last executing test programs: 5.302501439s ago: executing program 3 (id=236): r0 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x26, 0x40, 0x7, 0x0, 0x0, 0xa005a, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_config_ext={0x7}, 0x100987, 0x2, 0xb, 0x4, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x29, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_delete(0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='afs_make_fs_call1\x00', r5, 0x0, 0xffffffffffffff7f}, 0x45) r6 = epoll_create1(0x0) epoll_wait(r6, &(0x7f0000002a80)=[{}], 0x1, 0xffff0001) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000080)={0x9d32f4b2e0c65377}) unshare(0x26040600) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000a80)='kfree\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 5.05481275s ago: executing program 3 (id=239): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x77a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket(0x28, 0xa, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48844) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$usbmon(&(0x7f0000000040), 0x80, 0x240240) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000480), r1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 4.026950957s ago: executing program 1 (id=250): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x42, 0x0, 0x2}, {}, {}, {0x20, 0x0, 0x0, 0x20}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getpeername(r2, 0x0, 0x0) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="3fd89e15", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) write$cgroup_devices(r3, 0x0, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delqdisc={0x88, 0x25, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0xe}, {0x11, 0xe}, {0xe, 0x6}}, [@TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x80, 0x800, 0x2, 0x5, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x39, 0x4, 0x8, 0xb, 0x2, 0x81}}, {0x4}}, {{0x1c, 0x1, {0x80, 0xc9, 0x7fff, 0x8, 0x2, 0x5, 0x1ff}}, {0x4}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4081}, 0x4044814) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) io_setup(0x8000, &(0x7f0000000280)) openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/kernel/rcu_expedited', 0x42, 0x80) 3.632324659s ago: executing program 4 (id=254): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0xc5, 0xe2b03) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000003340)=0x400) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYBLOB="91863db4a183ad4d43c3a50f4ed7c08e3d1d013e8d91fadd5abc1ca866dcde07497c9be70d4f56002c3b64016ff5ef5755ad8fb1d6b884d7a6abca06e4178da839c29dc7cbd67be33b80dda6f03ba4a13bc0ee0604ff4c265ed98056a4146601313517bfcd453bb20c7de5a95472e9afed51f2249f7a28b84297", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) r9 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x3, 0x257, 0x0, r7}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r9, 0x47ba, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000600)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f0000000580)=ANY=[], 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 3.193934591s ago: executing program 4 (id=257): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d360887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0x9a7e2000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0), 0x14) syz_open_dev$hidraw(&(0x7f0000000040), 0x6, 0x3f1880) recvmsg$inet_nvme(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x2, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0xf792, 0x80, 0x9, 0x201}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.052818422s ago: executing program 1 (id=260): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000"], 0x48) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r1, 0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @broadcast, @broadcast}, &(0x7f0000000240)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000380)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f0000000300)='GPL\x00', 0x7fff, 0x91, &(0x7f0000000440)=""/145, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x9, 0x3, 0x91b, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000680)=[{0x2, 0x5, 0xe, 0x6}, {0x0, 0x3, 0x9, 0x1}], 0x10, 0xd}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0xffffffffffffffff, 0x832, 0x8}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) r6 = epoll_create1(0x80000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r7, &(0x7f0000000100)=""/177, 0x39) epoll_pwait(r6, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8915, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x1a, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x3, 0x3, 0x4, 0x7, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0xa, 0x8, 0x4, 0x10}, @ldst={0x2, 0x3, 0x0, 0x6, 0x8, 0x2, 0xffffffffffffffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x21, '\x00', r2, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0xd, 0x2, 0xb}, 0x10, 0x28f11, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, r7, r7, r0, r1, r3], &(0x7f0000000c40), 0x10, 0x7}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r8, 0x0, 0x24, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0xc}, @empty}, 0xc) 2.945954823s ago: executing program 4 (id=261): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x3}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r0, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ftruncate(r3, 0xf4ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.872328123s ago: executing program 2 (id=262): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) fcntl$setown(r0, 0x8, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(&(0x7f0000000040)={0x20080522}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r10 = gettid() r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r11, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.798356394s ago: executing program 1 (id=263): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x650}, 0x18) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x700, 0x3, 0x5, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x2}, @timestamp={0x44, 0x20, 0x80, 0x0, 0x6, [0x80000001, 0x2, 0x7, 0x7000, 0x80, 0x7, 0x0]}, @ssrr={0x89, 0xf, 0xf3, [@rand_addr=0x64010102, @multicast2, @local]}, @noop, @rr={0x7, 0x1f, 0x71, [@broadcast, @loopback, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2]}, @generic={0x7, 0xc, "3c760638932735e09958"}, @noop]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 2.793122664s ago: executing program 4 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000004008500000082000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001fc0), &(0x7f0000002000)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002040)) getegid() syz_clone(0x40000500, &(0x7f0000002080)="fbb3b90e65a2018c57258f7a8f60ed799d", 0x11, &(0x7f00000020c0), 0x0, &(0x7f0000002140)="0d647a303ea1b94f7125dd80a915ef908e120e914e7760441e40c42d870d42a60080596ae6bd3b1e") 2.462634086s ago: executing program 0 (id=265): openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x15, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) stat(0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtaction={0x898, 0x30, 0xfbed, 0x70bd29, 0x25dfdbff, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x3, 0x4, 0x5, 0x2, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5f41fde7, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7ff, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x75b, 0x0, 0x0, 0xf, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa84911, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xfff, 0x1, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xffffffff, 0x7, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x17a00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8db, 0xffffffff, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xcd9, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0xfffffffc, 0x9, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0xfffc, 0x5}, {0x5, 0x0, 0x0, 0x9, 0x0, 0xfffffffc}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001b40), r6) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fbdbdf25070000001400018008000500030000e9050001"], 0x28}}, 0x4000) r8 = epoll_create(0xf) ioctl$SIOCX25SENDCALLACCPT(r8, 0x89e9) 1.73424406s ago: executing program 3 (id=266): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x3, 0x1, 0x8, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000000280)='B', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x60000000, 0x0, 0x1, 0x6}) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x450c015aada7be74) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000040}, 0x44004) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) recvmmsg(r2, &(0x7f0000000bc0), 0x0, 0x40014102, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 1.667118391s ago: executing program 1 (id=267): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x80}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x20004010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000005c0)='9p_protocol_dump\x00', r6}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000700)=0xfff, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="34000000000201040000000000000000020000001800028014000180080001000000800008000200e00000010400038004000180"], 0x34}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x0, 0x8, 0x300}}) 1.657119371s ago: executing program 2 (id=268): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) write$selinux_load(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'tunl0\x00'}) memfd_secret(0x80000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0x9}}}, 0x24}}, 0x0) 1.595072991s ago: executing program 0 (id=269): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x0, 0x2, 0x801eb}, &(0x7f0000000300), &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x6, 0x2, 0x7ffcfffc}]}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) 1.511880052s ago: executing program 0 (id=270): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x0, 0x2, 0x801eb}, &(0x7f0000000300)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x6, 0x2, 0x7ffcfffc}]}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000300)=0x0, &(0x7f0000000800)) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='bridge\x00') r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x749d, 0x4, 0x0, 0x0, 0x0) 1.156054604s ago: executing program 3 (id=271): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x3}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r0, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ftruncate(r3, 0xf4ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.083033144s ago: executing program 0 (id=272): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r0, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ftruncate(r3, 0xf4ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 966.052165ms ago: executing program 2 (id=273): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) unshare(0x20060400) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x7fffffff, 0x7f, {{0x7, 0x4, 0x0, 0x3f, 0x1c, 0x67, 0x0, 0x6, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x7, 0x28, [@multicast2]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000900000001010000070900000000020053351e6c2441b132f2742240f4109ed36cdd7ca6fedf65580750cf70a2effa95a5", @ANYRES32=r5, @ANYBLOB="57f400"/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0000000004000000020000000500"/28], 0x50) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, 0x0) syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 912.743565ms ago: executing program 0 (id=274): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x10, 0x800) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e00000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000821b65b197ab7a31bcce2ef40c65952e63b1709f7548127b83308f620000000000000052b60000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0, @val=@netfilter={0x3, 0x0, 0x3, 0x1}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, r9, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0x7}, {0xfff2, 0x4}, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0x9635, 0x4) 848.547466ms ago: executing program 4 (id=275): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r7}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r6}, 0x18) r9 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r9, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) r10 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x9e}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="a3a61634fe7be488290cd5ff662bb10108dc8544ef0226f05e4f6ba9c1f108c6b54663d1fe9bd4f96d3c8e21d4ae81d3683efe884c30196a26bc2c6d18d6df243f0224d9d727d67d387f0234723d1da39b52115f26ea367e1236f7ff064bddb551e2deb5ed269f85f4da514ef2fb33e28cc0c590fe66bae3c3cdef2b86901b5b388b816454274a73f8c4592413d3214bb0", @ANYRESOCT=r8, @ANYRES64=r5, @ANYRES32=r4, @ANYRES8=r9, @ANYRES32=r0], 0x98}, 0x1, 0x7}, 0x954d0bf3b845843d) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file1\x00', 0x805871, 0x0, 0x3, 0x0, &(0x7f0000000140)) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7800000010004b0400000000000000167a000002", @ANYRES32=0x0, @ANYBLOB="129c000044100000580012800b0001006272696467650000480002800a0014000180c200000000000600090000000000050024000000000005001800000000000500170000000000050025"], 0x78}}, 0x0) link(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 776.957846ms ago: executing program 1 (id=276): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x650}, 0x18) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x700, 0x3, 0x5, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x2}, @timestamp={0x44, 0x20, 0x80, 0x0, 0x6, [0x80000001, 0x2, 0x7, 0x7000, 0x80, 0x7, 0x0]}, @ssrr={0x89, 0xf, 0xf3, [@rand_addr=0x64010102, @multicast2, @local]}, @noop, @rr={0x7, 0x1f, 0x71, [@broadcast, @loopback, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2]}, @generic={0x7, 0xc, "3c760638932735e09958"}, @noop]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="7b0af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 638.082847ms ago: executing program 0 (id=277): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='mmap_lock_acquire_returned\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0x650}, 0x18) sendfile(r0, r0, &(0x7f0000001000), 0xffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x700, 0x700, 0x3, 0x5, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x65, 0x0, 0x8, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x88, 0x2}, @timestamp={0x44, 0x20, 0x80, 0x0, 0x6, [0x80000001, 0x2, 0x7, 0x7000, 0x80, 0x7, 0x0]}, @ssrr={0x89, 0xf, 0xf3, [@rand_addr=0x64010102, @multicast2, @local]}, @noop, @rr={0x7, 0x1f, 0x71, [@broadcast, @loopback, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2]}, @generic={0x7, 0xc, "3c760638932735e09958"}, @noop]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 611.074007ms ago: executing program 3 (id=278): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"/456], 0x1c8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0xd, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYRES16=r3, @ANYRES16, @ANYRESHEX=0x0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRESOCT=r2], 0x80}}, 0x20008800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='mm_page_free\x00', r6, 0x0, 0x800000000000002}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c9rXFsdAPDvnUwySVpNBEF9q4CggcebmBrfU3BRcSGChYKubcNkGmommZKZlCYEmi4EN4KKC0E3XfujLgS3/tjqPyEupKVoGqwrmce9uZOfM5OkzUxS8vnAnXvO/XXOmXPuuWfmXmYCuLKm0pdCxOci4idJxES+fCgihrNQMeLm7navtzcr6ZREq/XdfyeRRMQfru0fK8nn1/LIZyPiLz+MeL9wNNWxfF6rruahmebyg5nG+sYH95fnF6uL1ZUPZ+fmbnz0lY8+PL7Xm/rv3zeuv/jpt774u5vF+MyzH/81iZtxPV+3s71ZecvDHzMVU/l7Mpy+hYd887wTu2DJRWeAN1LIz/VipH3ARAxloS7e9gQEAC6FxxHRAgCumMT1HwCumPb3ADvbm5X2dLHfSAzWy29ExOhu+dv3N3fXFPN7dqPZfdDxneTQnZEkIibPIf2piPjVH7//m3SKPt2HBOhk60lE3J2c2tkuHen/k7T/Gzn5CKWua77Ua7fW7n5TRxbr/2Bw/pSOf756fPz33t4DPaPZ65Hxz2ipw7n7Jk4+/wvPu+x6ir7pZOn47+sHnm3bH//tPbQ2OZTHPpGN+YaTe/dr1bRv+2RETMdwKY3PZpt2fgpq+tX/X3VL/+D47z8/+8Gv0/TT+f4WhefFUrQmDuyzMN+cP4eiZ14+iXiv2Kn8yd74N+ky/r3d9aiHq+bbX/vRL7ttmZY/LW97Ol7+/mo9jfhCx/rfr8uk5/OJM1lzmGk3ig5+/89fjHdLf7/+S9k8Tb/9WWAQ0vof713+yTTUWN9Ymq/VqquNs6fxt6cTf+627mD771z+rP0fkrb/keR7Wbjd0h7NN5ursxEjyXeOL7+xv2873t4+Lf/05zuf/93afyF/NvbuXqy34ouR3+aH6lj+zFa38vdXWv6FM9V/j0Ar3+fIqmevl4a6pX+6+p/LQtP5ktP0fyfk9C1aMwAAAAAAAAAAAAAAAAAAAAAAAACcXSEirkdSKO+FC4Vyefc/vD8d44VavdF8/159bWUhsv/KnozhQvunLicO/B7qbP57+O34jSPxL0fEpyLi56WxLF6u1GsLF114AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMhdO/z//4/TWbm8u+5fpYvOHQDQN6MXnQEAYOBc/wHg6jnb9X+sb/kAAAbnzJ//W0l/MgIADMypr/93+5sPAGBw3P8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgz27fupVOrf9tb1bS+MLD9bWl+sMPFqqNpfLyWqVcqa8+KC/W64u1arlSX+56oK3dWa1efzAXK2uPZprVRnOmsb5xZ7m+ttK8c395frF6pzo8sJIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOk11jeW5mu16qpAj8BYdewyZOMSBYpxKbJxLLD1j+GsXffcOCbfmcY/0mOb5DzTGju65GAvMXYhfRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAu+DjAAAA//9LbRhJ") mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) fsopen(&(0x7f0000000ac0)='nfsd\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) 411.371748ms ago: executing program 3 (id=279): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) r5 = getpgrp(0x0) syz_pidfd_open(r5, 0x0) fcntl$setown(r0, 0x8, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) capget(&(0x7f0000000040)={0x20080522}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r10 = gettid() r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r11, 0x545c, 0x200000000000000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 410.915818ms ago: executing program 4 (id=280): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = io_uring_setup(0x4d3f, &(0x7f0000000d80)={0x0, 0xca6a, 0x40, 0x2003, 0x2f8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000480), 0x66) syz_io_uring_submit(0x0, 0x0, &(0x7f0000019240)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x72, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10000, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x4004944) sendmsg$NFT_BATCH(r3, &(0x7f0000019280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000194c0)=ANY=[], 0x64}}, 0x0) r4 = gettid() r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0x80008400, &(0x7f0000000e00)="344f00805feeeabca054883ff05bfcd5a56c3a1547ae3113ef67df05fd5d768054ab2e5e6435d22c36da91daf138d55506b219938774dbcdf9786c002f782de5f1217e284a847add180c4fb8e55f615a5081e02fa1767884a2daca5f2c21cb43d8d8e3a413335386fef0f86a8911301433694b9cc16854ab9dcd27c03da70b36d20be499e3950f01966d1ebeebb6a6d7b721635c512f2bdbc977e11acbed5a957f2afcac9103a612a2ca7246529906f636947b02574836d87a0ddd251a95d6c1de1514abbea8632b798512e747", 0xcd, 0x0, &(0x7f0000000200), &(0x7f00000009c0)="db3a34addb368c988c7e7c1e2deea367981a2d96d0b530d294b9c38a16a4548147f3be365b3a446458bec7d77bcdc2c585e337aa49d82e85beabb2e1db7e3913c216a3959541b8b7081b9a8a8af2c29a1243c46d61dcc9b81bdb7d38f31e67287d4431247b77ae415e5d612d0258319e1af64830bd724ce38126a4877dd05c859163391cdca45a30aaf5ba550bb8aac017e29d6c") read$ptp(r5, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) syz_open_procfs(0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) timer_settime(r6, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@dioread_nolock}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@errors_continue}]}, 0x1, 0x476, &(0x7f0000000540)="$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") 407.828608ms ago: executing program 2 (id=289): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x3}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r0, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ftruncate(r3, 0xf4ff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 183.43308ms ago: executing program 2 (id=281): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) r1 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x0, 0x2, 0x801eb}, &(0x7f0000000300), &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6, 0x6, 0x2, 0x7ffcfffc}]}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) 115.12154ms ago: executing program 2 (id=282): getpid() openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) close(r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x6, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bind$nfc_llcp(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000008000340"], 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4) 0s ago: executing program 1 (id=283): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000040000000b00000000000012050000000600000001000006040000000001010000000061000000000000000000000000000000000057763d3735067e969dfa4d102cd2110565ae9e61659536b4a186d3fe8c7f4d8db309dfe7742ceed3e1c80ee4a1e4c260d12eeb89da5753234a5c297ad5821c881d6ac2ba66d1752839"], &(0x7f00000002c0)=""/173, 0x3c, 0xad, 0x1, 0x0, 0x10000}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a0000000600000002000400af00000002800000", @ANYRES32, @ANYBLOB='f\x00'/20, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="0400000005000000010400"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@orlov}, {@noinit_itable}, {@barrier_val={'barrier', 0x3d, 0x40000006}}]}, 0x1, 0x5f3, &(0x7f0000001200)="$eJzs3c9vFdUeAPDvTH/QUt5rIS/vPVxIE2MgUVpawBBjImwNafBH3Lix0oJIgYbWH0UTSoIbE+PGGBNXLsT/QolsWenKhRtXhoSoYWniNXM70/a29/YXbacwn09y6Zk593DO9Pbbc+7pOXMDqKz+7J80Yn9ETCYRvcnsfF575Jn9c8978OdHZ7NHErXaq78nkeTniucn+deevHBXRPz4QxL72pbXOzVz7eLoxMT41fx4cPrS5ODUzLXDFy6Nnh8/P355+LnhE8ePHT8xdGRD13W9ybnTN995v/eTkTe++eqvZOjbX0aSOBkv5U9cfB2bpT/669+TZHlWz4nNrqwkbfnPyeKXOGkvsUGsS/H6dUTE/6I32mLhxeuNj18utXHAlqolETWgohLxDxVVjAOK9/ZL3wenpYxKgO1w/9TcBMDy+G+fmxuMrvrcwO4HSSye1kkiYmMzc432RMTdOyM3z90ZuRlbNA8HNDd7IyL+3yz+k3r890VX9NXjP22I/2xccCb/mp1/ZYP1L50qFv+wfebiv2vF+I8W8f/movh/a4P19y8k3+5uiP/ujV4SAAAAAAAAVNbtUxHxbLO//6fz639ifv1P13y5nog4uQn19y85Xv73//TeJlQDNHH/VMQLTdf/psXq3762PPWv+nqAjuTchYnxIxHx74g4FB27suOhFeo4/Om+L1vl9efr/4pHVv/dfC1g3o577bsay4yNTo8+7HUDEfdvRDzRdP1vMt//J03W/2a/DybXWMe+p2+daZW3evwDW6X2dcTBpv3/wl0rkpXvzzFYHw8MFqOC5Z788LPvWtW/0fh3iwl4eFn/v3vl+O9LFt+vZ2r9dRydaa+1ylvX+D+/yUw2/u9MXqsfdeZZH4xOT18diuhMTrdlZxvOD6+/zfA4KuKhiJcs/g89NR//tYVeP11x/N8dEbNL/u/kj8Y9xYX//t3za6v2GP9DebL4H1tX/7/+xPCtvu9b1b+2/v9Yva8/lJ8x/wdzvijCtLPxfJNwbG+Wtd3tBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHQRoReyJJB+bTaTowENETEf+J3enElanpZ85deffyWJZX//z/tPik396546T4/P++RcfDS46PRsTeiPi8rbt+PHD2ysRY2RcPAAAAAAAAAAAAAAAAAAAAO0RPi/3/md/aym4dsOXay24AUJom8f9TGe0Atp/+H6pL/EN1iX+oLvEP1SX+obrEP1SX+IfqEv8AAAAAAPBY2Xvg9s9JRMw+311/ZDrzvI5SWwZstbTsBgClcYsfqC5Lf6C6vMcHklXyu1oWWq3kSibPPkRhAAAAAAAAAAAAAKicg/vt/4eqsv8fqsv+f6iuYv//gZLbAWw/7/GBWGUnf9P9/6uWAgAAAAAAAAAAAAA209TMtYujExPjV9eYeO/FiDU/+dFKvL4zmrGdiVqtdj37Kdgp7XnEE8VS+J3SniWJYq/f2kqV9zsJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo9E8AAAD//3ldIbs=") socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) r6 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ff1000/0x3000)=nil) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000380)=0x4) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000200)=""/175) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$nci(r8, &(0x7f0000000200)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x0, 0x2, 0x3, 0x1, 0x1}, 0x4) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.504417][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 19.504435][ T29] audit: type=1400 audit(1762505896.725:57): avc: denied { transition } for pid=3190 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.508837][ T29] audit: type=1400 audit(1762505896.725:58): avc: denied { noatsecure } for pid=3190 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.511821][ T29] audit: type=1400 audit(1762505896.725:59): avc: denied { write } for pid=3190 comm="sh" path="pipe:[2365]" dev="pipefs" ino=2365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.515027][ T29] audit: type=1400 audit(1762505896.725:60): avc: denied { rlimitinh } for pid=3190 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.517991][ T29] audit: type=1400 audit(1762505896.725:61): avc: denied { siginh } for pid=3190 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 27.610350][ T29] audit: type=1400 audit(1762505904.825:62): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.633464][ T29] audit: type=1400 audit(1762505904.855:63): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.634439][ T3300] cgroup: Unknown subsys name 'net' [ 27.661271][ T29] audit: type=1400 audit(1762505904.875:64): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.802958][ T3300] cgroup: Unknown subsys name 'cpuset' [ 27.809364][ T3300] cgroup: Unknown subsys name 'rlimit' [ 27.920503][ T29] audit: type=1400 audit(1762505905.135:65): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.949732][ T29] audit: type=1400 audit(1762505905.135:66): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.970380][ T29] audit: type=1400 audit(1762505905.135:67): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.981777][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.990748][ T29] audit: type=1400 audit(1762505905.145:68): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.019673][ T29] audit: type=1400 audit(1762505905.165:69): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.032341][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.044572][ T29] audit: type=1400 audit(1762505905.165:70): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.076568][ T29] audit: type=1400 audit(1762505905.225:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.905164][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.992305][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.999431][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.006690][ T3313] bridge_slave_0: entered allmulticast mode [ 30.013029][ T3313] bridge_slave_0: entered promiscuous mode [ 30.019532][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.037085][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.044228][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.051381][ T3313] bridge_slave_1: entered allmulticast mode [ 30.057824][ T3313] bridge_slave_1: entered promiscuous mode [ 30.113615][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.137485][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.151369][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.191801][ T3313] team0: Port device team_slave_0 added [ 30.197728][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 30.218595][ T3313] team0: Port device team_slave_1 added [ 30.236518][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.243679][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.250823][ T3315] bridge_slave_0: entered allmulticast mode [ 30.257315][ T3315] bridge_slave_0: entered promiscuous mode [ 30.265827][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.272976][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.280215][ T3315] bridge_slave_1: entered allmulticast mode [ 30.286705][ T3315] bridge_slave_1: entered promiscuous mode [ 30.302272][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.309304][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.335295][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.346135][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.369725][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.376882][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.402780][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.436469][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.448078][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.455334][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.462510][ T3316] bridge_slave_0: entered allmulticast mode [ 30.468895][ T3316] bridge_slave_0: entered promiscuous mode [ 30.481523][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.503773][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.510904][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.518073][ T3316] bridge_slave_1: entered allmulticast mode [ 30.524618][ T3316] bridge_slave_1: entered promiscuous mode [ 30.561510][ T3315] team0: Port device team_slave_0 added [ 30.567325][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.574491][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.581836][ T3319] bridge_slave_0: entered allmulticast mode [ 30.588207][ T3319] bridge_slave_0: entered promiscuous mode [ 30.604637][ T3313] hsr_slave_0: entered promiscuous mode [ 30.610622][ T3313] hsr_slave_1: entered promiscuous mode [ 30.617403][ T3315] team0: Port device team_slave_1 added [ 30.628616][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.635869][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.643107][ T3319] bridge_slave_1: entered allmulticast mode [ 30.649464][ T3319] bridge_slave_1: entered promiscuous mode [ 30.656681][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.681874][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.718800][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.726027][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.733220][ T3312] bridge_slave_0: entered allmulticast mode [ 30.739662][ T3312] bridge_slave_0: entered promiscuous mode [ 30.746448][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.753442][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.779473][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.799266][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.808505][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.815630][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.822835][ T3312] bridge_slave_1: entered allmulticast mode [ 30.829327][ T3312] bridge_slave_1: entered promiscuous mode [ 30.835961][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.842952][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.868867][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.884632][ T3316] team0: Port device team_slave_0 added [ 30.891542][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.901417][ T3316] team0: Port device team_slave_1 added [ 30.938493][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.961910][ T3315] hsr_slave_0: entered promiscuous mode [ 30.967959][ T3315] hsr_slave_1: entered promiscuous mode [ 30.973889][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 30.979610][ T3315] Cannot create hsr debugfs directory [ 30.991248][ T3319] team0: Port device team_slave_0 added [ 31.005378][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.027739][ T3319] team0: Port device team_slave_1 added [ 31.034185][ T3312] team0: Port device team_slave_0 added [ 31.040097][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.047074][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.073024][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.084552][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.091630][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.117630][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.142495][ T3312] team0: Port device team_slave_1 added [ 31.171937][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.179000][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.205020][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.230461][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.237466][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.263393][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.275096][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.282072][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.307988][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.319208][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.326239][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.352157][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.393682][ T3316] hsr_slave_0: entered promiscuous mode [ 31.399714][ T3316] hsr_slave_1: entered promiscuous mode [ 31.405644][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 31.411368][ T3316] Cannot create hsr debugfs directory [ 31.432206][ T3312] hsr_slave_0: entered promiscuous mode [ 31.438394][ T3312] hsr_slave_1: entered promiscuous mode [ 31.444275][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 31.450004][ T3312] Cannot create hsr debugfs directory [ 31.478994][ T3319] hsr_slave_0: entered promiscuous mode [ 31.485172][ T3319] hsr_slave_1: entered promiscuous mode [ 31.490946][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 31.496769][ T3319] Cannot create hsr debugfs directory [ 31.569384][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.588154][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.605815][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.617159][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.691843][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.705219][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.716986][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.725848][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.755885][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.770635][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.779645][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.796073][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.828274][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.838171][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.853670][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.862551][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.879937][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.909042][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.919188][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.937349][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.944643][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.954374][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.964554][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.982101][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.989474][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.003234][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.010330][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.041740][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.065035][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.074513][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.091372][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.098451][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.109348][ T382] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.116555][ T382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.131488][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.138580][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.148896][ T382] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.155992][ T382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.166795][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.217457][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.235882][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.271083][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.287278][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.297204][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.304385][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.333917][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.342866][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.349940][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.394961][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.402018][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.410946][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.418008][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.432698][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.444686][ T3313] veth0_vlan: entered promiscuous mode [ 32.469748][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.477711][ T3313] veth1_vlan: entered promiscuous mode [ 32.493524][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.541140][ T3313] veth0_macvtap: entered promiscuous mode [ 32.558113][ T3313] veth1_macvtap: entered promiscuous mode [ 32.578892][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.597528][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.611966][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.626464][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.655704][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.664938][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.690411][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.701955][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 32.701969][ T29] audit: type=1400 audit(1762505909.915:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.6GOseG/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.745093][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.754626][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.755896][ T3316] veth0_vlan: entered promiscuous mode [ 32.774731][ T29] audit: type=1400 audit(1762505909.925:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.778852][ T3316] veth1_vlan: entered promiscuous mode [ 32.796693][ T29] audit: type=1400 audit(1762505909.925:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.6GOseG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.811604][ T3316] veth0_macvtap: entered promiscuous mode [ 32.827259][ T29] audit: type=1400 audit(1762505909.925:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.854931][ T29] audit: type=1400 audit(1762505909.925:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.6GOseG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.862824][ T3312] veth0_vlan: entered promiscuous mode [ 32.881581][ T29] audit: type=1400 audit(1762505909.925:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.6GOseG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4563 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.909689][ T3312] veth1_vlan: entered promiscuous mode [ 32.914414][ T29] audit: type=1400 audit(1762505909.925:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.929934][ T3312] veth0_macvtap: entered promiscuous mode [ 32.939307][ T29] audit: type=1400 audit(1762505909.955:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.948406][ T3312] veth1_macvtap: entered promiscuous mode [ 32.967760][ T29] audit: type=1400 audit(1762505909.955:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4566 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.005912][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.014696][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.026287][ T29] audit: type=1400 audit(1762505910.245:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.035708][ T3316] veth1_macvtap: entered promiscuous mode [ 33.068131][ T3315] veth0_vlan: entered promiscuous mode [ 33.080781][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.095874][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.114778][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.124407][ T3315] veth1_vlan: entered promiscuous mode [ 33.133770][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.164593][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.177625][ T3315] veth0_macvtap: entered promiscuous mode [ 33.191594][ T3315] veth1_macvtap: entered promiscuous mode [ 33.199448][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.215749][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.260876][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.269917][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.284270][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.293537][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.334861][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.372505][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.427931][ T3319] veth0_vlan: entered promiscuous mode [ 33.445072][ T3319] veth1_vlan: entered promiscuous mode [ 33.451121][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.473786][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.496198][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.507253][ T3319] veth0_macvtap: entered promiscuous mode [ 33.515492][ T3496] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2'. [ 33.521032][ T3319] veth1_macvtap: entered promiscuous mode [ 33.548824][ T3496] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.563099][ T3496] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.574768][ T3496] bond0 (unregistering): Released all slaves [ 33.605784][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.616098][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.657156][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.657247][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.657293][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.657333][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.783603][ C1] hrtimer: interrupt took 28678 ns [ 33.812317][ T3498] SELinux: failed to load policy [ 33.822153][ T3498] Zero length message leads to an empty skb [ 33.870817][ T3495] process 'syz.2.3' launched './file0' with NULL argv: empty string added [ 34.033224][ T3509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 34.067847][ T3509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 34.151072][ T3509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 34.188766][ T3507] infiniband syz!: set active [ 34.193567][ T3507] infiniband syz!: added team_slave_0 [ 34.203829][ T3516] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8'. [ 34.242014][ T3507] RDS/IB: syz!: added [ 34.246627][ T3507] smc: adding ib device syz! with port count 1 [ 34.312809][ T3507] smc: ib device syz! port 1 has no pnetid [ 34.416850][ T3519] netlink: 'syz.0.9': attribute type 2 has an invalid length. [ 34.430722][ T3519] loop0: detected capacity change from 0 to 1024 [ 34.441006][ T3521] loop2: detected capacity change from 0 to 1024 [ 34.451254][ T3519] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.464447][ T3519] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.475888][ T3519] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.487149][ T3519] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.529144][ T3519] JBD2: no valid journal superblock found [ 34.535041][ T3519] EXT4-fs (loop0): Could not load journal inode [ 34.552681][ T3521] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 34.563825][ T3521] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 34.581465][ T3521] JBD2: no valid journal superblock found [ 34.587388][ T3521] EXT4-fs (loop2): Could not load journal inode [ 34.654493][ T3528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11'. [ 34.667153][ T3528] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3528 comm=syz.4.11 [ 34.839759][ T3507] syz.3.7 (3507) used greatest stack depth: 10408 bytes left [ 34.924789][ T3532] loop3: detected capacity change from 0 to 8192 [ 34.938981][ T3534] xt_TCPMSS: Only works on TCP SYN packets [ 34.945198][ T3499] loop3: p1 p2[DM] p3 p4 [ 34.954232][ T3534] loop2: detected capacity change from 0 to 1024 [ 34.961145][ T3534] EXT4-fs: Ignoring removed orlov option [ 34.966893][ T3499] loop3: p1 size 196608 extends beyond EOD, truncated [ 34.975096][ T3499] loop3: p2 start 4292936063 is beyond EOD, truncated [ 34.981501][ T3534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.981882][ T3499] loop3: p3 size 189005824 extends beyond EOD, truncated [ 34.999244][ T3534] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.010982][ T3499] loop3: p4 size 50331648 extends beyond EOD, truncated [ 35.028000][ T3532] loop3: p1 p2[DM] p3 p4 [ 35.034987][ T3532] loop3: p1 size 196608 extends beyond EOD, truncated [ 35.045033][ T3532] loop3: p2 start 4292936063 is beyond EOD, truncated [ 35.051887][ T3532] loop3: p3 size 189005824 extends beyond EOD, truncated [ 35.060354][ T3532] loop3: p4 size 50331648 extends beyond EOD, truncated [ 35.167723][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.167723][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.189982][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.205862][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 35.206446][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 35.218610][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 35.452129][ T3549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19'. [ 35.461030][ T3549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19'. [ 35.492304][ T3549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19'. [ 35.514686][ T3553] IPv6: Can't replace route, no match found [ 35.517044][ T3549] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19'. [ 35.670721][ T3560] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 35.736236][ T3559] wireguard0: entered promiscuous mode [ 35.744230][ T3559] wireguard0: entered allmulticast mode [ 36.014950][ T3572] loop1: detected capacity change from 0 to 128 [ 36.027115][ T3574] loop2: detected capacity change from 0 to 128 [ 36.048228][ T3572] syz.1.24: attempt to access beyond end of device [ 36.048228][ T3572] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 36.079445][ T3574] syz.2.25: attempt to access beyond end of device [ 36.079445][ T3574] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 36.171339][ T3572] syz.1.24: attempt to access beyond end of device [ 36.171339][ T3572] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 36.190828][ T3574] syz.2.25: attempt to access beyond end of device [ 36.190828][ T3574] loop2: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 36.220593][ T3572] syz.1.24: attempt to access beyond end of device [ 36.220593][ T3572] loop1: rw=2049, sector=138, nr_sectors = 12 limit=128 [ 36.238546][ T3574] syz.2.25: attempt to access beyond end of device [ 36.238546][ T3574] loop2: rw=2049, sector=138, nr_sectors = 12 limit=128 [ 36.318954][ T3578] loop3: detected capacity change from 0 to 128 [ 36.546914][ T3585] lo speed is unknown, defaulting to 1000 [ 36.575722][ T3585] lo speed is unknown, defaulting to 1000 [ 36.593841][ T3585] lo speed is unknown, defaulting to 1000 [ 36.603614][ T3578] syz.3.26: attempt to access beyond end of device [ 36.603614][ T3578] loop3: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 36.619146][ T3585] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 36.635132][ T3578] syz.3.26: attempt to access beyond end of device [ 36.635132][ T3578] loop3: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 36.648409][ T3578] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 36.660751][ T3585] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 36.685412][ T3585] lo speed is unknown, defaulting to 1000 [ 36.701661][ T3585] lo speed is unknown, defaulting to 1000 [ 36.703161][ T3578] syz.3.26: attempt to access beyond end of device [ 36.703161][ T3578] loop3: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 36.720782][ T3578] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 36.727804][ T3585] lo speed is unknown, defaulting to 1000 [ 36.749324][ T3585] lo speed is unknown, defaulting to 1000 [ 36.771986][ T3585] lo speed is unknown, defaulting to 1000 [ 36.823434][ T3591] syz.3.26: attempt to access beyond end of device [ 36.823434][ T3591] loop3: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 36.836842][ T3591] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 36.884927][ T3591] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 36.922688][ T3591] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 36.931542][ T3591] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 37.182266][ T3601] netlink: 'syz.3.32': attribute type 1 has an invalid length. [ 37.187751][ T3598] lo speed is unknown, defaulting to 1000 [ 37.250373][ T3599] lo speed is unknown, defaulting to 1000 [ 37.256798][ T3582] loop4: detected capacity change from 0 to 2048 [ 37.289028][ T3599] lo speed is unknown, defaulting to 1000 [ 37.332726][ T3599] lo speed is unknown, defaulting to 1000 [ 37.364614][ T3599] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 37.379194][ T3599] lo speed is unknown, defaulting to 1000 [ 37.379515][ T3599] lo speed is unknown, defaulting to 1000 [ 37.380070][ T3599] lo speed is unknown, defaulting to 1000 [ 37.380396][ T3599] lo speed is unknown, defaulting to 1000 [ 37.380759][ T3599] lo speed is unknown, defaulting to 1000 [ 37.381072][ T3599] lo speed is unknown, defaulting to 1000 [ 37.689818][ T3613] loop3: detected capacity change from 0 to 128 [ 37.700909][ T3613] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 37.709762][ T3613] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 37.724065][ T3613] Buffer I/O error on dev loop3, logical block 83, lost async page write [ 37.742479][ T3613] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 37.803755][ T3616] IPVS: Error connecting to the multicast addr [ 37.838222][ T29] kauditd_printk_skb: 446 callbacks suppressed [ 37.838240][ T29] audit: type=1400 audit(1762505915.055:537): avc: denied { create } for pid=3615 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.950515][ T29] audit: type=1400 audit(1762505915.165:538): avc: denied { listen } for pid=3615 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.012759][ T29] audit: type=1400 audit(1762505915.185:539): avc: denied { setopt } for pid=3615 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.098477][ T29] audit: type=1400 audit(1762505915.315:540): avc: denied { kexec_image_load } for pid=3619 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 38.122440][ T29] audit: type=1400 audit(1762505915.345:541): avc: denied { write } for pid=3619 comm="syz.0.38" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.152583][ T3621] hsr_slave_1 (unregistering): left promiscuous mode [ 38.208948][ T29] audit: type=1400 audit(1762505915.415:542): avc: denied { write } for pid=3619 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 38.228120][ T29] audit: type=1326 audit(1762505915.415:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163ac5f6c9 code=0x7ffc0000 [ 38.251436][ T29] audit: type=1326 audit(1762505915.415:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163ac5f6c9 code=0x7ffc0000 [ 38.274606][ T29] audit: type=1326 audit(1762505915.415:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f163ac5df10 code=0x7ffc0000 [ 38.297866][ T29] audit: type=1326 audit(1762505915.415:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3619 comm="syz.0.38" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f163ac5f6c9 code=0x7ffc0000 [ 38.374990][ T3625] bridge_slave_1: left allmulticast mode [ 38.380681][ T3625] bridge_slave_1: left promiscuous mode [ 38.386592][ T3625] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.455277][ T3625] bridge_slave_0: left allmulticast mode [ 38.460961][ T3625] bridge_slave_0: left promiscuous mode [ 38.466723][ T3625] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.483444][ T3628] loop2: detected capacity change from 0 to 512 [ 38.526603][ T3628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.623896][ T3628] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.810509][ T3627] SELinux: Context @ is not valid (left unmapped). [ 38.831487][ T3636] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 38.892764][ T3636] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 39.027174][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.191251][ T3648] __nla_validate_parse: 14 callbacks suppressed [ 39.191271][ T3648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 39.212788][ T3648] team0: Port device team_slave_1 removed [ 39.459126][ T3655] loop4: detected capacity change from 0 to 512 [ 39.643929][ T3658] lo speed is unknown, defaulting to 1000 [ 39.650832][ T3658] lo speed is unknown, defaulting to 1000 [ 39.786227][ T3658] loop3: detected capacity change from 0 to 128 [ 39.924155][ T3664] loop1: detected capacity change from 0 to 1024 [ 39.953010][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.972811][ T3658] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.988227][ T3658] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.005878][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.033883][ T3655] xt_CT: No such helper "netbios-ns" [ 40.198630][ T3671] fido_id[3671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.242381][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.314425][ T3679] loop3: detected capacity change from 0 to 128 [ 40.364287][ T3647] loop0: detected capacity change from 0 to 512 [ 40.418090][ T3647] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.44: bad orphan inode 11862016 [ 40.595043][ T3647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.624638][ T3647] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.787049][ T3686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 40.796013][ T3686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 40.829087][ T3686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 40.837998][ T3686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 40.852224][ T3647] capability: warning: `syz.0.44' uses deprecated v2 capabilities in a way that may be insecure [ 40.896400][ T3690] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.006656][ T3697] netlink: 'syz.3.56': attribute type 1 has an invalid length. [ 41.047099][ T3690] lo speed is unknown, defaulting to 1000 [ 41.057445][ T3690] lo speed is unknown, defaulting to 1000 [ 41.111920][ T3703] tipc: Started in network mode [ 41.116874][ T3703] tipc: Node identity 3a554fbbe35f, cluster identity 4711 [ 41.124093][ T3703] tipc: Enabled bearer , priority 0 [ 41.162504][ T3705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 41.171336][ T3705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.57'. [ 41.216667][ T3708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 41.224845][ T3706] syzkaller0: entered promiscuous mode [ 41.225781][ T3708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 41.230960][ T3706] syzkaller0: entered allmulticast mode [ 41.255124][ T3703] tipc: Resetting bearer [ 41.265468][ T3710] loop4: detected capacity change from 0 to 128 [ 41.287649][ T3702] tipc: Resetting bearer [ 41.292924][ T3710] bio_check_eod: 67 callbacks suppressed [ 41.292944][ T3710] syz.4.59: attempt to access beyond end of device [ 41.292944][ T3710] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 41.314542][ T3702] tipc: Disabling bearer [ 41.322502][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.327593][ T3710] syz.4.59: attempt to access beyond end of device [ 41.327593][ T3710] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 41.381237][ T3710] syz.4.59: attempt to access beyond end of device [ 41.381237][ T3710] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 41.397227][ T3716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.61'. [ 41.429461][ T3710] syz.4.59: attempt to access beyond end of device [ 41.429461][ T3710] loop4: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 41.458773][ T3710] syz.4.59: attempt to access beyond end of device [ 41.458773][ T3710] loop4: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 41.485959][ T3710] syz.4.59: attempt to access beyond end of device [ 41.485959][ T3710] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 41.520023][ T3721] hub 2-0:1.0: USB hub found [ 41.524987][ T3721] hub 2-0:1.0: 8 ports detected [ 41.526250][ T3710] syz.4.59: attempt to access beyond end of device [ 41.526250][ T3710] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 41.561665][ T3709] syz.4.59: attempt to access beyond end of device [ 41.561665][ T3709] loop4: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 41.582614][ T3709] syz.4.59: attempt to access beyond end of device [ 41.582614][ T3709] loop4: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 41.596064][ T3709] syz.4.59: attempt to access beyond end of device [ 41.596064][ T3709] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 41.868309][ T3714] loop0: detected capacity change from 0 to 2048 [ 42.109148][ T3731] lo speed is unknown, defaulting to 1000 [ 42.115876][ T3731] lo speed is unknown, defaulting to 1000 [ 42.306447][ T3003] loop0: p2 p3 p7 [ 42.492796][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 42.510411][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 42.523499][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 42.532552][ T3745] netlink: 'syz.4.65': attribute type 298 has an invalid length. [ 42.549380][ T3742] loop3: detected capacity change from 0 to 2048 [ 42.575102][ T3742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.708133][ T3753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.711743][ T3753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.882249][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 42.882266][ T29] audit: type=1326 audit(1762505920.095:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 42.911628][ T29] audit: type=1326 audit(1762505920.095:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 42.934792][ T29] audit: type=1326 audit(1762505920.095:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 42.957949][ T29] audit: type=1326 audit(1762505920.095:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 42.981107][ T29] audit: type=1326 audit(1762505920.095:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 43.004289][ T29] audit: type=1326 audit(1762505920.095:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 43.027449][ T29] audit: type=1326 audit(1762505920.095:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 43.050638][ T29] audit: type=1326 audit(1762505920.095:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 43.073859][ T29] audit: type=1326 audit(1762505920.095:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 43.097181][ T29] audit: type=1326 audit(1762505920.095:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3754 comm="syz.1.70" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 43.330777][ T3772] tipc: Started in network mode [ 43.335743][ T3772] tipc: Node identity 4eaa13959e62, cluster identity 4711 [ 43.343032][ T3772] tipc: Enabled bearer , priority 0 [ 43.364268][ T3772] syzkaller0: entered promiscuous mode [ 43.369846][ T3772] syzkaller0: entered allmulticast mode [ 43.423942][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.457092][ T3772] tipc: Resetting bearer [ 43.486446][ T3786] loop3: detected capacity change from 0 to 128 [ 43.493739][ T3771] tipc: Resetting bearer [ 43.544117][ T3786] buffer_io_error: 47 callbacks suppressed [ 43.544135][ T3786] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 43.591048][ T3786] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 43.622567][ T3786] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 43.632813][ T3771] tipc: Disabling bearer [ 43.655351][ T3786] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 43.702275][ T3786] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 43.710772][ T3786] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 43.815074][ T3792] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 43.825058][ T3792] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 43.833882][ T3792] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 43.842510][ T3792] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 43.964838][ T3799] mmap: syz.4.76 (3799) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.110077][ T3801] loop3: detected capacity change from 0 to 512 [ 44.278285][ T3805] hub 2-0:1.0: USB hub found [ 44.295952][ T3805] hub 2-0:1.0: 8 ports detected [ 44.300951][ T3801] xt_CT: No such helper "netbios-ns" [ 44.350747][ T3809] tipc: New replicast peer: 255.255.255.255 [ 44.356947][ T3809] tipc: Enabled bearer , priority 10 [ 44.387128][ T3809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.80'. [ 44.400492][ T3811] syz.3.81 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.491994][ T3798] loop0: detected capacity change from 0 to 2048 [ 44.596555][ T3811] lo speed is unknown, defaulting to 1000 [ 44.603060][ T3811] lo speed is unknown, defaulting to 1000 [ 44.623752][ T3816] loop1: detected capacity change from 0 to 128 [ 44.975239][ T3838] loop4: detected capacity change from 0 to 128 [ 45.336650][ T3844] lo speed is unknown, defaulting to 1000 [ 45.343923][ T3844] lo speed is unknown, defaulting to 1000 [ 45.472366][ T3408] tipc: Node number set to 3502773141 [ 45.479166][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 45.690953][ T3855] siw: device registration error -23 [ 45.976913][ T3862] Driver unsupported XDP return value 0 on prog (id 79) dev N/A, expect packet loss! [ 46.025945][ T3866] loop2: detected capacity change from 0 to 128 [ 46.062599][ T3865] loop3: detected capacity change from 0 to 512 [ 46.073688][ T3865] /dev/loop3: Can't open blockdev [ 46.310925][ T3871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.99'. [ 46.322909][ T3870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.100'. [ 46.473612][ T3870] syz.3.100 (3870) used greatest stack depth: 10128 bytes left [ 46.674922][ T3880] syz_tun: entered allmulticast mode [ 46.687312][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.102'. [ 46.775018][ T3880] syz_tun (unregistering): left allmulticast mode [ 46.805303][ T3882] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.839891][ T3882] loop1: detected capacity change from 0 to 512 [ 46.912615][ T3882] ======================================================= [ 46.912615][ T3882] WARNING: The mand mount option has been deprecated and [ 46.912615][ T3882] and is ignored by this kernel. Remove the mand [ 46.912615][ T3882] option from the mount to silence this warning. [ 46.912615][ T3882] ======================================================= [ 47.006523][ T3882] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 47.237638][ T3882] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.354288][ T3882] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #16: comm syz.1.105: corrupted inode contents [ 47.402839][ T3882] EXT4-fs (loop1): Remounting filesystem read-only [ 47.409490][ T3882] EXT4-fs (loop1): 1 truncate cleaned up [ 47.420247][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.430805][ T52] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 47.457150][ T52] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.474857][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.559350][ T3898] 9pnet_fd: Insufficient options for proto=fd [ 47.564011][ T3524] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.652415][ T3900] loop0: detected capacity change from 0 to 512 [ 47.664061][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.678720][ T3900] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.110: EA inode hash validation failed [ 47.693474][ T3900] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.708491][ T3904] loop2: detected capacity change from 0 to 512 [ 47.715370][ T3900] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.110: corrupted inode contents [ 47.720345][ T3904] ext2: Unknown parameter 'euid<00000000004294967295' [ 47.739035][ T3900] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.110: mark_inode_dirty error [ 47.751717][ T3900] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.110: corrupted inode contents [ 47.769544][ T3900] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.110: mark_inode_dirty error [ 47.787447][ T3900] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.110: mark inode dirty (error -117) [ 47.803234][ T3900] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 47.837272][ T3900] EXT4-fs (loop0): 1 orphan inode deleted [ 47.862595][ T3900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.891931][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 47.894117][ T3915] loop2: detected capacity change from 0 to 1024 [ 47.911344][ T3915] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.922429][ T3915] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.949190][ T3915] JBD2: no valid journal superblock found [ 47.955057][ T3915] EXT4-fs (loop2): Could not load journal inode [ 47.963417][ T29] kauditd_printk_skb: 524 callbacks suppressed [ 47.963433][ T29] audit: type=1326 audit(1762505925.189:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3907 comm="syz.4.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa4cd04f6c9 code=0x7ffc0000 [ 47.999135][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.010363][ T3918] loop4: detected capacity change from 0 to 4096 [ 48.014787][ T3920] loop1: detected capacity change from 0 to 128 [ 48.028185][ T3918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.050197][ T3920] bio_check_eod: 148 callbacks suppressed [ 48.050215][ T3920] syz.1.118: attempt to access beyond end of device [ 48.050215][ T3920] loop1: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 48.080277][ T3918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.098284][ T3920] syz.1.118: attempt to access beyond end of device [ 48.098284][ T3920] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 48.111924][ T29] audit: type=1400 audit(1762505925.329:1379): avc: denied { add_name } for pid=3917 comm="syz.4.117" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.132639][ T29] audit: type=1400 audit(1762505925.329:1380): avc: denied { create } for pid=3917 comm="syz.4.117" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.152933][ T29] audit: type=1400 audit(1762505925.329:1381): avc: denied { read write } for pid=3917 comm="syz.4.117" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.175518][ T29] audit: type=1400 audit(1762505925.329:1382): avc: denied { open } for pid=3917 comm="syz.4.117" path="/23/file0/file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.176040][ T3920] syz.1.118: attempt to access beyond end of device [ 48.176040][ T3920] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 48.190183][ T3920] syz.1.118: attempt to access beyond end of device [ 48.190183][ T3920] loop1: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 48.190225][ T3920] syz.1.118: attempt to access beyond end of device [ 48.190225][ T3920] loop1: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 48.190258][ T3920] syz.1.118: attempt to access beyond end of device [ 48.190258][ T3920] loop1: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 48.190317][ T3920] syz.1.118: attempt to access beyond end of device [ 48.190317][ T3920] loop1: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 48.190473][ T3920] syz.1.118: attempt to access beyond end of device [ 48.190473][ T3920] loop1: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 48.190589][ T3920] syz.1.118: attempt to access beyond end of device [ 48.190589][ T3920] loop1: rw=2049, sector=138, nr_sectors = 12 limit=128 [ 48.300974][ T3928] loop1: detected capacity change from 0 to 128 [ 48.558537][ T3922] loop0: detected capacity change from 0 to 2048 [ 48.713415][ T3922] loop0: p2 p3 p7 [ 48.716389][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.804565][ T3937] loop2: detected capacity change from 0 to 128 [ 48.829987][ T3937] syz.2.123: attempt to access beyond end of device [ 48.829987][ T3937] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 48.858754][ T3937] buffer_io_error: 100 callbacks suppressed [ 48.858780][ T3937] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 48.883654][ T3003] loop0: p2 p3 p7 [ 48.920594][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 48.920645][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 48.932319][ T3937] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 48.949969][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 48.969669][ T3937] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 48.978436][ T3937] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 48.979920][ T29] audit: type=1400 audit(1762505926.189:1383): avc: denied { mount } for pid=3941 comm="syz.0.124" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.008923][ T29] audit: type=1400 audit(1762505926.189:1384): avc: denied { unmount } for pid=3941 comm="syz.0.124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.080037][ T3937] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 49.092282][ T3937] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 49.148504][ T3937] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 49.194142][ T3937] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 49.222260][ T3937] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 49.230783][ T3937] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 49.247198][ T29] audit: type=1326 audit(1762505926.469:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65605cf6c9 code=0x7ffc0000 [ 49.320093][ T29] audit: type=1326 audit(1762505926.469:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f65605cf6c9 code=0x7ffc0000 [ 49.343498][ T29] audit: type=1326 audit(1762505926.469:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.3.126" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65605cf6c9 code=0x7ffc0000 [ 49.384922][ T3954] loop3: detected capacity change from 0 to 512 [ 49.392000][ T3954] ext2: Unknown parameter 'euid<00000000004294967295' [ 49.544362][ T3960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.129'. [ 49.769037][ T3960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 49.777968][ T3960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 49.909799][ T3962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.129'. [ 49.918838][ T3962] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 49.926529][ T3962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.129'. [ 50.122822][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 50.134045][ T3967] loop2: detected capacity change from 0 to 128 [ 50.249765][ T3970] loop1: detected capacity change from 0 to 764 [ 50.315237][ T3957] lo speed is unknown, defaulting to 1000 [ 50.321525][ T3957] lo speed is unknown, defaulting to 1000 [ 50.371042][ T1031] Process accounting resumed [ 50.622761][ T3973] Process accounting resumed [ 50.645535][ T3981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.135'. [ 50.654543][ T3981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.135'. [ 51.009147][ T3972] loop3: detected capacity change from 0 to 2048 [ 51.056087][ T3985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.135'. [ 51.065053][ T3985] netlink: 28 bytes leftover after parsing attributes in process `syz.4.135'. [ 51.175751][ T3972] Alternate GPT is invalid, using primary GPT. [ 51.182142][ T3972] loop3: p2 p3 p7 [ 51.261713][ T3003] loop3: p2 p3 p7 [ 51.316345][ T3989] lo speed is unknown, defaulting to 1000 [ 51.322568][ T3989] lo speed is unknown, defaulting to 1000 [ 51.421551][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 51.438329][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 51.455760][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 51.513266][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 51.533429][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 51.566118][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 51.900027][ T4020] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.945867][ T4020] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.967315][ T4021] tipc: Enabled bearer , priority 0 [ 51.977509][ T4021] tipc: Disabling bearer [ 52.013391][ T4022] loop3: detected capacity change from 0 to 512 [ 52.023730][ T4020] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.048593][ T4022] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.144: error while reading EA inode 32 err=-116 [ 52.076374][ T4022] EXT4-fs (loop3): Remounting filesystem read-only [ 52.092546][ T4022] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 52.104488][ T4022] EXT4-fs (loop3): 1 orphan inode deleted [ 52.110978][ T4022] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.126777][ T4022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.138608][ T4020] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.181946][ T4031] loop0: detected capacity change from 0 to 1024 [ 52.188800][ T4031] EXT4-fs: Ignoring removed oldalloc option [ 52.199615][ T4031] EXT4-fs: Invalid want_extra_isize 132 [ 52.217084][ T52] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.235998][ T52] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.244895][ T52] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.256353][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.444961][ T4037] xt_hashlimit: max too large, truncated to 1048576 [ 52.453457][ T4037] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.465531][ T4037] loop0: detected capacity change from 0 to 256 [ 52.476647][ T4037] netlink: 'syz.0.149': attribute type 4 has an invalid length. [ 52.492004][ T3417] lo speed is unknown, defaulting to 1000 [ 52.497850][ T3417] s{z2: Port: 1 Link DOWN [ 52.546767][ T4039] pim6reg: entered allmulticast mode [ 52.578955][ T4039] bridge_slave_0: left allmulticast mode [ 52.584803][ T4039] bridge_slave_0: left promiscuous mode [ 52.590527][ T4039] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.603853][ T4039] bridge_slave_1: left allmulticast mode [ 52.609630][ T4039] bridge_slave_1: left promiscuous mode [ 52.615444][ T4039] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.711083][ T4034] loop1: detected capacity change from 0 to 2048 [ 52.721266][ T4039] bond0: (slave bond_slave_0): Releasing backup interface [ 52.740932][ T4039] bond0: (slave bond_slave_1): Releasing backup interface [ 52.754166][ T4039] team0: Port device team_slave_0 removed [ 52.766260][ T4039] team0: Port device team_slave_1 removed [ 52.776698][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.777746][ T3304] loop1: p2 p3 p7 [ 52.784140][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.930489][ T4039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.938007][ T4039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.986483][ T4039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.124682][ T4053] bridge_slave_0: left allmulticast mode [ 53.130396][ T4053] bridge_slave_0: left promiscuous mode [ 53.136251][ T4053] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.155587][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 53.234649][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 53.234720][ T29] audit: type=1400 audit(1762505930.459:1775): avc: denied { create } for pid=4054 comm="syz.4.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.347166][ T4053] bridge_slave_1: left allmulticast mode [ 53.352967][ T4053] bridge_slave_1: left promiscuous mode [ 53.358639][ T4053] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.365527][ T29] audit: type=1400 audit(1762505930.489:1776): avc: denied { ioctl } for pid=4054 comm="syz.4.155" path="socket:[7188]" dev="sockfs" ino=7188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.378616][ T4058] loop1: detected capacity change from 0 to 1024 [ 53.390164][ T29] audit: type=1326 audit(1762505930.509:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 53.419914][ T29] audit: type=1326 audit(1762505930.509:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 53.443281][ T29] audit: type=1326 audit(1762505930.509:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 53.467214][ T29] audit: type=1326 audit(1762505930.509:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 53.485720][ T4058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.490649][ T29] audit: type=1326 audit(1762505930.519:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 53.515244][ T4058] netlink: 'syz.1.156': attribute type 27 has an invalid length. [ 53.525867][ T29] audit: type=1326 audit(1762505930.519:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 53.556947][ T29] audit: type=1326 audit(1762505930.519:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 53.580286][ T29] audit: type=1326 audit(1762505930.519:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4057 comm="syz.1.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 53.606767][ T4053] bond0: (slave bond_slave_0): Releasing backup interface [ 53.619914][ T4053] bond0: (slave bond_slave_1): Releasing backup interface [ 53.643533][ T4053] team0: Port device team_slave_0 removed [ 53.656118][ T4053] team0: Port device team_slave_1 removed [ 53.664335][ T4053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.671733][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.681253][ T4053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.689157][ T4053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.699970][ T4053] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.726318][ T4056] team0: Port device team_slave_1 removed [ 53.741302][ T4067] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 53.767419][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.774812][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.840407][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.855954][ T4058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.959270][ T36] syz!: Port: 1 Link DOWN [ 54.010638][ T4065] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.018012][ T4065] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.027037][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.076380][ T4065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.088047][ T4065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.153337][ T3364] lo speed is unknown, defaulting to 1000 [ 54.159137][ T3364] syz2: Port: 1 Link DOWN [ 54.170930][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.196550][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.219557][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.248744][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.250300][ T4093] loop1: detected capacity change from 0 to 512 [ 54.261161][ T4079] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.303789][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.374037][ T4095] bond0 (unregistering): Released all slaves [ 54.388225][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.401753][ T382] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.422835][ T382] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.458754][ T382] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.514000][ T4099] loop2: detected capacity change from 0 to 128 [ 54.534825][ T4099] bio_check_eod: 63 callbacks suppressed [ 54.534843][ T4099] syz.2.165: attempt to access beyond end of device [ 54.534843][ T4099] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 54.558267][ T4099] syz.2.165: attempt to access beyond end of device [ 54.558267][ T4099] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 54.571720][ T4099] buffer_io_error: 37 callbacks suppressed [ 54.571736][ T4099] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 54.577819][ T4104] __nla_validate_parse: 19 callbacks suppressed [ 54.577836][ T4104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'. [ 54.587448][ T4099] syz.2.165: attempt to access beyond end of device [ 54.587448][ T4099] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 54.592436][ T4104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.166'. [ 54.595491][ T4093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 54.601436][ T4099] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 54.643842][ T4099] syz.2.165: attempt to access beyond end of device [ 54.643842][ T4099] loop2: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 54.657260][ T4099] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 54.697683][ T4099] syz.2.165: attempt to access beyond end of device [ 54.697683][ T4099] loop2: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 54.711056][ T4099] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 54.720015][ T4093] team0 (unregistering): Port device team_slave_0 removed [ 54.728319][ T4093] team0 (unregistering): Port device team_slave_1 removed [ 54.772164][ T4099] syz.2.165: attempt to access beyond end of device [ 54.772164][ T4099] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 54.785674][ T4099] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 54.799365][ T4111] hub 2-0:1.0: USB hub found [ 54.805089][ T4111] hub 2-0:1.0: 8 ports detected [ 54.812240][ T4099] syz.2.165: attempt to access beyond end of device [ 54.812240][ T4099] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 54.825891][ T4099] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 54.852045][ T4099] syz.2.165: attempt to access beyond end of device [ 54.852045][ T4099] loop2: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 54.865526][ T4099] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 54.874274][ T4099] syz.2.165: attempt to access beyond end of device [ 54.874274][ T4099] loop2: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 54.887637][ T4099] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 54.896361][ T4099] syz.2.165: attempt to access beyond end of device [ 54.896361][ T4099] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 54.909758][ T4099] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 54.918524][ T4099] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 55.041832][ T4113] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 55.118197][ T4113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 55.305066][ T4132] netlink: 'syz.2.172': attribute type 21 has an invalid length. [ 55.309681][ T4135] netlink: 14 bytes leftover after parsing attributes in process `syz.4.173'. [ 55.312965][ T4132] netlink: 'syz.2.172': attribute type 15 has an invalid length. [ 55.330286][ T4132] netlink: 156 bytes leftover after parsing attributes in process `syz.2.172'. [ 55.339392][ T4132] IPv6: NLM_F_CREATE should be specified when creating new route [ 55.347338][ T4132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.347527][ T4135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.354608][ T4132] IPv6: NLM_F_CREATE should be set when creating new route [ 55.354655][ T4132] IPv6: NLM_F_CREATE should be set when creating new route [ 55.377650][ T4132] IPv6: NLM_F_CREATE should be set when creating new route [ 55.387317][ T4135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.426717][ T4135] bond0 (unregistering): Released all slaves [ 55.432933][ T4143] loop2: detected capacity change from 0 to 128 [ 55.614894][ T4150] loop2: detected capacity change from 0 to 128 [ 56.110316][ T4156] netlink: 52 bytes leftover after parsing attributes in process `syz.2.179'. [ 56.147738][ T4158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 56.193079][ T4154] lo speed is unknown, defaulting to 1000 [ 56.201220][ T4154] lo speed is unknown, defaulting to 1000 [ 56.217935][ T4159] macvtap0: refused to change device tx_queue_len [ 56.330893][ T4163] xt_hashlimit: size too large, truncated to 1048576 [ 56.467381][ T4165] loop0: detected capacity change from 0 to 512 [ 56.529652][ T4165] ------------[ cut here ]------------ [ 56.535238][ T4165] EA inode 11 i_nlink=2 [ 56.535577][ T4165] WARNING: CPU: 1 PID: 4165 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 56.550015][ T4165] Modules linked in: [ 56.554050][ T4165] CPU: 1 UID: 0 PID: 4165 Comm: syz.0.182 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.563782][ T4165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 56.574045][ T4165] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 56.580712][ T4165] Code: 90 49 8d 7e 40 e8 76 fd b8 ff 4d 8b 6e 40 4c 89 e7 e8 8a f8 b8 ff 41 8b 56 48 48 c7 c7 ae d1 55 86 4c 89 ee e8 07 fa 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 88 e7 b5 03 0f 1f 84 00 00 00 00 00 [ 56.600670][ T4165] RSP: 0018:ffffc900013575a0 EFLAGS: 00010246 [ 56.606796][ T4165] RAX: 1a86bb1b95b7fd00 RBX: ffff88811950d308 RCX: 0000000000080000 [ 56.614923][ T4165] RDX: ffffc900028c4000 RSI: 00000000000042d0 RDI: 00000000000042d1 [ 56.622981][ T4165] RBP: 0000000000000002 R08: 0001c90001357427 R09: 0000000000000000 [ 56.629624][ T4172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.184'. [ 56.631050][ T4165] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811950d2b8 [ 56.647948][ T4165] R13: 000000000000000b R14: ffff88811950d270 R15: 0000000000000001 [ 56.656066][ T4165] FS: 00007f163969e6c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 56.665038][ T4165] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.671644][ T4165] CR2: 0000200000001dc0 CR3: 0000000129e58000 CR4: 00000000003506f0 [ 56.679700][ T4165] Call Trace: [ 56.683035][ T4165] [ 56.686030][ T4165] ext4_xattr_set_entry+0x77f/0x1020 [ 56.691369][ T4165] ext4_xattr_ibody_set+0x184/0x3c0 [ 56.696674][ T4165] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 56.702586][ T4165] __ext4_expand_extra_isize+0x246/0x280 [ 56.708313][ T4165] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 56.713896][ T4165] ext4_evict_inode+0x80e/0xd90 [ 56.718805][ T4165] ? __pfx_ext4_evict_inode+0x10/0x10 [ 56.724250][ T4165] evict+0x2e3/0x550 [ 56.728227][ T4165] ? __dquot_initialize+0x146/0x7c0 [ 56.733652][ T4165] iput+0x4ed/0x650 [ 56.737558][ T4165] ext4_process_orphan+0x1a9/0x1c0 [ 56.742898][ T4165] ext4_orphan_cleanup+0x6a8/0xa00 [ 56.748112][ T4165] ext4_fill_super+0x3483/0x3810 [ 56.753212][ T4165] ? snprintf+0x86/0xb0 [ 56.757486][ T4165] ? set_blocksize+0x1a8/0x310 [ 56.762428][ T4165] ? sb_set_blocksize+0xe3/0x100 [ 56.767400][ T4165] ? setup_bdev_super+0x30e/0x370 [ 56.772482][ T4165] ? __pfx_ext4_fill_super+0x10/0x10 [ 56.777789][ T4165] get_tree_bdev_flags+0x291/0x300 [ 56.782960][ T4165] ? __pfx_ext4_fill_super+0x10/0x10 [ 56.788271][ T4165] get_tree_bdev+0x1f/0x30 [ 56.792736][ T4165] ext4_get_tree+0x1c/0x30 [ 56.797176][ T4165] vfs_get_tree+0x57/0x1d0 [ 56.801614][ T4165] do_new_mount+0x24d/0x660 [ 56.806180][ T4165] path_mount+0x4a5/0xb70 [ 56.810535][ T4165] ? user_path_at+0x109/0x130 [ 56.815290][ T4165] __se_sys_mount+0x28c/0x2e0 [ 56.820007][ T4165] ? do_mkdirat+0x3ac/0x3f0 [ 56.824550][ T4165] __x64_sys_mount+0x67/0x80 [ 56.829200][ T4165] x64_sys_call+0x2b51/0x3000 [ 56.834018][ T4165] do_syscall_64+0xd2/0x200 [ 56.838551][ T4165] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 56.844680][ T4165] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 56.850510][ T4165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.856452][ T4165] RIP: 0033:0x7f163ac60e6a [ 56.860939][ T4165] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.880611][ T4165] RSP: 002b:00007f163969de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.889134][ T4165] RAX: ffffffffffffffda RBX: 00007f163969def0 RCX: 00007f163ac60e6a [ 56.897168][ T4165] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f163969deb0 [ 56.905201][ T4165] RBP: 0000200000000180 R08: 00007f163969def0 R09: 0000000000800700 [ 56.913293][ T4165] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 56.921330][ T4165] R13: 00007f163969deb0 R14: 000000000000046f R15: 000000000000002c [ 56.929388][ T4165] [ 56.932439][ T4165] ---[ end trace 0000000000000000 ]--- [ 56.938147][ T4165] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.182: iget: bad extra_isize 90 (inode size 256) [ 56.951974][ T4165] EXT4-fs (loop0): Remounting filesystem read-only [ 56.958865][ T4165] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 56.968361][ T4165] EXT4-fs (loop0): 1 orphan inode deleted [ 56.984236][ T4165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.167188][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.262594][ T4180] loop0: detected capacity change from 0 to 512 [ 57.264116][ T4175] loop2: detected capacity change from 0 to 2048 [ 57.277275][ T4177] loop3: detected capacity change from 0 to 8192 [ 57.295412][ T4180] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.187: bg 0: block 248: padding at end of block bitmap is not set [ 57.310761][ T4180] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.187: Failed to acquire dquot type 1 [ 57.325495][ T4180] EXT4-fs (loop0): 1 truncate cleaned up [ 57.338845][ T4180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.352216][ T4180] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.366014][ T4180] syz.0.187 (4180) used greatest stack depth: 9120 bytes left [ 57.373597][ T4175] loop2: p2 p3 p7 [ 57.387923][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.515151][ T3003] loop2: p2 p3 p7 [ 57.565563][ T4190] hub 2-0:1.0: USB hub found [ 57.577576][ T4190] hub 2-0:1.0: 8 ports detected [ 57.585427][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 57.598806][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 57.610497][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 57.720035][ T4199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.193'. [ 57.770588][ T4204] tipc: Started in network mode [ 57.775554][ T4204] tipc: Node identity 6eb9df0ee737, cluster identity 4711 [ 57.782844][ T4204] tipc: Enabled bearer , priority 0 [ 57.790183][ T4204] syzkaller0: entered promiscuous mode [ 57.795768][ T4204] syzkaller0: entered allmulticast mode [ 57.804227][ T4204] tipc: Resetting bearer [ 57.810783][ T4202] tipc: Resetting bearer [ 57.817709][ T4202] tipc: Disabling bearer [ 58.016307][ T4210] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 58.142053][ T4213] siw: device registration error -23 [ 58.307465][ T4215] loop0: detected capacity change from 0 to 128 [ 58.331502][ T4215] tipc: Started in network mode [ 58.336478][ T4215] tipc: Node identity 4, cluster identity 4711 [ 58.342732][ T4215] tipc: Node number set to 4 [ 58.369852][ T29] kauditd_printk_skb: 726 callbacks suppressed [ 58.369874][ T29] audit: type=1400 audit(1762505935.589:2509): avc: denied { getopt } for pid=4216 comm="syz.0.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 58.682813][ T4221] lo speed is unknown, defaulting to 1000 [ 58.689325][ T4221] lo speed is unknown, defaulting to 1000 [ 59.180738][ T4229] audit: audit_backlog=65 > audit_backlog_limit=64 [ 59.187365][ T4229] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 59.195067][ T4229] audit: backlog limit exceeded [ 59.248592][ T4230] loop2: detected capacity change from 0 to 512 [ 59.268176][ T4230] ext2: Unknown parameter 'euid<00000000004294967295' [ 59.298104][ T4231] netlink: 'syz.4.204': attribute type 13 has an invalid length. [ 59.338807][ T29] audit: type=1326 audit(1762505936.179:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cd04f6c9 code=0x7ffc0000 [ 59.362228][ T29] audit: type=1326 audit(1762505936.179:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cd04f6c9 code=0x7ffc0000 [ 59.385561][ T29] audit: type=1326 audit(1762505936.179:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa4cd04f6c9 code=0x7ffc0000 [ 59.408884][ T29] audit: type=1326 audit(1762505936.179:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cd04f6c9 code=0x7ffc0000 [ 59.432381][ T29] audit: type=1326 audit(1762505936.179:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4cd04f6c9 code=0x7ffc0000 [ 59.455708][ T29] audit: type=1326 audit(1762505936.179:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4224 comm="syz.4.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fa4cd04f6c9 code=0x7ffc0000 [ 60.307587][ T4237] loop0: detected capacity change from 0 to 4096 [ 60.341775][ T4237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.365015][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.394619][ T4231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.395093][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.742014][ T4249] lo speed is unknown, defaulting to 1000 [ 60.748665][ T4249] lo speed is unknown, defaulting to 1000 [ 61.073117][ T4241] __nla_validate_parse: 7 callbacks suppressed [ 61.073134][ T4241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'. [ 61.088316][ T4241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'. [ 61.136449][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.147167][ T4252] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.163545][ T4242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'. [ 61.172485][ T4242] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'. [ 61.182419][ T52] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.191757][ T52] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.212906][ T52] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.240965][ T52] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.381042][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 61.420646][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 61.527873][ T4260] hub 2-0:1.0: USB hub found [ 61.544550][ T4260] hub 2-0:1.0: 8 ports detected [ 61.677268][ T3417] IPVS: starting estimator thread 0... [ 61.708536][ T4263] syz.0.213 uses obsolete (PF_INET,SOCK_PACKET) [ 61.753748][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.777577][ T4265] IPVS: using max 2400 ests per chain, 120000 per kthread [ 62.028603][ T4273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 62.465539][ T4286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.218'. [ 62.487022][ T4286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.218'. [ 62.495988][ T4286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.218'. [ 62.759115][ T4292] loop2: detected capacity change from 0 to 1024 [ 62.796339][ T4292] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 63.033089][ T4298] loop2: detected capacity change from 0 to 1024 [ 63.040956][ T4298] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.052397][ T4298] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 63.060452][ T4298] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.071970][ T4298] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 63.086679][ T4298] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 63.093655][ T4298] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.220: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.108107][ T4298] EXT4-fs (loop2): 1 orphan inode deleted [ 63.114252][ T4298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.129669][ T4298] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.220: iget: bad extended attribute block 6 [ 63.143275][ T4298] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 63.153314][ T4298] SELinux: failed to load policy [ 63.230440][ T4306] loop0: detected capacity change from 0 to 164 [ 63.372203][ T29] kauditd_printk_skb: 2245 callbacks suppressed [ 63.372226][ T29] audit: type=1326 audit(1762505940.589:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b69e66567 code=0x7ffc0000 [ 63.433833][ T29] audit: type=1326 audit(1762505940.629:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b69e0b779 code=0x7ffc0000 [ 63.457139][ T29] audit: type=1326 audit(1762505940.629:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b69e66567 code=0x7ffc0000 [ 63.480442][ T29] audit: type=1326 audit(1762505940.629:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b69e0b779 code=0x7ffc0000 [ 63.503855][ T29] audit: type=1326 audit(1762505940.629:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b69e66567 code=0x7ffc0000 [ 63.527389][ T29] audit: type=1326 audit(1762505940.629:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b69e0b779 code=0x7ffc0000 [ 63.550729][ T29] audit: type=1326 audit(1762505940.629:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b69e66567 code=0x7ffc0000 [ 63.574001][ T29] audit: type=1326 audit(1762505940.629:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b69e0b779 code=0x7ffc0000 [ 63.597331][ T29] audit: type=1326 audit(1762505940.629:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7b69e66567 code=0x7ffc0000 [ 63.620624][ T29] audit: type=1326 audit(1762505940.629:4769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4270 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7b69e0b779 code=0x7ffc0000 [ 63.670745][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.814900][ T4319] hub 2-0:1.0: USB hub found [ 63.822242][ T4319] hub 2-0:1.0: 8 ports detected [ 64.006086][ T4306] netlink: 'syz.0.225': attribute type 13 has an invalid length. [ 64.039150][ T4306] gretap0: refused to change device tx_queue_len [ 64.057872][ T4306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.073622][ T3395] lo speed is unknown, defaulting to 1000 [ 64.079358][ T3395] s{z2: Port: 1 Link ACTIVE [ 64.427778][ T4327] loop0: detected capacity change from 0 to 128 [ 64.549075][ T4327] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.666796][ T4327] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.678491][ T4334] loop4: detected capacity change from 0 to 512 [ 64.728410][ T4334] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.235: Failed to acquire dquot type 1 [ 64.744785][ T4343] loop2: detected capacity change from 0 to 128 [ 64.759790][ T4334] EXT4-fs (loop4): 1 truncate cleaned up [ 64.771033][ T4334] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.784429][ T4334] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.808780][ T4334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.848935][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.916030][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 64.976636][ T4352] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 65.136396][ T57] bio_check_eod: 105 callbacks suppressed [ 65.136414][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.136414][ T57] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 65.156298][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.156298][ T57] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 65.173437][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.173437][ T57] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 65.187167][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.187167][ T57] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 65.200881][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.200881][ T57] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 65.214438][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.214438][ T57] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 65.231409][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.231409][ T57] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 65.245657][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.245657][ T57] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 65.259610][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.259610][ T57] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 65.273461][ T57] kworker/u8:4: attempt to access beyond end of device [ 65.273461][ T57] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 65.290531][ T4358] loop0: detected capacity change from 0 to 512 [ 65.306434][ T4358] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 65.318203][ T4372] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 65.319417][ T4358] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.238: bg 0: block 104: invalid block bitmap [ 65.329468][ T4370] hub 2-0:1.0: USB hub found [ 65.340378][ T4372] dummy0: entered promiscuous mode [ 65.344899][ T4370] hub 2-0:1.0: 8 ports detected [ 65.349129][ T4372] bridge0: port 3(dummy0) entered blocking state [ 65.354318][ T4358] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 65.359480][ T4372] bridge0: port 3(dummy0) entered disabled state [ 65.374768][ T4372] dummy0: entered allmulticast mode [ 65.380098][ T4358] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.238: invalid indirect mapped block 1 (level 1) [ 65.394594][ T4358] EXT4-fs (loop0): 1 truncate cleaned up [ 65.395108][ T4375] loop2: detected capacity change from 0 to 512 [ 65.400823][ T4358] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.419606][ T4358] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.437433][ T4375] EXT4-fs (loop2): too many log groups per flexible block group [ 65.445379][ T4375] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 65.452382][ T4375] EXT4-fs (loop2): mount failed [ 65.687933][ T4385] loop2: detected capacity change from 0 to 512 [ 65.711105][ T4385] ext2: Unknown parameter 'euid<00000000004294967295' [ 65.763877][ T4387] loop2: detected capacity change from 0 to 128 [ 65.775940][ T4387] buffer_io_error: 74 callbacks suppressed [ 65.775959][ T4387] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 65.792248][ T4387] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 65.801482][ T4387] Buffer I/O error on dev loop2, logical block 83, lost async page write [ 65.810102][ T4387] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 65.819287][ T4387] Buffer I/O error on dev loop2, logical block 95, lost async page write [ 65.828118][ T4387] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 65.837220][ T4387] Buffer I/O error on dev loop2, logical block 77, lost async page write [ 65.846280][ T4387] Buffer I/O error on dev loop2, logical block 78, lost async page write [ 65.854857][ T4387] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 65.863613][ T4387] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 66.057055][ T4396] loop2: detected capacity change from 0 to 512 [ 66.091480][ T4396] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.251: Failed to acquire dquot type 1 [ 66.116616][ T4396] EXT4-fs (loop2): 1 truncate cleaned up [ 66.139563][ T4396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.170699][ T4396] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.195578][ T4401] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 66.226368][ T4396] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.239250][ T4401] batman_adv: batadv0: Adding interface: gretap1 [ 66.245735][ T4401] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.277429][ T4401] batman_adv: batadv0: Interface activated: gretap1 [ 66.337371][ T4409] loop4: detected capacity change from 0 to 128 [ 66.338456][ T4407] syzkaller0: entered promiscuous mode [ 66.349297][ T4407] syzkaller0: entered allmulticast mode [ 66.361591][ T4411] xt_SECMARK: invalid mode: 2 [ 66.383198][ T4407] loop0: detected capacity change from 0 to 1024 [ 66.405951][ T4407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.422271][ T4407] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.494241][ T4412] loop2: detected capacity change from 0 to 512 [ 66.505081][ T4412] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 66.521720][ T4412] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.255: bg 0: block 104: invalid block bitmap [ 66.548467][ T4412] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 66.563738][ T4412] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.255: invalid indirect mapped block 1 (level 1) [ 66.592264][ T4412] EXT4-fs (loop2): 1 truncate cleaned up [ 66.598412][ T4412] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.628466][ T4412] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.706961][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.751997][ T4420] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 66.758800][ T4420] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 66.766565][ T4420] vhci_hcd vhci_hcd.0: Device attached [ 66.838686][ T4427] SELinux: policydb version 704780991 does not match my version range 15-35 [ 66.848541][ T4427] SELinux: failed to load policy [ 66.861408][ T4421] vhci_hcd: connection closed [ 66.861756][ T52] vhci_hcd: stop threads [ 66.871040][ T52] vhci_hcd: release socket [ 66.875532][ T52] vhci_hcd: disconnect device [ 66.901687][ T4430] loop2: detected capacity change from 0 to 128 [ 66.992469][ T3849] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.014018][ T4436] loop4: detected capacity change from 0 to 128 [ 67.080402][ T4431] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.119155][ T4440] __nla_validate_parse: 21 callbacks suppressed [ 67.119173][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.262'. [ 67.402431][ T4446] loop4: detected capacity change from 0 to 128 [ 67.535680][ T4446] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 67.548217][ T4446] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 67.639240][ T4446] lo speed is unknown, defaulting to 1000 [ 67.645914][ T4446] lo speed is unknown, defaulting to 1000 [ 67.814334][ T4451] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 68.230675][ T4453] loop3: detected capacity change from 0 to 1024 [ 68.239823][ T4453] EXT4-fs: Ignoring removed nobh option [ 68.245470][ T4453] EXT4-fs: Ignoring removed bh option [ 68.302818][ T4457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.267'. [ 68.314985][ T4453] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.339667][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 68.435201][ T4466] EXT4-fs (loop3): shut down requested (0) [ 68.439781][ T29] kauditd_printk_skb: 2616 callbacks suppressed [ 68.439869][ T29] audit: type=1400 audit(1762505945.659:7382): avc: denied { ioctl } for pid=4452 comm="syz.3.266" path="/56/file2/bus" dev="loop3" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 68.473895][ T29] audit: type=1326 audit(1762505945.669:7383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 68.497326][ T29] audit: type=1326 audit(1762505945.669:7384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 68.520783][ T29] audit: type=1326 audit(1762505945.669:7385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 68.544292][ T29] audit: type=1326 audit(1762505945.669:7386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 68.567741][ T29] audit: type=1326 audit(1762505945.669:7387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.1.267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7b69e6f6c9 code=0x7ffc0000 [ 68.590998][ T29] audit: type=1400 audit(1762505945.679:7388): avc: denied { read } for pid=2985 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 68.613031][ T29] audit: type=1400 audit(1762505945.679:7389): avc: denied { search } for pid=2985 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.634675][ T29] audit: type=1400 audit(1762505945.679:7390): avc: denied { search } for pid=2985 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.656265][ T29] audit: type=1400 audit(1762505945.679:7391): avc: denied { add_name } for pid=2985 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 68.679496][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.268'. [ 68.789699][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.878813][ T4474] loop0: detected capacity change from 0 to 128 [ 68.995468][ T4476] netlink: 'syz.2.273': attribute type 10 has an invalid length. [ 69.112855][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.132131][ T4483] loop3: detected capacity change from 0 to 128 [ 69.143611][ T4485] loop4: detected capacity change from 0 to 128 [ 69.155607][ T4485] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.182541][ T4485] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.237062][ T4485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 69.264102][ T4480] dummy0: left allmulticast mode [ 69.271287][ T4480] bridge0: port 3(dummy0) entered disabled state [ 69.280339][ T4480] bridge_slave_1: left allmulticast mode [ 69.286165][ T4480] bridge_slave_1: left promiscuous mode [ 69.291979][ T4480] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.311241][ T4480] bridge_slave_0: left allmulticast mode [ 69.317013][ T4480] bridge_slave_0: left promiscuous mode [ 69.322873][ T4480] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.414712][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.459276][ T4496] loop3: detected capacity change from 0 to 2048 [ 69.473088][ T4496] EXT4-fs (loop3): bad block size 8192 [ 69.547338][ T4500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.279'. [ 69.586584][ T4503] loop2: detected capacity change from 0 to 128 [ 69.676996][ T4507] loop4: detected capacity change from 0 to 512 [ 69.709961][ T4507] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.280: error while reading EA inode 32 err=-116 [ 69.742634][ T4507] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.280: error while reading EA inode 32 err=-116 [ 69.756149][ T4507] EXT4-fs (loop4): 1 orphan inode deleted [ 69.763542][ T4507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.914795][ T4513] netlink: 20 bytes leftover after parsing attributes in process `syz.2.282'. [ 69.977105][ T4515] loop1: detected capacity change from 0 to 1024 [ 69.989519][ T4515] EXT4-fs: Ignoring removed orlov option [ 70.027013][ T4515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.349264][ T4517] ================================================================== [ 70.357366][ T4517] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 70.364505][ T4517] [ 70.366857][ T4517] write to 0xffff888106e920f4 of 4 bytes by task 4515 on cpu 0: [ 70.374524][ T4517] xas_set_mark+0x12b/0x140 [ 70.379050][ T4517] __folio_start_writeback+0x155/0x390 [ 70.384541][ T4517] ext4_bio_write_folio+0x5ad/0x9f0 [ 70.389772][ T4517] mpage_process_page_bufs+0x4a1/0x620 [ 70.395353][ T4517] mpage_prepare_extent_to_map+0x786/0xc00 [ 70.401206][ T4517] ext4_do_writepages+0xa05/0x2750 [ 70.406346][ T4517] ext4_writepages+0x176/0x300 [ 70.411153][ T4517] do_writepages+0x1c6/0x310 [ 70.415784][ T4517] file_write_and_wait_range+0x156/0x2c0 [ 70.421464][ T4517] generic_buffers_fsync_noflush+0x45/0x120 [ 70.427403][ T4517] ext4_sync_file+0x1ab/0x690 [ 70.432092][ T4517] vfs_fsync_range+0x10d/0x130 [ 70.436874][ T4517] ext4_buffered_write_iter+0x34f/0x3c0 [ 70.442442][ T4517] ext4_file_write_iter+0x387/0xf60 [ 70.447665][ T4517] iter_file_splice_write+0x666/0xa60 [ 70.453053][ T4517] direct_splice_actor+0x156/0x2a0 [ 70.458200][ T4517] splice_direct_to_actor+0x312/0x680 [ 70.463603][ T4517] do_splice_direct+0xda/0x150 [ 70.468384][ T4517] do_sendfile+0x380/0x650 [ 70.472836][ T4517] __x64_sys_sendfile64+0x105/0x150 [ 70.478055][ T4517] x64_sys_call+0x2bb4/0x3000 [ 70.482741][ T4517] do_syscall_64+0xd2/0x200 [ 70.487258][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.493264][ T4517] [ 70.495618][ T4517] read to 0xffff888106e920f4 of 4 bytes by task 4517 on cpu 1: [ 70.503162][ T4517] xas_find_marked+0x5dc/0x620 [ 70.507943][ T4517] find_get_entry+0x5d/0x380 [ 70.512556][ T4517] filemap_get_folios_tag+0x92/0x210 [ 70.517868][ T4517] mpage_prepare_extent_to_map+0x320/0xc00 [ 70.523688][ T4517] ext4_do_writepages+0x708/0x2750 [ 70.528824][ T4517] ext4_writepages+0x176/0x300 [ 70.533618][ T4517] do_writepages+0x1c6/0x310 [ 70.538227][ T4517] file_write_and_wait_range+0x156/0x2c0 [ 70.543887][ T4517] generic_buffers_fsync_noflush+0x45/0x120 [ 70.549832][ T4517] ext4_sync_file+0x1ab/0x690 [ 70.554520][ T4517] vfs_fsync_range+0x10d/0x130 [ 70.559309][ T4517] ext4_buffered_write_iter+0x34f/0x3c0 [ 70.564874][ T4517] ext4_file_write_iter+0x387/0xf60 [ 70.570079][ T4517] iter_file_splice_write+0x666/0xa60 [ 70.575460][ T4517] direct_splice_actor+0x156/0x2a0 [ 70.580583][ T4517] splice_direct_to_actor+0x312/0x680 [ 70.585965][ T4517] do_splice_direct+0xda/0x150 [ 70.590832][ T4517] do_sendfile+0x380/0x650 [ 70.595281][ T4517] __x64_sys_sendfile64+0x105/0x150 [ 70.600519][ T4517] x64_sys_call+0x2bb4/0x3000 [ 70.605317][ T4517] do_syscall_64+0xd2/0x200 [ 70.609847][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.615745][ T4517] [ 70.618066][ T4517] value changed: 0x0a000021 -> 0x04000021 [ 70.623783][ T4517] [ 70.626113][ T4517] Reported by Kernel Concurrency Sanitizer on: [ 70.632873][ T4517] CPU: 1 UID: 0 PID: 4517 Comm: syz.1.283 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.644077][ T4517] Tainted: [W]=WARN [ 70.647878][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.657946][ T4517] ================================================================== [ 70.702949][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.862698][ T4517] syz.1.283 (4517) used greatest stack depth: 9064 bytes left [ 70.880986][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.