last executing test programs: 22.246068489s ago: executing program 0 (id=1): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x14) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 22.14732988s ago: executing program 0 (id=13): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ata_bmdma_status\x00', r0, 0x0, 0x4}, 0xfffffffffffffff0) r1 = mq_open(&(0x7f0000000100)=':$\x00', 0x2, 0x10, &(0x7f0000000140)={0xffffffffffffffff, 0x7, 0xfffffffffffffffa, 0x7}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x6, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0xc74, 0x0, 0xffffffff, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x62e6ad0f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10, {0x7, 0x0, 0xba6d, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) close(r2) r8 = socket$igmp6(0xa, 0x3, 0x3a) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000005c0)='kfree\x00', r9, 0x0, 0x8000}, 0x18) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x20000}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) mq_timedreceive(r1, &(0x7f0000000180)=""/239, 0xef, 0x4c, &(0x7f0000000280)={0x77359400}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r12) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r12, 0x10e, 0x8, &(0x7f0000000280)=0xfffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r12, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000240)={0x3920e, r10, 0xfffffffe, 0x1, 0x5}) 21.772625816s ago: executing program 0 (id=19): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000003800090000000000000000000300000004000000270001"], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[], 0x28}}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x2}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x4}}]}}, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = timerfd_create(0x9, 0x800) timerfd_settime(r4, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x89) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timerfd_gettime(r4, &(0x7f0000000000)) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) unshare(0x40000000) 20.312327375s ago: executing program 0 (id=33): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={0xffffffffffffffff, 0x0, &(0x7f0000000540)=""/240}, 0x20) 20.245365226s ago: executing program 32 (id=33): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={0xffffffffffffffff, 0x0, &(0x7f0000000540)=""/240}, 0x20) 13.014156284s ago: executing program 5 (id=174): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x4302) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) r3 = dup(r1) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffb, 0x0, 0x515f3157, 0x6, "78e1141009f593233bce41f20613341f43d01f"}) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) r4 = shmget$private(0x0, 0x4000, 0x40, &(0x7f0000582000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000286000/0x1000)=nil, 0x0) r6 = shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) shmat(r6, &(0x7f0000fed000/0x4000)=nil, 0x7000) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req3={0x10001, 0xffffceaf, 0x800, 0xfffffffc, 0x7ff, 0x4, 0x9}, 0x1c) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) shmdt(r5) munlockall() 12.938527755s ago: executing program 5 (id=177): r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) 12.675723259s ago: executing program 5 (id=183): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="b270a38ae6b243a25fd8084dc70c519bb43862c68544c6abc123fa70a9322cb98f70aaf52f973549a92ecadeef1a3e09a6127527d3256feb76a100c43f17bd27a20cc278109f5e01ab40ac88220795849f88b90c3eccce1a014f8ac221e7db9ddce66750a4303aa89bfd3bda5daede5ad91904e0057629e3b0714340ea18b70b9aaa98debab71324bcc806cb7653011030cf6525692c4fab17cbf80f22cae0d8dc05a6936334c66eceee"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x52d, &(0x7f0000001500)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$keyring(0x0, &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r5, &(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)='kfree\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x0, 0x3, 0x100}}}}}}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, 0x0, 0x4591b6b69eff4cc3) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000003c0)={0x17c04, 0xffffffffffffffff, 0x4ea, 0x10001, 0x0, 0x8}) 11.940921038s ago: executing program 5 (id=195): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mkdir(&(0x7f0000000080)='./file0/../file0\x00', 0xe) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) inotify_add_watch(r3, &(0x7f0000000040)='./file0/../file0\x00', 0x80) 11.674663162s ago: executing program 5 (id=197): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 11.421015795s ago: executing program 5 (id=203): r0 = syz_io_uring_setup(0x14ff, &(0x7f0000000100)={0x0, 0x3, 0x80, 0xffffffff, 0x106}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 11.417019455s ago: executing program 33 (id=203): r0 = syz_io_uring_setup(0x14ff, &(0x7f0000000100)={0x0, 0x3, 0x80, 0xffffffff, 0x106}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 6.461895412s ago: executing program 1 (id=293): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x100) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r4, 0x4}, 0x8) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4800, 0x100, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lchown(0x0, r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x1) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r9, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {r6, r9}}, './bus\x00'}) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ac72d17}, [@exit, @alu={0x4, 0x0, 0xb, 0x8, 0xa, 0xffffffffffffff6c, 0xffffffffffffffff}]}, &(0x7f0000000280)='syzkaller\x00', 0x40, 0x5b, &(0x7f0000000440)=""/91, 0x40f00, 0x10, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f00000002c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0xf73}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r7, r7], &(0x7f0000000580)=[{0x1, 0x3, 0x8, 0x1}, {0x4, 0x1, 0x3, 0xe}, {0x0, 0x2, 0x9, 0x3}, {0x4, 0x1, 0xe, 0x8}, {0x0, 0x2, 0x0, 0x9}, {0x1, 0x4, 0x0, 0x3}], 0x10, 0x0, @void, @value}, 0x94) 5.571506134s ago: executing program 1 (id=310): r0 = syz_io_uring_setup(0x14ff, &(0x7f0000000100)={0x0, 0x3, 0x80, 0xffffffff, 0x106}, &(0x7f0000000500)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 5.346731328s ago: executing program 1 (id=312): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000014c0)='kmem_cache_free\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 5.264081529s ago: executing program 1 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) 5.15365202s ago: executing program 1 (id=316): add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540), 0x0, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000e20000008500000013000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/hci\x00') socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 2.137679171s ago: executing program 6 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) close(r2) 2.129543331s ago: executing program 1 (id=388): add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540), 0x0, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000e20000008500000013000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/hci\x00') socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 2.053072042s ago: executing program 6 (id=389): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) fspick(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) 1.955551513s ago: executing program 6 (id=390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munlockall() 1.871281954s ago: executing program 6 (id=392): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="350a00000000000061111400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f00000000c0), &(0x7f00000002c0)=r0}, 0x20) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0x7fffffff, 0x14, 0xfcc, 0x400, 0x9}, 0x81, 0x0, 0xc8c3, 0x40, 0x4, 0x1c, 0x11, 0x9, 0x8, 0xffffffff, {0xfffffff5, 0x4, 0xad8, 0x7, 0x4, 0x4}}}}]}, 0x78}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x2, 0x400, 0x3a}) fcntl$lock(r6, 0x24, &(0x7f0000000d80)={0x0, 0x1, 0x6, 0x80}) getdents64(r5, 0x0, 0x0) getdents64(r5, &(0x7f00000002c0)=""/191, 0xbf) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r7, 0x0, 0x8) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000100000000000000000000000000000000000000b8f73f262885b0bef42c2e6113f5719690e0540cbfc35c68744ecdd4f8389cbaacf4b1900b073b540ed68b0a7e88b55af3baf91476824cda87"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)=r0}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x173, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x8}, @map_fd={0x18, 0xa, 0x1, 0x0, r8}, @printk={@li}, @ldst={0x1, 0x1, 0x1, 0x4, 0x3, 0x50, 0x8}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x21024617}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @ldst={0x1, 0x1, 0x0, 0xa, 0x6, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000580)='GPL\x00', 0x8, 0x3b, &(0x7f00000005c0)=""/59, 0x40f00, 0x48, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000600)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x5, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000840)=[r7, r8, r9], &(0x7f0000000880)=[{0x0, 0x2, 0x7, 0x7}, {0x0, 0x5, 0x9, 0x9}, {0x1, 0x5, 0x2, 0xb}, {0x1, 0x3, 0xe, 0x91dcb6c3817d50aa}], 0x10, 0x80000001, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x10000000007], 0x0, 0xfffffffffffffffd, 0x1, 0x0, r12}}, 0x40) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000001100)={{0x1, 0x1, 0x18, r6, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) lstat(&(0x7f0000001140)='./file0\x00', &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = gettid() rt_sigqueueinfo(r15, 0x21, &(0x7f0000000ac0)={0x0, 0xc6, 0x8000000}) r16 = geteuid() lstat(&(0x7f0000001200)='./file0\x00', &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r6, &(0x7f00000013c0)={&(0x7f00000001c0), 0xc, &(0x7f00000009c0)=[{&(0x7f0000000640)={0x60, 0x33, 0x4, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x29, 0x104, 0x0, 0x1, [@generic="eabc4376afe8bd1552f05e243cd53195e95221fd71fed173fab67d634acc32ee08", @nested={0x4, 0x8f}]}, @nested={0x8, 0x14, 0x0, 0x1, [@typed={0x4, 0x41}]}, @typed={0x6, 0x78, 0x0, 0x0, @str='#\x00'}, @typed={0x8, 0x4a, 0x0, 0x0, @fd=r6}, @generic="76569892d9ec733ad3"]}, 0x60}, {&(0x7f00000006c0)={0xb0, 0x1d, 0x400, 0x70bd28, 0x25dfdbfd, "", [@generic="f6849e6bcb6a3e5d91304445c74de89366fbe1e07977ee0d71ab2e20f3ad93b611392ea56223695d4dd2bbb1cf1c80ea43148067b29ab4ee28efcef5c097263801a52a2b662799d057781c8747d204350b098dd995e1db341bfc502acb61fdd6fb668101234eb2c804392fd7eb89975ec48928ecdc25b6d3d8a18f282304466c9780a2c8a9a1442f4f10ac1a06f47f20", @typed={0x8, 0x86, 0x0, 0x0, @pid}, @typed={0x8, 0xb6, 0x0, 0x0, @uid}]}, 0xb0}, {&(0x7f0000000240)={0x14, 0x12, 0x10, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x4, 0x5a}]}, 0x14}, {&(0x7f0000000b40)={0xf4, 0x13, 0x2, 0x70bd25, 0x25dfdbfb, "", [@nested={0xe4, 0x73, 0x0, 0x1, [@nested={0x4, 0x99}, @typed={0x8, 0x12b, 0x0, 0x0, @u32=0x7}, @generic="9706af8401ec66f13613f7d2b8452d46775340d04845888cd354c8ad510e7ea904a5d9b93b7e1c03d681976a5b8977977fc1d2614e207e34b852b2a18d0c626c856d8ba830675d7d187106c31bf36df28b753003f9a6adf4e782990a77f4e107762b2ef91e13475231398b1f031058c283b50b228286ecf0a5778d81f185f684126d9c5fa873c69abfe6f2c3decfb4361f8b080abe73d009e80db2ffb68f393548401092d3292bc8641620120264f0f84430f6d3195e8d5ee62f0cf2ccd7e97faccadeb845065160", @nested={0x4, 0xe1}, @typed={0x8, 0xf7, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xf4}], 0x4, &(0x7f00000012c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r2, r2, r8, r10]}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0xe0, 0x40000}, 0x2008c095) r18 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r18}, 0x10) read$rfkill(r6, &(0x7f0000000180), 0x8) 1.750594306s ago: executing program 6 (id=396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.636000888s ago: executing program 6 (id=398): add_key$user(0x0, &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000540), 0x0, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000000000000e20000008500000013000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/hci\x00') socket$xdp(0x2c, 0x3, 0x0) r4 = dup(0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10) 1.46742382s ago: executing program 2 (id=402): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) fspick(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) 1.42589518s ago: executing program 2 (id=404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) close(r3) 1.312985092s ago: executing program 2 (id=406): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x64, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 1.270752293s ago: executing program 2 (id=409): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000700)='kfree\x00', r0, 0x0, 0x7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000850000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.224649804s ago: executing program 2 (id=411): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88"], 0xdd12}], 0x1}, 0x0) 1.126575195s ago: executing program 4 (id=416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000d60022cd00000000000000008500000041000000850000000500000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)="98119404b326089ddf0c0985ba4a", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x5}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000003dc0)={[0x4]}, 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00'}) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x41c0, 0x4) getpeername$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x101) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 863.371248ms ago: executing program 4 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x65, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 790.041969ms ago: executing program 4 (id=420): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$eJzs3c9vHFcdAPDvjH+sm6ZxAj1ABSRAIaAou/Gmjape2lxAqKqEqDggDqmxN5bJbjZk16U2kXD/hiKBxAn+BA5IHJB64sCNIxIHhFQOSAEsUIwE0qKZHf+ovcaLd73bej8faTLz5s3M973Ys+/t2/W8ACbWlYjYjIjZiHgzIuaL/UmxxKvdJTvuydajpe2tR0tJdDpv/C3J87N9+QmlvWs+XVxzLiK+8dWI7ySH47bWN+4t1uu1h0W60m48qLTWN66vNhZXaiu1+9XqrYVbN166+WJ1aHW93PjF46+svvbNX//q0+//bvPLP8iKdb7I263HkHWrPrMbJzMdEa+dRrAxmCrWs2MuByeTRsTHIuJz+f0/H1P5bycAcJZ1OvPRmd+fBgDOujQfA0vSckSkadEJKHfH8J6Nc2m92Wpfu9tcu7/cHSu7GDPp3dV67cal0h++lx88k2TphTwvz8/T1QPpmxFxKSJ+VHoqT5eXmvXl8XR5AGDiPb2//Y+If5bStFzu69Qen+oBAB8Zc+MuAAAwctp/AJg82n8AmDx9tP/Fh/2bp14WAGA0/r/3/xdOrRwAwOgY/weAyaP9B4CJ8vXXX8+Wznbx/Ovlt9bX7jXfur5ca90rN9aWykvNhw/KK83mSv7MnsZx16s3mw8WXoi1tyvtWqtdaa1v3Gk01+637+TP9b5TmxlJrQCA/+XS5fd+n0TE5stP5Uvsm8tBWw1nWzruAgBjMzXIyToI8JFmti+YXH014Xkn4benXhZgPHo+zHuu5+YH/aS7erefIL5nBB8qVz/Z//i/OZ7hbDH+D5PrZOP/rwy9HMDoGf+HydXpJAfn/J/dzQIAzqQBvsLX+eGwOiHAWB03mfdxn/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJDofEd+NJC3nc4Gn2b9puRzxTERcjJnk7mq9diMiLsTliJgpZemFcRcaABhQ+pekmP/r6vzz5w/mzib/KuXriPj+T9/48duL7fbDhWz/33f3l3amD6vunTfAvIIAwJDl7Xe1WO97I/9k69HSzjLK8jy+Hf8ppiJe2t56lC/dnOnIdkbM5X2Jc/9IYro4Zy4inouIqSHE33wnIj7Rq/5JPjZysZj5dH/8KGI/M9L46Qfip3led511vj4+hLLApHnvdkS82uv+S+NKvu59/8/lr1CDe3y7e7Gd177tffGni0hTPeJn9/yVfmO88JuvHdrZme/mvRPx3HSv+Mlu/OSI+M/3Gf+Pn/rMu68ckdf5WcTV6B1/f6xKu/Gg0lrfuL7aWFyprdTuV6u3Fm7deOnmi9VKPkZd2RmpPuyvL1+7cFTZsvqfOyL+XM/6z+6e+4U+6//zf7/57c/uJUsH43/p871//s/2jN+VtYlf7DP+4rlfHjl9dxZ/+Yj6H/fzv9Zn/Pf/vLHc56EAwAi01jfuLdbrtYcDbWTvQodxnUMbWRH7O3inuzhY0D/FadTihBszp/W/euob07t9xeFe+VvZFXtkpX3+kpxkIx16LQbaeDKqWON7TQJGY++mH3dJAAAAAAAAAAAAAACAo4ziT5fGXUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrv8GAAD//xxkzKw=") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000008000000000", @ANYRES32=0x1, @ANYBLOB="830300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000e80169010000000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000600)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'gre0\x00', &(0x7f0000000880)={'tunl0\x00', 0x0, 0x8, 0x7, 0x200, 0xe7, {{0x23, 0x4, 0x2, 0x3, 0x8c, 0x68, 0x0, 0xff, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1, {[@rr={0x7, 0x17, 0xb, [@dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x39}]}, @generic={0x88, 0xd, "b9b3c60f9d36ffdcbfb4b5"}, @noop, @generic={0x1, 0xd, "6b21b923fd546f4e913e22"}, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x3, [{@empty, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xe, 0x3, 0x9, [{@multicast1, 0x80000000}]}, @timestamp_prespec={0x44, 0x2c, 0x5, 0x3, 0x7, [{@loopback, 0x8}, {@broadcast, 0xffff}, {@remote, 0xffff}, {@remote, 0x9}, {@private=0xa010100, 0xff}]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2a, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000006000000000000000080ffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000000000000000000000000000008d9810000800000018200000", @ANYRES32=r3, @ANYBLOB="000000000e000000851000000500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="000000000031c3e35df26382000000b705000008000000850000a5", @ANYRES32=r6, @ANYBLOB="0000000000000000186900000e0000000000000003000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000840)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x4c, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000980)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x5, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000a40)=[{0x5, 0x1, 0x2, 0x3}, {0x4, 0x2, 0xa, 0xc}], 0x10, 0xd9e, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) io_uring_setup(0xf73, &(0x7f0000000b40)={0x0, 0x6900, 0x800, 0x3, 0x192}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=r1, @ANYBLOB="040000000000800008000000", @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000c40)=""/8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) setxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0x841, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(r11, 0x401054d5, &(0x7f00000009c0)={0x0, 0x0}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r13}, 0x10) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r14, &(0x7f0000000780)}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) 544.553693ms ago: executing program 3 (id=426): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) fspick(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1) 521.359753ms ago: executing program 3 (id=427): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) munlockall() 473.973663ms ago: executing program 3 (id=428): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB], 0x18) 473.345743ms ago: executing program 3 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) close(r3) 359.994795ms ago: executing program 3 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x65, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c0000000000000c548dc7914cb11ad63bf3707164aac031971c4be105eb953f86fbc6b204e076aa7a493e796123bbbd8e3b7e62d8fd097cf21d6d431a069ebc0aefd5fce80cc99fb38c771fa46e2c32a95fe99", 0x0, 0x86, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 359.403775ms ago: executing program 2 (id=431): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000003c0), 0x2, 0x1}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r2}, 0x10) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r3, r4) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = perf_event_open$cgroup(&(0x7f00000002c0)={0x1, 0x80, 0x8, 0xb, 0x4, 0xe, 0x0, 0x0, 0x800, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, @perf_bp={&(0x7f0000000040), 0x1}, 0x10a0, 0x3, 0x2, 0x3, 0x5, 0x2, 0x40, 0x0, 0xc, 0x0, 0xc}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x100000001}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x2000000005}, 0x0, 0xffffffffffffffff, r6, 0x9) close_range(r5, r0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setresuid(0x0, 0xee01, 0x0) 296.355186ms ago: executing program 3 (id=432): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0xa}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0x8c}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r3}, 0x38) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x28, r5, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x6, 0x35}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000801) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x7f, 0x2, 0x66, 0x80}, {0x4, 0x1, 0x3, 0x400}]}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x0, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, [@IFLA_LINKMODE={0x5, 0x11, 0x2}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x29bd}]}, 0x30}}, 0x24000844) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800400, &(0x7f0000000100), 0x1, 0x513, &(0x7f0000000ec0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 102.161579ms ago: executing program 4 (id=433): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 29.444679ms ago: executing program 4 (id=434): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0x44}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 0s ago: executing program 4 (id=435): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x26, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000a50000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcaa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x2c7}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) personality(0x5400004) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x41) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aa008085000000700000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r5}, 0xc) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100), 0xfe, 0x570, &(0x7f0000000b40)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) symlink(0x0, &(0x7f0000000000)='./file0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff0000000071108f000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) kernel console output (not intermixed with test programs): [ 22.525853][ T29] audit: type=1400 audit(1746468443.529:81): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 28.210744][ T29] audit: type=1400 audit(1746468449.209:82): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.211806][ T3293] cgroup: Unknown subsys name 'net' [ 28.233515][ T29] audit: type=1400 audit(1746468449.209:83): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.261032][ T29] audit: type=1400 audit(1746468449.239:84): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.395449][ T3293] cgroup: Unknown subsys name 'cpuset' [ 28.401746][ T3293] cgroup: Unknown subsys name 'rlimit' [ 28.573041][ T29] audit: type=1400 audit(1746468449.569:85): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.597882][ T29] audit: type=1400 audit(1746468449.569:86): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.618484][ T29] audit: type=1400 audit(1746468449.569:87): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.625156][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.638842][ T29] audit: type=1400 audit(1746468449.569:88): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.667793][ T29] audit: type=1400 audit(1746468449.579:89): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.692589][ T29] audit: type=1400 audit(1746468449.579:90): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.701075][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.715998][ T29] audit: type=1400 audit(1746468449.649:91): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.843966][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.855001][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.956161][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.975780][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.982880][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.990240][ T3304] bridge_slave_0: entered allmulticast mode [ 29.996769][ T3304] bridge_slave_0: entered promiscuous mode [ 30.008278][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.015511][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.022706][ T3303] bridge_slave_0: entered allmulticast mode [ 30.029698][ T3303] bridge_slave_0: entered promiscuous mode [ 30.042443][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.051877][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.058963][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.066271][ T3304] bridge_slave_1: entered allmulticast mode [ 30.072670][ T3304] bridge_slave_1: entered promiscuous mode [ 30.084037][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.091157][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.098299][ T3303] bridge_slave_1: entered allmulticast mode [ 30.104950][ T3303] bridge_slave_1: entered promiscuous mode [ 30.145915][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.163219][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.184768][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.195071][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.223180][ T3304] team0: Port device team_slave_0 added [ 30.240275][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 30.249106][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.256349][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.263720][ T3302] bridge_slave_0: entered allmulticast mode [ 30.270045][ T3302] bridge_slave_0: entered promiscuous mode [ 30.277207][ T3304] team0: Port device team_slave_1 added [ 30.303845][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.310986][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.318380][ T3302] bridge_slave_1: entered allmulticast mode [ 30.324968][ T3302] bridge_slave_1: entered promiscuous mode [ 30.331657][ T3303] team0: Port device team_slave_0 added [ 30.338678][ T3303] team0: Port device team_slave_1 added [ 30.373829][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.381082][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.388348][ T3313] bridge_slave_0: entered allmulticast mode [ 30.394810][ T3313] bridge_slave_0: entered promiscuous mode [ 30.416399][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.423416][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.449398][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.465827][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.472866][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.498816][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.509621][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.516771][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.523938][ T3313] bridge_slave_1: entered allmulticast mode [ 30.530548][ T3313] bridge_slave_1: entered promiscuous mode [ 30.539056][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.546260][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.572373][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.584126][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.593600][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.600606][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.626593][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.654715][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.663879][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.671000][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.678239][ T3308] bridge_slave_0: entered allmulticast mode [ 30.684746][ T3308] bridge_slave_0: entered promiscuous mode [ 30.693368][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.700548][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.707793][ T3308] bridge_slave_1: entered allmulticast mode [ 30.714184][ T3308] bridge_slave_1: entered promiscuous mode [ 30.726934][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.748168][ T3302] team0: Port device team_slave_0 added [ 30.759655][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.775281][ T3302] team0: Port device team_slave_1 added [ 30.811336][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.826636][ T3313] team0: Port device team_slave_0 added [ 30.834109][ T3304] hsr_slave_0: entered promiscuous mode [ 30.840259][ T3304] hsr_slave_1: entered promiscuous mode [ 30.851742][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.858784][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.884852][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.896697][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.918698][ T3313] team0: Port device team_slave_1 added [ 30.931540][ T3303] hsr_slave_0: entered promiscuous mode [ 30.937566][ T3303] hsr_slave_1: entered promiscuous mode [ 30.943460][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.951089][ T3303] Cannot create hsr debugfs directory [ 30.956849][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.963843][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.989818][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.016941][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.023906][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.050098][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.061335][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.068357][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.094411][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.110319][ T3308] team0: Port device team_slave_0 added [ 31.128937][ T3308] team0: Port device team_slave_1 added [ 31.146925][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.153931][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.179989][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.204960][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.211929][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.237850][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.275347][ T3302] hsr_slave_0: entered promiscuous mode [ 31.281499][ T3302] hsr_slave_1: entered promiscuous mode [ 31.287442][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.295209][ T3302] Cannot create hsr debugfs directory [ 31.302763][ T3313] hsr_slave_0: entered promiscuous mode [ 31.309024][ T3313] hsr_slave_1: entered promiscuous mode [ 31.315115][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.322718][ T3313] Cannot create hsr debugfs directory [ 31.390726][ T3308] hsr_slave_0: entered promiscuous mode [ 31.397026][ T3308] hsr_slave_1: entered promiscuous mode [ 31.402986][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.410607][ T3308] Cannot create hsr debugfs directory [ 31.518952][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.546897][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.557662][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.574321][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.591352][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.602677][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.619722][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.637529][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.646448][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.655451][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.671596][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.680364][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.712159][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.723489][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.742909][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.764331][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.800884][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.808240][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.817355][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.826443][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.836341][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.879126][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.888486][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.904529][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.919562][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.926726][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.951439][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.958621][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.968032][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.982835][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.991003][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.998157][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.009165][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.016294][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.026815][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.044794][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.051935][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.069931][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.082358][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.099571][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.106682][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.123481][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.133314][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.140412][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.151725][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.158830][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.189999][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.197142][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.210877][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.218068][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.244016][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.264248][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.274842][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.299642][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.370780][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.388357][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.433351][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.462014][ T3304] veth0_vlan: entered promiscuous mode [ 32.472108][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.483655][ T3304] veth1_vlan: entered promiscuous mode [ 32.535688][ T3304] veth0_macvtap: entered promiscuous mode [ 32.549874][ T3304] veth1_macvtap: entered promiscuous mode [ 32.602278][ T3313] veth0_vlan: entered promiscuous mode [ 32.619010][ T3303] veth0_vlan: entered promiscuous mode [ 32.627551][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.638961][ T3313] veth1_vlan: entered promiscuous mode [ 32.654386][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.668706][ T3308] veth0_vlan: entered promiscuous mode [ 32.676761][ T3303] veth1_vlan: entered promiscuous mode [ 32.691672][ T3304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.700529][ T3304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.709303][ T3304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.718098][ T3304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.736081][ T3308] veth1_vlan: entered promiscuous mode [ 32.751233][ T3302] veth0_vlan: entered promiscuous mode [ 32.771277][ T3313] veth0_macvtap: entered promiscuous mode [ 32.781605][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.787135][ T3313] veth1_macvtap: entered promiscuous mode [ 32.808130][ T3308] veth0_macvtap: entered promiscuous mode [ 32.825201][ T3302] veth1_vlan: entered promiscuous mode [ 32.831455][ T3303] veth0_macvtap: entered promiscuous mode [ 32.839741][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.849971][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x1 [ 32.850227][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.857974][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.871544][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.875510][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.883781][ T3308] veth1_macvtap: entered promiscuous mode [ 32.890473][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.901015][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.903907][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x2 [ 32.914460][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.914477][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.922240][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.932129][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.942598][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.942634][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x4 [ 32.942659][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.942686][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.953907][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.960302][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.969844][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.975815][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 32.983497][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.991270][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x2 [ 33.002619][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.006246][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.023272][ T3302] veth0_macvtap: entered promiscuous mode [ 33.024489][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.036624][ T3302] veth1_macvtap: entered promiscuous mode [ 33.042110][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.054217][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.057013][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.062747][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.070526][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.076225][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.083949][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.094382][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.102129][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.111903][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.119643][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.130036][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.131898][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.137824][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.161028][ T3303] veth1_macvtap: entered promiscuous mode [ 33.166058][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.177652][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.183530][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.190737][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.198445][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.204137][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.211928][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.222363][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.230127][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.243073][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.247731][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.260097][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.265922][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.275762][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.283450][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.290653][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290701][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.310884][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.315132][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.315161][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.315187][ T3378] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 33.323870][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.394094][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.404692][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.414501][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.425193][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.435116][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.445800][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.459414][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.465688][ T3378] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 33.479570][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.488663][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.497592][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.506455][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.518038][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.528570][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.538480][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.549041][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.558899][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.569387][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.581961][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.585110][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 33.585128][ T29] audit: type=1400 audit(1746468454.579:127): avc: denied { create } for pid=3444 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.595488][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.625373][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.635212][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.645721][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.654647][ T29] audit: type=1400 audit(1746468454.639:128): avc: denied { connect } for pid=3444 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.659633][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.678935][ T29] audit: type=1400 audit(1746468454.639:129): avc: denied { read } for pid=3444 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.689410][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.689424][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.708472][ T29] audit: type=1400 audit(1746468454.639:130): avc: denied { prog_run } for pid=3444 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.747673][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.759417][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.766871][ T29] audit: type=1400 audit(1746468454.729:131): avc: denied { open } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.785999][ T29] audit: type=1400 audit(1746468454.729:132): avc: denied { kernel } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.814420][ T29] audit: type=1400 audit(1746468454.809:133): avc: denied { create } for pid=3449 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.837273][ T3303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.846130][ T3303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.854873][ T3303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.863648][ T3303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.875296][ T29] audit: type=1400 audit(1746468454.879:134): avc: denied { ioctl } for pid=3449 comm="syz.3.7" path="socket:[3774]" dev="sockfs" ino=3774 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.876861][ T3450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7'. [ 33.903374][ T3302] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.917354][ T3302] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.926337][ T3302] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.935158][ T3302] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.953476][ T3452] loop3: detected capacity change from 0 to 2048 [ 33.968649][ T3450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.978869][ T3450] batadv_slave_0: entered promiscuous mode [ 34.020233][ T3452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.035687][ T29] audit: type=1400 audit(1746468455.019:135): avc: denied { create } for pid=3457 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.056133][ T29] audit: type=1400 audit(1746468455.029:136): avc: denied { write } for pid=3457 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.090895][ T3461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3461 comm=syz.1.8 [ 34.122040][ T3461] syz.1.8 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.182598][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 34.251585][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.431983][ T3489] unsupported nla_type 52263 [ 34.434648][ C1] hrtimer: interrupt took 26288 ns [ 34.470555][ T3489] loop0: detected capacity change from 0 to 512 [ 34.501475][ T3489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.537984][ T3489] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.556548][ T3495] loop4: detected capacity change from 0 to 128 [ 34.583164][ T3495] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 34.609562][ T3495] System zones: 1-3, 19-19, 35-36 [ 34.623474][ T3495] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.639372][ T3495] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.687413][ T3489] syz.0.13 (3489) used greatest stack depth: 10608 bytes left [ 34.713133][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 34.738823][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 34.764277][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 34.811079][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.822546][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 34.870685][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 34.893519][ T3513] loop3: detected capacity change from 0 to 512 [ 34.915700][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 34.929340][ T3514] loop2: detected capacity change from 0 to 1024 [ 34.932975][ T3518] loop4: detected capacity change from 0 to 512 [ 34.940466][ T3513] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.955309][ T3513] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.971268][ T3518] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.984219][ T3518] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.990870][ T3514] ======================================================= [ 34.990870][ T3514] WARNING: The mand mount option has been deprecated and [ 34.990870][ T3514] and is ignored by this kernel. Remove the mand [ 34.990870][ T3514] option from the mount to silence this warning. [ 34.990870][ T3514] ======================================================= [ 35.034197][ T3518] EXT4-fs (loop4): 1 truncate cleaned up [ 35.035255][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.041688][ T3518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.066669][ T3514] EXT4-fs: Ignoring removed nobh option [ 35.083744][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.094138][ T3514] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.099237][ T3513] EXT4-fs (loop3): 1 truncate cleaned up [ 35.111186][ T3513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.122370][ T3514] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #11: comm syz.2.24: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 35.165457][ T3514] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.24: couldn't read orphan inode 11 (err -117) [ 35.171420][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.179243][ T3526] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.4.22: corrupted xattr block 33: invalid header [ 35.200175][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.204077][ T3531] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.3.25: corrupted xattr block 33: invalid header [ 35.228803][ T3303] EXT4-fs error (device loop0): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 35.246973][ T3526] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.22: corrupted xattr block 33: invalid header [ 35.261357][ T3531] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.25: corrupted xattr block 33: invalid header [ 35.284045][ T3526] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 35.293637][ T3531] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 35.365458][ T3538] loop1: detected capacity change from 0 to 1024 [ 35.383162][ T3538] EXT4-fs: Ignoring removed orlov option [ 35.393123][ T3538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.421984][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.530328][ T3570] loop2: detected capacity change from 0 to 512 [ 35.569079][ T3570] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.578271][ T3570] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 35.604875][ T3570] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 35.614062][ T3570] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 35.622633][ T3570] System zones: 0-2, 18-18, 34-34 [ 35.630012][ T3570] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 35.648361][ T3570] EXT4-fs (loop2): 1 truncate cleaned up [ 35.654937][ T3570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.825673][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.077059][ T3631] mmap: syz.2.32 (3631) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.127076][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.138913][ T1935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.317724][ T1935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.413309][ T3664] loop2: detected capacity change from 0 to 512 [ 36.421991][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.439786][ T1935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.476000][ T3664] EXT4-fs (loop2): 1 orphan inode deleted [ 36.482281][ T3664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.497775][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 36.519558][ T1935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.544124][ T3664] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.683284][ T3664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 36.692203][ T3664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 36.719856][ T1935] bridge_slave_1: left allmulticast mode [ 36.725603][ T1935] bridge_slave_1: left promiscuous mode [ 36.731415][ T1935] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.734445][ T3710] loop1: detected capacity change from 0 to 512 [ 36.745881][ T1935] bridge_slave_0: left allmulticast mode [ 36.751574][ T1935] bridge_slave_0: left promiscuous mode [ 36.757473][ T1935] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.765188][ T3710] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.788244][ T3710] EXT4-fs (loop1): 1 truncate cleaned up [ 36.800156][ T3710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.897564][ T1935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.909043][ T1935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.922300][ T1935] bond0 (unregistering): Released all slaves [ 36.991554][ T1935] hsr_slave_0: left promiscuous mode [ 37.005507][ T1935] hsr_slave_1: left promiscuous mode [ 37.011411][ T1935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.018994][ T1935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.027578][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.037017][ T1935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.044493][ T1935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.072457][ T1935] veth1_macvtap: left promiscuous mode [ 37.084096][ T1935] veth0_macvtap: left promiscuous mode [ 37.090040][ T1935] veth1_vlan: left promiscuous mode [ 37.095465][ T1935] veth0_vlan: left promiscuous mode [ 37.169840][ T1935] team0 (unregistering): Port device team_slave_1 removed [ 37.180207][ T1935] team0 (unregistering): Port device team_slave_0 removed [ 37.205122][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.249427][ T3650] chnl_net:caif_netlink_parms(): no params data found [ 37.362037][ T3795] Zero length message leads to an empty skb [ 37.370678][ T3795] netlink: 'syz.2.47': attribute type 1 has an invalid length. [ 37.436876][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.444169][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.452786][ T3650] bridge_slave_0: entered allmulticast mode [ 37.462987][ T3650] bridge_slave_0: entered promiscuous mode [ 37.471801][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.478987][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.486196][ T3650] bridge_slave_1: entered allmulticast mode [ 37.492616][ T3650] bridge_slave_1: entered promiscuous mode [ 37.520149][ T3650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.534787][ T3650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.612981][ T3817] loop1: detected capacity change from 0 to 1024 [ 37.624219][ T3650] team0: Port device team_slave_0 added [ 37.625729][ T3817] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.633930][ T3650] team0: Port device team_slave_1 added [ 37.636671][ T3817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.693778][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.712509][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.713031][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.719523][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.719560][ T3650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.731152][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.801367][ T3650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.808552][ T3650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.834548][ T3650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.867954][ T3837] loop4: detected capacity change from 0 to 128 [ 37.888220][ T3817] netlink: 52 bytes leftover after parsing attributes in process `syz.1.53'. [ 37.907642][ T3837] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 37.910343][ T3817] netlink: 'syz.1.53': attribute type 5 has an invalid length. [ 37.920422][ T3837] System zones: [ 37.923202][ T3817] netlink: 44 bytes leftover after parsing attributes in process `syz.1.53'. [ 37.923209][ T3837] 1-3, 19-19, 35-36 [ 37.975221][ T3837] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.008270][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.022739][ T3650] hsr_slave_0: entered promiscuous mode [ 38.032948][ T3650] hsr_slave_1: entered promiscuous mode [ 38.046550][ T3837] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.079120][ T3650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.090564][ T3840] loop2: detected capacity change from 0 to 512 [ 38.098228][ T3650] Cannot create hsr debugfs directory [ 38.114063][ T3844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.59'. [ 38.142575][ T3846] loop1: detected capacity change from 0 to 512 [ 38.150074][ T3846] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.186792][ T3840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.217824][ T3846] EXT4-fs (loop1): 1 truncate cleaned up [ 38.230661][ T3840] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.242760][ T3846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.281929][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.295509][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.302492][ T3650] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.316586][ T3650] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.347597][ T3650] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.356818][ T3650] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.402479][ T3650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.463500][ T3650] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.478942][ T3877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.486076][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.494469][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.523314][ T3877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.534779][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.541895][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.552768][ T3877] loop2: detected capacity change from 0 to 512 [ 38.573338][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.595473][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.609214][ T3877] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.612506][ T3884] FAULT_INJECTION: forcing a failure. [ 38.612506][ T3884] name failslab, interval 1, probability 0, space 0, times 1 [ 38.632620][ T3884] CPU: 0 UID: 0 PID: 3884 Comm: syz.3.70 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 38.632650][ T3884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 38.632697][ T3884] Call Trace: [ 38.632704][ T3884] [ 38.632713][ T3884] __dump_stack+0x1d/0x30 [ 38.632818][ T3884] dump_stack_lvl+0xe8/0x140 [ 38.632842][ T3884] dump_stack+0x15/0x1b [ 38.632861][ T3884] should_fail_ex+0x265/0x280 [ 38.632892][ T3884] should_failslab+0x8c/0xb0 [ 38.632937][ T3884] kmem_cache_alloc_node_noprof+0x57/0x320 [ 38.632955][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 38.632969][ T29] audit: type=1400 audit(1746468459.629:355): avc: denied { relabelfrom } for pid=3873 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 38.632981][ T3884] ? __alloc_skb+0x101/0x320 [ 38.633094][ T3884] __alloc_skb+0x101/0x320 [ 38.633136][ T3884] netlink_alloc_large_skb+0xba/0xf0 [ 38.633197][ T3884] netlink_sendmsg+0x3cf/0x6b0 [ 38.633295][ T3884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.633406][ T3884] __sock_sendmsg+0x142/0x180 [ 38.633506][ T3884] ____sys_sendmsg+0x31e/0x4e0 [ 38.633550][ T3884] ___sys_sendmsg+0x17b/0x1d0 [ 38.633581][ T3884] __x64_sys_sendmsg+0xd4/0x160 [ 38.633603][ T3884] x64_sys_call+0x2999/0x2fb0 [ 38.633631][ T3884] do_syscall_64+0xd0/0x1a0 [ 38.633705][ T3884] ? clear_bhb_loop+0x25/0x80 [ 38.633734][ T3884] ? clear_bhb_loop+0x25/0x80 [ 38.633761][ T3884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.633789][ T3884] RIP: 0033:0x7f502275e969 [ 38.633817][ T3884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.633851][ T3884] RSP: 002b:00007f5020dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.633874][ T3884] RAX: ffffffffffffffda RBX: 00007f5022985fa0 RCX: 00007f502275e969 [ 38.633890][ T3884] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 38.633905][ T3884] RBP: 00007f5020dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.633921][ T3884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.633936][ T3884] R13: 0000000000000000 R14: 00007f5022985fa0 R15: 00007ffc09756598 [ 38.633970][ T3884] [ 38.669547][ T3877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.673254][ T29] audit: type=1400 audit(1746468459.629:356): avc: denied { relabelto } for pid=3873 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 38.727347][ T3877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.749652][ T3887] loop1: detected capacity change from 0 to 1024 [ 38.777145][ T3877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.785895][ T3887] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.845955][ T3877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.848963][ T3887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.941092][ T3898] netlink: 96 bytes leftover after parsing attributes in process `syz.3.73'. [ 38.942897][ T3650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.950470][ T3898] netlink: 'syz.3.73': attribute type 5 has an invalid length. [ 38.960629][ T3650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.968150][ T3898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.73'. [ 38.994529][ T3887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.062251][ T3887] netlink: 52 bytes leftover after parsing attributes in process `syz.1.69'. [ 39.077664][ T3887] netlink: 'syz.1.69': attribute type 5 has an invalid length. [ 39.085304][ T3887] netlink: 44 bytes leftover after parsing attributes in process `syz.1.69'. [ 39.116865][ T3918] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'. [ 39.134404][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.147409][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.176140][ T29] audit: type=1400 audit(1746468460.169:357): avc: denied { connect } for pid=3917 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.262476][ T29] audit: type=1400 audit(1746468460.229:358): avc: denied { create } for pid=3930 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.282301][ T29] audit: type=1400 audit(1746468460.249:359): avc: denied { bind } for pid=3930 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 39.331786][ T3933] loop1: detected capacity change from 0 to 512 [ 39.411166][ T3933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.425534][ T3933] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.441539][ T3959] netlink: 96 bytes leftover after parsing attributes in process `syz.3.84'. [ 39.468987][ T3650] veth0_vlan: entered promiscuous mode [ 39.486324][ T3959] netlink: 'syz.3.84': attribute type 5 has an invalid length. [ 39.493955][ T3959] netlink: 44 bytes leftover after parsing attributes in process `syz.3.84'. [ 39.509245][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.513870][ T3650] veth1_vlan: entered promiscuous mode [ 39.540778][ T3650] veth0_macvtap: entered promiscuous mode [ 39.551276][ T3650] veth1_macvtap: entered promiscuous mode [ 39.578175][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.588809][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.598721][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.609182][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.619606][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.630203][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.656210][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.680129][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.697682][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.708288][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.718179][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.719221][ T29] audit: type=1400 audit(1746468460.689:360): avc: denied { write } for pid=3978 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.728621][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.728710][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.768145][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.777975][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.788471][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.799065][ T3977] netlink: 96 bytes leftover after parsing attributes in process `syz.1.91'. [ 39.810695][ T3977] netlink: 'syz.1.91': attribute type 5 has an invalid length. [ 39.818372][ T3977] netlink: 44 bytes leftover after parsing attributes in process `syz.1.91'. [ 39.889749][ T29] audit: type=1326 audit(1746468460.879:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09dcf2e969 code=0x7ffc0000 [ 39.913071][ T29] audit: type=1326 audit(1746468460.879:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09dcf2e969 code=0x7ffc0000 [ 39.936372][ T29] audit: type=1326 audit(1746468460.879:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09dcf2e969 code=0x7ffc0000 [ 39.959566][ T29] audit: type=1326 audit(1746468460.879:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.2.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09dcf2e969 code=0x7ffc0000 [ 39.962689][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.016873][ T3650] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.026075][ T3650] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.034935][ T3650] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.043656][ T3650] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.251371][ T4020] hsr0: entered promiscuous mode [ 40.271681][ T3990] loop4: detected capacity change from 0 to 512 [ 40.324239][ T4036] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 40.359138][ T3990] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.386125][ T4042] netlink: 'syz.2.112': attribute type 4 has an invalid length. [ 40.393840][ T4042] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.112'. [ 40.404113][ T4043] loop5: detected capacity change from 0 to 164 [ 40.423030][ T4043] process 'syz.5.111' launched '/dev/fd/5' with NULL argv: empty string added [ 40.432022][ T3990] EXT4-fs (loop4): 1 truncate cleaned up [ 40.432533][ T3990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.536821][ T4053] loop3: detected capacity change from 0 to 2048 [ 40.561830][ T4053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.630879][ T4053] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.115: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 40.666064][ T4076] loop2: detected capacity change from 0 to 512 [ 40.679424][ T4076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.698341][ T4079] hsr0: entered promiscuous mode [ 40.724198][ T4073] loop5: detected capacity change from 0 to 512 [ 40.731210][ T4053] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 40.753294][ T4053] EXT4-fs error (device loop3): ext4_find_extent:938: inode #2: comm syz.3.115: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 40.756432][ T4076] EXT4-fs (loop2): 1 truncate cleaned up [ 40.776750][ T4076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.815666][ T4086] loop1: detected capacity change from 0 to 512 [ 40.832286][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.841881][ T4086] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.864054][ T4086] EXT4-fs (loop1): 1 truncate cleaned up [ 40.879641][ T4086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.901051][ T4099] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.2.121: corrupted xattr block 33: invalid header [ 40.918316][ T4053] syz.3.115 (4053) used greatest stack depth: 10272 bytes left [ 40.952914][ T4073] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.968545][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.976033][ T4099] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.121: corrupted xattr block 33: invalid header [ 40.978007][ T4073] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.029258][ T4099] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 41.074481][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.093545][ T4114] Illegal XDP return value 2414223587 on prog (id 62) dev N/A, expect packet loss! [ 41.142746][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.444609][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x1 [ 41.452546][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.460426][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.468221][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.476317][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x2 [ 41.484156][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.491984][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.499871][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x4 [ 41.507698][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.515509][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.523289][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.531078][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.538953][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x2 [ 41.546769][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.554537][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.562392][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.570248][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.578105][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.585892][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.593676][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.601587][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.609387][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.617186][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.624981][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.632777][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.640562][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.643374][ T4180] netlink: 'syz.5.141': attribute type 5 has an invalid length. [ 41.648328][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.648373][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.671602][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.679428][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.687414][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.695216][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.702984][ T23] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 41.755147][ T23] hid-generic 0000:0000:20000000.0002: hidraw0: HID v0.01 Device [syz0] on syz1 [ 41.911669][ T4207] loop1: detected capacity change from 0 to 512 [ 42.033405][ T4207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.066807][ T4207] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.086517][ T4237] netlink: 'syz.3.152': attribute type 5 has an invalid length. [ 42.147053][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.205502][ T4254] loop3: detected capacity change from 0 to 1024 [ 42.223554][ T4254] EXT4-fs: Ignoring removed orlov option [ 42.233819][ T4259] loop1: detected capacity change from 0 to 512 [ 42.264135][ T4254] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.290813][ T4262] loop5: detected capacity change from 0 to 2048 [ 42.302619][ T4259] EXT4-fs (loop1): 1 orphan inode deleted [ 42.316446][ T37] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 42.333429][ T4259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.347230][ T4259] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.362762][ T4262] Alternate GPT is invalid, using primary GPT. [ 42.369281][ T4262] loop5: p2 p3 p7 [ 42.426701][ T4259] team0: entered promiscuous mode [ 42.431804][ T4259] team_slave_0: entered promiscuous mode [ 42.437600][ T4259] team_slave_1: entered promiscuous mode [ 42.474740][ T4259] team0: left promiscuous mode [ 42.479664][ T4259] team_slave_0: left promiscuous mode [ 42.485143][ T4259] team_slave_1: left promiscuous mode [ 42.676470][ T4297] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.046828][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.208583][ T4343] loop5: detected capacity change from 0 to 512 [ 43.232834][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.308210][ T4357] loop4: detected capacity change from 0 to 512 [ 43.312421][ T4343] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.340399][ T4343] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.409171][ T4357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.425971][ T4357] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.466746][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.478676][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.495173][ T4377] loop1: detected capacity change from 0 to 1024 [ 43.502111][ T4377] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.508795][ T4377] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.547969][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.567205][ T4377] netlink: 'syz.1.175': attribute type 5 has an invalid length. [ 43.587157][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.696810][ T4391] loop1: detected capacity change from 0 to 128 [ 43.713745][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.745677][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 43.745693][ T29] audit: type=1400 audit(1746468464.749:554): avc: denied { mount } for pid=4390 comm="syz.1.180" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.822292][ T4397] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4397 comm=syz.5.183 [ 43.891368][ T4397] loop5: detected capacity change from 0 to 512 [ 43.917381][ T4397] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.926526][ T4397] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 43.943942][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.943942][ T12] loop1: rw=1, sector=153, nr_sectors = 8 limit=128 [ 43.964379][ T29] audit: type=1400 audit(1746468464.939:555): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.968295][ T4400] loop4: detected capacity change from 0 to 512 [ 43.984923][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.984923][ T12] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 43.985006][ T12] kworker/u8:0: attempt to access beyond end of device [ 43.985006][ T12] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 44.018095][ T12] kworker/u8:0: attempt to access beyond end of device [ 44.018095][ T12] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 44.031516][ T12] kworker/u8:0: attempt to access beyond end of device [ 44.031516][ T12] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 44.045058][ T12] kworker/u8:0: attempt to access beyond end of device [ 44.045058][ T12] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 44.046243][ T4397] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended [ 44.058705][ T12] kworker/u8:0: attempt to access beyond end of device [ 44.058705][ T12] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 44.080776][ T12] kworker/u8:0: attempt to access beyond end of device [ 44.080776][ T12] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 44.115693][ T12] kworker/u8:0: attempt to access beyond end of device [ 44.115693][ T12] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 44.131449][ T12] kworker/u8:0: attempt to access beyond end of device [ 44.131449][ T12] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 44.158666][ T4397] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 44.166437][ T4423] __nla_validate_parse: 11 callbacks suppressed [ 44.166457][ T4423] netlink: 96 bytes leftover after parsing attributes in process `syz.2.189'. [ 44.183352][ T4423] netlink: 'syz.2.189': attribute type 5 has an invalid length. [ 44.191136][ T4423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.189'. [ 44.217901][ T4397] System zones: 0-2, 18-18, 34-34 [ 44.235573][ T4431] loop2: detected capacity change from 0 to 512 [ 44.243476][ T4397] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.266895][ T4431] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.285510][ T4397] EXT4-fs (loop5): 1 truncate cleaned up [ 44.292217][ T4397] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.308595][ T4400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.332508][ T4435] loop1: detected capacity change from 0 to 512 [ 44.346494][ T4431] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 44.351760][ T4435] EXT4-fs: Ignoring removed nobh option [ 44.357121][ T4431] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 44.362682][ T4435] EXT4-fs: quotafile must be on filesystem root [ 44.372046][ T4431] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.190: Failed to acquire dquot type 0 [ 44.392876][ T4400] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.399270][ T4431] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 44.419343][ T4431] EXT4-fs (loop2): 1 truncate cleaned up [ 44.427697][ T4397] netlink: 72 bytes leftover after parsing attributes in process `syz.5.183'. [ 44.436627][ T4431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.455970][ T29] audit: type=1400 audit(1746468465.399:556): avc: denied { create } for pid=4433 comm="syz.1.191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.488574][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.193'. [ 44.517366][ T4447] hsr0: entered promiscuous mode [ 44.539036][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.546913][ T3650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.549480][ T29] audit: type=1400 audit(1746468465.469:557): avc: denied { name_bind } for pid=4396 comm="syz.5.183" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 44.578703][ T29] audit: type=1326 audit(1746468465.519:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09dcf2e969 code=0x7ffc0000 [ 44.602166][ T29] audit: type=1326 audit(1746468465.519:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f09dcf2e969 code=0x7ffc0000 [ 44.625622][ T29] audit: type=1326 audit(1746468465.519:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09dcf2e969 code=0x7ffc0000 [ 44.648963][ T29] audit: type=1326 audit(1746468465.519:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4430 comm="syz.2.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f09dcf2e969 code=0x7ffc0000 [ 44.751719][ T4463] netlink: 96 bytes leftover after parsing attributes in process `syz.3.196'. [ 44.815908][ T4463] netlink: 'syz.3.196': attribute type 5 has an invalid length. [ 44.823627][ T4463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.196'. [ 44.897603][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.912197][ T4469] 9pnet_fd: Insufficient options for proto=fd [ 44.943881][ T4471] netlink: 96 bytes leftover after parsing attributes in process `syz.2.200'. [ 44.956731][ T4471] netlink: 'syz.2.200': attribute type 5 has an invalid length. [ 44.964523][ T4471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.200'. [ 44.983054][ T4472] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 45.024370][ T417] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.093106][ T417] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.228592][ T417] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.276295][ T4480] loop2: detected capacity change from 0 to 512 [ 45.322364][ T417] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.360806][ T4507] netlink: 96 bytes leftover after parsing attributes in process `syz.1.212'. [ 45.369873][ T4507] netlink: 'syz.1.212': attribute type 5 has an invalid length. [ 45.377661][ T4507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.212'. [ 45.389300][ T4480] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.406534][ T4480] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.436962][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.478602][ T417] bridge_slave_1: left allmulticast mode [ 45.484351][ T417] bridge_slave_1: left promiscuous mode [ 45.490282][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.510797][ T417] bridge_slave_0: left allmulticast mode [ 45.516657][ T417] bridge_slave_0: left promiscuous mode [ 45.522357][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.584118][ T4526] loop3: detected capacity change from 0 to 1024 [ 45.641726][ T4526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.705569][ T4526] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 45.723119][ T417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.730776][ T4544] loop2: detected capacity change from 0 to 512 [ 45.742082][ T417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.745658][ T4544] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.222: iget: bad extended attribute block 1 [ 45.764321][ T417] bond0 (unregistering): Released all slaves [ 45.768436][ T4544] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.222: couldn't read orphan inode 15 (err -117) [ 45.798195][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.826464][ T4544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.885260][ T417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.892791][ T417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.922755][ T417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.925793][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.930388][ T417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.960618][ T417] veth1_macvtap: left promiscuous mode [ 45.966707][ T417] veth0_macvtap: left promiscuous mode [ 45.972299][ T417] veth1_vlan: left promiscuous mode [ 45.979030][ T417] veth0_vlan: left promiscuous mode [ 46.019987][ T4561] netlink: 'syz.1.228': attribute type 5 has an invalid length. [ 46.048169][ T4565] loop2: detected capacity change from 0 to 512 [ 46.059646][ T4565] journal_path: Lookup failure for './file0' [ 46.065881][ T4565] EXT4-fs: error: could not find journal device path [ 46.153313][ T4574] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.166567][ T417] team0 (unregistering): Port device team_slave_1 removed [ 46.184345][ T417] team0 (unregistering): Port device team_slave_0 removed [ 46.294153][ T4485] chnl_net:caif_netlink_parms(): no params data found [ 46.311315][ T4586] loop1: detected capacity change from 0 to 512 [ 46.420899][ T4586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.433090][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.440333][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.473489][ T4485] bridge_slave_0: entered allmulticast mode [ 46.480619][ T4485] bridge_slave_0: entered promiscuous mode [ 46.488303][ T4586] EXT4-fs (loop1): 1 truncate cleaned up [ 46.494878][ T4586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.513242][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.520440][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.527663][ T4485] bridge_slave_1: entered allmulticast mode [ 46.535329][ T4485] bridge_slave_1: entered promiscuous mode [ 46.566697][ T4485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.578951][ T4485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.581252][ T4608] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.1.235: corrupted xattr block 33: invalid header [ 46.630040][ T4485] team0: Port device team_slave_0 added [ 46.639663][ T4485] team0: Port device team_slave_1 added [ 46.648151][ T4612] netlink: 'syz.4.237': attribute type 5 has an invalid length. [ 46.664740][ T4608] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.235: corrupted xattr block 33: invalid header [ 46.730334][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.737479][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.737561][ T23] hid (null): global environment stack underflow [ 46.763511][ T4485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.816051][ T4608] EXT4-fs warning (device loop1): ext4_evict_inode:279: xattr delete (err -117) [ 46.820941][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.832255][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.845852][ T23] hid-generic 0004:0007:FFFFFFF5.0003: unknown main item tag 0x4 [ 46.858430][ T4485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.865983][ T23] hid-generic 0004:0007:FFFFFFF5.0003: unknown main item tag 0x3 [ 46.866012][ T23] hid-generic 0004:0007:FFFFFFF5.0003: global environment stack underflow [ 46.892988][ T23] hid-generic 0004:0007:FFFFFFF5.0003: item 0 2 1 11 parsing failed [ 46.948352][ T23] hid-generic 0004:0007:FFFFFFF5.0003: probe with driver hid-generic failed with error -22 [ 46.982088][ T4485] hsr_slave_0: entered promiscuous mode [ 46.988493][ T4485] hsr_slave_1: entered promiscuous mode [ 46.996951][ T4485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.007410][ T4485] Cannot create hsr debugfs directory [ 47.086908][ T4640] loop3: detected capacity change from 0 to 512 [ 47.105122][ T4640] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 47.148595][ T4640] EXT4-fs (loop3): 1 truncate cleaned up [ 47.161351][ T4640] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.203801][ T4485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 47.212787][ T4485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 47.222502][ T4485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.246945][ T4485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.365662][ T4485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.366421][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.397971][ T4485] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.413832][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.420997][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.449923][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.457154][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.485321][ T4688] netlink: 'syz.3.247': attribute type 5 has an invalid length. [ 47.628181][ T4485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.883512][ T4485] veth0_vlan: entered promiscuous mode [ 47.908697][ T4485] veth1_vlan: entered promiscuous mode [ 47.964875][ T4485] veth0_macvtap: entered promiscuous mode [ 47.992659][ T4485] veth1_macvtap: entered promiscuous mode [ 48.034143][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.044814][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.054716][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.065270][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.075137][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.085606][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.098588][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.151925][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.162533][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.172418][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.182916][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.192847][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.203462][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.213343][ T4485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.223903][ T4485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.315325][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.336255][ T4485] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.345836][ T4485] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.355066][ T4485] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.363948][ T4485] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.425693][ T4834] netlink: 'syz.4.260': attribute type 5 has an invalid length. [ 48.485002][ T4843] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4843 comm=syz.6.204 [ 48.516668][ T4843] loop6: detected capacity change from 0 to 512 [ 48.540894][ T4843] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.550096][ T4843] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 48.576251][ T4843] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 48.592119][ T4843] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 48.606392][ T4843] System zones: 0-2, 18-18, 34-34 [ 48.619758][ T4843] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 48.635668][ T4843] EXT4-fs (loop6): 1 truncate cleaned up [ 48.653088][ T4843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.705034][ T4485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.736700][ T4874] loop3: detected capacity change from 0 to 1024 [ 48.755415][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 48.755429][ T29] audit: type=1326 audit(1746468469.759:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f502275d1d7 code=0x7ffc0000 [ 48.755704][ T4874] EXT4-fs: Ignoring removed orlov option [ 48.770160][ T29] audit: type=1326 audit(1746468469.759:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f502276010a code=0x7ffc0000 [ 48.927273][ T4895] loop4: detected capacity change from 0 to 512 [ 48.949676][ T4874] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.973010][ T4895] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.274: iget: bad extended attribute block 1 [ 48.997998][ T29] audit: type=1326 audit(1746468469.969:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f502275d2d0 code=0x7ffc0000 [ 49.021537][ T29] audit: type=1326 audit(1746468469.969:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f502275d6b7 code=0x7ffc0000 [ 49.044944][ T29] audit: type=1326 audit(1746468469.989:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f502275d2d0 code=0x7ffc0000 [ 49.068490][ T29] audit: type=1326 audit(1746468469.989:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502275e969 code=0x7ffc0000 [ 49.092091][ T29] audit: type=1326 audit(1746468469.989:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502275e969 code=0x7ffc0000 [ 49.115441][ T29] audit: type=1326 audit(1746468469.989:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f502275e969 code=0x7ffc0000 [ 49.132018][ T4895] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.274: couldn't read orphan inode 15 (err -117) [ 49.138751][ T29] audit: type=1326 audit(1746468469.989:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f502275e969 code=0x7ffc0000 [ 49.173777][ T29] audit: type=1326 audit(1746468469.989:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4873 comm="syz.3.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f502275e969 code=0x7ffc0000 [ 49.220418][ T4895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.275581][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.417202][ T4939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4939 comm=syz.4.279 [ 49.446664][ T4939] loop4: detected capacity change from 0 to 512 [ 49.453957][ T4939] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.463117][ T4939] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 49.484563][ T4939] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 49.494228][ T4939] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 49.516355][ T4939] System zones: 0-2, 18-18, 34-34 [ 49.522590][ T4939] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.538366][ T4939] EXT4-fs (loop4): 1 truncate cleaned up [ 49.542382][ T4947] loop2: detected capacity change from 0 to 256 [ 49.546561][ T4939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.649040][ T4939] __nla_validate_parse: 13 callbacks suppressed [ 49.649061][ T4939] netlink: 72 bytes leftover after parsing attributes in process `syz.4.279'. [ 49.678984][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.698673][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.865858][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.915010][ T4960] Falling back ldisc for ttyS3. [ 50.048273][ T4975] loop1: detected capacity change from 0 to 512 [ 50.073827][ T4975] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.087297][ T4975] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.293: bad orphan inode 13 [ 50.136271][ T4975] ext4_test_bit(bit=12, block=18) = 1 [ 50.141741][ T4975] is_bad_inode(inode)=0 [ 50.145988][ T4975] NEXT_ORPHAN(inode)=2130706432 [ 50.150871][ T4975] max_ino=32 [ 50.154145][ T4975] i_nlink=1 [ 50.187188][ T4975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.275901][ T4988] loop6: detected capacity change from 0 to 512 [ 50.290353][ T4988] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 50.358893][ T4988] EXT4-fs (loop6): 1 truncate cleaned up [ 50.385535][ T4991] EXT4-fs error (device loop1): ext4_lookup:1793: inode #2: comm syz.1.293: deleted inode referenced: 12 [ 50.469572][ T4996] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.6.298: corrupted xattr block 33: invalid header [ 50.486020][ T4991] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 50.520964][ T4991] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 50.534578][ T4996] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2962: inode #15: comm syz.6.298: corrupted xattr block 33: invalid header [ 50.563908][ T4996] EXT4-fs warning (device loop6): ext4_evict_inode:279: xattr delete (err -117) [ 50.597939][ T5010] loop2: detected capacity change from 0 to 512 [ 50.611676][ T5010] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.303: iget: bad extended attribute block 1 [ 50.628609][ T5010] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.303: couldn't read orphan inode 15 (err -117) [ 50.719461][ T5026] loop2: detected capacity change from 0 to 512 [ 50.729243][ T5026] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.756876][ T5026] EXT4-fs (loop2): 1 truncate cleaned up [ 50.790176][ T5025] loop4: detected capacity change from 0 to 512 [ 50.849112][ T5025] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.979451][ T5048] loop4: detected capacity change from 0 to 1024 [ 51.010993][ T5048] EXT4-fs: Ignoring removed orlov option [ 51.082863][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 51.248474][ T5081] loop3: detected capacity change from 0 to 512 [ 51.260181][ T5094] netlink: 36 bytes leftover after parsing attributes in process `syz.2.315'. [ 51.274032][ T5081] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 51.283192][ T5081] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 51.316402][ T5081] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 51.371934][ T5094] loop2: detected capacity change from 0 to 8192 [ 51.399086][ T5081] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 51.416368][ T5081] System zones: 0-2, 18-18, 34-34 [ 51.422007][ T5081] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 51.437735][ T5081] EXT4-fs (loop3): 1 truncate cleaned up [ 51.476008][ T5094] loop2: p3 < > p4 [ 51.476491][ T5081] netlink: 72 bytes leftover after parsing attributes in process `syz.3.313'. [ 51.482370][ T5094] loop2: p4 start 131072 is beyond EOD, truncated [ 51.526969][ T3005] loop2: p3 < > p4 [ 51.540225][ T3005] loop2: p4 start 131072 is beyond EOD, truncated [ 51.700314][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 52.168802][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 52.336729][ T5221] loop3: detected capacity change from 0 to 128 [ 52.347272][ T5221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 52.359085][ T5221] System zones: 1-3, 19-19, 35-36 [ 52.365696][ T5221] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.459806][ T5230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 52.468851][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 52.477836][ T5230] netlink: 'syz.4.342': attribute type 15 has an invalid length. [ 52.485700][ T5230] netlink: 'syz.4.342': attribute type 18 has an invalid length. [ 52.496612][ T5231] loop3: detected capacity change from 0 to 512 [ 52.520903][ T5231] EXT4-fs (loop3): 1 orphan inode deleted [ 52.534032][ T5231] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.545142][ T4827] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:8: Failed to release dquot type 1 [ 52.576104][ T5231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 52.585182][ T5231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 52.662990][ T5243] loop2: detected capacity change from 0 to 512 [ 52.738110][ T5243] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.815245][ T5253] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5253 comm=syz.6.350 [ 52.847815][ T5253] loop6: detected capacity change from 0 to 512 [ 52.855279][ T5253] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.864422][ T5253] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 52.877747][ T5253] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 52.888131][ T5259] netlink: 96 bytes leftover after parsing attributes in process `syz.4.353'. [ 52.898717][ T5253] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 52.907134][ T5259] netlink: 'syz.4.353': attribute type 5 has an invalid length. [ 52.916425][ T5253] System zones: 0-2, 18-18, 34-34 [ 52.927751][ T5253] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 52.944356][ T5253] EXT4-fs (loop6): 1 truncate cleaned up [ 53.061728][ T5280] loop2: detected capacity change from 0 to 512 [ 53.190996][ T5291] bond1: entered promiscuous mode [ 53.196356][ T5291] bond1: entered allmulticast mode [ 53.201924][ T5291] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.212698][ T5291] bond1 (unregistering): Released all slaves [ 53.299129][ T1935] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 53.329658][ T5298] netlink: 'syz.6.363': attribute type 5 has an invalid length. [ 53.569642][ T5321] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5321 comm=syz.3.369 [ 53.596545][ T5321] loop3: detected capacity change from 0 to 512 [ 53.610254][ T5321] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.619439][ T5321] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 53.632014][ T5321] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 53.641258][ T5321] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 53.651080][ T5321] System zones: 0-2, 18-18, 34-34 [ 53.656953][ T5321] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.675125][ T5321] EXT4-fs (loop3): 1 truncate cleaned up [ 53.838782][ T5345] vlan2: entered allmulticast mode [ 54.015770][ T5371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5371 comm=syz.6.380 [ 54.033128][ T5371] loop6: detected capacity change from 0 to 512 [ 54.043835][ T5371] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 54.053121][ T5371] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 54.092549][ T5371] EXT4-fs (loop6): warning: checktime reached, running e2fsck is recommended [ 54.113127][ T5371] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 54.122636][ T5371] System zones: 0-2, 18-18, 34-34 [ 54.128506][ T5371] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.145497][ T5371] EXT4-fs (loop6): 1 truncate cleaned up [ 54.278305][ T5386] loop3: detected capacity change from 0 to 256 [ 54.630347][ T5422] netlink: 'syz.4.394': attribute type 5 has an invalid length. [ 54.632778][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 54.632795][ T29] audit: type=1400 audit(1746468475.629:886): avc: granted { setsecparam } for pid=5418 comm="syz.6.392" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 54.702420][ T5426] __nla_validate_parse: 12 callbacks suppressed [ 54.702443][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'. [ 54.772121][ T5423] loop2: detected capacity change from 0 to 512 [ 54.849929][ T5423] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.943799][ T5451] netlink: 96 bytes leftover after parsing attributes in process `syz.2.400'. [ 54.957447][ T5451] netlink: 'syz.2.400': attribute type 5 has an invalid length. [ 54.965178][ T5451] netlink: 44 bytes leftover after parsing attributes in process `syz.2.400'. [ 55.086381][ T5474] loop4: detected capacity change from 0 to 128 [ 55.106333][ T5474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 55.121948][ T5474] System zones: 1-3, 19-19, 35-36 [ 55.128908][ T5474] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.199065][ T5482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.407'. [ 55.272591][ T5493] netlink: 96 bytes leftover after parsing attributes in process `syz.4.412'. [ 55.289004][ T5493] netlink: 'syz.4.412': attribute type 5 has an invalid length. [ 55.296824][ T5493] netlink: 44 bytes leftover after parsing attributes in process `syz.4.412'. [ 55.380329][ T29] audit: type=1326 audit(1746468476.379:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facaea0e969 code=0x7ffc0000 [ 55.403914][ T29] audit: type=1326 audit(1746468476.379:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facaea0e969 code=0x7ffc0000 [ 55.428739][ T29] audit: type=1326 audit(1746468476.379:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7facaea0e969 code=0x7ffc0000 [ 55.452232][ T29] audit: type=1326 audit(1746468476.379:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facaea0e969 code=0x7ffc0000 [ 55.475497][ T29] audit: type=1326 audit(1746468476.379:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facaea0e969 code=0x7ffc0000 [ 55.498958][ T29] audit: type=1326 audit(1746468476.379:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7facaea107fc code=0x7ffc0000 [ 55.522134][ T29] audit: type=1326 audit(1746468476.379:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facaea0e969 code=0x7ffc0000 [ 55.545593][ T29] audit: type=1326 audit(1746468476.379:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7facaea0e969 code=0x7ffc0000 [ 55.568812][ T29] audit: type=1326 audit(1746468476.379:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5502 comm="syz.4.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facaea0e969 code=0x7ffc0000 [ 55.623354][ T5507] loop3: detected capacity change from 0 to 128 [ 55.633084][ T5507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 55.641571][ T5507] System zones: 1-3, 19-19, 35-36 [ 55.649567][ T5507] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.698783][ T5513] loop4: detected capacity change from 0 to 512 [ 55.712403][ T5513] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.801231][ T5522] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.420: corrupted inode contents [ 55.818500][ T5522] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #2: comm syz.4.420: mark_inode_dirty error [ 55.833003][ T5524] netlink: 96 bytes leftover after parsing attributes in process `syz.3.424'. [ 55.842959][ T5524] netlink: 'syz.3.424': attribute type 5 has an invalid length. [ 55.850792][ T5524] netlink: 44 bytes leftover after parsing attributes in process `syz.3.424'. [ 55.863932][ T5522] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #2: comm syz.4.420: corrupted inode contents [ 56.286540][ T5547] loop3: detected capacity change from 0 to 512 [ 56.296768][ T5547] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 56.303501][ T5547] EXT4-fs (loop3): mount failed [ 56.352853][ T5513] syz.4.420 (5513) used greatest stack depth: 9168 bytes left [ 56.458287][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 56.500002][ T5559] loop4: detected capacity change from 0 to 1024 [ 56.507246][ T5559] EXT4-fs: Ignoring removed orlov option [ 56.870779][ T5559] ================================================================== [ 56.878981][ T5559] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 56.887009][ T5559] [ 56.889365][ T5559] write to 0xffff88810673a624 of 4 bytes by task 5563 on cpu 0: [ 56.897029][ T5559] xas_set_mark+0x12b/0x140 [ 56.901575][ T5559] __folio_start_writeback+0x1dd/0x430 [ 56.907056][ T5559] ext4_bio_write_folio+0x590/0x9d0 [ 56.912296][ T5559] mpage_process_page_bufs+0x46c/0x5b0 [ 56.917799][ T5559] mpage_prepare_extent_to_map+0x775/0xb80 [ 56.923639][ T5559] ext4_do_writepages+0xa25/0x2270 [ 56.928798][ T5559] ext4_writepages+0x176/0x300 [ 56.933604][ T5559] do_writepages+0x1d2/0x480 [ 56.938243][ T5559] file_write_and_wait_range+0x156/0x2c0 [ 56.943909][ T5559] generic_buffers_fsync_noflush+0x45/0x120 [ 56.949841][ T5559] ext4_sync_file+0x1ab/0x690 [ 56.954565][ T5559] vfs_fsync_range+0x10a/0x130 [ 56.959370][ T5559] ext4_buffered_write_iter+0x34f/0x3c0 [ 56.965064][ T5559] ext4_file_write_iter+0x383/0xf00 [ 56.970317][ T5559] iter_file_splice_write+0x5ef/0x970 [ 56.975729][ T5559] direct_splice_actor+0x153/0x2a0 [ 56.980867][ T5559] splice_direct_to_actor+0x30f/0x680 [ 56.986287][ T5559] do_splice_direct+0xda/0x150 [ 56.991086][ T5559] do_sendfile+0x380/0x640 [ 56.995543][ T5559] __x64_sys_sendfile64+0x105/0x150 [ 57.000790][ T5559] x64_sys_call+0xb39/0x2fb0 [ 57.005417][ T5559] do_syscall_64+0xd0/0x1a0 [ 57.010042][ T5559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.015977][ T5559] [ 57.018319][ T5559] read to 0xffff88810673a624 of 4 bytes by task 5559 on cpu 1: [ 57.025924][ T5559] file_write_and_wait_range+0x10e/0x2c0 [ 57.031597][ T5559] generic_buffers_fsync_noflush+0x45/0x120 [ 57.037532][ T5559] ext4_sync_file+0x1ab/0x690 [ 57.042253][ T5559] vfs_fsync_range+0x10a/0x130 [ 57.047050][ T5559] ext4_buffered_write_iter+0x34f/0x3c0 [ 57.052643][ T5559] ext4_file_write_iter+0x383/0xf00 [ 57.057896][ T5559] iter_file_splice_write+0x5ef/0x970 [ 57.063305][ T5559] direct_splice_actor+0x153/0x2a0 [ 57.068673][ T5559] splice_direct_to_actor+0x30f/0x680 [ 57.074085][ T5559] do_splice_direct+0xda/0x150 [ 57.078906][ T5559] do_sendfile+0x380/0x640 [ 57.083361][ T5559] __x64_sys_sendfile64+0x105/0x150 [ 57.088709][ T5559] x64_sys_call+0xb39/0x2fb0 [ 57.093342][ T5559] do_syscall_64+0xd0/0x1a0 [ 57.097910][ T5559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.103835][ T5559] [ 57.106174][ T5559] value changed: 0x0a000021 -> 0x04000021 [ 57.111905][ T5559] [ 57.114247][ T5559] Reported by Kernel Concurrency Sanitizer on: [ 57.120503][ T5559] CPU: 1 UID: 0 PID: 5559 Comm: syz.4.435 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 57.131112][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 57.141201][ T5559] ==================================================================