last executing test programs: 1.410120225s ago: executing program 3 (id=2051): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x1e8, 0xb8, 0x5002004a, 0xb, 0x0, 0xea02, 0x150, 0x3c8, 0x3c8, 0x150, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x248) 1.337681886s ago: executing program 3 (id=2053): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00'}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) set_robust_list(&(0x7f0000000180)={0x0, 0x7}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000e00000000001c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x10, @private1, 0x6}]}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0xfffffffb, @mcast1, 0x8}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1.144828678s ago: executing program 4 (id=2065): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x4003, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x4c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000034001a80080002"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r9 = accept4$packet(r8, 0x0, &(0x7f0000000080), 0x80000) poll(&(0x7f0000000200)=[{r7}, {r9, 0x1255}, {r0, 0x220}, {r7, 0x601}, {r7, 0x8049}, {r0, 0x40}, {r8}, {r8, 0x10028}], 0x8, 0x7fffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000009500"/24], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYRESOCT=r1], 0xb4}}, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x700, 0x12) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008082, &(0x7f0000000480)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x67c0}}, {@nomblk_io_submit}, {@nobarrier}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@flag='lazytime'}, {@audit}]}, 0x0, 0x5e8, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.136741718s ago: executing program 0 (id=2066): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x2e81, 0x9, 0x7, 0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000000)=""/5, 0x200000, 0x0, 0x20000004, 0x3}, 0x20) 1.048042659s ago: executing program 0 (id=2067): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r3) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOWNER(r3, 0xff07, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000300)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.024606539s ago: executing program 4 (id=2069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xffffffff, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3122}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) fsetxattr$security_capability(r1, &(0x7f0000000240), &(0x7f0000000280)=@v3, 0x18, 0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r11, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) sendmsg$SMC_PNETID_DEL(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r11, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r13, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r13, 0x1, 0x19, 0x0, 0x0) 898.24033ms ago: executing program 4 (id=2071): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x4003, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x4c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000034001a80080002"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r9 = accept4$packet(r8, 0x0, &(0x7f0000000080), 0x80000) poll(&(0x7f0000000200)=[{r7}, {r9, 0x1255}, {r0, 0x220}, {r7, 0x601}, {r7, 0x8049}, {r0, 0x40}, {r8}, {r8, 0x10028}], 0x8, 0x7fffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000009500"/24], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYRESOCT=r1], 0xb4}}, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x700, 0x12) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008082, &(0x7f0000000480)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x67c0}}, {@nomblk_io_submit}, {@nobarrier}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@flag='lazytime'}, {@audit}]}, 0x0, 0x5e8, &(0x7f0000000900)="$eJzs3c1vVFUbAPDnTj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxd3pvmWnv9Iu2t3J/v2To+ZjLObfTp/fM6Tl3AqiswfSfWsT+iJhOIvqT+cW6zsgqBxee9+DPj86mjyTq9dd+TyLJyvLnJ9nXvuzgnoj48Yck9nUsb3dm7trF8ampyatZfnj20vTwzNy1wxcujZ+fPD95efSF0RPHjx0/MXJkQ+d1vaDs9M133+//ZOzNb776Kxn59pexJE7Gy9kTm89jswzGYON7kiyv6jux2Y2VpCP7OWl+iZPOomd2bV+nWLP89UtfnSfi1p486lP98fErpXYO2FL1JKIOVFQi/qGi8nFA/t5+6fvgWimjEmA73D+1MAGwPP47F+YGo6cxN7D7QRLN0zpJRGxsZq7Vnoi4e2fs5rk7Yzdji+bhgGLzNyLiyaL4TxrxPxA9MdCI/1pL/KfjgjPZ17T81Q22v3SqWPzD9lmI/54V4z/axP9bTfH/9gbbH3yYfKe3Jf57N3pKAAAAAAAAUFm3T0XE80V//68trv+JgvU/fRFxchPaH1ySX/73/9q9TWgGKHD/VMRLhet/a/nq34GOLPWfxnqAruTchanJIxHx34g4FF270vzICm0c/nTfl+3qBrP1f/kjbf9uthYw68e9zl2tx0yMz44/6nkDEfdvRDxVuP43Wbz+JwXX//T3wfQa29j37K0z7epWj39gq9S/jjj48Prf3Rz/uWTl+3MMN8YDw/moYLmnP/zsu3btbzT+C28xAaxLev3fXTj+X4z/gaT5fj0z62/j6FxnvV1dHv/9WX6t4//u5PXGLWe6s7IPxmdnr45EdCenO9LSlvLR9fcZHkd5POTxksb/oWdWnv8rGv/3RsT8kv87+aN1T3Hu/3/3/dquP8b/UJ40/ifWdf1ff2L01sD37dpf2/zfsca1/lBWYv4PFnyRh2l3a3lzFA4sJDoLqjYwmgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAahGxJ5La0GK6VhsaiuiLiP/F7o64MjP73Lkr712eSOsan/9fyz/pt38hn+Sf/z/QlB9dkj8aEXsj4vOO3kZ+6OyVqYmyTx4AAAAAAAAAAAAAAAAAAAB2iL42+/9Tv3WU3Ttgy3WW3QGgNAXx/1MZ/QC2n+s/VJf4h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/gEAAAAA4LGy98Dtn5OImH+xt/FIdWd1XaX2DNhqtbI7AJTGLX6guiz9geryHh9IVqnvaXvQakeuZPrsIxwMAAAAAAAAAAAAAJVzcL/9/1BV9v9Dddn/D9WV7/8/UHI/gO3nPT4Qq+zkL9z/v+pRAAAAAAAAAAAAAMBmmpm7dnF8amryqsQbO6Mb25mo1+vX05+CndKff3kiXwq/U/qzJJHv9VvbUeX9TgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr9EwAA///ByB+M") perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 897.6186ms ago: executing program 0 (id=2072): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000410, &(0x7f00000001c0)={[{@noauto_da_alloc}, {@prjquota}, {@resgid}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@dioread_nolock}]}, 0x81, 0x7b0, &(0x7f00000007c0)="$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") openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) io_uring_setup(0x3cb8, &(0x7f0000000140)={0x0, 0x88f5, 0x4, 0x3, 0x21d}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) write$tun(r1, &(0x7f0000000500)={@val={0x0, 0x2}, @void, @x25={0x1, 0x83, 0xfb, "28f00be6d4a466f5e3f59a7e90f4d619488a1919ff71458525a46b8648975deea979ce0e076882a34b5df2dd625165b891c08102647b11784f0ba271b83a9a26187ba747fb9bb7bf87b5c0f16798e23de44453b70147e38cd025d9de430e650b7344a43be2838ee9fddd728273d00bb59488"}}, 0x79) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5}, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xa9, 0x71430, 0x0, 0x2, 0x3e5, 0xf8ad, 0x0, 0x0, 0x0, 0x3}) close(r6) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 788.293721ms ago: executing program 3 (id=2074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$eJzs3c9v2+Ydx/EPZdmWPSAbtqEIgjR+mqyAg2WKJDcujOxQjaJsdpIokPJgn4qssYsgcrolGbD40vmyH8D2D+zWSw/7IwbsvPP+gR0HFNtOA3bhQFLUb0qOYztd834ZiR6RX/L58kf0DS3xkQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCy7ViqVLTXc1u6eyWbXfK85Y36ytkXdThq35/YrWdEfFQq6mky6+t3B7Leiv27qevLsugrRQ0HH33jrW/e/k8+ly89I6Cz0sit89uL48YNu9+Dp2XoLrbMsdyEmMlHuFEttOy038NxmddsxbuCZrc3N0t2demDqbsMJ9oOO0zS27+Q6nm/W7dumvLW1YZzivrfb2q5VG0468f0fVEqlTfPhcu/w3/2wGNg7bqPhtrbjmGh2FLPcP0OcatOYw0fdg40Z+aXhB+V5WxKtqTIvqFKqVMrlSqW8eW/r3vulUn5iQmmMJiIGJ+1X5+DjMp3DqzZwPnJR/f+7JTVUUEu72pOZ+mOrJl+emhnze9L6/+5dZ2a/w/U/rfJXB7OvKa7/N5JnN7Lqf0YuRiZeYNocK2P62X6e6YWO9VgP1FVXB3p6PutdO78ML/ZnW8pLrgJ5ctVUVdtyZHpTjLa0qU2V9JF2VFcgo7pcNeQo0L4CdeSoGR8TX46q6siTL6N12boto7K2tKUNGTkqal+edtXStmqq6j9hGB7qUbzfN2bkqDSoPDRxNSso3z8HJ9eUVf9/+lmyRGb9z2tK/cfXT//cOUUM8NqFvev/TMtTp65dXEYAAAAAAOC8WfFv3634vfu3JYWquw2n9LrTAgAAAAAA5yh+5/969LAYtd6WlXH9H15+bgAAAAAA4HxY8T12lqTV+EP91uBOqNN8CGDhElIEAAAAAACvKH7//8aSFMY3+q/JeqnrfwAAAAAA8H/gt0Nj7OfTMXbD9G39nKSgvWz9+Z/L8hetk/be96yjajSnetSLmfgEQKd+zcorGag3Hq93SVL8zHauW73xgXuDYFrJwL7Sl4fzxvq3/LEElhbSX19MSeDK8VACm/neM/1e7yQx7/T6fXicUzwn6WW17jacou017pdVrV7JdZy9zi+ePPql5Pe38/BR96D48afdh3EuJ9Gkk6Moj89G0snNy+V5PN5CfM/FtC1eUT3t8net5qoV91tKt39B1aPccEen2/5f62YSc3M1eVw9To+ArF/1GuVifMgGWx+PDmENsii3VzWy5dMOREYWhTiLW0nMrfVbyUOaX3IUCt9fkCrFyWPgD2dRGd7/8/eF9a+JfTEnC7kNZyPK4i/RijKy2Hi5LCaOCAC8LoeDKhQPYj45xv543T3Lq9xhOqx6ZnX/YLSX538MkxsOF6R8772J5CbErLqi6BV9PQlb0r+jh/y1sVf0+NbGXl0pKOMVvTRe11+iukV9/WnwHUi9tHtz8v0s/huG4f1y3O8fhqpq1O/n0QKfZ/YbNCoL0S68+/zoZ/EA+JFPDj45eFKpbGyW3iuV7lW0GG9G74HaAwCYYv537IxGFAb1rF+73+tfVT/8x7tJa6Tufrv/kYKiPtan6uqh7qRfIbA2vd/VoY8h3Jm8ao1iV6Tx2LLuZF7VxbV0KLbSj11Uusjo/xcGsRvju+2DCzgUAABcmptRHW59s/98Xv2fdu1+J73uXr8WX1SOX3eP1vLxbwjOii1f6n4AAOBNUvC/tFY7v7F8321/VN7aKlc7O47xPfvHxndr245xWx3Ht3eqrW3HtH2v49lew7R9Lbs1JzDBbrvt+R1T93zT9gJ3L/7md9P76vfAaVZbHdcO2g2nGjjG9lqdqt0xNTewTXv3Rw032HH8eOGg7dhu3bWrHddrmcBbke0UjQkcZyjQrTmtjlt3o2bLtH23WfX3zU+8xm7TMTUnsH233fGSFaZ9ua265zfj1RYVzviiQwAA3hzPXhw/ftDtHjyd0ThR0kg/jzYjeGnaCl/zJgIAgDFUaQAAAAAAAAAAAAAAAAAAAAAAvvpOc//fzEZ6U2A6ZVFTgqX+lJ9fOdWaLQ2mfPG3V8rwDI3c+JQwDPOSwvmL/zVp5KfFrESNJUnddPcPx5yc61asnSpYSSN//vtwRZp2JlxY44eHo+fhREw0c+qs5f6xyL/6P4dpjSdfZMwKw3DOGbU8ug+XZm3gaCM6XZ8uvcIhuPzXIgCX638BAAD//58PN4Q=") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 787.273542ms ago: executing program 3 (id=2076): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000770000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_tunnel_key={0x4c, 0x1, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 733.181752ms ago: executing program 3 (id=2077): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) 732.151412ms ago: executing program 3 (id=2079): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x4003, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x4c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000034001a80080002"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r9 = accept4$packet(r8, 0x0, &(0x7f0000000080), 0x80000) poll(&(0x7f0000000200)=[{r7}, {r9, 0x1255}, {r0, 0x220}, {r7, 0x601}, {r7, 0x8049}, {r0, 0x40}, {r8}, {r8, 0x10028}], 0x8, 0x7fffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000009500"/24], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYRESOCT=r1], 0xb4}}, 0x0) write$cgroup_int(r8, &(0x7f0000000000)=0x700, 0x12) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008082, &(0x7f0000000480)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x67c0}}, {@nomblk_io_submit}, {@nobarrier}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@flag='lazytime'}, {@audit}]}, 0x0, 0x5e8, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 675.965213ms ago: executing program 4 (id=2080): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x2e81, 0x9, 0x7, 0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000000)=""/5, 0x200000, 0x0, 0x20000004, 0x3}, 0x20) 589.483834ms ago: executing program 4 (id=2081): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 441.510165ms ago: executing program 2 (id=2084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r3) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOWNER(r3, 0xff07, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000300)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 301.417046ms ago: executing program 4 (id=2085): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00'}, 0x10) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000040)={0x77359400}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) set_robust_list(&(0x7f0000000180)={0x0, 0x7}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000e00000000001c00000018000180140002006e657464657673696d30"], 0x2c}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e21, 0x10, @private1, 0x6}]}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e22, 0xfffffffb, @mcast1, 0x8}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) 295.546847ms ago: executing program 1 (id=2086): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 273.451727ms ago: executing program 1 (id=2087): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000004f000000770000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 261.629127ms ago: executing program 2 (id=2088): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$eJzs3c1vVFUbAPDnzkwLpe9rKzEqLkyjIZAoLS1g8GMBe0LwY+fGSgtBho/QGi2aWBLcmBg3LkhcuRD/CyW6dWXiwoUbV4akGsNGY3TMnbkzDO1MOy0dbu39/ZLbOeeeOz3nQp85Z+49ZyaAwhpLf5Qi9kTE5SRipK2sElnhWOO4O7+/fzrdkqjVXv0tiSTb1zw+yR6Hsyf/PRLx/TdJ7C6vrHdu4er56Wp19kqWn5i/cHlibuHqgXMXps/Onp29OPXc1NEjh48cnTx4X+dXakufuP7WOyMfnXz9i8/+Sia//OlkEsfi1zONsvbz2CxjMRZ/1GofLN+f/rse3ezKclJu/Z3clSzfwZZVyWJkMCIei5Eot/1vjsSHL+faOKCvaklEDSioRPxDQTXHAc339r29Dy71eVQCPAhLx9OfAx3iv9K4NhijMRARe5c9r8MlvQ1J6/ju25PX0y36dB0O6Gzx2o4stTz+k3psjsbOem7XndI913nTEcCp7DHd/8oG6x9blhf/8OAsXouIxzuN/9eO/zfa4v/NDdYv/gEAAAAAAGDz3DoeEc92uv9Xyu7N7Yyn6vf/ksb9vx/urhA8tgn1r33/r3R7E6oBOlg6HvFSx/m/rTm+o+Us9//GbMDkzLnq7MGIeCgi9sfAjjQ/uUodBz7efaNbWfv8v3RL62/OBczacbuy497nzEzPT9/POQMNS9cinqh0n/+T9v9Je/+fSV8PLvdYx+69N091K1s7/oF+qX0esa9j/5+0jklW/3yOifp4YKI5Kljpyfc++apb/eIf8pP2/7tWj//RpP3zeubW9/sHI+LQQqXWrXyj4//B5LVy8/en3p2en78yGTGYnFi5f2p9bYbtqhkPzXhJ43//06tf/2uN/9vicCgiFnus89F/hn/uVqb/h/yk8T+zrv5//Ympm6Nfd6u/t/7/cL1P35/tcf0PVtdrgObdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4LypFxP8iKY230qXS+HjEcEQ8ErtK1Utz88+cufT2xZm0rP79/6XmN/2ONPJJ8/v/R9vyU8vyhyLi4Yj4tDxUz4+fvlSdyfvkAQAAAAAAAAAAAAAAAAAAYIsY7rL+P/VLOe/WAX1XyR7FOxRPJe8GALkR/1Bc4h+KS/xDcYl/KK4Nxr/bBbAN6P+hqAZ6O2xnv9sB5EH/DwAAAAAA28qtF5+/kUTE4gtD9S01mJW1bgwO5dU6oJ9KeTcAyI05vFBcpv5AcfU4+RfYxpJW6s9ap/Lus/+T/jQIAAAAAAAAAAAAAFhh355bP665/h/Ylqz/h+Ky/h+Ky/p/KC7v8YG1VvFb/w8AAAAAAAAAAAAA+ZtbuHp+ulqdvSIhsdUSAxGxBZqRQ2Iw//DM+YUJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo+TcAAP//Swsk/Q==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x22004002, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0xffff}}, {@sysvgroups}, {@jqfmt_vfsold}, {@nouid32}, {@grpjquota, 0x2e}]}, 0x84, 0x46c, &(0x7f00000004c0)="$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") open_by_handle_at(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000050000000400000001000000c4bc46ce280af90000000004"], 0x40000) preadv2(0xffffffffffffffff, &(0x7f0000000e00)=[{&(0x7f0000000840)=""/77, 0x4d}, {0x0}, {0x0}], 0x3, 0xffff, 0x9a17, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x8c02) r2 = dup(r1) ioperm(0x401, 0x1fd, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x2, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2c0024e4e2a54934d046be847a0f740d580a26ed91e46f4ec271434efabc87e0c4666aaaba2903cd9d79504206b1f7f62eca9536cfd7157513a7fca90338aa80461220a0d5cd236570b4ece6fc2fe2275da974919db0e183e25c7afbd0d2857eb3f706fec0a9df271894a441ea0b9c370b968832f46460464241e90f27b29f175232b6ee86e5cfe1e3a0bdadf2d61e09f3fe5d125517d0ec53c1359baae22987410f95f7df0c21b2e59963dc3744d6fc21510cbe57f942cc1c6cc55356269aa86853f86e10175db80bdb4766015dacc212873c42303a24e61c817c4e063a2b203ff23fa70a468cf8a72daade1437b0a8cd7b6dabb7a5f75770dc2ea09d4812a478e015e5c756e36fbb2151e959d5f614ea539068a989ee795b5d461c8c7e09420befbd5cf9da8552e3b79a13eba00a789132983f1044be22c44f17817f71ee28e0cae1882ff14c5a11903e602ea8c6d730f2748f92b899fb6eb1fc092ae47e672d"]) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000a00)='ext4_writepages_result\x00', r4, 0x0, 0x4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000a00)={@local, @random="1a18ccacd4b9", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9ff0ff", 0x4c, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffc}], {{}, {}, {}, {}, {}, {0x8, 0x6558, 0xfffffffe}}}}}}}, 0x0) r6 = fsopen(&(0x7f00000009c0)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 227.114477ms ago: executing program 1 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) 226.296987ms ago: executing program 2 (id=2090): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x7f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) open(0x0, 0x400141042, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) 224.371567ms ago: executing program 1 (id=2091): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000300)=[{0x2e81, 0x9, 0x7, 0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000000)=""/5, 0x200000, 0x0, 0x20000004, 0x3}, 0x20) 164.687318ms ago: executing program 1 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x4003, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x4c}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRES32=0x0, @ANYRESHEX=0x0], 0x50}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0000001000010027bd70010000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000021000008001b000000000034001a80080002"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141b82, 0x0) r8 = accept4$packet(r7, 0x0, &(0x7f0000000080), 0x80000) poll(&(0x7f0000000200)=[{r6}, {r8, 0x1255}, {r0, 0x220}, {r6, 0x601}, {r6, 0x8049}, {r0, 0x40}, {r7}, {r7, 0x10028}], 0x8, 0x7fffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000009500"/24], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)=ANY=[@ANYRESOCT=r1], 0xb4}}, 0x0) write$cgroup_int(r7, &(0x7f0000000000)=0x700, 0x12) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008082, &(0x7f0000000480)={[{@nodioread_nolock}, {@nolazytime}, {@abort}, {@errors_continue}, {@data_ordered}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x67c0}}, {@nomblk_io_submit}, {@nobarrier}], [{@context={'context', 0x3d, 'root'}}, {@appraise}, {@flag='lazytime'}, {@audit}]}, 0x0, 0x5e8, &(0x7f0000000900)="$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") perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 164.067328ms ago: executing program 2 (id=2093): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x1, 0x7a5, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x143441, 0x98) fallocate(r3, 0x10, 0xcf7, 0x2c03) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) faccessat(r3, &(0x7f0000000180)='./file3\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000001f0000000000"], 0x50) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x109102, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000080)='5', 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f00000000c0)='/dev/vcsu#\x00', 0xb) 163.739858ms ago: executing program 2 (id=2094): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cf", 0x3}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000003300)=""/4095, 0xfff}], 0x1) 108.939339ms ago: executing program 2 (id=2095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x280000, 0x0) close(r2) syz_clone(0xd000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOWNER(r2, 0xff07, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 108.220099ms ago: executing program 1 (id=2096): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) 42.482819ms ago: executing program 0 (id=2097): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r6, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 538.89µs ago: executing program 0 (id=2098): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='netlink_extack\x00', r2}, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000"], 0x38}}, 0x0) 0s ago: executing program 0 (id=2099): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@barrier}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0x81ff) 0s ago: executing program 2 (id=2107): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}}) read(r1, &(0x7f00000013c0)=""/4089, 0xff9) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kernel console output (not intermixed with test programs): e_0: entered promiscuous mode [ 30.178731][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.185833][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.193008][ T3319] bridge_slave_1: entered allmulticast mode [ 30.199513][ T3319] bridge_slave_1: entered promiscuous mode [ 30.208050][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 30.257622][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 30.267531][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.277987][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.296098][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.323484][ T3319] team0: Port device team_slave_0 added [ 30.330068][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.339814][ T3319] team0: Port device team_slave_1 added [ 30.393872][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.401052][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.427151][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.438665][ T3314] team0: Port device team_slave_0 added [ 30.445881][ T3314] team0: Port device team_slave_1 added [ 30.461079][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.468147][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.494480][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.510270][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.517484][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.524798][ T3322] bridge_slave_0: entered allmulticast mode [ 30.531212][ T3322] bridge_slave_0: entered promiscuous mode [ 30.557127][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.564272][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.571477][ T3322] bridge_slave_1: entered allmulticast mode [ 30.578093][ T3322] bridge_slave_1: entered promiscuous mode [ 30.589906][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.597175][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.604641][ T3323] bridge_slave_0: entered allmulticast mode [ 30.611027][ T3323] bridge_slave_0: entered promiscuous mode [ 30.618013][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.625069][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.651010][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.671972][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.679080][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.686492][ T3315] bridge_slave_0: entered allmulticast mode [ 30.692919][ T3315] bridge_slave_0: entered promiscuous mode [ 30.699455][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.706570][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.713767][ T3323] bridge_slave_1: entered allmulticast mode [ 30.720252][ T3323] bridge_slave_1: entered promiscuous mode [ 30.726799][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.733851][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.759919][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.780481][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.787643][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.796003][ T3315] bridge_slave_1: entered allmulticast mode [ 30.802851][ T3315] bridge_slave_1: entered promiscuous mode [ 30.823311][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.833716][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.859657][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.870377][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.880869][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.902527][ T3319] hsr_slave_0: entered promiscuous mode [ 30.908573][ T3319] hsr_slave_1: entered promiscuous mode [ 30.931704][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.941608][ T3315] team0: Port device team_slave_0 added [ 30.953117][ T3322] team0: Port device team_slave_0 added [ 30.964522][ T3315] team0: Port device team_slave_1 added [ 30.981079][ T3322] team0: Port device team_slave_1 added [ 31.004410][ T3314] hsr_slave_0: entered promiscuous mode [ 31.010706][ T3314] hsr_slave_1: entered promiscuous mode [ 31.016663][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.024295][ T3314] Cannot create hsr debugfs directory [ 31.048183][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.055270][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.081541][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.093043][ T3323] team0: Port device team_slave_0 added [ 31.099072][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.106115][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.132221][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.145633][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.152713][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.178663][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.190328][ T3323] team0: Port device team_slave_1 added [ 31.206770][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.213817][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.239935][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.261158][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.268204][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.294480][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.318372][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.325463][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.351548][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.374178][ T3315] hsr_slave_0: entered promiscuous mode [ 31.380167][ T3315] hsr_slave_1: entered promiscuous mode [ 31.386293][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.394332][ T3315] Cannot create hsr debugfs directory [ 31.444812][ T3322] hsr_slave_0: entered promiscuous mode [ 31.450888][ T3322] hsr_slave_1: entered promiscuous mode [ 31.457026][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.464649][ T3322] Cannot create hsr debugfs directory [ 31.498604][ T3323] hsr_slave_0: entered promiscuous mode [ 31.504844][ T3323] hsr_slave_1: entered promiscuous mode [ 31.510673][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.518295][ T3323] Cannot create hsr debugfs directory [ 31.603029][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.618708][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.629613][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.648287][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.703791][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.722238][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.733759][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.742858][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.769763][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.785341][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.798289][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.808525][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.853164][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.862233][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.870997][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.881120][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.912306][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.922061][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.931199][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.940789][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.950943][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.966425][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.995233][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.005761][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.016770][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.030739][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.037899][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.046681][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.054026][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.067574][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.074820][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.103609][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.119581][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.126700][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.135579][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.142682][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.168751][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.175901][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.200143][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.224035][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.252047][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.266629][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.286033][ T1390] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.293194][ T1390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.304200][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.318821][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.325994][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.336280][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.343475][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.359836][ T122] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.366978][ T122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.385305][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.400254][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.410712][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.431742][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.458558][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.467931][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.478368][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.546485][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.628254][ T3315] veth0_vlan: entered promiscuous mode [ 32.651017][ T3314] veth0_vlan: entered promiscuous mode [ 32.657561][ T3315] veth1_vlan: entered promiscuous mode [ 32.676463][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.686749][ T3314] veth1_vlan: entered promiscuous mode [ 32.717067][ T3319] veth0_vlan: entered promiscuous mode [ 32.725574][ T3323] veth0_vlan: entered promiscuous mode [ 32.748650][ T3314] veth0_macvtap: entered promiscuous mode [ 32.759052][ T3319] veth1_vlan: entered promiscuous mode [ 32.767912][ T3323] veth1_vlan: entered promiscuous mode [ 32.780057][ T3314] veth1_macvtap: entered promiscuous mode [ 32.789744][ T3315] veth0_macvtap: entered promiscuous mode [ 32.797331][ T3315] veth1_macvtap: entered promiscuous mode [ 32.810626][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.831401][ T3319] veth0_macvtap: entered promiscuous mode [ 32.838975][ T3319] veth1_macvtap: entered promiscuous mode [ 32.847716][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.859599][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.868559][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.877302][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.886080][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.904143][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.914677][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.925554][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.941466][ T3323] veth0_macvtap: entered promiscuous mode [ 32.952547][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.963084][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.973528][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.986614][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.995502][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.004358][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.013105][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.023865][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.034452][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.044531][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.055356][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.066062][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.083551][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.100085][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.113690][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.124150][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.134945][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.134985][ T29] audit: type=1400 audit(1747252642.666:84): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.kmxrSU/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.147876][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.165252][ T29] audit: type=1400 audit(1747252642.666:85): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.173446][ T3323] veth1_macvtap: entered promiscuous mode [ 33.195111][ T29] audit: type=1400 audit(1747252642.666:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.kmxrSU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.215478][ T3319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.225989][ T29] audit: type=1400 audit(1747252642.676:87): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.234761][ T3319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.256458][ T29] audit: type=1400 audit(1747252642.676:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.kmxrSU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.265161][ T3319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.291693][ T29] audit: type=1400 audit(1747252642.676:89): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.kmxrSU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3606 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.300352][ T3319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.327719][ T29] audit: type=1400 audit(1747252642.676:90): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.355765][ T3322] veth0_vlan: entered promiscuous mode [ 33.362035][ T29] audit: type=1400 audit(1747252642.716:91): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.367027][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.384810][ T29] audit: type=1400 audit(1747252642.716:92): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.417970][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.427801][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.438332][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.448187][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.458878][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.470312][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.471306][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.498359][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.500350][ T29] audit: type=1400 audit(1747252643.066:93): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.508892][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.508907][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.508925][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.563845][ T3323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.574330][ T3323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.585285][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.597095][ T3322] veth1_vlan: entered promiscuous mode [ 33.614861][ T3323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.623874][ T3323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.632783][ T3323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.641725][ T3323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.689585][ T3322] veth0_macvtap: entered promiscuous mode [ 33.707293][ T3322] veth1_macvtap: entered promiscuous mode [ 33.740413][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.751081][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.760963][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.771522][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.781452][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.791934][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.802075][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.812637][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.824022][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.843836][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.854600][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.864548][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.875036][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.884911][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.895375][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.905290][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.915832][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.927072][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.935832][ T3322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.944633][ T3322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.953433][ T3322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.962277][ T3322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.007450][ T3476] loop1: detected capacity change from 0 to 512 [ 34.037231][ T3476] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 34.061016][ T3476] EXT4-fs (loop1): orphan cleanup on readonly fs [ 34.080099][ T3476] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.7: Block bitmap for bg 0 marked uninitialized [ 34.096480][ T3476] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 34.105754][ T3476] EXT4-fs (loop1): 1 orphan inode deleted [ 34.171844][ T3482] loop0: detected capacity change from 0 to 512 [ 34.178878][ T3482] EXT4-fs: Ignoring removed i_version option [ 34.184954][ T3482] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.191510][ T3482] EXT4-fs: test_dummy_encryption option not supported [ 34.242550][ T3476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 34.433038][ T3476] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 34.494716][ T3476] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 34.601684][ T3489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 34.609810][ T3489] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 34.980534][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.134395][ T3494] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.153621][ T3483] syz.4.5 (3483) used greatest stack depth: 10904 bytes left [ 36.147983][ T3523] netlink: 'syz.0.15': attribute type 14 has an invalid length. [ 36.268199][ T3527] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17'. [ 36.289579][ T3527] loop1: detected capacity change from 0 to 256 [ 36.298074][ T3527] vfat: Unknown parameter 'shorü­‘W“Yùê¹ÿ½€ÐZname' [ 37.370130][ T3503] syz.4.13 (3503) used greatest stack depth: 10544 bytes left [ 37.385731][ T3531] loop3: detected capacity change from 0 to 2048 [ 37.413571][ T3531] loop3: p1 < > p3 [ 37.426055][ T3531] loop3: p3 size 134217728 extends beyond EOD, truncated [ 37.455399][ T3537] macsec1: entered promiscuous mode [ 37.474868][ T3538] loop1: detected capacity change from 0 to 512 [ 37.481756][ T3538] EXT4-fs: Ignoring removed i_version option [ 37.487847][ T3538] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.494597][ T3538] EXT4-fs: test_dummy_encryption option not supported [ 39.134754][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 39.134841][ T29] audit: type=1400 audit(1747252648.706:210): avc: denied { create } for pid=3548 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.180688][ T3551] loop1: detected capacity change from 0 to 1024 [ 39.194383][ T3545] loop3: detected capacity change from 0 to 8192 [ 39.221181][ T3551] ======================================================= [ 39.221181][ T3551] WARNING: The mand mount option has been deprecated and [ 39.221181][ T3551] and is ignored by this kernel. Remove the mand [ 39.221181][ T3551] option from the mount to silence this warning. [ 39.221181][ T3551] ======================================================= [ 39.293142][ T3549] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.305131][ T29] audit: type=1400 audit(1747252648.736:211): avc: denied { setopt } for pid=3548 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 39.324431][ T29] audit: type=1400 audit(1747252648.856:212): avc: denied { mount } for pid=3544 comm="syz.3.23" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.349161][ T3551] EXT4-fs: Ignoring removed bh option [ 39.395356][ T29] audit: type=1400 audit(1747252648.966:213): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.456806][ T29] audit: type=1400 audit(1747252648.986:214): avc: denied { read open } for pid=3548 comm="syz.0.24" path="time:[4026531834]" dev="nsfs" ino=4026531834 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 39.502452][ T3551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.505685][ T3563] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 39.539208][ T29] audit: type=1400 audit(1747252649.106:215): avc: denied { ioctl } for pid=3562 comm="syz.3.28" path="socket:[3870]" dev="sockfs" ino=3870 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.571761][ T29] audit: type=1400 audit(1747252649.146:216): avc: denied { mount } for pid=3550 comm="syz.1.25" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.604998][ T29] audit: type=1400 audit(1747252649.176:217): avc: denied { write } for pid=3550 comm="syz.1.25" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.626993][ T29] audit: type=1400 audit(1747252649.176:218): avc: denied { add_name } for pid=3550 comm="syz.1.25" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.647374][ T29] audit: type=1400 audit(1747252649.176:219): avc: denied { create } for pid=3550 comm="syz.1.25" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 39.835908][ T3571] loop4: detected capacity change from 0 to 512 [ 40.033929][ T3571] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.047389][ T3571] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.078998][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.096248][ T3571] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.29: bad orphan inode 131083 [ 40.108051][ T3571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.467429][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.487467][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 41.777800][ T3611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 41.786774][ T3611] netem: invalid attributes len -6 [ 41.791938][ T3611] netem: change failed [ 42.651316][ T3623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38913 sclass=netlink_route_socket pid=3623 comm=syz.4.43 [ 42.721354][ T3627] netlink: 20 bytes leftover after parsing attributes in process `syz.4.45'. [ 42.730298][ T3627] netlink: 8 bytes leftover after parsing attributes in process `syz.4.45'. [ 42.757050][ T3627] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 42.780338][ T3629] loop3: detected capacity change from 0 to 1024 [ 42.790945][ T3629] EXT4-fs: Ignoring removed bh option [ 42.823371][ T3629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.852682][ T3636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.47'. [ 42.865480][ T3636] batadv0: entered promiscuous mode [ 42.871542][ T3636] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 42.881207][ T3636] batadv0: left promiscuous mode [ 42.920483][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.266735][ T3647] loop4: detected capacity change from 0 to 256 [ 43.297480][ T3647] FAT-fs (loop4): Directory bread(block 64) failed [ 43.304465][ T3647] FAT-fs (loop4): Directory bread(block 65) failed [ 43.311252][ T3647] FAT-fs (loop4): Directory bread(block 66) failed [ 43.317910][ T3647] FAT-fs (loop4): Directory bread(block 67) failed [ 43.324671][ T3647] FAT-fs (loop4): Directory bread(block 68) failed [ 43.331280][ T3647] FAT-fs (loop4): Directory bread(block 69) failed [ 43.337943][ T3647] FAT-fs (loop4): Directory bread(block 70) failed [ 43.344629][ T3647] FAT-fs (loop4): Directory bread(block 71) failed [ 43.351596][ T3647] FAT-fs (loop4): Directory bread(block 72) failed [ 43.358460][ T3647] FAT-fs (loop4): Directory bread(block 73) failed [ 43.570577][ T3652] dccp_close: ABORT with 32 bytes unread [ 43.591667][ T3655] pim6reg: entered allmulticast mode [ 43.651099][ T3660] pim6reg: left allmulticast mode [ 44.469468][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 44.469486][ T29] audit: type=1400 audit(1747252654.036:274): avc: denied { create } for pid=3666 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 44.594717][ T29] audit: type=1400 audit(1747252654.166:275): avc: denied { write } for pid=3674 comm="syz.3.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.819084][ T29] audit: type=1400 audit(1747252654.386:276): avc: denied { write } for pid=3678 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 44.916514][ T29] audit: type=1400 audit(1747252654.486:277): avc: denied { open } for pid=3684 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.935662][ T29] audit: type=1400 audit(1747252654.486:278): avc: denied { kernel } for pid=3684 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.222792][ T3685] mmap: syz.3.66 (3685) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.277242][ T29] audit: type=1400 audit(1747252654.846:279): avc: denied { create } for pid=3684 comm="syz.3.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.304212][ T3685] loop3: detected capacity change from 0 to 512 [ 45.324960][ T3685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.413714][ T3697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 45.422644][ T3697] netem: invalid attributes len -6 [ 45.427790][ T3697] netem: change failed [ 45.431757][ T3685] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.452797][ T3699] netlink: 20 bytes leftover after parsing attributes in process `syz.2.72'. [ 45.476241][ T3701] syz_tun: entered allmulticast mode [ 45.488534][ T3700] syz_tun: left allmulticast mode [ 45.548409][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.639685][ T3715] loop4: detected capacity change from 0 to 1024 [ 45.641620][ T3714] xt_hashlimit: size too large, truncated to 1048576 [ 45.646678][ T3715] EXT4-fs: Ignoring removed oldalloc option [ 45.668982][ T3715] EXT4-fs: Ignoring removed orlov option [ 45.684462][ T29] audit: type=1400 audit(1747252655.256:280): avc: denied { getopt } for pid=3717 comm="syz.2.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 45.709621][ T3715] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 45.778230][ T3724] netlink: 1 bytes leftover after parsing attributes in process `syz.2.83'. [ 45.790900][ T29] audit: type=1400 audit(1747252655.356:281): avc: denied { getopt } for pid=3723 comm="syz.2.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 45.834567][ T29] audit: type=1400 audit(1747252655.396:282): avc: denied { search } for pid=3728 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.856746][ T29] audit: type=1400 audit(1747252655.396:283): avc: denied { read } for pid=3729 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.900378][ T3715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.961779][ T3739] netlink: 20 bytes leftover after parsing attributes in process `syz.2.84'. [ 45.997224][ T3715] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 46.030453][ T3744] netlink: 'syz.2.85': attribute type 1 has an invalid length. [ 46.039439][ T3715] EXT4-fs (loop4): Remounting filesystem read-only [ 46.111130][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.220869][ T3770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.91'. [ 46.371214][ T3707] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 46.379530][ T3707] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 46.422862][ T3788] loop2: detected capacity change from 0 to 512 [ 46.560867][ T3788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.731246][ T3788] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.804291][ T3803] syz.1.100 (3803) used greatest stack depth: 9792 bytes left [ 46.899681][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.105'. [ 46.932984][ T3824] syz_tun: entered allmulticast mode [ 46.939411][ T3822] syz_tun: left allmulticast mode [ 46.966210][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.018369][ T3835] netlink: 1 bytes leftover after parsing attributes in process `syz.2.109'. [ 47.046181][ T3841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 47.125597][ T3847] syz_tun: entered allmulticast mode [ 47.136352][ T3845] syz_tun: left allmulticast mode [ 47.238750][ T3861] syz_tun: entered allmulticast mode [ 47.244334][ T3862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.117'. [ 47.254185][ T3860] syz_tun: left allmulticast mode [ 47.361008][ T3882] netlink: 1 bytes leftover after parsing attributes in process `syz.2.124'. [ 47.447485][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 47.476507][ T3901] loop3: detected capacity change from 0 to 256 [ 47.494047][ T3903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.129'. [ 47.590443][ T3916] loop0: detected capacity change from 0 to 256 [ 47.659349][ T3927] loop2: detected capacity change from 0 to 256 [ 47.723845][ T3931] syz_tun: entered allmulticast mode [ 47.736600][ T3930] syz_tun: left allmulticast mode [ 47.771414][ T3935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 47.774176][ T3939] Zero length message leads to an empty skb [ 47.787127][ T3827] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 47.795370][ T3827] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 47.873651][ T3947] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 48.126673][ T3954] loop4: detected capacity change from 0 to 256 [ 48.376585][ T3980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.165'. [ 48.385676][ T3980] netem: invalid attributes len -6 [ 48.390851][ T3980] netem: change failed [ 48.558985][ T4003] netem: invalid attributes len -6 [ 48.564260][ T4003] netem: change failed [ 48.725989][ T4023] loop2: detected capacity change from 0 to 512 [ 48.735231][ T4023] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.749792][ T4023] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.184: bad orphan inode 131083 [ 48.768747][ T4023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.941966][ T4036] netem: invalid attributes len -6 [ 48.947213][ T4036] netem: change failed [ 49.056177][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.079981][ T3964] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 49.088246][ T3964] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 49.130595][ T4051] syz_tun: entered allmulticast mode [ 49.142524][ T4050] syz_tun: left allmulticast mode [ 49.150837][ T4054] loop1: detected capacity change from 0 to 256 [ 49.271352][ T4070] netlink: 'syz.1.206': attribute type 1 has an invalid length. [ 49.632601][ T4080] syz_tun: entered allmulticast mode [ 49.639021][ T4079] syz_tun: left allmulticast mode [ 49.771440][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 49.771457][ T29] audit: type=1326 audit(1747252659.336:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.4.215" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb69755e969 code=0x0 [ 49.974877][ T4099] loop0: detected capacity change from 0 to 256 [ 50.145054][ T4112] loop0: detected capacity change from 0 to 512 [ 50.172242][ T4112] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 50.308852][ T4125] loop1: detected capacity change from 0 to 256 [ 50.314124][ T4112] dccp_invalid_packet: P.Data Offset(100) too large [ 50.470678][ T4112] loop0: detected capacity change from 0 to 512 [ 50.493270][ T29] audit: type=1400 audit(1747252660.066:308): avc: denied { write } for pid=4144 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.513310][ T29] audit: type=1400 audit(1747252660.066:309): avc: denied { nlmsg_write } for pid=4144 comm="syz.1.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.660535][ T4154] loop4: detected capacity change from 0 to 1024 [ 50.668033][ T4154] EXT4-fs: Ignoring removed bh option [ 50.756315][ T4159] loop1: detected capacity change from 0 to 256 [ 50.775995][ T4154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.975852][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.176642][ T29] audit: type=1326 audit(1747252660.726:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1d1fe969 code=0x7ffc0000 [ 51.200056][ T29] audit: type=1326 audit(1747252660.726:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1d1fe969 code=0x7ffc0000 [ 51.223349][ T29] audit: type=1326 audit(1747252660.726:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5b1d1fe969 code=0x7ffc0000 [ 51.246667][ T29] audit: type=1326 audit(1747252660.726:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1d1fe969 code=0x7ffc0000 [ 51.270228][ T29] audit: type=1326 audit(1747252660.726:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1d1fe969 code=0x7ffc0000 [ 51.271281][ T4181] loop1: detected capacity change from 0 to 2048 [ 51.293651][ T29] audit: type=1326 audit(1747252660.726:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b1d1fe969 code=0x7ffc0000 [ 51.302099][ T4181] EXT4-fs: quotafile must be on filesystem root [ 51.323236][ T29] audit: type=1326 audit(1747252660.726:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b1d1fe969 code=0x7ffc0000 [ 51.405445][ T4181] random: crng reseeded on system resumption [ 52.026985][ T4185] loop3: detected capacity change from 0 to 512 [ 52.034054][ T4185] EXT4-fs: Ignoring removed i_version option [ 52.040163][ T4185] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.046698][ T4185] EXT4-fs: test_dummy_encryption option not supported [ 52.366477][ T4194] loop4: detected capacity change from 0 to 1024 [ 52.400963][ T4194] EXT4-fs: Ignoring removed bh option [ 52.454560][ T4194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.514621][ T4204] loop0: detected capacity change from 0 to 256 [ 52.534273][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.581249][ T4181] process 'syz.1.254' launched '/dev/fd/3' with NULL argv: empty string added [ 53.546424][ T4232] __nla_validate_parse: 10 callbacks suppressed [ 53.546444][ T4232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.273'. [ 53.735836][ T4247] xt_hashlimit: size too large, truncated to 1048576 [ 53.815311][ T4258] syz_tun: entered allmulticast mode [ 53.821322][ T4256] syz_tun: left allmulticast mode [ 53.830207][ T4259] loop1: detected capacity change from 0 to 512 [ 53.837052][ T4259] EXT4-fs: Ignoring removed i_version option [ 53.843334][ T4259] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.849839][ T4259] EXT4-fs: test_dummy_encryption option not supported [ 53.964455][ T4265] loop3: detected capacity change from 0 to 512 [ 54.002249][ T4265] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.041400][ T4265] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.128575][ T4282] netlink: 16 bytes leftover after parsing attributes in process `syz.4.292'. [ 54.188244][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.283372][ T4295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.299'. [ 54.299720][ T4295] netem: invalid attributes len -6 [ 54.304970][ T4295] netem: change failed [ 54.526280][ T4318] loop1: detected capacity change from 0 to 512 [ 54.546004][ T4318] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.581853][ T4318] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.606395][ T4333] loop2: detected capacity change from 0 to 256 [ 54.695348][ T4346] loop2: detected capacity change from 0 to 2048 [ 54.702411][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.706141][ T4346] EXT4-fs: quotafile must be on filesystem root [ 54.719413][ T4346] random: crng reseeded on system resumption [ 54.799864][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 54.799881][ T29] audit: type=1326 audit(1747252664.366:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.2.321" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e1b82e969 code=0x0 [ 54.843449][ T4354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.324'. [ 54.931784][ T4370] loop2: detected capacity change from 0 to 256 [ 54.988187][ T4376] loop2: detected capacity change from 0 to 2048 [ 55.003791][ T4376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.017357][ T29] audit: type=1400 audit(1747252664.596:381): avc: denied { write } for pid=4375 comm="syz.2.334" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.017468][ T4376] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, [ 55.039649][ T29] audit: type=1400 audit(1747252664.596:382): avc: denied { open } for pid=4375 comm="syz.2.334" name="file2" dev="loop2" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.039611][ T4376] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.081174][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.175454][ T4382] loop4: detected capacity change from 0 to 512 [ 55.194869][ T4382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.207985][ T4382] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.342572][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.346267][ T4394] loop2: detected capacity change from 0 to 2048 [ 55.358688][ T4394] EXT4-fs: quotafile must be on filesystem root [ 55.375037][ T4394] random: crng reseeded on system resumption [ 55.430833][ T4399] program syz.4.342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.447507][ T29] audit: type=1400 audit(1747252664.996:383): avc: denied { read } for pid=4395 comm="syz.4.342" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.471107][ T29] audit: type=1400 audit(1747252664.996:384): avc: denied { open } for pid=4395 comm="syz.4.342" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.497692][ T29] audit: type=1326 audit(1747252665.026:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4393 comm="syz.2.341" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e1b82e969 code=0x0 [ 55.601516][ T4407] loop1: detected capacity change from 0 to 2048 [ 55.624792][ T4407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.638949][ T4407] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.665291][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.727072][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 55.736094][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 55.745825][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 55.754774][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 55.764271][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 55.773101][ T4412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 55.846305][ T4412] syz.4.344: attempt to access beyond end of device [ 55.846305][ T4412] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 55.873446][ T4412] loop4: detected capacity change from 0 to 1024 [ 55.880736][ T4412] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 56.129414][ T4418] loop1: detected capacity change from 0 to 1024 [ 56.136518][ T4418] EXT4-fs: Ignoring removed bh option [ 56.154319][ T4418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.177918][ T29] audit: type=1400 audit(1747252665.746:386): avc: denied { read } for pid=4417 comm="syz.1.349" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 56.211545][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.220919][ T4424] loop0: detected capacity change from 0 to 512 [ 56.245161][ T4424] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.272297][ T4424] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.313453][ T4430] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 56.321706][ T4430] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 56.443450][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.469438][ T4448] loop2: detected capacity change from 0 to 512 [ 56.477515][ T4448] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.489320][ T4448] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.360: bad orphan inode 131083 [ 56.505099][ T4448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.539119][ T4456] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 56.561489][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.635965][ T4464] loop3: detected capacity change from 0 to 2048 [ 56.643564][ T4466] smc: net device bond0 applied user defined pnetid SYZ2 [ 56.651172][ T4464] EXT4-fs: quotafile must be on filesystem root [ 56.659364][ T4466] smc: net device bond0 erased user defined pnetid SYZ2 [ 56.682649][ T4464] random: crng reseeded on system resumption [ 56.756762][ T4479] xt_hashlimit: size too large, truncated to 1048576 [ 56.763125][ T4472] dccp_close: ABORT with 32 bytes unread [ 56.773313][ T29] audit: type=1326 audit(1747252666.346:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.3.367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b1d1fe969 code=0x0 [ 56.839765][ T4475] loop4: detected capacity change from 0 to 512 [ 56.888036][ T4475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.940121][ T4490] loop3: detected capacity change from 0 to 512 [ 56.940364][ T4475] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.947378][ T4490] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.973671][ T4490] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.376: bad orphan inode 131083 [ 56.986092][ T4490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.063424][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.120977][ T4495] netem: invalid attributes len -6 [ 57.126378][ T4495] netem: change failed [ 57.158429][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.262633][ T4506] loop3: detected capacity change from 0 to 512 [ 57.299747][ T4506] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 57.323161][ T4511] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 57.423561][ T4513] loop1: detected capacity change from 0 to 2048 [ 57.430139][ T4506] dccp_invalid_packet: P.Data Offset(100) too large [ 57.463770][ T4513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.485171][ T4520] loop4: detected capacity change from 0 to 512 [ 57.564991][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.593321][ T4506] loop3: detected capacity change from 0 to 512 [ 57.604322][ T4520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.676459][ T4520] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.387: bad orphan inode 131083 [ 57.707747][ T4520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.827980][ T4528] loop2: detected capacity change from 0 to 1024 [ 57.897510][ T4528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.933891][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.016407][ T4528] Trying to write to read-only block-device loop2 [ 58.023465][ T29] audit: type=1400 audit(1747252667.586:388): avc: denied { mounton } for pid=4527 comm="syz.2.389" path="/82/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 58.061945][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.087400][ T29] audit: type=1400 audit(1747252667.626:389): avc: denied { rmdir } for pid=3323 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.194919][ T4548] loop3: detected capacity change from 0 to 512 [ 58.213845][ T4548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.226758][ T4550] smc: net device bond0 applied user defined pnetid SYZ2 [ 58.237498][ T4548] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.241986][ T4550] smc: net device bond0 erased user defined pnetid SYZ2 [ 58.289344][ T4556] loop2: detected capacity change from 0 to 512 [ 58.315031][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.693999][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.702753][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.904012][ T4586] __nla_validate_parse: 137 callbacks suppressed [ 58.904034][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.919329][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.929142][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.938078][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.947632][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.956507][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.966296][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.975128][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.984757][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 58.993563][ T4586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 59.092923][ T4586] syz.1.413: attempt to access beyond end of device [ 59.092923][ T4586] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 59.125965][ T4586] loop1: detected capacity change from 0 to 1024 [ 59.133720][ T4586] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 59.228937][ T4591] loop4: detected capacity change from 0 to 512 [ 59.244060][ T4591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.257603][ T4591] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.305129][ T4598] loop2: detected capacity change from 0 to 512 [ 59.315450][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.342765][ T4600] netlink: 'syz.4.418': attribute type 1 has an invalid length. [ 59.564819][ T4623] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 59.630820][ T4627] loop1: detected capacity change from 0 to 512 [ 59.654349][ T4627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.667060][ T4627] ext4 filesystem being mounted at /79/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.744745][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.815805][ T4640] loop0: detected capacity change from 0 to 1024 [ 59.840488][ T4640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.857982][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 59.857998][ T29] audit: type=1400 audit(1747252669.426:404): avc: denied { create } for pid=4639 comm="syz.0.435" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.867252][ T4640] Trying to write to read-only block-device loop0 [ 59.905876][ T4649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.914499][ T29] audit: type=1400 audit(1747252669.446:405): avc: denied { read write open } for pid=4639 comm="syz.0.435" path="/81/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.937981][ T29] audit: type=1400 audit(1747252669.446:406): avc: denied { mounton } for pid=4639 comm="syz.0.435" path="/81/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.960632][ T29] audit: type=1400 audit(1747252669.466:407): avc: denied { append } for pid=4639 comm="syz.0.435" path="/81/file1/rdma.current" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.967092][ T4649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.003505][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.068718][ T4659] syz_tun: entered allmulticast mode [ 60.074835][ T4659] syz_tun: left allmulticast mode [ 60.090464][ T4660] loop2: detected capacity change from 0 to 512 [ 60.136361][ T4662] loop0: detected capacity change from 0 to 512 [ 60.247890][ T4660] dccp_invalid_packet: P.Data Offset(100) too large [ 60.521814][ T4676] loop3: detected capacity change from 0 to 512 [ 60.554928][ T4676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.567904][ T4676] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.665156][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.687184][ T29] audit: type=1326 audit(1747252670.256:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4694 comm="syz.3.457" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b1d1fe969 code=0x0 [ 60.713299][ T4693] loop1: detected capacity change from 0 to 512 [ 60.735947][ T4693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.748707][ T4693] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.841188][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.865474][ T29] audit: type=1400 audit(1747252670.436:409): avc: denied { setopt } for pid=4699 comm="syz.1.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.152592][ T4711] xt_hashlimit: size too large, truncated to 1048576 [ 61.654571][ T4733] loop3: detected capacity change from 0 to 512 [ 61.671927][ T4733] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 61.803656][ T4741] netlink: 'syz.2.472': attribute type 1 has an invalid length. [ 61.852890][ T4733] dccp_invalid_packet: P.Data Offset(100) too large [ 61.882696][ T29] audit: type=1400 audit(1747252671.446:410): avc: denied { create } for pid=4744 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 61.920108][ T29] audit: type=1400 audit(1747252671.486:411): avc: denied { bind } for pid=4744 comm="syz.2.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 61.999323][ T4751] loop2: detected capacity change from 0 to 512 [ 62.193363][ T4758] loop1: detected capacity change from 0 to 1024 [ 62.219476][ T4758] EXT4-fs: Ignoring removed bh option [ 62.248477][ T4758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.283758][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.364560][ T4773] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 62.372840][ T4773] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 62.383919][ T4775] loop2: detected capacity change from 0 to 2048 [ 62.391374][ T4775] EXT4-fs: quotafile must be on filesystem root [ 62.416301][ T4775] random: crng reseeded on system resumption [ 62.524454][ T4781] loop1: detected capacity change from 0 to 512 [ 62.536616][ T29] audit: type=1326 audit(1747252672.106:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4774 comm="syz.2.484" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e1b82e969 code=0x0 [ 62.559694][ T29] audit: type=1400 audit(1747252672.106:413): avc: denied { mount } for pid=4784 comm="syz.3.490" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 62.598035][ T4781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.618609][ T4781] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.697827][ T4794] loop0: detected capacity change from 0 to 512 [ 62.704902][ T4794] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.711398][ T4794] EXT4-fs: Ignoring removed bh option [ 62.746884][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.797834][ T4798] loop0: detected capacity change from 0 to 512 [ 62.837865][ T4802] loop1: detected capacity change from 0 to 164 [ 62.854936][ T4802] Unable to read rock-ridge attributes [ 62.899943][ T4802] Unable to read rock-ridge attributes [ 63.009836][ T4812] loop1: detected capacity change from 0 to 512 [ 63.033433][ T4812] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 63.157062][ T4812] dccp_invalid_packet: P.Data Offset(100) too large [ 63.303507][ T4832] loop4: detected capacity change from 0 to 512 [ 63.312244][ T4823] loop1: detected capacity change from 0 to 512 [ 63.313241][ T4832] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.323801][ T4823] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.334960][ T4823] EXT4-fs: Ignoring removed bh option [ 63.341289][ T4823] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.353735][ T4832] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.508: bad orphan inode 131083 [ 63.363941][ T4823] EXT4-fs (loop1): 1 truncate cleaned up [ 63.365069][ T4832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.383225][ T4823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.398069][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.445420][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.507317][ T4845] loop2: detected capacity change from 0 to 1024 [ 63.516506][ T4845] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.527764][ T4845] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.545880][ T4845] JBD2: no valid journal superblock found [ 63.551948][ T4845] EXT4-fs (loop2): Could not load journal inode [ 63.584280][ T4845] loop2: detected capacity change from 0 to 512 [ 63.614757][ T4845] 9pnet_fd: Insufficient options for proto=fd [ 63.784461][ T4856] loop1: detected capacity change from 0 to 2048 [ 63.791267][ T4856] EXT4-fs: quotafile must be on filesystem root [ 63.798961][ T4856] random: crng reseeded on system resumption [ 63.937964][ T4861] loop3: detected capacity change from 0 to 512 [ 63.972704][ T4861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.994904][ T4861] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.518: bad orphan inode 131083 [ 64.145538][ T4870] loop0: detected capacity change from 0 to 512 [ 64.308917][ T4880] loop1: detected capacity change from 0 to 164 [ 64.350284][ T4880] Unable to read rock-ridge attributes [ 64.372358][ T4880] Unable to read rock-ridge attributes [ 64.441826][ T4888] __nla_validate_parse: 131 callbacks suppressed [ 64.441847][ T4888] netlink: 16 bytes leftover after parsing attributes in process `syz.4.531'. [ 64.490262][ T4891] syz_tun: entered allmulticast mode [ 64.520223][ T4890] syz_tun: left allmulticast mode [ 64.869508][ T4900] loop1: detected capacity change from 0 to 512 [ 64.953304][ T4900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.968245][ T4904] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 64.988425][ T4900] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.535: bad orphan inode 131083 [ 65.136357][ T4914] loop1: detected capacity change from 0 to 1024 [ 65.149372][ T4914] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.160623][ T4914] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.177287][ T4914] JBD2: no valid journal superblock found [ 65.183248][ T4914] EXT4-fs (loop1): Could not load journal inode [ 65.212082][ T4914] loop1: detected capacity change from 0 to 512 [ 65.244430][ T4918] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 65.277314][ T4914] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -13 [ 65.288415][ T4914] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 65.299626][ T4914] EXT4-fs warning (device loop1): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 65.315058][ T4914] EXT4-fs (loop1): 1 truncate cleaned up [ 65.315366][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 65.315382][ T29] audit: type=1404 audit(1747252674.886:463): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 65.351955][ T29] audit: type=1400 audit(1747252674.886:464): avc: denied { ioctl } for pid=4920 comm="syz.0.544" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 65.376751][ T29] audit: type=1400 audit(1747252674.886:465): avc: denied { read } for pid=4920 comm="syz.0.544" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 65.397859][ T29] audit: type=1400 audit(1747252674.886:466): avc: denied { create } for pid=4920 comm="syz.0.544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 65.404668][ T4932] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 65.418350][ T29] audit: type=1400 audit(1747252674.916:467): avc: denied { mount } for pid=4913 comm="syz.1.541" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=0 [ 65.418384][ T29] audit: type=1400 audit(1747252674.916:468): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.426702][ T4932] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 65.475215][ T4934] capability: warning: `syz.0.546' uses deprecated v2 capabilities in a way that may be insecure [ 65.491876][ T29] audit: type=1400 audit(1747252674.926:469): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.516368][ T29] audit: type=1400 audit(1747252674.956:470): avc: denied { read write } for pid=4929 comm="syz.4.547" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 65.541214][ T29] audit: type=1400 audit(1747252674.956:471): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.565707][ T29] audit: type=1400 audit(1747252674.976:472): avc: denied { map_create } for pid=4931 comm="syz.4.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 65.632898][ T4944] netlink: 'syz.4.553': attribute type 1 has an invalid length. [ 65.723247][ T4954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.558'. [ 65.817634][ T4965] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 65.826043][ T4965] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 65.854686][ T4971] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 66.153702][ T4993] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 66.162135][ T4993] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 66.188931][ T4999] netlink: 'syz.1.579': attribute type 1 has an invalid length. [ 66.313335][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 66.322231][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 66.332403][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 66.341340][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 66.351030][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 66.360065][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 66.370080][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 66.422184][ T5026] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 66.424971][ T5028] netlink: 'syz.1.592': attribute type 1 has an invalid length. [ 66.430382][ T5026] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 66.553121][ T5040] syz.3.598: attempt to access beyond end of device [ 66.553121][ T5040] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 66.651657][ T5042] dccp_invalid_packet: P.Data Offset(100) too large [ 66.980368][ T5058] netlink: 'syz.3.605': attribute type 1 has an invalid length. [ 67.159992][ T5084] netlink: 'syz.4.618': attribute type 1 has an invalid length. [ 67.671418][ T5114] dccp_invalid_packet: P.Data Offset(100) too large [ 68.251818][ T5175] netlink: 'syz.2.657': attribute type 1 has an invalid length. [ 68.713960][ T5201] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 68.812669][ T5207] syz.0.671: attempt to access beyond end of device [ 68.812669][ T5207] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 68.937311][ T5225] netlink: 'syz.0.681': attribute type 1 has an invalid length. [ 69.749996][ T5244] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 69.758447][ T5244] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 69.825982][ T5248] __nla_validate_parse: 397 callbacks suppressed [ 69.826001][ T5248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.691'. [ 69.966700][ T5263] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 69.974989][ T5263] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 70.232284][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 70.248997][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 70.257985][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 70.273401][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 70.282350][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 70.298765][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 70.307770][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 70.319107][ T5303] syz.0.712: attempt to access beyond end of device [ 70.319107][ T5303] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 70.334327][ T29] kauditd_printk_skb: 1080 callbacks suppressed [ 70.334351][ T29] audit: type=1400 audit(1747252679.886:1553): avc: denied { create } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 70.361116][ T29] audit: type=1400 audit(1747252679.886:1554): avc: denied { create } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 70.370145][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 70.381855][ T29] audit: type=1400 audit(1747252679.886:1555): avc: denied { map_create } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.381886][ T29] audit: type=1400 audit(1747252679.886:1556): avc: denied { prog_load } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.381907][ T29] audit: type=1400 audit(1747252679.886:1557): avc: denied { prog_load } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 70.390684][ T5296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 70.469390][ T29] audit: type=1400 audit(1747252679.936:1558): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.493765][ T29] audit: type=1400 audit(1747252679.986:1559): avc: denied { create } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 70.514335][ T29] audit: type=1400 audit(1747252679.986:1560): avc: denied { create } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 70.533818][ T29] audit: type=1400 audit(1747252679.986:1561): avc: denied { create } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 70.554015][ T29] audit: type=1400 audit(1747252679.986:1562): avc: denied { prog_load } for pid=5297 comm="syz.1.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 71.157547][ T5364] syz.2.737: attempt to access beyond end of device [ 71.157547][ T5364] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 71.345899][ T5389] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 71.354213][ T5389] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 72.197267][ T5471] dccp_invalid_packet: P.Data Offset(100) too large [ 72.885338][ T5524] dccp_invalid_packet: P.Data Offset(100) too large [ 73.001242][ T5549] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 73.225730][ T5579] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 73.657071][ T5605] netlink: 'syz.1.846': attribute type 1 has an invalid length. [ 73.947642][ T5629] netlink: 'syz.2.858': attribute type 1 has an invalid length. [ 74.576568][ T5673] syz.3.871: attempt to access beyond end of device [ 74.576568][ T5673] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 74.683429][ T5671] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 74.691759][ T5671] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 74.873463][ T5705] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 74.881800][ T5705] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 74.937225][ T5712] __nla_validate_parse: 404 callbacks suppressed [ 74.937242][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 74.952797][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 74.970465][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 74.979367][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 74.989426][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 74.998578][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 75.006782][ T5719] syz.4.893: attempt to access beyond end of device [ 75.006782][ T5719] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 75.008920][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 75.029416][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 75.039333][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 75.048524][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.893'. [ 75.224318][ T5737] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 75.234122][ T5739] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 75.242668][ T5739] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 75.343599][ T29] kauditd_printk_skb: 1600 callbacks suppressed [ 75.343613][ T29] audit: type=1400 audit(1747252684.916:3163): avc: denied { prog_load } for pid=5745 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.383177][ T29] audit: type=1400 audit(1747252684.946:3164): avc: denied { prog_load } for pid=5745 comm="syz.3.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.422600][ T29] audit: type=1400 audit(1747252684.956:3165): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 75.447135][ T29] audit: type=1400 audit(1747252684.976:3166): avc: denied { prog_load } for pid=5748 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.466327][ T29] audit: type=1400 audit(1747252684.986:3167): avc: denied { create } for pid=5748 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 75.487021][ T29] audit: type=1400 audit(1747252684.986:3168): avc: denied { create } for pid=5748 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 75.507610][ T29] audit: type=1400 audit(1747252684.986:3169): avc: denied { map_create } for pid=5748 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.526857][ T29] audit: type=1400 audit(1747252684.986:3170): avc: denied { prog_load } for pid=5748 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.545945][ T29] audit: type=1400 audit(1747252684.986:3171): avc: denied { prog_load } for pid=5748 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 75.670881][ T29] audit: type=1400 audit(1747252685.046:3172): avc: denied { create } for pid=5748 comm="syz.3.908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 75.701241][ T5765] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 75.709534][ T5765] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 75.900639][ T5789] syz.1.925: attempt to access beyond end of device [ 75.900639][ T5789] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 76.017597][ T5795] netlink: 'syz.1.928': attribute type 1 has an invalid length. [ 77.157379][ T5857] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 77.442945][ T5863] dccp_invalid_packet: P.Data Offset(100) too large [ 77.461530][ T5874] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 77.469826][ T5874] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 77.603866][ T5883] syz.1.967: attempt to access beyond end of device [ 77.603866][ T5883] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 77.625557][ T5882] netlink: 'syz.3.969': attribute type 1 has an invalid length. [ 77.838528][ T5901] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 77.846994][ T5901] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 77.936036][ T5909] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 78.138127][ T5913] dccp_invalid_packet: P.Data Offset(0) too small [ 78.321750][ T5948] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 78.670779][ T5976] dccp_invalid_packet: P.Data Offset(100) too large [ 78.787648][ T5985] dccp_invalid_packet: P.Data Offset(0) too small [ 79.437952][ T6052] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 79.446263][ T6052] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 79.942326][ T6100] __nla_validate_parse: 432 callbacks suppressed [ 79.942345][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 79.957817][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 79.971436][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 79.991164][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 80.003037][ T6103] syz.2.1071: attempt to access beyond end of device [ 80.003037][ T6103] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 80.016949][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 80.025973][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 80.037854][ T6092] dccp_invalid_packet: P.Data Offset(100) too large [ 80.048302][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 80.057327][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 80.066328][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 80.075349][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 80.358711][ T29] kauditd_printk_skb: 1192 callbacks suppressed [ 80.358729][ T29] audit: type=1400 audit(1747252689.926:4365): avc: denied { prog_load } for pid=6135 comm="syz.4.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.401758][ T29] audit: type=1400 audit(1747252689.946:4366): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 80.426319][ T29] audit: type=1400 audit(1747252689.946:4367): avc: denied { mounton } for pid=6139 comm="syz.0.1090" path="/210/file0" dev="tmpfs" ino=1113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 80.449120][ T29] audit: type=1400 audit(1747252689.946:4368): avc: denied { map_create } for pid=6139 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.468426][ T29] audit: type=1400 audit(1747252689.946:4369): avc: denied { prog_load } for pid=6139 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.487551][ T29] audit: type=1400 audit(1747252689.946:4370): avc: denied { prog_load } for pid=6139 comm="syz.0.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 80.506736][ T29] audit: type=1400 audit(1747252689.946:4371): avc: denied { read } for pid=6139 comm="syz.0.1090" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=0 [ 80.530000][ T29] audit: type=1326 audit(1747252689.946:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeaa1e969 code=0x7ffc0000 [ 80.553569][ T29] audit: type=1326 audit(1747252689.946:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeaa1e969 code=0x7ffc0000 [ 80.577382][ T29] audit: type=1326 audit(1747252689.946:4374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6139 comm="syz.0.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaeaa1e969 code=0x7ffc0000 [ 80.619627][ T6146] syz.4.1088: attempt to access beyond end of device [ 80.619627][ T6146] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 80.744205][ T6163] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 80.753100][ T6163] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 80.792538][ T6142] dccp_invalid_packet: P.Data Offset(100) too large [ 81.376671][ T6190] syz.1.1111: attempt to access beyond end of device [ 81.376671][ T6190] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.567779][ T6196] dccp_invalid_packet: P.Data Offset(100) too large [ 81.662137][ T6202] syz.0.1115: attempt to access beyond end of device [ 81.662137][ T6202] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 81.762628][ T6209] dccp_invalid_packet: P.Data Offset(100) too large [ 81.812967][ T6224] syz.2.1123: attempt to access beyond end of device [ 81.812967][ T6224] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 82.371328][ T6262] dccp_invalid_packet: P.Data Offset(100) too large [ 82.534379][ T6267] dccp_invalid_packet: P.Data Offset(100) too large [ 82.835619][ T6307] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 82.896563][ T6294] dccp_invalid_packet: P.Data Offset(100) too large [ 84.142961][ T6369] net_ratelimit: 1 callbacks suppressed [ 84.142979][ T6369] dccp_invalid_packet: P.Data Offset(100) too large [ 84.859496][ T6420] syz.4.1208: attempt to access beyond end of device [ 84.859496][ T6420] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.950074][ T6428] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 84.958434][ T6428] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 84.974481][ T6430] __nla_validate_parse: 787 callbacks suppressed [ 84.974499][ T6430] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1213'. [ 85.053434][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1217'. [ 85.390429][ T29] kauditd_printk_skb: 1159 callbacks suppressed [ 85.390444][ T29] audit: type=1400 audit(1747252694.956:5534): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.433086][ T29] audit: type=1400 audit(1747252695.006:5535): avc: denied { create } for pid=6462 comm="syz.4.1226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 85.491703][ T29] audit: type=1400 audit(1747252695.006:5536): avc: denied { read } for pid=6462 comm="syz.4.1226" dev="nsfs" ino=4026532631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 85.505513][ T6470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 85.513314][ T29] audit: type=1400 audit(1747252695.026:5537): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.546697][ T29] audit: type=1400 audit(1747252695.036:5538): avc: denied { prog_load } for pid=6464 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 85.566155][ T29] audit: type=1400 audit(1747252695.036:5539): avc: denied { create } for pid=6464 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 85.585961][ T29] audit: type=1400 audit(1747252695.036:5540): avc: denied { create } for pid=6464 comm="syz.0.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 85.606195][ T29] audit: type=1400 audit(1747252695.046:5541): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 85.630621][ T29] audit: type=1400 audit(1747252695.056:5542): avc: denied { read } for pid=6467 comm="syz.4.1229" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 85.654902][ T29] audit: type=1400 audit(1747252695.056:5543): avc: denied { create } for pid=6467 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=0 [ 86.040433][ T6506] dccp_invalid_packet: P.Data Offset(100) too large [ 86.366863][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 86.375906][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 86.385813][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 86.394907][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 86.406290][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 86.415453][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 86.425568][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 86.441049][ T6528] syz.0.1251: attempt to access beyond end of device [ 86.441049][ T6528] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 86.714434][ T6544] dccp_invalid_packet: P.Data Offset(100) too large [ 87.235902][ T6625] syz.4.1295: attempt to access beyond end of device [ 87.235902][ T6625] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.199820][ T6693] dccp_invalid_packet: P.Data Offset(100) too large [ 88.405868][ T6724] syz.2.1334: attempt to access beyond end of device [ 88.405868][ T6724] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.563863][ T6746] syz.0.1348: attempt to access beyond end of device [ 88.563863][ T6746] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 88.613607][ T6742] dccp_invalid_packet: P.Data Offset(100) too large [ 89.038956][ T6778] syz.4.1360: attempt to access beyond end of device [ 89.038956][ T6778] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 89.165791][ T6796] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 89.174104][ T6796] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 90.148091][ T6846] netlink: 'syz.0.1390': attribute type 1 has an invalid length. [ 90.227861][ T6859] __nla_validate_parse: 674 callbacks suppressed [ 90.227879][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.243329][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.253121][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.262173][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.271786][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.280821][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.290873][ T6861] syz.1.1397: attempt to access beyond end of device [ 90.290873][ T6861] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 90.304698][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.313710][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.330669][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.339796][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1397'. [ 90.400628][ T29] kauditd_printk_skb: 1784 callbacks suppressed [ 90.400643][ T29] audit: type=1400 audit(1747252699.966:7322): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.434852][ T29] audit: type=1400 audit(1747252699.986:7323): avc: denied { create } for pid=6871 comm="syz.1.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 90.454533][ T29] audit: type=1400 audit(1747252699.986:7324): avc: denied { create } for pid=6871 comm="syz.1.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 90.474562][ T29] audit: type=1400 audit(1747252699.986:7325): avc: denied { create } for pid=6871 comm="syz.1.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 90.511938][ T29] audit: type=1400 audit(1747252700.076:7326): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.578690][ T29] audit: type=1400 audit(1747252700.126:7327): avc: denied { map_create } for pid=6875 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 90.598001][ T29] audit: type=1400 audit(1747252700.126:7328): avc: denied { read write } for pid=6875 comm="syz.2.1403" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 90.622223][ T29] audit: type=1400 audit(1747252700.126:7329): avc: denied { create } for pid=6875 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.642939][ T29] audit: type=1400 audit(1747252700.126:7330): avc: denied { read } for pid=6875 comm="syz.2.1403" dev="nsfs" ino=4026532825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 90.664213][ T29] audit: type=1400 audit(1747252700.126:7331): avc: denied { create } for pid=6875 comm="syz.2.1403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.689635][ T6880] netlink: 'syz.2.1404': attribute type 1 has an invalid length. [ 91.003335][ T6896] dccp_invalid_packet: P.Data Offset(100) too large [ 91.163133][ T6929] syz.3.1425: attempt to access beyond end of device [ 91.163133][ T6929] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 91.753078][ T6952] dccp_invalid_packet: P.Data Offset(100) too large [ 92.528573][ T7020] syz.0.1459: attempt to access beyond end of device [ 92.528573][ T7020] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 93.401207][ T7079] syz.2.1489: attempt to access beyond end of device [ 93.401207][ T7079] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 93.492205][ T7064] dccp_invalid_packet: P.Data Offset(100) too large [ 93.876697][ T7101] dccp_invalid_packet: P.Data Offset(100) too large [ 94.075573][ T7122] netlink: 'syz.2.1509': attribute type 1 has an invalid length. [ 94.193437][ T7138] syz.2.1512: attempt to access beyond end of device [ 94.193437][ T7138] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 94.309765][ T7135] dccp_invalid_packet: P.Data Offset(100) too large [ 94.654932][ T7174] syz.1.1531: attempt to access beyond end of device [ 94.654932][ T7174] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 94.834084][ T7176] dccp_invalid_packet: P.Data Offset(100) too large [ 95.011397][ T7205] syz.0.1544: attempt to access beyond end of device [ 95.011397][ T7205] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.250517][ T7211] __nla_validate_parse: 942 callbacks suppressed [ 95.250594][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 95.404432][ T29] kauditd_printk_skb: 1716 callbacks suppressed [ 95.404450][ T29] audit: type=1400 audit(1747252704.976:9045): avc: denied { map_create } for pid=7218 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.430312][ T29] audit: type=1400 audit(1747252704.976:9046): avc: denied { prog_load } for pid=7218 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.455979][ T29] audit: type=1400 audit(1747252705.026:9047): avc: denied { map_create } for pid=7218 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.477551][ T29] audit: type=1400 audit(1747252705.026:9048): avc: denied { prog_load } for pid=7218 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.497560][ T29] audit: type=1400 audit(1747252705.026:9049): avc: denied { prog_load } for pid=7218 comm="syz.2.1550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.579934][ T29] audit: type=1400 audit(1747252705.146:9050): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.608429][ T29] audit: type=1400 audit(1747252705.176:9051): avc: denied { create } for pid=7221 comm="syz.1.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=0 [ 95.647992][ T29] audit: type=1400 audit(1747252705.206:9052): avc: denied { map_create } for pid=7221 comm="syz.1.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.667329][ T29] audit: type=1400 audit(1747252705.206:9053): avc: denied { prog_load } for pid=7221 comm="syz.1.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 95.686745][ T29] audit: type=1400 audit(1747252705.216:9054): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 95.748307][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.757426][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.767290][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.776370][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.803268][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.812247][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.823195][ T7242] syz.2.1557: attempt to access beyond end of device [ 95.823195][ T7242] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.837636][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.846807][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.864749][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1557'. [ 95.926358][ T7243] dccp_invalid_packet: P.Data Offset(100) too large [ 96.423645][ T7289] netlink: 'syz.1.1579': attribute type 1 has an invalid length. [ 96.600833][ T7293] dccp_invalid_packet: P.Data Offset(100) too large [ 96.747606][ T7309] syz.2.1586: attempt to access beyond end of device [ 96.747606][ T7309] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 96.810153][ T7314] netlink: 'syz.0.1590': attribute type 1 has an invalid length. [ 96.934557][ T7322] syz.0.1593: attempt to access beyond end of device [ 96.934557][ T7322] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.221099][ T7347] netlink: 'syz.2.1604': attribute type 1 has an invalid length. [ 97.230818][ T7339] syz.3.1602: attempt to access beyond end of device [ 97.230818][ T7339] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.511388][ T7362] syz.2.1610: attempt to access beyond end of device [ 97.511388][ T7362] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.633423][ T7373] netlink: 'syz.2.1615': attribute type 1 has an invalid length. [ 98.215224][ T7400] dccp_invalid_packet: P.Data Offset(100) too large [ 98.738247][ T7429] syz.4.1636: attempt to access beyond end of device [ 98.738247][ T7429] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.062237][ T7447] syz.4.1644: attempt to access beyond end of device [ 99.062237][ T7447] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 99.069973][ T7444] dccp_invalid_packet: P.Data Offset(100) too large [ 99.109361][ T7449] netlink: 'syz.4.1646': attribute type 1 has an invalid length. [ 99.346761][ T7466] syz.3.1650: attempt to access beyond end of device [ 99.346761][ T7466] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 100.140407][ T7516] netlink: 'syz.0.1673': attribute type 1 has an invalid length. [ 100.149227][ T7514] syz.1.1670: attempt to access beyond end of device [ 100.149227][ T7514] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 100.417827][ T29] kauditd_printk_skb: 1305 callbacks suppressed [ 100.417842][ T29] audit: type=1400 audit(1747252709.986:10339): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.457979][ T29] audit: type=1400 audit(1747252710.026:10340): avc: denied { map_create } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.477502][ T29] audit: type=1400 audit(1747252710.026:10341): avc: denied { prog_load } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.496708][ T29] audit: type=1400 audit(1747252710.026:10342): avc: denied { prog_load } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.515913][ T29] audit: type=1400 audit(1747252710.026:10343): avc: denied { map_create } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.535295][ T29] audit: type=1400 audit(1747252710.026:10344): avc: denied { prog_load } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.556733][ T29] audit: type=1400 audit(1747252710.026:10345): avc: denied { map_create } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.576076][ T29] audit: type=1400 audit(1747252710.026:10346): avc: denied { prog_load } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.595441][ T29] audit: type=1400 audit(1747252710.026:10347): avc: denied { prog_load } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.614723][ T29] audit: type=1400 audit(1747252710.026:10348): avc: denied { prog_load } for pid=7533 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.632990][ T7540] __nla_validate_parse: 1210 callbacks suppressed [ 100.633011][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.649595][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.662584][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.671711][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.681311][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.690388][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.717868][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.726940][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.736994][ T7538] syz.3.1683: attempt to access beyond end of device [ 100.736994][ T7538] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 100.750759][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.759690][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1683'. [ 100.880485][ T7553] netlink: 'syz.4.1687': attribute type 1 has an invalid length. [ 101.091404][ T7577] syz.4.1698: attempt to access beyond end of device [ 101.091404][ T7577] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 101.690431][ T7613] syz.3.1710: attempt to access beyond end of device [ 101.690431][ T7613] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 101.732926][ T7597] dccp_invalid_packet: P.Data Offset(100) too large [ 101.825664][ T7622] netlink: 'syz.3.1715': attribute type 1 has an invalid length. [ 102.094215][ T7650] netlink: 'syz.0.1727': attribute type 1 has an invalid length. [ 102.119598][ T7653] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 102.125768][ T7646] syz.2.1726: attempt to access beyond end of device [ 102.125768][ T7646] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.127855][ T7653] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 102.345550][ T7661] dccp_invalid_packet: P.Data Offset(100) too large [ 102.452090][ T7677] syz.2.1738: attempt to access beyond end of device [ 102.452090][ T7677] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 102.694166][ T7681] syz.1.1740: attempt to access beyond end of device [ 102.694166][ T7681] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 103.176841][ T7702] dccp_invalid_packet: P.Data Offset(100) too large [ 103.597173][ T7743] netlink: 'syz.3.1766': attribute type 1 has an invalid length. [ 103.796258][ T7739] dccp_invalid_packet: P.Data Offset(100) too large [ 103.855207][ T7768] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 103.863811][ T7768] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 103.887564][ T7772] netlink: 'syz.4.1779': attribute type 1 has an invalid length. [ 103.969632][ T7775] bio_check_eod: 1 callbacks suppressed [ 103.969647][ T7775] syz.1.1780: attempt to access beyond end of device [ 103.969647][ T7775] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 104.472050][ T7806] dccp_invalid_packet: P.Data Offset(100) too large [ 104.490057][ T7813] syz.4.1796: attempt to access beyond end of device [ 104.490057][ T7813] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 104.535679][ T7815] netlink: 'syz.4.1797': attribute type 1 has an invalid length. [ 105.056828][ T7835] syz.0.1806: attempt to access beyond end of device [ 105.056828][ T7835] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 105.276671][ T7844] dccp_invalid_packet: P.Data Offset(100) too large [ 105.433014][ T29] kauditd_printk_skb: 1375 callbacks suppressed [ 105.433028][ T29] audit: type=1400 audit(1747252715.006:11724): avc: denied { prog_load } for pid=7855 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.478087][ T29] audit: type=1400 audit(1747252715.006:11725): avc: denied { map_create } for pid=7855 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.497864][ T29] audit: type=1400 audit(1747252715.006:11726): avc: denied { prog_load } for pid=7855 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.517421][ T29] audit: type=1400 audit(1747252715.006:11727): avc: denied { create } for pid=7855 comm="syz.4.1814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 105.537412][ T29] audit: type=1400 audit(1747252715.026:11728): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.562236][ T29] audit: type=1400 audit(1747252715.036:11729): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.587205][ T29] audit: type=1400 audit(1747252715.036:11730): avc: denied { create } for pid=7859 comm="syz.3.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=0 [ 105.608591][ T29] audit: type=1400 audit(1747252715.036:11731): avc: denied { map_create } for pid=7859 comm="syz.3.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.628399][ T29] audit: type=1400 audit(1747252715.036:11732): avc: denied { prog_load } for pid=7859 comm="syz.3.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.647702][ T29] audit: type=1400 audit(1747252715.036:11733): avc: denied { read write } for pid=7855 comm="syz.4.1814" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.099508][ T7887] dccp_invalid_packet: P.Data Offset(100) too large [ 106.645128][ T7932] dccp_invalid_packet: P.Data Offset(100) too large [ 107.565342][ T7985] dccp_invalid_packet: P.Data Offset(100) too large [ 107.894201][ T8012] __nla_validate_parse: 1342 callbacks suppressed [ 107.894216][ T8012] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1877'. [ 108.329990][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.339043][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.349427][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.358498][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.368674][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.377586][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.387550][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.387810][ T8037] syz.1.1886: attempt to access beyond end of device [ 108.387810][ T8037] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 108.396526][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.424055][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1886'. [ 108.622914][ T8046] syz.3.1891: attempt to access beyond end of device [ 108.622914][ T8046] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.093830][ T8084] syz.3.1905: attempt to access beyond end of device [ 109.093830][ T8084] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.130209][ T8091] syz.1.1909: attempt to access beyond end of device [ 109.130209][ T8091] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.156469][ T8080] dccp_invalid_packet: P.Data Offset(100) too large [ 109.698182][ T8119] syz.3.1920: attempt to access beyond end of device [ 109.698182][ T8119] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 109.865447][ T8125] dccp_invalid_packet: P.Data Offset(100) too large [ 110.454842][ T29] kauditd_printk_skb: 1079 callbacks suppressed [ 110.454858][ T29] audit: type=1400 audit(1747252720.026:12813): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.511617][ T29] audit: type=1400 audit(1747252720.076:12814): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.560200][ T29] audit: type=1400 audit(1747252720.106:12815): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.584700][ T29] audit: type=1400 audit(1747252720.106:12816): avc: denied { map_create } for pid=8170 comm="syz.2.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.604220][ T29] audit: type=1400 audit(1747252720.106:12817): avc: denied { prog_load } for pid=8170 comm="syz.2.1940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.623629][ T29] audit: type=1400 audit(1747252720.116:12818): avc: denied { prog_load } for pid=8172 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 110.642820][ T29] audit: type=1400 audit(1747252720.116:12819): avc: denied { create } for pid=8172 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=0 [ 110.653672][ T3314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.662533][ T29] audit: type=1400 audit(1747252720.116:12820): avc: denied { create } for pid=8172 comm="syz.0.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 110.662565][ T29] audit: type=1400 audit(1747252720.126:12821): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 110.770935][ T8182] syz.3.1945: attempt to access beyond end of device [ 110.770935][ T8182] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 111.695447][ T8261] syz.2.1972: attempt to access beyond end of device [ 111.695447][ T8261] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 111.867258][ T8280] syz.2.1983: attempt to access beyond end of device [ 111.867258][ T8280] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.242419][ T8297] dccp_invalid_packet: P.Data Offset(100) too large [ 112.462626][ T8310] syz.3.1995: attempt to access beyond end of device [ 112.462626][ T8310] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.842370][ T8341] dccp_invalid_packet: P.Data Offset(100) too large [ 112.874680][ T8344] syz.1.2009: attempt to access beyond end of device [ 112.874680][ T8344] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 112.954808][ T8349] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 112.963109][ T8349] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 112.967327][ T8352] __nla_validate_parse: 1352 callbacks suppressed [ 112.967347][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 112.987110][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.000588][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.009545][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.019213][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.028265][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.038274][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.039822][ T8355] syz.3.2012: attempt to access beyond end of device [ 113.039822][ T8355] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 113.047276][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.070125][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.079092][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 113.089850][ T8356] syz.2.2011: attempt to access beyond end of device [ 113.089850][ T8356] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 113.464529][ T8379] dccp_invalid_packet: P.Data Offset(100) too large [ 113.471202][ T8373] dccp_invalid_packet: P.Data Offset(100) too large [ 114.157507][ T8449] bio_check_eod: 3 callbacks suppressed [ 114.157525][ T8449] syz.4.2049: attempt to access beyond end of device [ 114.157525][ T8449] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 114.331638][ T3392] page_pool_release_retry() stalled pool shutdown: id 30, 1 inflight 60 sec [ 114.346501][ T8472] syz.2.2057: attempt to access beyond end of device [ 114.346501][ T8472] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 114.463578][ T8478] syz.4.2065: attempt to access beyond end of device [ 114.463578][ T8478] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 114.676735][ T8499] syz.4.2071: attempt to access beyond end of device [ 114.676735][ T8499] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 114.866605][ T8517] syz.1.2078: attempt to access beyond end of device [ 114.866605][ T8517] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 114.937864][ T8521] syz.3.2079: attempt to access beyond end of device [ 114.937864][ T8521] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 115.385889][ T8550] syz.1.2092: attempt to access beyond end of device [ 115.385889][ T8550] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 115.480598][ T29] kauditd_printk_skb: 1523 callbacks suppressed [ 115.480617][ T29] audit: type=1400 audit(1747252725.046:14343): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 115.608518][ T29] audit: type=1400 audit(1747252725.056:14344): avc: denied { create } for pid=8562 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 115.629395][ T29] audit: type=1400 audit(1747252725.056:14345): avc: denied { create } for pid=8562 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 115.650138][ T29] audit: type=1400 audit(1747252725.056:14346): avc: denied { create } for pid=8562 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 115.669704][ T29] audit: type=1400 audit(1747252725.056:14347): avc: denied { create } for pid=8562 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 115.690154][ T29] audit: type=1400 audit(1747252725.056:14348): avc: denied { create } for pid=8562 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 115.710188][ T29] audit: type=1400 audit(1747252725.056:14349): avc: denied { create } for pid=8562 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 115.729992][ T29] audit: type=1400 audit(1747252725.056:14350): avc: denied { allowed } for pid=8562 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 115.749639][ T29] audit: type=1400 audit(1747252725.066:14351): avc: denied { prog_load } for pid=8562 comm="syz.0.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 115.768864][ T29] audit: type=1400 audit(1747252725.076:14352): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 116.005743][ T8592] ================================================================== [ 116.013898][ T8592] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 116.021066][ T8592] [ 116.023401][ T8592] write to 0xffff88811a649fe8 of 8 bytes by task 8585 on cpu 1: [ 116.031216][ T8592] shmem_fallocate+0x221/0x840 [ 116.036100][ T8592] vfs_fallocate+0x410/0x450 [ 116.040908][ T8592] madvise_do_behavior+0x1106/0x24a0 [ 116.046815][ T8592] __x64_sys_madvise+0xc9/0x100 [ 116.052046][ T8592] x64_sys_call+0x2455/0x2fb0 [ 116.056757][ T8592] do_syscall_64+0xd0/0x1a0 [ 116.061376][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.067296][ T8592] [ 116.069773][ T8592] read to 0xffff88811a649fe8 of 8 bytes by task 8592 on cpu 0: [ 116.077507][ T8592] shmem_fault+0x90/0x250 [ 116.081860][ T8592] __do_fault+0xb9/0x200 [ 116.086217][ T8592] handle_mm_fault+0x110c/0x2ae0 [ 116.091290][ T8592] __get_user_pages+0xde2/0x1d20 [ 116.096262][ T8592] __mm_populate+0x243/0x3a0 [ 116.100973][ T8592] vm_mmap_pgoff+0x232/0x2e0 [ 116.105592][ T8592] ksys_mmap_pgoff+0xc2/0x310 [ 116.110313][ T8592] x64_sys_call+0x1602/0x2fb0 [ 116.115104][ T8592] do_syscall_64+0xd0/0x1a0 [ 116.119637][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.125554][ T8592] [ 116.127887][ T8592] value changed: 0x0000000000000000 -> 0xffffc90010edfca0 [ 116.135616][ T8592] [ 116.137968][ T8592] Reported by Kernel Concurrency Sanitizer on: [ 116.144427][ T8592] CPU: 0 UID: 0 PID: 8592 Comm: syz.2.2107 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(voluntary) [ 116.157041][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 116.167382][ T8592] ================================================================== [ 116.435275][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.519507][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.564610][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.614717][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.691956][ T12] bridge_slave_1: left allmulticast mode [ 116.697672][ T12] bridge_slave_1: left promiscuous mode [ 116.703554][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.715765][ T12] bridge_slave_0: left allmulticast mode [ 116.721629][ T12] bridge_slave_0: left promiscuous mode [ 116.727327][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.824378][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.836235][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.846405][ T12] bond0 (unregistering): Released all slaves [ 116.915202][ T12] hsr_slave_0: left promiscuous mode [ 116.921037][ T12] hsr_slave_1: left promiscuous mode [ 116.928103][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.935595][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.945723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.953404][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.966761][ T12] veth1_macvtap: left promiscuous mode [ 116.972947][ T12] veth0_macvtap: left promiscuous mode [ 116.979463][ T12] veth1_vlan: left promiscuous mode [ 116.986289][ T12] veth0_vlan: left promiscuous mode [ 117.065748][ T12] team0 (unregistering): Port device team_slave_1 removed [ 117.076022][ T12] team0 (unregistering): Port device team_slave_0 removed [ 117.451598][ T36] page_pool_release_retry() stalled pool shutdown: id 34, 1 inflight 60 sec [ 117.476796][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.535916][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.595128][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.654289][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.735967][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.794507][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.854878][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.914559][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.013593][ T12] bridge_slave_1: left allmulticast mode [ 118.019404][ T12] bridge_slave_1: left promiscuous mode [ 118.025287][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.033810][ T12] bridge_slave_0: left allmulticast mode [ 118.039493][ T12] bridge_slave_0: left promiscuous mode [ 118.045230][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.054838][ T12] bridge_slave_1: left allmulticast mode [ 118.060522][ T12] bridge_slave_1: left promiscuous mode [ 118.066264][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.075713][ T12] bridge_slave_0: left allmulticast mode [ 118.081402][ T12] bridge_slave_0: left promiscuous mode [ 118.087381][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.264017][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.274270][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.284104][ T12] bond0 (unregistering): Released all slaves [ 118.293988][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.303907][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.313445][ T12] bond0 (unregistering): Released all slaves [ 118.377498][ T12] hsr_slave_0: left promiscuous mode [ 118.384933][ T12] hsr_slave_1: left promiscuous mode [ 118.390990][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.398445][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.408009][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.415785][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.427421][ T12] hsr_slave_0: left promiscuous mode [ 118.433298][ T12] hsr_slave_1: left promiscuous mode [ 118.439133][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.446757][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.455804][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.463613][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.477633][ T12] veth1_macvtap: left promiscuous mode [ 118.484327][ T12] veth0_macvtap: left promiscuous mode [ 118.490018][ T12] veth1_vlan: left promiscuous mode [ 118.496009][ T12] veth0_vlan: left promiscuous mode [ 118.502855][ T12] veth1_macvtap: left promiscuous mode [ 118.508615][ T12] veth0_macvtap: left promiscuous mode [ 118.514630][ T12] veth1_vlan: left promiscuous mode [ 118.520093][ T12] veth0_vlan: left promiscuous mode [ 118.635968][ T12] team0 (unregistering): Port device team_slave_1 removed [ 118.647356][ T12] team0 (unregistering): Port device team_slave_0 removed [ 118.706497][ T12] team0 (unregistering): Port device team_slave_1 removed [ 118.716336][ T12] team0 (unregistering): Port device team_slave_0 removed [ 120.481630][ T29] kauditd_printk_skb: 37077 callbacks suppressed [ 120.481649][ T29] audit: type=1400 audit(1747252730.046:48493): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.489207][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.510335][ T29] audit: type=1400 audit(1747252730.056:48494): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.516247][ T3045] audit: audit_lost=991 audit_rate_limit=0 audit_backlog_limit=64 [ 120.537362][ T29] audit: type=1400 audit(1747252730.056:48495): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.545195][ T3045] audit: backlog limit exceeded [ 120.546300][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 120.566335][ T29] audit: type=1400 audit(1747252730.056:48496): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 120.571201][ T3045] audit: audit_lost=992 audit_rate_limit=0 audit_backlog_limit=64 [ 120.577764][ T29] audit: type=1400 audit(1747252730.056:48497): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.491679][ T29] kauditd_printk_skb: 49670 callbacks suppressed [ 125.491712][ T29] audit: type=1400 audit(1747252735.056:96970): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.500368][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.519405][ T29] audit: type=1400 audit(1747252735.066:96971): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.525899][ T3045] audit: audit_lost=1392 audit_rate_limit=0 audit_backlog_limit=64 [ 125.547103][ T29] audit: type=1400 audit(1747252735.066:96972): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.555026][ T3045] audit: backlog limit exceeded [ 125.557697][ T3045] audit: audit_backlog=65 > audit_backlog_limit=64 [ 125.576225][ T29] audit: type=1400 audit(1747252735.066:96973): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 125.581284][ T3045] audit: audit_lost=1393 audit_rate_limit=0 audit_backlog_limit=64 [ 125.581300][ T3045] audit: backlog limit exceeded