][ T4019] loop4: detected capacity change from 0 to 732 [ 36.206449][ T4019] iso9660: Unknown parameter ' ' [ 36.377808][ T4027] netlink: 36 bytes leftover after parsing attributes in process `syz.4.126'. [ 36.482541][ T4031] netlink: 'syz.2.127': attribute type 3 has an invalid length. [ 36.482555][ T4031] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 36.482614][ T4031] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.127'. [ 36.538318][ T4033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.128'. [ 36.558494][ T4036] loop2: detected capacity change from 0 to 512 [ 36.567069][ T4036] ext4: Unknown parameter 'afs_flock_ev' [ 36.573170][ T4033] netlink: 'syz.3.128': attribute type 1 has an invalid length. [ 36.615016][ T4043] loop0: detected capacity change from 0 to 512 [ 36.631844][ T4043] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.660408][ T4043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.673473][ T4043] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.694424][ T4052] loop4: detected capacity change from 0 to 1024 [ 36.701704][ T4052] EXT4-fs: Ignoring removed orlov option [ 36.711782][ T4052] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.783510][ T4043] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.132: Failed to acquire dquot type 0 [ 36.796202][ T4043] netlink: 'syz.0.132': attribute type 21 has an invalid length. [ 36.826790][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.880578][ T4064] netlink: 'syz.0.137': attribute type 39 has an invalid length. [ 37.023750][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.188727][ T4083] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.201273][ T4083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.213884][ T4083] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.240639][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.258454][ T4088] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 37.269998][ T1040] IPVS: starting estimator thread 0... [ 37.273336][ T4086] hub 2-0:1.0: USB hub found [ 37.276020][ T4088] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 37.289160][ T4088] Symlink component flag not implemented [ 37.294796][ T4088] Symlink component flag not implemented [ 37.297132][ T4086] hub 2-0:1.0: 8 ports detected [ 37.300981][ T4088] Symlink component flag not implemented (7) [ 37.311946][ T4088] Symlink component flag not implemented (116) [ 37.378817][ T4089] IPVS: using max 2544 ests per chain, 127200 per kthread [ 37.539038][ T4123] SELinux: Context ›Y is not valid (left unmapped). [ 37.551801][ T4123] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 37.652358][ T4143] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.686321][ T4065] syz.2.138 (4065) used greatest stack depth: 9384 bytes left [ 37.796748][ T4165] FAULT_INJECTION: forcing a failure. [ 37.796748][ T4165] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.810598][ T4165] CPU: 0 UID: 0 PID: 4165 Comm: syz.2.160 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.810626][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.810710][ T4165] Call Trace: [ 37.810721][ T4165] [ 37.810728][ T4165] __dump_stack+0x1d/0x30 [ 37.810750][ T4165] dump_stack_lvl+0x95/0xd0 [ 37.810768][ T4165] dump_stack+0x15/0x1b [ 37.810784][ T4165] should_fail_ex+0x265/0x280 [ 37.810866][ T4165] should_fail+0xb/0x20 [ 37.810881][ T4165] should_fail_usercopy+0x1a/0x20 [ 37.810902][ T4165] _copy_from_user+0x1c/0xb0 [ 37.810924][ T4165] do_seccomp+0x118/0xa30 [ 37.810971][ T4165] prctl_set_seccomp+0x4c/0x70 [ 37.811052][ T4165] __se_sys_prctl+0x24e/0x12e0 [ 37.811074][ T4165] __x64_sys_prctl+0x67/0x80 [ 37.811095][ T4165] x64_sys_call+0x21b8/0x3000 [ 37.811117][ T4165] do_syscall_64+0xca/0x2b0 [ 37.811226][ T4165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.811248][ T4165] RIP: 0033:0x7f5a6939f749 [ 37.811263][ T4165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.811286][ T4165] RSP: 002b:00007f5a67e07038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 37.811313][ T4165] RAX: ffffffffffffffda RBX: 00007f5a695f5fa0 RCX: 00007f5a6939f749 [ 37.811326][ T4165] RDX: 0000200000000000 RSI: 0000000000000002 RDI: 0000000000000016 [ 37.811339][ T4165] RBP: 00007f5a67e07090 R08: 0000000000000000 R09: 0000000000000000 [ 37.811351][ T4165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.811420][ T4165] R13: 00007f5a695f6038 R14: 00007f5a695f5fa0 R15: 00007ffd061d2b48 [ 37.811437][ T4165] [ 37.821398][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 37.821411][ T29] audit: type=1326 audit(1767538883.148:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 38.041218][ T29] audit: type=1326 audit(1767538883.238:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff27a0af783 code=0x7ffc0000 [ 38.064626][ T29] audit: type=1326 audit(1767538883.238:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff27a0af807 code=0x7ffc0000 [ 38.087892][ T29] audit: type=1326 audit(1767538883.238:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff27a066bdd code=0x7ffc0000 [ 38.111206][ T29] audit: type=1326 audit(1767538883.238:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff27a0e3e89 code=0x7ffc0000 [ 38.134694][ T29] audit: type=1326 audit(1767538883.238:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff27a066c47 code=0x7ffc0000 [ 38.158184][ T29] audit: type=1326 audit(1767538883.238:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 38.181574][ T29] audit: type=1326 audit(1767538883.238:1574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 38.205228][ T29] audit: type=1326 audit(1767538883.238:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 38.228581][ T29] audit: type=1326 audit(1767538883.238:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4167 comm="syz.1.161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 38.430031][ T4228] iso9660: Unknown parameter '' [ 38.536124][ T4246] EXT4-fs: Ignoring removed orlov option [ 38.563414][ T4246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.882907][ T4276] __nla_validate_parse: 8 callbacks suppressed [ 38.882921][ T4276] netlink: 80 bytes leftover after parsing attributes in process `syz.1.179'. [ 39.020004][ T4247] loop0: p1 < > p2 p3 < p5 p6 > p4 [ 39.025229][ T4247] loop0: partition table partially beyond EOD, truncated [ 39.050794][ T4247] loop0: p1 start 100663296 is beyond EOD, truncated [ 39.057667][ T4247] loop0: p2 size 134217732 extends beyond EOD, truncated [ 39.086007][ T4247] loop0: p4 size 14876672 extends beyond EOD, truncated [ 39.142951][ T4247] loop0: p5 size 134217732 extends beyond EOD, truncated [ 39.151937][ T4247] loop0: p6 size 14876672 extends beyond EOD, truncated [ 39.621753][ T4298] bond1 (unregistering): Released all slaves [ 39.633296][ T4303] ref_ctr_offset mismatch. inode: 0xdd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x18 [ 39.659624][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.757041][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 40.061522][ T4330] set_capacity_and_notify: 6 callbacks suppressed [ 40.061574][ T4330] loop2: detected capacity change from 0 to 512 [ 40.175682][ T4330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.251114][ T4330] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.365611][ T4313] loop1: detected capacity change from 0 to 1024 [ 40.431123][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.473428][ T4313] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.187: bad orphan inode 134217728 [ 40.486088][ T4380] netlink: 6068 bytes leftover after parsing attributes in process `syz.0.197'. [ 40.488601][ T4313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.529214][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 40.549092][ T4383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47083 sclass=netlink_route_socket pid=4383 comm=syz.2.196 [ 40.565473][ T4383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 40.619418][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.674693][ T4398] loop1: detected capacity change from 0 to 2048 [ 40.710958][ T4398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 40.726407][ T4405] loop0: detected capacity change from 0 to 512 [ 40.739741][ T4405] /dev/loop0: Can't open blockdev [ 40.814723][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 41.060178][ T4458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.209'. [ 41.069769][ T4458] netlink: 28 bytes leftover after parsing attributes in process `syz.3.209'. [ 41.117619][ T4467] netlink: 'syz.3.211': attribute type 4 has an invalid length. [ 41.125339][ T4467] netlink: 152 bytes leftover after parsing attributes in process `syz.3.211'. [ 41.151106][ T4467] .`: renamed from bond0 (while UP) [ 41.318625][ T4500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.215'. [ 41.464802][ T4522] loop3: detected capacity change from 0 to 512 [ 41.474096][ T4522] EXT4-fs: inline encryption not supported [ 41.483356][ T4522] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=684ec099, mo2=0003] [ 41.496641][ T4522] System zones: 1-12 [ 41.501750][ T4522] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.217: bg 0: block 288: padding at end of block bitmap is not set [ 41.516301][ T4522] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 41.529967][ T4522] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.217: attempt to clear invalid blocks 1024 len 1 [ 41.543558][ T4522] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.217: invalid indirect mapped block 1819239214 (level 0) [ 41.558356][ T4522] EXT4-fs (loop3): 1 truncate cleaned up [ 41.564499][ T4522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.595602][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.809842][ T4566] mmap: syz.3.220 (4566) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.047236][ T4597] loop0: detected capacity change from 0 to 512 [ 42.057918][ T4597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.067338][ T4597] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.110527][ T4597] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.228: Allocating blocks 41-42 which overlap fs metadata [ 42.159209][ T4597] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4215: comm syz.0.228: Allocating blocks 41-42 which overlap fs metadata [ 42.174715][ T4600] loop2: detected capacity change from 0 to 8192 [ 42.206762][ T4605] loop3: detected capacity change from 0 to 512 [ 42.213007][ T4607] loop1: detected capacity change from 0 to 764 [ 42.222963][ T4607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4607 comm=syz.1.231 [ 42.239058][ T4597] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.228: Failed to acquire dquot type 1 [ 42.275665][ T4597] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 42.278013][ T4609] loop1: detected capacity change from 0 to 2048 [ 42.301092][ T4597] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.228: corrupted inode contents [ 42.315930][ T4605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.320000][ T4597] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #12: comm syz.0.228: mark_inode_dirty error [ 42.330630][ T4605] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.345512][ T4609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.364091][ T4597] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.228: corrupted inode contents [ 42.367943][ T4609] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 42.391821][ T4609] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 30 with max blocks 1 with error 28 [ 42.404108][ T4609] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.404108][ T4609] [ 42.413835][ T4609] EXT4-fs (loop1): Total free blocks count 0 [ 42.420426][ T4609] EXT4-fs (loop1): Free/Dirty block details [ 42.426369][ T4609] EXT4-fs (loop1): free_blocks=2415919104 [ 42.432156][ T4609] EXT4-fs (loop1): dirty_blocks=32 [ 42.437264][ T4609] EXT4-fs (loop1): Block reservation details [ 42.443938][ T4609] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 42.452002][ T4597] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #12: comm syz.0.228: mark_inode_dirty error [ 42.468662][ T4597] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.228: corrupted inode contents [ 42.482699][ T4597] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 42.500031][ T4609] syz.1.232 (4609) used greatest stack depth: 9352 bytes left [ 42.506544][ T4597] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #12: comm syz.0.228: corrupted inode contents [ 42.521036][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 42.535130][ T4597] EXT4-fs error (device loop0): ext4_truncate:4635: inode #12: comm syz.0.228: mark_inode_dirty error [ 42.546574][ T4597] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 42.556176][ T4597] EXT4-fs (loop0): 1 truncate cleaned up [ 42.562792][ T4597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.710135][ T4597] ext4: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 42.836293][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 42.836308][ T29] audit: type=1400 audit(1767538888.158:2083): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.864061][ T29] audit: type=1400 audit(1767538888.158:2084): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.885800][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.936011][ T29] audit: type=1326 audit(1767538888.228:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 42.960037][ T29] audit: type=1326 audit(1767538888.228:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 42.983349][ T29] audit: type=1326 audit(1767538888.228:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 43.007448][ T29] audit: type=1326 audit(1767538888.228:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 43.031426][ T29] audit: type=1326 audit(1767538888.228:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 43.055512][ T29] audit: type=1326 audit(1767538888.228:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 43.078930][ T29] audit: type=1326 audit(1767538888.228:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 43.103535][ T29] audit: type=1326 audit(1767538888.228:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4629 comm="syz.1.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff27a0af749 code=0x7ffc0000 [ 43.157036][ T4646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 43.170388][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.178486][ T4643] EXT4-fs (loop0): orphan cleanup on readonly fs [ 43.185975][ T4643] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.239: corrupted in-inode xattr: invalid size in ea xattr [ 43.215793][ T4643] EXT4-fs (loop0): Remounting filesystem read-only [ 43.246255][ T4643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.281413][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.372644][ T4664] bridge_slave_0: left allmulticast mode [ 43.378326][ T4664] bridge_slave_0: left promiscuous mode [ 43.384169][ T4664] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.400769][ T4664] bridge_slave_1: left allmulticast mode [ 43.406463][ T4664] bridge_slave_1: left promiscuous mode [ 43.412739][ T4664] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.451600][ T4664] .`: (slave bond_slave_0): Releasing backup interface [ 43.469693][ T4664] .`: (slave bond_slave_1): Releasing backup interface [ 43.490727][ T4664] team0: Port device team_slave_0 removed [ 43.509891][ T4667] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 43.524776][ T4664] team0: Port device team_slave_1 removed [ 43.539067][ T4667] EXT4-fs (loop3): orphan cleanup on readonly fs [ 43.546667][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.554087][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.564239][ T4667] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 43.577727][ T4664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.585167][ T4664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.589538][ T4667] EXT4-fs (loop3): Remounting filesystem read-only [ 43.599578][ T4667] EXT4-fs (loop3): 1 truncate cleaned up [ 43.601850][ T4664] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 43.621333][ T415] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.631896][ T415] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 43.646381][ T415] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 43.678318][ T4667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.725506][ T4685] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 43.756715][ T4685] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.831447][ T3316] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 43.839056][ T3316] FAT-fs (loop2): Filesystem has been set read-only [ 43.868689][ T3316] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 44.089979][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.118300][ T327] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.219718][ T327] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.282461][ T327] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.297260][ T4718] capability: warning: `syz.1.267' uses 32-bit capabilities (legacy support in use) [ 44.366998][ T327] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.703784][ T327] .` (unregistering): Released all slaves [ 44.763420][ T4756] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.272: bad orphan inode 134217728 [ 44.777446][ T4756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.792037][ T327] hsr_slave_0: left promiscuous mode [ 44.819163][ T327] hsr_slave_1: left promiscuous mode [ 44.832798][ T327] veth1_macvtap: left promiscuous mode [ 44.838483][ T327] veth0_macvtap: left promiscuous mode [ 44.853668][ T327] veth1_vlan: left promiscuous mode [ 44.859065][ T327] veth0_vlan: left promiscuous mode [ 44.981342][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.245664][ T4719] chnl_net:caif_netlink_parms(): no params data found [ 45.324950][ T4794] __nla_validate_parse: 2 callbacks suppressed [ 45.324962][ T4794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 45.361011][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.368414][ T4794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.385270][ T4794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.392741][ T4794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.514906][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.522933][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.555087][ T4811] set_capacity_and_notify: 5 callbacks suppressed [ 45.555101][ T4811] loop4: detected capacity change from 0 to 512 [ 45.585272][ T4719] bridge_slave_0: entered allmulticast mode [ 45.592011][ T4719] bridge_slave_0: entered promiscuous mode [ 45.598699][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.605796][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.613517][ T4719] bridge_slave_1: entered allmulticast mode [ 45.619960][ T4719] bridge_slave_1: entered promiscuous mode [ 45.652303][ T4811] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 45.694552][ T4811] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #13: comm syz.4.274: iget: bad i_size value: 12154757448730 [ 45.708084][ T4811] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.274: couldn't read orphan inode 13 (err -117) [ 45.711485][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.780634][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.813906][ T4811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.856121][ T4832] netlink: 'syz.3.286': attribute type 4 has an invalid length. [ 45.862281][ T4719] team0: Port device team_slave_0 added [ 45.864679][ T4832] netlink: 152 bytes leftover after parsing attributes in process `syz.3.286'. [ 45.900697][ T4719] team0: Port device team_slave_1 added [ 45.939511][ T4763] ip6t_srh: unknown srh match flags 4000 [ 45.971413][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.978390][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.004385][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.059920][ T4849] FAULT_INJECTION: forcing a failure. [ 46.059920][ T4849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 46.073066][ T4849] CPU: 0 UID: 0 PID: 4849 Comm: syz.3.288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.073097][ T4849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.073106][ T4849] Call Trace: [ 46.073111][ T4849] [ 46.073174][ T4849] __dump_stack+0x1d/0x30 [ 46.073205][ T4849] dump_stack_lvl+0x95/0xd0 [ 46.073227][ T4849] dump_stack+0x15/0x1b [ 46.073248][ T4849] should_fail_ex+0x265/0x280 [ 46.073268][ T4849] should_fail+0xb/0x20 [ 46.073337][ T4849] should_fail_usercopy+0x1a/0x20 [ 46.073362][ T4849] _copy_from_user+0x1c/0xb0 [ 46.073438][ T4849] ___sys_sendmsg+0xc1/0x1d0 [ 46.073476][ T4849] __x64_sys_sendmsg+0xd4/0x160 [ 46.073507][ T4849] x64_sys_call+0x17ba/0x3000 [ 46.073609][ T4849] do_syscall_64+0xca/0x2b0 [ 46.073641][ T4849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.073691][ T4849] RIP: 0033:0x7f2dbc1af749 [ 46.073707][ T4849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.073724][ T4849] RSP: 002b:00007f2dbac17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.073742][ T4849] RAX: ffffffffffffffda RBX: 00007f2dbc405fa0 RCX: 00007f2dbc1af749 [ 46.073752][ T4849] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000003 [ 46.073764][ T4849] RBP: 00007f2dbac17090 R08: 0000000000000000 R09: 0000000000000000 [ 46.073835][ T4849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.073848][ T4849] R13: 00007f2dbc406038 R14: 00007f2dbc405fa0 R15: 00007ffd640ebbf8 [ 46.073868][ T4849] [ 46.269487][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.276483][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.303134][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.422415][ T4719] hsr_slave_0: entered promiscuous mode [ 46.439142][ T4719] hsr_slave_1: entered promiscuous mode [ 46.457016][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 46.463437][ T4719] Cannot create hsr debugfs directory [ 46.472953][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.679688][ T4719] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.699420][ T4719] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.720061][ T4719] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.737785][ T4719] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.821019][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.854670][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.872831][ T327] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.879994][ T327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.913523][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.920644][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.047117][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.252538][ T4964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.293'. [ 47.285518][ T4719] veth0_vlan: entered promiscuous mode [ 47.299134][ T4719] veth1_vlan: entered promiscuous mode [ 47.342117][ T4719] veth0_macvtap: entered promiscuous mode [ 47.353302][ T4719] veth1_macvtap: entered promiscuous mode [ 47.376492][ T4976] loop3: detected capacity change from 0 to 256 [ 47.378356][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.407827][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.430453][ T2003] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.466530][ T4719] ================================================================== [ 47.474624][ T4719] BUG: KCSAN: data-race in __follow_mount_rcu / d_set_mounted [ 47.482073][ T4719] [ 47.484385][ T4719] read to 0xffff888100467540 of 4 bytes by task 3318 on cpu 1: [ 47.491897][ T4719] __follow_mount_rcu+0x19a/0x2f0 [ 47.496901][ T4719] step_into_slowpath+0x2f3/0x480 [ 47.501901][ T4719] link_path_walk+0x974/0xe30 [ 47.506555][ T4719] __filename_parentat+0x15c/0x3f0 [ 47.511645][ T4719] do_unlinkat+0x94/0x4b0 [ 47.515960][ T4719] __x64_sys_unlink+0x2e/0x40 [ 47.520614][ T4719] x64_sys_call+0x2f48/0x3000 [ 47.525273][ T4719] do_syscall_64+0xca/0x2b0 [ 47.529771][ T4719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.535652][ T4719] [ 47.538044][ T4719] write to 0xffff888100467540 of 4 bytes by task 4719 on cpu 0: [ 47.545647][ T4719] d_set_mounted+0xff/0x160 [ 47.550130][ T4719] get_mountpoint+0x197/0x370 [ 47.554798][ T4719] attach_recursive_mnt+0x11a/0x14c0 [ 47.560062][ T4719] graft_tree+0xf0/0x100 [ 47.564300][ T4719] do_loopback+0x21e/0x2a0 [ 47.568691][ T4719] path_mount+0x3e2/0xb80 [ 47.572992][ T4719] __se_sys_mount+0x28c/0x2e0 [ 47.577642][ T4719] __x64_sys_mount+0x67/0x80 [ 47.582205][ T4719] x64_sys_call+0x2cca/0x3000 [ 47.586861][ T4719] do_syscall_64+0xca/0x2b0 [ 47.591345][ T4719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.597214][ T4719] [ 47.599514][ T4719] Reported by Kernel Concurrency Sanitizer on: [ 47.605645][ T4719] CPU: 0 UID: 0 PID: 4719 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.615516][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.625553][ T4719] ================================================================== [ 47.647105][ T2003] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.657814][ T2003] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.668583][ T2003] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.189021][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 48.189035][ T29] audit: type=1326 audit(1767538893.518:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4970 comm="syz.3.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2dbc1af749 code=0x7ffc0000