last executing test programs: 4.321335214s ago: executing program 0 (id=296): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) pause() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000100008402f1ffff09000000030000000000000100000000000000010500000020000000000000000000000b02000000006100302e616100615f2e00"], 0x0, 0x58}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f0000000080)=r6}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000300)='./bus/file0\x00', 0x16000, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2f5, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) uname(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='afs_cb_miss\x00', 0xffffffffffffffff, 0x0, 0xd4}, 0x18) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="66bb00fe0000010400000000000000000000131c", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000200010000000800010002000000140003007866726d3000"/64], 0x58}}, 0x0) 4.231776622s ago: executing program 4 (id=298): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0xb5, 0x1, 0x5}]}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e0001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000002410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/28], 0x48) 3.876411348s ago: executing program 4 (id=300): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) pause() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000100008402f1ffff09000000030000000000000100000000000000010500000020000000000000000000000b0200000000"], 0x0, 0x58}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f0000000080)=r6}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000300)='./bus/file0\x00', 0x16000, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2f5, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) uname(&(0x7f0000001600)=""/255) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='afs_cb_miss\x00', 0xffffffffffffffff, 0x0, 0xd4}, 0x18) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="66bb00fe0000010400000000000000000000131c", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000200010000000800010002000000140003007866726d3000"/64], 0x58}}, 0x0) 3.470878758s ago: executing program 0 (id=304): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setfsuid(0x0) socket$kcm(0xa, 0x922000000003, 0x11) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f0000", 0x3f}], 0x1}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000003c0)={0x0, @initdev, @dev}, &(0x7f0000000400)=0xc) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3.100668774s ago: executing program 0 (id=307): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(r4, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r6, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r7 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) sendfile(r8, r0, 0x0, 0x3ffff) 3.014026493s ago: executing program 4 (id=310): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='page_pool_release\x00', r7, 0x0, 0x7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2.977951126s ago: executing program 0 (id=311): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2080}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000100000000800000001"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xeb38e000) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={[0x6]}, 0x8}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) process_madvise(r5, &(0x7f0000000140), 0x200000000000020e, 0x9, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r9 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xad7, 0x80, 0x1, 0x8089}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f0000000dc0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780, 0x12345}) io_uring_enter(r9, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 2.557958677s ago: executing program 3 (id=316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7472616e733d66672c7266646eb5", @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f9", 0x15, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x3, 0x3, 0x7, 0xfeee, 0x2, "ee379d019ed09842717b20a96c0b2b773c5867", 0x4, 0x8}) writev(r3, &(0x7f0000003500)=[{&(0x7f0000002180)="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", 0x536}], 0x1) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a0000000007000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd25, 0x21dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 2.470707716s ago: executing program 4 (id=317): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000480)='./file0\x00', 0x82000775) write$binfmt_elf64(r1, 0x0, 0x178) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000a5c24da1b666b1d3be758a85a52ed3e5753e44ed5f93961af68f0c165b32bcd72edd63daad50b8f995bea6e3ff9fd5fc4a6e6ef58135"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 2.398193613s ago: executing program 3 (id=319): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x178) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000a5c24da1b666b1d3be758a85a52ed3e5753e44ed5f93961af68f0c165b32bcd72edd63daad50b8f995bea6e3ff9fd5fc4a6e6ef58135"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 1.645184967s ago: executing program 1 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) memfd_create(0x0, 0x0) 1.62111536s ago: executing program 1 (id=329): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@dioread_lock}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x9, 0x5, 0x5, 0x7f, 0xfb}) 1.574066845s ago: executing program 4 (id=330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7472616e733d66672c7266646eb5", @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f9", 0x15, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x3, 0x3, 0x7, 0xfeee, 0x2, "ee379d019ed09842717b20a96c0b2b773c5867", 0x4, 0x8}) writev(r3, &(0x7f0000003500)=[{&(0x7f0000002180)="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", 0x536}], 0x1) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd25, 0x21dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 1.550978517s ago: executing program 1 (id=331): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000001040)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0x5b, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'team0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090523bd7000fddbdf25022000cb", @ANYRES32=r5, @ANYBLOB="08000400640101020800080000faff0008000200e000000208000400ac14140508000100ac1414220800090003"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x48000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001380)={'syztnl1\x00', &(0x7f00000012c0)={'syztnl1\x00', 0x0, 0x1, 0x80, 0xf0, 0x7, {{0x18, 0x4, 0x1, 0x3d, 0x60, 0x64, 0x0, 0x4, 0x29, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0x24, 0x45, 0x3, 0x8, [{@empty, 0x1000}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x72}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @noop, @timestamp_prespec={0x44, 0x1c, 0x19, 0x3, 0x2, [{@loopback, 0x2}, {@loopback, 0x8001}, {@empty, 0x9}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000013c0)=0x0, &(0x7f0000001400)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001680)={&(0x7f0000000cc0)={0x230, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xa0, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x80005}, 0x40) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000bc0)={[{@grpid}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@grpjquota}, {@nogrpid}, {@auto_da_alloc}, {@dioread_nolock}, {@grpquota}]}, 0x1, 0x476, &(0x7f0000000540)="$eJzs3M1vFOUfAPDvzLblx2v7Q3wBUavE2PjS0oLKwYtGEw8YTfSAN2tbCKFQQ2sihEg1Bi8mhkTP6tHEv8CbF6OeTLzq3ZAQ5QJ6qpnZmbK7dLctLLuF/XySZZ9n5pl9nm9nnp1n5pklgJ41nP2TRGyLiN8jYrCarS8wXH27duXc1D9Xzk0lsbT05l9JXu7qlXNTZdFyu61FZiSNSD9JikrqzZ85e2JydnbmdJEfWzj53tj8mbPPHD85eWzm2MypiUOHDh4Yf/65iWfbEmcW19U9H87t3f3q2xdfmzpy8d2fv8vau61YXxtHg00N72s2nAX+91JueWFafXt83RFsbNtr0klfFxvCulQiIttd/Xn/H4xKXN95g/HKx11tHHBbZeemFie2xSXgLpZEt1sAdEd5os+uf8tXh4YeG8LlF6sXQFnc14pXdU1feameXxttv031D0fEkcV/v8pe0fo+BABAW3w29eXheHql8V8a99WU21HMoQxFxP8jYmdE3BMRuyLi3oi87P0R8cDqVaa1mcapoRvHP+mlmw5uDbLx3wvF3Fb9+G+5mUOVIrc9j78/OXp8dmZ/8TcZif5NWX68RR0/vPzb583W1Y7/sldWfzkWLNpxqa/hBt305MJkPihtg8sfRezpWyn+ZHkmIImI3RGxZ30fvaNMHH/y273NCq0efwttmGda+ibiier+X4yG+EtJ6/nJsf/F7Mz+sfKouNEvv154o1n9txR/G2T7f0v98d9YZCipna+dX38dF/74tOk1zc0e/wPJW/m2A8WyDyYXFk6PRwwkh/N83fKJ69uW+bJ8Fv/IvpX7/85imyz+ByMiO4gfioiHI+KRou2PRsRjEbGvRfw/vdR8XX38m7d1Y/9PN3z/bc7XLB//Dft//YnKiR+/X7n2r99Z2/4/mKdGiiX5998q1trAW/zzAQAAwB0hzZ+BT9LR5XSajo5Wn+HfFVvS2bn5haeOzr1/arr6rPxQ9Kflna7Bmvuh48li8YnV/ERxr7hcf6C4b/xFZXOeH52am53ucuzQ67Y26f+ZPyvdbh1w2600jzYx0IWGAB3X2P/T+uz51zvZGKCjmj5Hs6Wz7QA6b5Xn6NJOtQPoPP9fC/Sulfr/+Ya8uQC4Ozn/Q+/S/6F36f/Qu/R/6Emr/Ui+cou//Ze44xLJ2gpH2v2mboxEf0S05QMHNkQ4RaLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//5qI6jE=") r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b876f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000070200000000c3001c00bd61c9f9b71032562c07035dfc7100aa532e33060a91f35ca143c9ade016795df63801d1bc6afef4c74e68b97301c52d1925affe72793b3bdc7c2de321567d172d7de11ca29e2c6ccfedaea31a986c0c1a62ea4238e6ffbda7514017f269b3cc4af51b6222519f93ddb4034bfa1e7da4aedef2c9ddb01db99ee28bccd3c6c6506a7b9091df84ed0854d7583e4e52dd9310a6cc401f5d614f548331c3590b7cb16dfb5152fce5bac3000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x4}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000000000000002, 0x0, 0x2, 0x8}}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) 1.512510861s ago: executing program 3 (id=332): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1.498620732s ago: executing program 4 (id=333): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r10 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='page_pool_release\x00', r7, 0x0, 0x7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.332546969s ago: executing program 1 (id=334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRESOCT, @ANYRES8=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="33d04e000001000418110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='erofs_fill_inode\x00', r2, 0x0, 0xd}, 0xfffffffffffffcaf) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 1.245278327s ago: executing program 3 (id=335): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) pause() bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c000000040000000100008402f1ffff09000000030000000000000100000000000000010500000020000000000000000000000b02000000006100302e616100615f2e00"], 0x0, 0x58}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f0000000080)=r6}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000300)='./bus/file0\x00', 0x16000, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2f5, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) uname(&(0x7f0000001600)=""/255) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="66bb00fe0000010400000000000000000000131c", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000200010000000800010002000000140003007866726d3000"/64], 0x58}}, 0x0) 1.205999451s ago: executing program 1 (id=336): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000480)='./file0\x00', 0x82000775) write$binfmt_elf64(r1, 0x0, 0x178) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) sched_setscheduler(0x0, 0x3, &(0x7f0000000280)) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000a5c24da1b666b1d3be758a85a52ed3e5753e44ed5f93961af68f0c165b32bcd72edd63daad50b8f995bea6e3ff9fd5fc4a6e6ef58135"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) 470.786683ms ago: executing program 0 (id=338): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r6) 373.590693ms ago: executing program 2 (id=340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r0) 370.284104ms ago: executing program 3 (id=341): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(0x3) 328.982418ms ago: executing program 1 (id=342): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x1) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x178) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574000000a5c24da1b666b1d3be758a85a52ed3e5753e44ed5f93961af68f0c165b32bcd72edd63daad50b8f995bea6e3ff9fd5fc4a6e6ef58135"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 326.244578ms ago: executing program 2 (id=343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7472616e733d66672c7266646eb5", @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX, @ANYBLOB=',version=9p2000.u,\x00']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7}, 0x18) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f9", 0x15, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000080)={0x3, 0x3, 0x7, 0xfeee, 0x2, "ee379d019ed09842717b20a96c0b2b773c5867", 0x4, 0x8}) writev(r3, &(0x7f0000003500)=[{&(0x7f0000002180)="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", 0x536}], 0x1) unshare(0x2040400) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$inet(0x2, 0x2, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x70bd25, 0x21dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) sendmsg$inet(r6, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 265.745044ms ago: executing program 3 (id=344): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0xb5, 0x1, 0x5}]}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e0001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000002410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="034000000100"/28], 0x48) 238.650426ms ago: executing program 2 (id=345): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 177.467373ms ago: executing program 2 (id=346): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="33d04e000001000418", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='erofs_fill_inode\x00', r3, 0x0, 0xd}, 0xfffffffffffffcaf) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x266200, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x884) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x4000009, 0x7}, 0x100, 0xa88, 0x8406, 0xc, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x44}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40103d0b, 0x0) syz_io_uring_setup(0x210a, &(0x7f0000000400)={0x0, 0x5eda, 0x80, 0x2, 0x1}, &(0x7f0000000040), &(0x7f00000003c0)) openat$tun(0xffffffffffffff9c, 0x0, 0x24803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001500)=ANY=[@ANYBLOB="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"/4118], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x403, 0x0, 0x2}, 0x10}, 0x94) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x1}, 0x10) 92.798941ms ago: executing program 0 (id=347): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x9, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) r3 = socket$inet_sctp(0x2, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0xb5, 0x1, 0x5}]}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r5], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) getresgid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e0001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000002410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/28], 0x48) 66.619473ms ago: executing program 2 (id=348): r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x40) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0xa0000007}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000313400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4}}, 0x10, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff", 0xe) socket$inet6(0xa, 0x800000000000002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000580), 0x20075, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5e, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000002380)=ANY=[@ANYRESHEX=r7, @ANYRESOCT=r1, @ANYBLOB="767d25dc18de64cfcbe02eb352726a89ae54ea243d5b0a66e7c13afae8fb5793f3f47a7aa67e928cc141773003cca70afe691df8c6a8cd220396e1502b1ad17f1c20896c44a4486ee9bac46a081d458df4248c18bd2ae277f597b82cd2cefb29e1139617fd32a97c319583be1274212d1dc51ea4237c571bd791f7d14d6e27eac922561455af7c98e4168186d83690d5901ae655a0b291ca5ef5b2b71b5b25b93bf4d1f2d146caa68dd67bdadf002a5000626c1c8c1430dfd2871be7d25c12fa5d28bf984bb2797fadef7908ea07ba7aeee9cc4d385d05fedf38ceef8ffd17348f29f9f46dfcf79ae4a39e1ebc6bb9617ebfb47988d25731259d4bf593ead11f70eaa04e7224e9ebcf6adcff349bcfa4aaa0bc9f943877b00e754ea8ccc7e5b32ec4a5d36b43ba488b12ea643f3dc1d921eff4d27fbaaa4556a04f572e561367e7c6ada90087a8328c8af1bf73efd156c81d6cc4fdd1da9e3c12f0b29a7075b6b70112a9c43e2a85c8f301eea18e09a19df57cb138f4f303d5b4e7b1794fe589807b9c12e2bf10d6976cf03fc1398fe686cb9fabd4e8bc59bfc12b8bddfc77449c57443d268a1e5b673e4f613cb830bf82a8fdac8b51330c9d77515e2877d9a9c001674ffc70b902d26303a23e6db0f2715108410618775758b042350ec8c03833830e33fc014238efd5ad7a381716b0e88c4d9989daff6aa53852c28f7da4557c23ade18556b65fe34c9c48b97814f1defaaa7c09d29503da57eb1434335c5b6c20a7ade7804648915733a746e399498114572da7f0974c67dc2d0a61f26874526cf4a7359eecbdd334b9fc5da611e48b1f7da4285bbd03690313f5b0069f47d4eefa84a361a0a67f6bc5432504f9240aa1254f04cfa5114703eee9e9f821fc951770222fcb80b4444de5eb7d205ae4f39d7462baafe2146d79bd1c5a92b8ac070f37e4501d57a514842b33a822896c6828700168090214f31f6a212f38e211d319c0fade35cd65a1213664d24aa5f66edea68bcb548c9094ca34501165577914c8655df182b15b6dda371b6b9f9d505319d8afe68dcba12ea18dc8d65dd151a4ba7f1ee054818d40211332c2b9cea4b7e8403af5b53689e6fe336ea4cc7272199e92f62e835142f2545fd51cefad4a44396edf0aed7e25815f46c3a55e1729727b08c5299f8a7cf005fae9761a53e73406e67c7a8ccf115b1e2a4ce62ec582ce2c6defc812468d6d460248917faa49e8908d8ebd1a12af1ccd13920a0ab827e8b0749093bf17312331682d26aad142ec89e9f0ddda10d75594a41341918841aaa04775ea63e26f9e5f38310b2be981ca73d434b52abc94b70437c6a41ed8416e7bd13440928fca07f40e0baf38d97f074fcaf9eed238a31a88d2afb3b8d325720bf1884bdc2b23fc8509f58aa04bde44b4733a46addb701c99651417e3e339a89857ff3905e933df7d02c981061d53f9a2660b6f14601e04927f3ca99b638fa51f383cabaeb708eceaa072dc54bfe3c322e0980ea5daa9f335896e9ddc28e1cd526c6ae14d256dfb2eda7fdabb0e00b6c01592a0290930b542c88a671a70d00ae2e86bd231ecb25ef767e4c4fa1fa47d79a877c25d1521e4595a377beedb176a8f3e740e0363a4074f755a75a4543a3c40dd1c812b0b7e0d513cc9208f1f23afe0311f8ec997e40b0e9001b953751460274570d0a8674c72b254e837ab72bd70c4f7779655d03bff7d485ccb9e42e3e393cbd604e5a3d6cef5def704d1356e967872fac46f877df0ff734fd00d9cc6c3e66eab382df0989cb9a16388434d52ee7b98c3579e52eff548cd0d37a14f4c621899bf093b19dd53499e32016317f06dba9c45403d79023f3af652864e91d16e4caa0491373e4cd2213ab2d734ced3ac2880d21abf0148832b50f40d3a2d7cfaa60152f8acee530f88f7b0ddab0cb3ba35def5e721b64a51c9758a4436bf28b94b1cde2109bbd3b192660bb0366c39430f6fd7fa13a00875442e762729382050d86f49628d29e4034e131ab88dcdc7b5450607bc0ba7fc84083bb2e47376542a955dacac5edbf303355a77307fd64440cd170d821735d49275fae668e2f45a4efd53b591a905ec09130f526783c52b9357245e951b16c708362305a2d51322f880684fd4d546dc119512b5e0594f47670a5c580f1b9d8ff8d5eaad8f72c517c6c2b04dee13320af42c0f712b0fe2bdc8344dda51980620d161554e6bdae31f4037b38b1778e0938a12eaaa0a5a7403dd5fd5f6e0bc5a3bd1dc17c452231213881f62c67ff6301ee1e93f67d7f174d61452a63b58e2e0cdd0125278b6fbff065621404e094840baddd1061e26a7c56547f187c78dd811a8bd510442606f1a305b23a77e7cd5bc943dfeb3cc534f0a0673bc43509687fb2512ddcdedd6c78e8387cad8a630c53c5d3e4c93a3cd54448136130030de981139ea6a191f72502353bde944d96b98381a2eecad75d444f95eea8c7262b8f54d0c3c7e6d85f6bcbe026b7174a68aa19a241944004394c1f9c3032a9ff7186cb952eba297cc08566db06fac7a2c00766710414cbe2258013035dcbe3947a3be4e31873c89da0f6ef3c551930a52c0f56ed416b058591fa1497998b23277fb9ff5d193fe61bab8a72137ea4b0a0d24d155f7f57240a008a076008e20e3ba64d2e62567aef77608273ed6eeae11af7671bf33176f4553dcceec6cc0f266808c834a80f5d4238c6db87933b1f2f619fecc25e4c9f803db772f43c758dbf5c23d7e1d40bf8ef3c00780cb05ad750f3cfd84db0aae0a8eab99e37b49b966c0bfc8e6108d26b4d6d7d98c7cfdcc52f22239996bc2cc5176ca56df8966622cc03fec0ca0ad5f5c63d49f0d64493759d6d5efe2d9505a4f992613c4837448727830b1319d1e2d54f7e4b60b16245860d64c55f45fbd874519c84bde9aae7d87bafd44364bf9853c3327044c5c7e332f73cbf0a8ab5845978ff15ed599871d76f29f6dd7bd770b39b5fa2f33c342fa0101064c417b0767a5b3421307ef884247a31a28c1614dcde01fcf12cdb73cc23f6ed1cd97dcda52761f2386ebe5060a3c8863477d9291946cbdb02ebfee2ca4747e7ef96d17d592df7e2ee7e1bc569286e8d6d55908f6c0e1bc56ff8942cbe7bba275b96e9cff29fff6cbb27b57df5753b0681edd52ac1d008244a699e9d16afab5ca0808a1ed5f2cd2fd7f9ff1c4ef541a7ffa4a422814d094d73a710fe58a0aab3d14a9a1deac1229b723a913d7067baa6c5cea07ec2e283d6feda1470b3f2018a8f6ed8fdc6ac0f7c438fb8d4c375990b5e4662e4a27a1658b186e315898c26025957c5179e633b1086bfdab460ba6912cc03eb5e8d6b21c86ad1cd704f8921c7c4008fcd6bb0b7c4abc29f6c66c9af81a72069466a9fe72bc9981b75e35bd74a49090d1a39a8b0278d1430294fafc8611901cc96417db502f9179b0369a158e4858b652a941ecc6dd51783986ded6eb791dee3eaad4f49a36d60819a7a29d930da82a51fd680181c5f7758ad1eccb7507479f9303ad2076fff2f052458d690227d9dd10691b62545f139206aac4d07b424e528897c183b940b5f8d2a2b7e56e194c1f2f0b2018ac0b067d3868c180cde8bb32e9606c9fd33037efafc04c16b7a7f137f5b5f6bcd3d65268ea0072ffe0e08f077bb5904198d151b5f85a9f297bc94e5028fa9c9e6bbb6aa2d5948458024d32352ab0d64a075015cf47e39fe17b810e9a8f10376fd82f4a31901f7771c3ceaede27292ab2f03355d24d4f2643e64d0fd2c31bacc2c6bd9b333035e5efbab8dadb8957dfcdb207c52dc136c36dc777ba3c740efba7ccaf042a00cead8db4fc20152d5de3f6e7f61115ba3387e0dd38bb99f6a6508737ad3dc5915bee45b7bcce0a771ede88d19392aeb14d105a9c439e247ae67acd43fcead7f75d8216cc49a46c6ea4d6d913821e01bfaa1e424e74af65281b763fb1a122724f6529a0bc43725416efecdd6eab954849202363f5865758311360626a85ac8ece0614fd7ed58444e312b579017a703b3a55fa28cae8e930f4dae2633e17704279e8afb9a9761490793cca3075a62d79875f9f309617f6d314d6c3ff012bfa29a74d5e494ed86b1686be3875dec6d1913dcf408f1ab9bc3eba91ea2277292ee31e84a9b7f8cbb33d1cebbd124edf2ccd8cc8f8461550342b54708b91d61e047073cddc559987b670244bc1182d7acbdc2ff960c90af5041cebe8695f41a31f07db26cd7ffb503e4f009fa5c244d02ff524c61862ea474ca0ad11a9e100a2d79543ab49976b2d60688992c2cafdd5769b0e9272115f2400f615b0919cb765fa58879d810abc6c63ee0ffc0f107688a93b19f202bdad656dc4527ff16ea36520201935eb996b3d26eb5bdf34d6625d76ffd45c6f162458b395adff7509d9140d76e6fe26756a183b72c7b65d9ca3f41042e530ce1dd2f596439c9a54773c7c2366e149df6c185149e03480759630391aa9eaf46415f13f0f61cb7d7a0c4c302fbc92b0cf2070a9c037f34ad383f3c8de273dbeae2480471cdc37b88929ceb98102611120fb9347865edc2aba92e2ebee4c5313af57d6a82145805cba994877ab5cfca66a2398b9d32c46169b599396766c570169b4cd0a22026bac626c80df045f2b0ab6d31ac523d6f88cdf5ce8c5cf98cb0619110e2669d47684398f7901ff7769bb20270d7f3a2d54f8a77892c87ab48b0f7e5f4277055994608446beb44e3a960837ba797c6fe5e23007c2013514d26e2a9088dc0a62a0d1d5ad78d24c346e5c57723b5fc8c4223a83d9888cf816cc21054075ea1a7d638d3ef50f3dc66660a80ed08a604549ac338978c322d2c46d8605acd5f26fa97bf494e3e01cdcc8e8b0fef1e2eb7683f37381f77c87bc6c69118dd8990859dab512d6ad129a630b5810ec77579b95d8951902e9ffcffb3209610041b7128a1b9a359f2abcbedc15959ab15dfd2f41bea803b9d299601909e82b3c3585dd54f78dbd31381283c27a95f100b8627f80473fee28bfb04badac90272350cb234ff17747841eb57aec364366a75cb298c4968e1f379d670945de2e70c9852a1c129c2616be58e81cb1cf55db598f79af81c605f83922c817eea97301af6a2202c61c1df78b110864d8ca577db8c1fcb53c72eb3293a0ab4d49e84301cf68d1605fbfdad2cb2090ee87509e6aa20ffce14d088d5f9c4f6c98e7018052abcb7ef0ce099b2b24f71b2943f3dea3719e1812185a055b286a453d93dc9d451f14153a9e0b31f3e98bd09194325367370343b243cba26b70735106aba6f089de094a4c31d9742f6e79257bf3611452416c59085c6b4f1aaa365af5d886ff89fec74e3d3fa28a267ec61eca8fd59c98fb5ca62e9e8cebd891b42cdb61eab7539f2539a99b5d7ef778518d69cdaf0ea1481ee413a9aecda2021600a168398a5615ff325bba0a16ebdad1e5dfb5a1dad4dbed1de4f03ee23cb218ec7f931e2757450d5c83d28432b15ba5a3a81c4dd47db78285e7259d15aad6e8f9ce3471955e96c9d0221f11e8706c231aad4cc051fe22f676519b8d14d37944b258683cdcade8025274e6a69cede3e30e20e62297888a6545fa60b3eccc33e7f9503e15610833f97b2274b92cdb09a13d92710239f5b75b74defec045b5cc7218c8a7605358a8aced5d30a659e16180b1176d0c4eff59696a9096de0cfea8319cf84060e81aff165fc9b2d860e3fe8b5237bec136fe7ae0b2c4c133160b1dfb4dda37f8e6297194640009539ec285a34f90e6b9faa4cb", @ANYRES16=r0, @ANYRES8=r4], &(0x7f00000003c0)='syzkaller\x00', 0x20000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) setitimer(0x1, 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r10 = fcntl$dupfd(r9, 0x0, r9) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=349): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r2 = syz_open_dev$vcsa(&(0x7f0000000000), 0xf69, 0x4040) ioctl$TUNSETOFFLOAD(r2, 0x541b, 0xf0ff1f00000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000001b518190000f0438d341895", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)='?', 0x1}], 0x1) r8 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r9, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01", 0x16) sendfile(r9, r0, 0x0, 0x3ffff) sendfile(r9, r0, 0x0, 0x7ffffffffffffffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.122' (ED25519) to the list of known hosts. [ 30.488918][ T29] audit: type=1400 audit(1760601894.340:62): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.512279][ T29] audit: type=1400 audit(1760601894.370:63): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.513313][ T3300] cgroup: Unknown subsys name 'net' [ 30.540283][ T29] audit: type=1400 audit(1760601894.400:64): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.652940][ T3300] cgroup: Unknown subsys name 'cpuset' [ 30.659684][ T3300] cgroup: Unknown subsys name 'rlimit' [ 30.771067][ T29] audit: type=1400 audit(1760601894.620:65): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.795015][ T29] audit: type=1400 audit(1760601894.620:66): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.815543][ T29] audit: type=1400 audit(1760601894.620:67): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.836051][ T29] audit: type=1400 audit(1760601894.620:68): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.856487][ T29] audit: type=1400 audit(1760601894.660:69): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.873131][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.881317][ T29] audit: type=1400 audit(1760601894.660:70): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.913597][ T29] audit: type=1400 audit(1760601894.750:71): avc: denied { relabelto } for pid=3302 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.929884][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.177756][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 32.191056][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 32.283394][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 32.304937][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.312179][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.319352][ T3309] bridge_slave_0: entered allmulticast mode [ 32.325781][ T3309] bridge_slave_0: entered promiscuous mode [ 32.342406][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 32.355336][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.362430][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.369657][ T3313] bridge_slave_0: entered allmulticast mode [ 32.376290][ T3313] bridge_slave_0: entered promiscuous mode [ 32.383048][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.390114][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.397391][ T3309] bridge_slave_1: entered allmulticast mode [ 32.404135][ T3309] bridge_slave_1: entered promiscuous mode [ 32.422274][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.429471][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.436911][ T3313] bridge_slave_1: entered allmulticast mode [ 32.443397][ T3313] bridge_slave_1: entered promiscuous mode [ 32.475547][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.505438][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.515801][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.525074][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 32.543894][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.579691][ T3309] team0: Port device team_slave_0 added [ 32.605413][ T3309] team0: Port device team_slave_1 added [ 32.614651][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.621798][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.629087][ T3311] bridge_slave_0: entered allmulticast mode [ 32.635770][ T3311] bridge_slave_0: entered promiscuous mode [ 32.642762][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.649836][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.657095][ T3315] bridge_slave_0: entered allmulticast mode [ 32.663464][ T3315] bridge_slave_0: entered promiscuous mode [ 32.670537][ T3313] team0: Port device team_slave_0 added [ 32.683859][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.691132][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.698511][ T3311] bridge_slave_1: entered allmulticast mode [ 32.705033][ T3311] bridge_slave_1: entered promiscuous mode [ 32.711282][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.718619][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.725844][ T3315] bridge_slave_1: entered allmulticast mode [ 32.732319][ T3315] bridge_slave_1: entered promiscuous mode [ 32.739142][ T3313] team0: Port device team_slave_1 added [ 32.767103][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.774196][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.800319][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.831944][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.838952][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.865075][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.876197][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.883182][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.909935][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.927151][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.937683][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.947399][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.954409][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.980353][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.993733][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.000813][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.008171][ T3317] bridge_slave_0: entered allmulticast mode [ 33.014668][ T3317] bridge_slave_0: entered promiscuous mode [ 33.022432][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.032785][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.051954][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.059101][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.066549][ T3317] bridge_slave_1: entered allmulticast mode [ 33.073098][ T3317] bridge_slave_1: entered promiscuous mode [ 33.121018][ T3309] hsr_slave_0: entered promiscuous mode [ 33.127157][ T3309] hsr_slave_1: entered promiscuous mode [ 33.139016][ T3311] team0: Port device team_slave_0 added [ 33.145430][ T3315] team0: Port device team_slave_0 added [ 33.153606][ T3313] hsr_slave_0: entered promiscuous mode [ 33.159612][ T3313] hsr_slave_1: entered promiscuous mode [ 33.165646][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 33.171379][ T3313] Cannot create hsr debugfs directory [ 33.178426][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.188468][ T3311] team0: Port device team_slave_1 added [ 33.201505][ T3315] team0: Port device team_slave_1 added [ 33.219273][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.244166][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.251213][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.278329][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.299793][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.306890][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.333250][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.351647][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.358734][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.385487][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.407633][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.414731][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.440697][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.460195][ T3317] team0: Port device team_slave_0 added [ 33.480473][ T3317] team0: Port device team_slave_1 added [ 33.528551][ T3311] hsr_slave_0: entered promiscuous mode [ 33.534983][ T3311] hsr_slave_1: entered promiscuous mode [ 33.540950][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 33.546713][ T3311] Cannot create hsr debugfs directory [ 33.554554][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.561539][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.587837][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.599131][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.606150][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.632492][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.647828][ T3315] hsr_slave_0: entered promiscuous mode [ 33.654014][ T3315] hsr_slave_1: entered promiscuous mode [ 33.659849][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 33.665632][ T3315] Cannot create hsr debugfs directory [ 33.758275][ T3317] hsr_slave_0: entered promiscuous mode [ 33.764548][ T3317] hsr_slave_1: entered promiscuous mode [ 33.770445][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 33.776228][ T3317] Cannot create hsr debugfs directory [ 33.841842][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.861019][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.879511][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.888476][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.931983][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.946190][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.959332][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.971776][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.992612][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.008052][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.019924][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.031654][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.076904][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.092270][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.108453][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.122409][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.131364][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.141013][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.150811][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.158677][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.168548][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.177781][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.203743][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.211008][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.230945][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.238207][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.275061][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.288672][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.320657][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.327913][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.337585][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.344749][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.370374][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.380829][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.405053][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.424856][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.434164][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.449233][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.459061][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.466417][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.489912][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.497116][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.506727][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.519594][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.540716][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.547935][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.568701][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.584838][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.599385][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.606691][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.619360][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.626698][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.648774][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.670054][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.677198][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.728070][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.739345][ T3313] veth0_vlan: entered promiscuous mode [ 34.753393][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.776646][ T3313] veth1_vlan: entered promiscuous mode [ 34.798479][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.819523][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.845393][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.860593][ T3313] veth0_macvtap: entered promiscuous mode [ 34.882082][ T3313] veth1_macvtap: entered promiscuous mode [ 34.896781][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.924762][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.963596][ T3309] veth0_vlan: entered promiscuous mode [ 34.972013][ T3309] veth1_vlan: entered promiscuous mode [ 34.987954][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.009785][ T3311] veth0_vlan: entered promiscuous mode [ 35.019015][ T3315] veth0_vlan: entered promiscuous mode [ 35.030943][ T3309] veth0_macvtap: entered promiscuous mode [ 35.039417][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.056833][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.075970][ T3309] veth1_macvtap: entered promiscuous mode [ 35.083621][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.095796][ T3311] veth1_vlan: entered promiscuous mode [ 35.111379][ T3315] veth1_vlan: entered promiscuous mode [ 35.119787][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.126073][ T3315] veth0_macvtap: entered promiscuous mode [ 35.145163][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.165019][ T3315] veth1_macvtap: entered promiscuous mode [ 35.180687][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.198871][ T3311] veth0_macvtap: entered promiscuous mode [ 35.214100][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.224472][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.238676][ T3476] loop0: detected capacity change from 0 to 128 [ 35.239798][ T3311] veth1_macvtap: entered promiscuous mode [ 35.267133][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.274743][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.285600][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.301150][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.309931][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.322729][ T3317] veth0_vlan: entered promiscuous mode [ 35.341657][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.353370][ T3317] veth1_vlan: entered promiscuous mode [ 35.366691][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.380559][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.407866][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.430216][ T3317] veth0_macvtap: entered promiscuous mode [ 35.450980][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.476602][ T3317] veth1_macvtap: entered promiscuous mode [ 35.488288][ T3483] loop1: detected capacity change from 0 to 128 [ 35.494718][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 35.494737][ T29] audit: type=1400 audit(1760601899.340:106): avc: denied { create } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.521740][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.532559][ T29] audit: type=1400 audit(1760601899.380:107): avc: denied { map_read map_write } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.555478][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.566800][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.583251][ T3488] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 35.595670][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.603281][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.620320][ T29] audit: type=1400 audit(1760601899.390:108): avc: denied { prog_run } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.639065][ T29] audit: type=1400 audit(1760601899.460:109): avc: denied { bind } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.659324][ T29] audit: type=1400 audit(1760601899.470:110): avc: denied { create } for pid=3486 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 35.678563][ T29] audit: type=1400 audit(1760601899.470:111): avc: denied { setopt } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.698922][ T29] audit: type=1400 audit(1760601899.470:112): avc: denied { write } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.719143][ T29] audit: type=1400 audit(1760601899.470:113): avc: denied { read } for pid=3487 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.764846][ T29] audit: type=1400 audit(1760601899.540:114): avc: denied { write } for pid=3481 comm="syz.1.2" path="socket:[4733]" dev="sockfs" ino=4733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.828506][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.838605][ T3493] tipc: Enabling of bearer rejected, failed to enable media [ 35.857613][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.893183][ T29] audit: type=1400 audit(1760601899.750:115): avc: denied { ioctl } for pid=3487 comm="syz.3.4" path="socket:[3964]" dev="sockfs" ino=3964 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.935596][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.979157][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.147885][ T3490] syz.0.1: attempt to access beyond end of device [ 36.147885][ T3490] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 36.161340][ T3490] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 36.177140][ T3505] loop4: detected capacity change from 0 to 512 [ 36.212365][ T3505] EXT4-fs: Ignoring removed oldalloc option [ 36.220794][ T3490] syz.0.1: attempt to access beyond end of device [ 36.220794][ T3490] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 36.234169][ T3490] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 36.248099][ T3505] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.261383][ T3505] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.274662][ T3497] loop2: detected capacity change from 0 to 32768 [ 36.288482][ T3505] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 36.302518][ T3505] EXT4-fs (loop4): 1 truncate cleaned up [ 36.308528][ T3505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.339541][ T3297] loop2: p1 p2 p3 < p5 p6 > [ 36.348290][ T3297] loop2: p2 size 16775168 extends beyond EOD, truncated [ 36.362022][ T3510] loop0: detected capacity change from 0 to 512 [ 36.373338][ T3297] loop2: p5 start 4294970168 is beyond EOD, truncated [ 36.385354][ T3497] loop2: p1 p2 p3 < > [ 36.390309][ T3497] loop2: p2 size 16775168 extends beyond EOD, truncated [ 36.392768][ T3510] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.7: error while reading EA inode 32 err=-116 [ 36.410544][ T3510] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.7: error while reading EA inode 32 err=-116 [ 36.426175][ T3510] EXT4-fs (loop0): 1 orphan inode deleted [ 36.432868][ T3510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.471664][ T3510] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.7: deleted inode referenced: 15 [ 36.477179][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 36.496142][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 36.525609][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 36.538831][ T3510] veth0_to_team: entered promiscuous mode [ 36.552425][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 36.565362][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 36.568310][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 36.577472][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.597220][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 36.617946][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 36.618765][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 36.632584][ C1] hrtimer: interrupt took 36821 ns [ 36.639284][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 36.662001][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.684993][ T3517] loop0: detected capacity change from 0 to 128 [ 36.767727][ T3519] loop2: detected capacity change from 0 to 1024 [ 36.774760][ T3519] ======================================================= [ 36.774760][ T3519] WARNING: The mand mount option has been deprecated and [ 36.774760][ T3519] and is ignored by this kernel. Remove the mand [ 36.774760][ T3519] option from the mount to silence this warning. [ 36.774760][ T3519] ======================================================= [ 36.810631][ T3519] EXT4-fs: inline encryption not supported [ 36.838819][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.850939][ T3519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.866023][ T3523] loop1: detected capacity change from 0 to 128 [ 36.958965][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.036383][ T3529] loop2: detected capacity change from 0 to 128 [ 37.296002][ T3533] Zero length message leads to an empty skb [ 37.316375][ T3488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.344127][ T3517] syz.0.9: attempt to access beyond end of device [ 37.344127][ T3517] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.355334][ T3527] syz.1.11: attempt to access beyond end of device [ 37.355334][ T3527] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.357497][ T3517] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 37.370756][ T3527] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 37.381658][ T3536] syz.4.14 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 37.402626][ T3523] syz.1.11: attempt to access beyond end of device [ 37.402626][ T3523] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.416238][ T3523] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 37.504853][ T3523] syz.1.11: attempt to access beyond end of device [ 37.504853][ T3523] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.518233][ T3523] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 37.588847][ T3538] loop0: detected capacity change from 0 to 1024 [ 37.606762][ T3538] EXT4-fs: inline encryption not supported [ 37.646495][ T3538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.673034][ T3529] syz.2.13: attempt to access beyond end of device [ 37.673034][ T3529] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.686381][ T3529] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 37.695538][ T3529] syz.2.13: attempt to access beyond end of device [ 37.695538][ T3529] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 37.708817][ T3529] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 37.753954][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.820805][ T3542] loop1: detected capacity change from 0 to 128 [ 37.852885][ T3544] loop0: detected capacity change from 0 to 512 [ 37.879728][ T3544] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.16: error while reading EA inode 32 err=-116 [ 37.937530][ T3544] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.16: error while reading EA inode 32 err=-116 [ 37.971260][ T3544] EXT4-fs (loop0): 1 orphan inode deleted [ 37.996126][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.105140][ T3544] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.16: deleted inode referenced: 15 [ 38.239300][ T3542] syz.1.17: attempt to access beyond end of device [ 38.239300][ T3542] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 38.252634][ T3542] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 38.265657][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.275067][ T3550] syz.1.17: attempt to access beyond end of device [ 38.275067][ T3550] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 38.288512][ T3550] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 38.573868][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 38.604861][ T3594] 9pnet: Could not find request transport: f [ 38.649347][ T3488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.707539][ T3488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.816445][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.826656][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.867276][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.877924][ T3594] loop4: detected capacity change from 0 to 32768 [ 38.976464][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.993631][ T3297] loop4: p1 p2 p3 < p5 p6 > [ 39.014523][ T3297] loop4: p2 size 16775168 extends beyond EOD, truncated [ 39.038316][ T3616] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.040131][ T3297] loop4: p5 start 4294970168 is beyond EOD, truncated [ 39.077058][ T3594] loop4: p1 p2 p3 < p5 p6 > [ 39.083614][ T3594] loop4: p2 size 16775168 extends beyond EOD, truncated [ 39.095022][ T3616] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.113291][ T3622] tipc: Started in network mode [ 39.118251][ T3622] tipc: Node identity ae2c0884309d, cluster identity 4711 [ 39.125682][ T3622] tipc: Enabled bearer , priority 0 [ 39.134610][ T3622] tipc: Disabling bearer [ 39.143997][ T3594] loop4: p5 start 4294970168 is beyond EOD, truncated [ 39.154994][ T3616] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.197824][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 39.224856][ T3616] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.910851][ T3697] 9pnet: Could not find request transport: f [ 40.156025][ T3697] loop4: detected capacity change from 0 to 32768 [ 40.233206][ T3697] loop4: p1 p2 p3 < p5 p6 > [ 40.240309][ T3697] loop4: p2 size 16775168 extends beyond EOD, truncated [ 40.259852][ T3697] loop4: p5 start 4294970168 is beyond EOD, truncated [ 40.592574][ T3629] Bluetooth: hci0: command 0x1003 tx timeout [ 40.595012][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 40.765313][ T3731] loop2: detected capacity change from 0 to 128 [ 40.820108][ T3732] 9pnet: Could not find request transport: f [ 41.109272][ T3732] loop0: detected capacity change from 0 to 32768 [ 41.197166][ T3732] loop0: p1 p2 p3 < p5 p6 > [ 41.218362][ T3732] loop0: p2 size 16775168 extends beyond EOD, truncated [ 41.227128][ T3732] loop0: p5 start 4294970168 is beyond EOD, truncated [ 41.234008][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 41.234041][ T3591] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 41.339305][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 41.339371][ T29] audit: type=1326 audit(1760601905.190:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80d0eeec9 code=0x7ffc0000 [ 41.481937][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 41.507551][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 41.520346][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 41.562509][ T29] audit: type=1326 audit(1760601905.290:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80d0eeec9 code=0x7ffc0000 [ 41.585899][ T29] audit: type=1326 audit(1760601905.290:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80d0ed710 code=0x7ffc0000 [ 41.609242][ T29] audit: type=1400 audit(1760601905.290:199): avc: denied { read } for pid=3740 comm="syz.1.27" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.630245][ T29] audit: type=1400 audit(1760601905.290:200): avc: denied { open } for pid=3740 comm="syz.1.27" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 41.653597][ T29] audit: type=1326 audit(1760601905.290:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa80d0f06f7 code=0x7ffc0000 [ 41.677118][ T29] audit: type=1326 audit(1760601905.290:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa80d0eeec9 code=0x7ffc0000 [ 41.700795][ T29] audit: type=1400 audit(1760601905.290:203): avc: denied { create } for pid=3740 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 41.720933][ T29] audit: type=1326 audit(1760601905.290:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa80d0f06f7 code=0x7ffc0000 [ 41.720970][ T29] audit: type=1326 audit(1760601905.290:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.1.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa80d0edb2a code=0x7ffc0000 [ 41.959270][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 41.989989][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 41.994455][ T3761] loop4: detected capacity change from 0 to 128 [ 41.999862][ T3757] netlink: 'syz.2.31': attribute type 10 has an invalid length. [ 42.020409][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 42.035082][ T3757] ipvlan0: entered allmulticast mode [ 42.040607][ T3757] veth0_vlan: entered allmulticast mode [ 42.073775][ T3757] team0: Device ipvlan0 failed to register rx_handler [ 42.092970][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 42.119117][ T3757] syz.2.31 (3757) used greatest stack depth: 10384 bytes left [ 42.295780][ T3770] loop2: detected capacity change from 0 to 512 [ 42.304156][ T3770] EXT4-fs: Ignoring removed oldalloc option [ 42.310583][ T3770] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.364753][ T3774] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.379310][ T3770] EXT4-fs (loop2): 1 truncate cleaned up [ 42.386233][ T3764] bio_check_eod: 1 callbacks suppressed [ 42.386247][ T3764] syz.4.33: attempt to access beyond end of device [ 42.386247][ T3764] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.387951][ T3770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.391899][ T3764] buffer_io_error: 1 callbacks suppressed [ 42.391914][ T3764] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 42.432860][ T3769] syz.4.33: attempt to access beyond end of device [ 42.432860][ T3769] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.446169][ T3769] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 42.460677][ T3774] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.465662][ T3780] loop0: detected capacity change from 0 to 128 [ 42.516151][ T3774] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.575434][ T3774] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.587974][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 42.598549][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 42.608276][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 42.617511][ T3782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.38'. [ 42.658946][ T138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.675813][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.688169][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.697186][ T52] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.798025][ T3788] loop4: detected capacity change from 0 to 128 [ 42.895553][ T3783] syz.0.37: attempt to access beyond end of device [ 42.895553][ T3783] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.909839][ T3783] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 42.917959][ T3792] loop1: detected capacity change from 0 to 512 [ 42.926562][ T3792] EXT4-fs: Ignoring removed oldalloc option [ 42.932917][ T3780] syz.0.37: attempt to access beyond end of device [ 42.932917][ T3780] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.946309][ T3780] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 42.961233][ T3792] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.983291][ T3792] EXT4-fs (loop1): 1 truncate cleaned up [ 42.995410][ T3792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.033521][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.194951][ T3804] loop2: detected capacity change from 0 to 512 [ 43.204183][ T3804] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.44: error while reading EA inode 32 err=-116 [ 43.216709][ T179] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.223824][ T3804] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.44: error while reading EA inode 32 err=-116 [ 43.270455][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.279926][ T3804] EXT4-fs (loop2): 1 orphan inode deleted [ 43.286595][ T3804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.288052][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.312262][ T3804] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.44: deleted inode referenced: 15 [ 43.325824][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.338356][ T3788] syz.4.40: attempt to access beyond end of device [ 43.338356][ T3788] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 43.351752][ T3788] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 43.363030][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.373511][ T3793] syz.4.40: attempt to access beyond end of device [ 43.373511][ T3793] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 43.386880][ T3793] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 43.422606][ T3804] veth0_to_team: entered promiscuous mode [ 43.433546][ T3793] syz.4.40: attempt to access beyond end of device [ 43.433546][ T3793] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 43.446962][ T3793] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 43.460457][ T3808] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.477001][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.488467][ T3809] tipc: Enabling of bearer rejected, failed to enable media [ 43.516331][ T3808] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.532036][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 43.542838][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 43.553731][ T3813] netlink: 'syz.4.47': attribute type 10 has an invalid length. [ 43.561894][ T3813] ipvlan0: entered allmulticast mode [ 43.567297][ T3813] veth0_vlan: entered allmulticast mode [ 43.578552][ T3813] team0: Device ipvlan0 failed to register rx_handler [ 43.589078][ T3808] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.634445][ T3808] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.664549][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.747346][ T3820] loop2: detected capacity change from 0 to 1024 [ 43.758468][ T3820] EXT4-fs: inline encryption not supported [ 43.774887][ T3820] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.837917][ T3827] loop1: detected capacity change from 0 to 128 [ 43.909397][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.129430][ T3827] syz.1.52: attempt to access beyond end of device [ 44.129430][ T3827] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 44.142848][ T3827] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 44.265905][ T3834] loop1: detected capacity change from 0 to 512 [ 44.274546][ T3834] EXT4-fs: Ignoring removed oldalloc option [ 44.287995][ T3834] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.300592][ T3834] EXT4-fs (loop1): 1 truncate cleaned up [ 44.307076][ T3834] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.512958][ T3842] loop4: detected capacity change from 0 to 128 [ 44.777605][ T3842] syz.4.57: attempt to access beyond end of device [ 44.777605][ T3842] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 44.791241][ T3842] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 44.800124][ T3843] syz.4.57: attempt to access beyond end of device [ 44.800124][ T3843] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 44.813577][ T3843] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 44.960616][ T3852] loop4: detected capacity change from 0 to 512 [ 44.968065][ T3852] EXT4-fs: Ignoring removed oldalloc option [ 44.974735][ T3852] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.989500][ T3852] EXT4-fs (loop4): 1 truncate cleaned up [ 44.995850][ T3852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.038231][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.160020][ T3861] loop2: detected capacity change from 0 to 1024 [ 45.166983][ T3861] EXT4-fs: inline encryption not supported [ 45.185313][ T3861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.218778][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.236105][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.242538][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 45.269629][ T3867] netlink: 'syz.1.66': attribute type 10 has an invalid length. [ 45.285574][ T3867] ipvlan0: entered allmulticast mode [ 45.291008][ T3867] veth0_vlan: entered allmulticast mode [ 45.291435][ T3871] loop2: detected capacity change from 0 to 128 [ 45.304512][ T3867] team0: Device ipvlan0 failed to register rx_handler [ 45.741385][ T3882] loop0: detected capacity change from 0 to 512 [ 45.748716][ T3882] EXT4-fs: Ignoring removed oldalloc option [ 45.750643][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.760919][ T3882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.809331][ T3882] EXT4-fs (loop0): 1 truncate cleaned up [ 45.815556][ T3882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.920988][ T3893] loop4: detected capacity change from 0 to 512 [ 45.955485][ T3893] EXT4-fs: Ignoring removed oldalloc option [ 45.974157][ T3893] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.006816][ T3893] EXT4-fs (loop4): 1 truncate cleaned up [ 46.028841][ T3893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.108161][ T3901] loop2: detected capacity change from 0 to 1024 [ 46.121788][ T3901] EXT4-fs: inline encryption not supported [ 46.154926][ T3901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.202953][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.376733][ T3909] 9pnet: Could not find request transport: f [ 46.452520][ T138] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.504583][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.693469][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.977746][ T3920] __nla_validate_parse: 22 callbacks suppressed [ 46.977767][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 47.022915][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 47.042831][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 47.051842][ T3920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 47.091416][ T3918] loop4: detected capacity change from 0 to 32768 [ 47.155014][ T3297] loop4: p1 p2 p3 < p5 p6 > [ 47.160920][ T3297] loop4: p2 size 16775168 extends beyond EOD, truncated [ 47.170607][ T3297] loop4: p5 start 4294970168 is beyond EOD, truncated [ 47.203028][ T3918] loop4: p1 p2 p3 < p5 p6 > [ 47.210896][ T3918] loop4: p2 size 16775168 extends beyond EOD, truncated [ 47.218877][ T3928] loop0: detected capacity change from 0 to 128 [ 47.226576][ T3918] loop4: p5 start 4294970168 is beyond EOD, truncated [ 47.423554][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.440207][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.462133][ T179] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.496106][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 47.511219][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.512966][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 47.532175][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 47.532440][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.541331][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 47.552672][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.570449][ T179] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.587681][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 47.603678][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 47.609534][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 47.614726][ T3934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.88'. [ 47.625714][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 47.692607][ T3929] bio_check_eod: 2 callbacks suppressed [ 47.692627][ T3929] syz.0.86: attempt to access beyond end of device [ 47.692627][ T3929] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 47.706868][ T3939] netlink: 'syz.2.90': attribute type 10 has an invalid length. [ 47.711605][ T3929] buffer_io_error: 2 callbacks suppressed [ 47.711688][ T3929] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 47.722459][ T3939] team0: Device ipvlan0 failed to register rx_handler [ 47.741080][ T3928] syz.0.86: attempt to access beyond end of device [ 47.741080][ T3928] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 47.754388][ T3928] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 47.790985][ T3945] loop4: detected capacity change from 0 to 512 [ 47.799416][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 47.799436][ T29] audit: type=1326 audit(1760601911.640:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 47.829076][ T29] audit: type=1326 audit(1760601911.640:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 47.852730][ T29] audit: type=1326 audit(1760601911.640:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 47.876017][ T29] audit: type=1326 audit(1760601911.640:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 47.899577][ T29] audit: type=1326 audit(1760601911.640:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 47.923338][ T29] audit: type=1326 audit(1760601911.640:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 47.936167][ T3945] EXT4-fs: Ignoring removed oldalloc option [ 47.946651][ T29] audit: type=1326 audit(1760601911.640:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5a3f2ef03 code=0x7ffc0000 [ 47.956316][ T3945] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.975892][ T29] audit: type=1326 audit(1760601911.640:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5a3f2d97f code=0x7ffc0000 [ 48.008791][ T29] audit: type=1326 audit(1760601911.640:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff5a3f2ef57 code=0x7ffc0000 [ 48.032208][ T29] audit: type=1326 audit(1760601911.640:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3941 comm="syz.4.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5a3f2d710 code=0x7ffc0000 [ 48.112654][ T3945] EXT4-fs (loop4): 1 truncate cleaned up [ 48.171047][ T3945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.259403][ T3956] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 48.267516][ T3956] ipvlan0: entered allmulticast mode [ 48.272877][ T3956] veth0_vlan: entered allmulticast mode [ 48.280383][ T3956] team0: Device ipvlan0 failed to register rx_handler [ 48.321960][ T3958] loop0: detected capacity change from 0 to 1024 [ 48.328948][ T3958] EXT4-fs: inline encryption not supported [ 48.354008][ T3958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.383358][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.417573][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 48.436255][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.95'. [ 48.522878][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.529119][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 48.586572][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.649932][ T3979] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.704782][ T3981] loop1: detected capacity change from 0 to 512 [ 48.724760][ T3979] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.736486][ T3981] EXT4-fs: Ignoring removed oldalloc option [ 48.756877][ T3981] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.771692][ T3983] 9pnet: Could not find request transport: f [ 48.798591][ T3981] EXT4-fs (loop1): 1 truncate cleaned up [ 48.805175][ T3981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.827613][ T3979] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.906016][ T3979] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.995963][ T3331] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.010012][ T3331] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.024584][ T3331] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.029703][ T3331] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.089429][ T3991] loop4: detected capacity change from 0 to 512 [ 49.099329][ T3991] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.104: error while reading EA inode 32 err=-116 [ 49.113271][ T3991] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.104: error while reading EA inode 32 err=-116 [ 49.113926][ T3991] EXT4-fs (loop4): 1 orphan inode deleted [ 49.114337][ T3991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.116353][ T3991] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.104: deleted inode referenced: 15 [ 49.127603][ T3991] veth0_to_team: entered promiscuous mode [ 49.145414][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.172684][ T3974] loop0: detected capacity change from 0 to 32768 [ 49.217739][ T3495] loop0: p1 p2 p3 < p5 p6 > [ 49.233096][ T3495] loop0: p2 size 16775168 extends beyond EOD, truncated [ 49.234678][ T3495] loop0: p5 start 4294970168 is beyond EOD, truncated [ 49.267387][ T3974] loop0: p1 p2 p3 < p5 p6 > [ 49.282611][ T3974] loop0: p2 size 16775168 extends beyond EOD, truncated [ 49.293866][ T3974] loop0: p5 start 4294970168 is beyond EOD, truncated [ 49.357617][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 49.360902][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 49.488051][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.578295][ T4019] loop2: detected capacity change from 0 to 512 [ 49.596417][ T4019] EXT4-fs: Ignoring removed oldalloc option [ 49.623573][ T4019] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 49.654256][ T4019] EXT4-fs (loop2): 1 truncate cleaned up [ 49.668218][ T4019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.780655][ T3331] Bluetooth: hci0: Frame reassembly failed (-84) [ 50.228818][ T4077] netlink: 'syz.4.113': attribute type 10 has an invalid length. [ 50.250546][ T4077] team0: Device ipvlan0 failed to register rx_handler [ 50.710492][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.770760][ T4144] netlink: 'syz.2.114': attribute type 10 has an invalid length. [ 50.780646][ T4144] team0: Device ipvlan0 failed to register rx_handler [ 50.831655][ T4146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.906522][ T4146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.995403][ T4146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.064951][ T4146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.110831][ T179] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.125008][ T179] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.146658][ T179] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.182121][ T179] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.219840][ T4149] loop2: detected capacity change from 0 to 512 [ 51.250441][ T4149] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.116: error while reading EA inode 32 err=-116 [ 51.312971][ T4149] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.116: error while reading EA inode 32 err=-116 [ 51.362473][ T4149] EXT4-fs (loop2): 1 orphan inode deleted [ 51.369021][ T4149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.447452][ T4149] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.116: deleted inode referenced: 15 [ 51.525855][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.574131][ T4158] loop2: detected capacity change from 0 to 128 [ 51.792174][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 51.798250][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.814222][ T4156] loop0: detected capacity change from 0 to 32768 [ 51.898340][ T4156] loop0: p1 p2 p3 < p5 p6 > [ 51.914586][ T4156] loop0: p2 size 16775168 extends beyond EOD, truncated [ 51.924074][ T4156] loop0: p5 start 4294970168 is beyond EOD, truncated [ 51.943584][ T4163] syz.2.119: attempt to access beyond end of device [ 51.943584][ T4163] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 51.957117][ T4163] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 51.983968][ T4158] syz.2.119: attempt to access beyond end of device [ 51.983968][ T4158] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 51.997662][ T4158] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 52.067033][ T4158] syz.2.119: attempt to access beyond end of device [ 52.067033][ T4158] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 52.080686][ T4158] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 52.109350][ T4177] loop1: detected capacity change from 0 to 512 [ 52.116275][ T4177] EXT4-fs: Ignoring removed oldalloc option [ 52.131048][ T4177] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 52.145746][ T4177] EXT4-fs (loop1): 1 truncate cleaned up [ 52.162875][ T4177] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.233299][ T4184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.295685][ T4184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.366550][ T4187] loop2: detected capacity change from 0 to 512 [ 52.378064][ T4187] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.129: error while reading EA inode 32 err=-116 [ 52.394725][ T4184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.409573][ T4187] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.129: error while reading EA inode 32 err=-116 [ 52.422923][ T4187] EXT4-fs (loop2): 1 orphan inode deleted [ 52.429380][ T4187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.451498][ T4187] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.129: deleted inode referenced: 15 [ 52.467702][ T4184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.510124][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.538100][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.570996][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.590372][ T4190] netlink: 'syz.2.130': attribute type 10 has an invalid length. [ 52.598424][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.611579][ T4190] team0: Device ipvlan0 failed to register rx_handler [ 52.624208][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.679012][ T4192] netlink: 'syz.0.131': attribute type 10 has an invalid length. [ 52.690680][ T4192] team0: Device ipvlan0 failed to register rx_handler [ 52.774260][ T4200] loop2: detected capacity change from 0 to 128 [ 52.823387][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.123986][ T4207] syz.2.133: attempt to access beyond end of device [ 53.123986][ T4207] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 53.137580][ T4207] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 53.146716][ T4200] syz.2.133: attempt to access beyond end of device [ 53.146716][ T4200] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 53.160343][ T4200] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 53.177542][ T4207] syz.2.133: attempt to access beyond end of device [ 53.177542][ T4207] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 53.191897][ T4207] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 53.351091][ T4213] __nla_validate_parse: 6 callbacks suppressed [ 53.351107][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 53.375025][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 53.400307][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 53.422637][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.137'. [ 53.453198][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.541879][ T4223] loop2: detected capacity change from 0 to 512 [ 53.570208][ T4223] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.141: error while reading EA inode 32 err=-116 [ 53.591391][ T4224] netlink: 'syz.4.142': attribute type 10 has an invalid length. [ 53.616523][ T4223] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.141: error while reading EA inode 32 err=-116 [ 53.668215][ T4224] team0: Device ipvlan0 failed to register rx_handler [ 53.692336][ T4223] EXT4-fs (loop2): 1 orphan inode deleted [ 53.698662][ T4223] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.713975][ T4223] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.141: deleted inode referenced: 15 [ 53.727784][ T4228] loop3: detected capacity change from 0 to 128 [ 53.792309][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.937202][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 53.937232][ T29] audit: type=1326 audit(1760601917.790:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 53.945304][ T4242] loop4: detected capacity change from 0 to 512 [ 53.969165][ T29] audit: type=1326 audit(1760601917.790:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 53.996813][ T29] audit: type=1326 audit(1760601917.790:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 53.997490][ T4243] loop2: detected capacity change from 0 to 512 [ 54.020550][ T29] audit: type=1326 audit(1760601917.790:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 54.028175][ T4242] EXT4-fs: Ignoring removed oldalloc option [ 54.050193][ T29] audit: type=1326 audit(1760601917.790:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 54.074750][ T4243] EXT4-fs: Ignoring removed oldalloc option [ 54.079722][ T29] audit: type=1326 audit(1760601917.790:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 54.108876][ T29] audit: type=1326 audit(1760601917.790:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff5a3f2eec9 code=0x7ffc0000 [ 54.109626][ T4242] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.132645][ T29] audit: type=1326 audit(1760601917.790:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff5a3f2ef03 code=0x7ffc0000 [ 54.132687][ T29] audit: type=1326 audit(1760601917.790:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff5a3f2d97f code=0x7ffc0000 [ 54.162656][ T4243] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 54.165904][ T29] audit: type=1326 audit(1760601917.790:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4233 comm="syz.4.146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff5a3f2ef57 code=0x7ffc0000 [ 54.226034][ T4243] EXT4-fs (loop2): 1 truncate cleaned up [ 54.232790][ T4243] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.245251][ T4242] EXT4-fs (loop4): 1 truncate cleaned up [ 54.251592][ T4242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.407529][ T4247] loop0: detected capacity change from 0 to 128 [ 54.474192][ T4228] syz.3.143: attempt to access beyond end of device [ 54.474192][ T4228] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 54.487842][ T4228] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 54.654459][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 54.664705][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 54.707447][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 54.726390][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.732322][ T4257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.152'. [ 54.744866][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.799339][ T4248] syz.0.148: attempt to access beyond end of device [ 54.799339][ T4248] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 54.812914][ T4248] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 54.821840][ T4247] syz.0.148: attempt to access beyond end of device [ 54.821840][ T4247] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 54.835412][ T4247] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 54.859871][ T4248] syz.0.148: attempt to access beyond end of device [ 54.859871][ T4248] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 54.873768][ T4248] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 54.963067][ T4268] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 54.976059][ T4268] team0: Device ipvlan0 failed to register rx_handler [ 55.065828][ T4281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 55.078066][ T4281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 55.142608][ T4285] netlink: 'syz.0.158': attribute type 10 has an invalid length. [ 55.160998][ T4285] team0: Device ipvlan0 failed to register rx_handler [ 55.236551][ T4295] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.274405][ T4295] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.344002][ T4295] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.404033][ T4295] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.470467][ T3331] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.482211][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 55.488336][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 55.520617][ T3331] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.558818][ T3331] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.601835][ T3331] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.824343][ T4316] loop2: detected capacity change from 0 to 32768 [ 55.882563][ T3297] loop2: p1 p2 p3 < p5 p6 > [ 55.896155][ T3297] loop2: p2 size 16775168 extends beyond EOD, truncated [ 55.920371][ T3297] loop2: p5 start 4294970168 is beyond EOD, truncated [ 55.947731][ T4316] loop2: p1 p2 p3 < p5 p6 > [ 55.953401][ T4316] loop2: p2 size 16775168 extends beyond EOD, truncated [ 55.970987][ T4316] loop2: p5 start 4294970168 is beyond EOD, truncated [ 56.107242][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.107460][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 56.118731][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 56.138695][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 56.156284][ T4373] loop2: detected capacity change from 0 to 512 [ 56.163595][ T4373] EXT4-fs: Ignoring removed oldalloc option [ 56.169995][ T4373] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.196973][ T4373] EXT4-fs (loop2): 1 truncate cleaned up [ 56.210618][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.222160][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 56.233498][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 56.244726][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 56.255925][ T4373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.393080][ T4396] loop0: detected capacity change from 0 to 128 [ 56.595220][ T4425] loop1: detected capacity change from 0 to 512 [ 56.602614][ T4425] EXT4-fs: Ignoring removed oldalloc option [ 56.610783][ T4425] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 56.633593][ T4425] EXT4-fs (loop1): 1 truncate cleaned up [ 56.644676][ T4425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.714017][ T4396] syz.0.165: attempt to access beyond end of device [ 56.714017][ T4396] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.727540][ T4396] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 56.736694][ T4409] syz.0.165: attempt to access beyond end of device [ 56.736694][ T4409] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.750175][ T4409] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 56.766668][ T4396] syz.0.165: attempt to access beyond end of device [ 56.766668][ T4396] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.780452][ T4396] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 56.805212][ T4434] netlink: 'syz.3.167': attribute type 10 has an invalid length. [ 56.813164][ T4434] ipvlan0: entered allmulticast mode [ 56.818523][ T4434] veth0_vlan: entered allmulticast mode [ 56.826092][ T4434] team0: Device ipvlan0 failed to register rx_handler [ 56.872344][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.016103][ T4446] loop0: detected capacity change from 0 to 128 [ 57.287181][ T3331] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.334623][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.360037][ T4458] loop4: detected capacity change from 0 to 128 [ 57.543600][ T4456] loop3: detected capacity change from 0 to 32768 [ 57.596439][ T3297] loop3: p1 p2 p3 < p5 p6 > [ 57.602150][ T3297] loop3: p2 size 16775168 extends beyond EOD, truncated [ 57.610533][ T3297] loop3: p5 start 4294970168 is beyond EOD, truncated [ 57.620882][ T4456] loop3: p1 p2 p3 < p5 p6 > [ 57.633183][ T4456] loop3: p2 size 16775168 extends beyond EOD, truncated [ 57.648744][ T4456] loop3: p5 start 4294970168 is beyond EOD, truncated [ 57.659506][ T4467] netlink: 'syz.0.178': attribute type 10 has an invalid length. [ 57.674391][ T4467] team0: Device ipvlan0 failed to register rx_handler [ 57.814186][ T4472] loop3: detected capacity change from 0 to 512 [ 57.821368][ T4472] EXT4-fs: Ignoring removed oldalloc option [ 57.835067][ T4472] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.853756][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 57.854483][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 57.871204][ T4472] EXT4-fs (loop3): 1 truncate cleaned up [ 57.880710][ T4472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.096638][ T4477] loop4: detected capacity change from 0 to 512 [ 58.125048][ T4477] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.181: error while reading EA inode 32 err=-116 [ 58.137967][ T4477] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.181: error while reading EA inode 32 err=-116 [ 58.150891][ T4477] EXT4-fs (loop4): 1 orphan inode deleted [ 58.157333][ T4477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.171873][ T4477] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.181: deleted inode referenced: 15 [ 58.204952][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.358585][ T4486] loop1: detected capacity change from 0 to 128 [ 58.517332][ T4492] loop4: detected capacity change from 0 to 512 [ 58.542807][ T4492] EXT4-fs: Ignoring removed oldalloc option [ 58.575559][ T4492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.586804][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.607306][ T4492] EXT4-fs (loop4): 1 truncate cleaned up [ 58.615542][ T4492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.756542][ T4491] bio_check_eod: 5 callbacks suppressed [ 58.756563][ T4491] syz.1.185: attempt to access beyond end of device [ 58.756563][ T4491] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 58.775818][ T4491] buffer_io_error: 5 callbacks suppressed [ 58.775832][ T4491] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 58.792368][ T4486] syz.1.185: attempt to access beyond end of device [ 58.792368][ T4486] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 58.805751][ T4486] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 58.806072][ T4500] loop0: detected capacity change from 0 to 128 [ 58.815633][ T4486] syz.1.185: attempt to access beyond end of device [ 58.815633][ T4486] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 58.834518][ T4486] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 59.154035][ T4504] loop1: detected capacity change from 0 to 32768 [ 59.203255][ T4504] loop1: p1 p2 p3 < p5 p6 > [ 59.208556][ T4500] syz.0.188: attempt to access beyond end of device [ 59.208556][ T4500] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 59.222060][ T4500] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 59.229907][ T4504] loop1: p2 size 16775168 extends beyond EOD, truncated [ 59.239108][ T4504] loop1: p5 start 4294970168 is beyond EOD, truncated [ 59.304159][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.313792][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.343782][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 59.343800][ T29] audit: type=1326 audit(1760601923.200:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.0.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9715eec9 code=0x0 [ 59.356103][ T4513] loop4: detected capacity change from 0 to 512 [ 59.358051][ T4513] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.192: error while reading EA inode 32 err=-116 [ 59.358280][ T4513] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.192: error while reading EA inode 32 err=-116 [ 59.358606][ T4513] EXT4-fs (loop4): 1 orphan inode deleted [ 59.358949][ T4513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.360303][ T4513] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.192: deleted inode referenced: 15 [ 59.382148][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.647344][ T4532] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 59.659349][ T4534] loop1: detected capacity change from 0 to 128 [ 59.668506][ T4532] team0: Device ipvlan0 failed to register rx_handler [ 59.699511][ T29] audit: type=1326 audit(1760601923.550:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ee2eec9 code=0x7ffc0000 [ 59.740014][ T4535] loop3: detected capacity change from 0 to 512 [ 59.756103][ T4535] EXT4-fs: Ignoring removed oldalloc option [ 59.762567][ T29] audit: type=1326 audit(1760601923.580:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95ee2eec9 code=0x7ffc0000 [ 59.786192][ T29] audit: type=1326 audit(1760601923.580:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ee2eec9 code=0x7ffc0000 [ 59.787727][ T4537] loop4: detected capacity change from 0 to 128 [ 59.809758][ T29] audit: type=1326 audit(1760601923.580:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff95ee2eec9 code=0x7ffc0000 [ 59.809793][ T29] audit: type=1326 audit(1760601923.580:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ee2eec9 code=0x7ffc0000 [ 59.835736][ T4535] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.839463][ T29] audit: type=1326 audit(1760601923.580:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff95ee2eec9 code=0x7ffc0000 [ 59.897252][ T29] audit: type=1326 audit(1760601923.580:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff95ee2ef03 code=0x7ffc0000 [ 59.920495][ T29] audit: type=1326 audit(1760601923.580:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff95ee2d97f code=0x7ffc0000 [ 59.943773][ T29] audit: type=1326 audit(1760601923.590:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4527 comm="syz.3.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff95ee2ef57 code=0x7ffc0000 [ 59.996227][ T4535] EXT4-fs (loop3): 1 truncate cleaned up [ 60.039863][ T4535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.275184][ T4538] syz.1.200: attempt to access beyond end of device [ 60.275184][ T4538] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 60.288814][ T4538] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 60.297978][ T4534] syz.1.200: attempt to access beyond end of device [ 60.297978][ T4534] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 60.311707][ T4534] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 60.430151][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.570880][ T4549] loop3: detected capacity change from 0 to 512 [ 60.577971][ T4549] EXT4-fs: Ignoring removed oldalloc option [ 60.584738][ T4549] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 60.615159][ T4549] EXT4-fs (loop3): 1 truncate cleaned up [ 60.621278][ T4549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.745579][ T4553] loop4: detected capacity change from 0 to 512 [ 60.787232][ T4553] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.204: error while reading EA inode 32 err=-116 [ 60.814474][ T4550] loop1: detected capacity change from 0 to 32768 [ 60.838645][ T4553] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.204: error while reading EA inode 32 err=-116 [ 60.879426][ T4553] EXT4-fs (loop4): 1 orphan inode deleted [ 60.892572][ T4553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.906210][ T4550] loop1: p1 p2 p3 < p5 p6 > [ 60.911991][ T4550] loop1: p2 size 16775168 extends beyond EOD, truncated [ 60.931673][ T4553] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.204: deleted inode referenced: 15 [ 60.968963][ T4550] loop1: p5 start 4294970168 is beyond EOD, truncated [ 61.002324][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.083252][ T4558] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.163878][ T4558] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.216512][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 61.218620][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 61.228686][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 61.247516][ T4558] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.253827][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 61.323936][ T4558] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.336674][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.375171][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.390912][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.419996][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.441747][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.450730][ T3331] Bluetooth: hci0: Frame reassembly failed (-84) [ 61.551212][ T4569] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.603944][ T4569] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.663808][ T4569] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.723772][ T4569] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.781949][ T4577] loop1: detected capacity change from 0 to 128 [ 61.791799][ T4579] __nla_validate_parse: 14 callbacks suppressed [ 61.791827][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 61.807904][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 61.829769][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 61.839130][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.856033][ T4579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 61.873326][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.892185][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.900655][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.151684][ T4577] syz.1.213: attempt to access beyond end of device [ 62.151684][ T4577] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.165102][ T4577] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 62.174141][ T4582] syz.1.213: attempt to access beyond end of device [ 62.174141][ T4582] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.187615][ T4582] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 62.284853][ T4595] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.322976][ T4601] loop3: detected capacity change from 0 to 128 [ 62.323742][ T4595] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.395294][ T4595] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.444288][ T4595] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.526743][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.542386][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.571661][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.593062][ T179] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.807006][ T4610] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.852645][ T4611] tipc: Enabling of bearer rejected, failed to enable media [ 62.876573][ T4610] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.933607][ T4610] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.971309][ T4613] loop2: detected capacity change from 0 to 128 [ 62.994023][ T4610] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.015444][ T4605] syz.3.223: attempt to access beyond end of device [ 63.015444][ T4605] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 63.028975][ T4605] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 63.038950][ T4605] syz.3.223: attempt to access beyond end of device [ 63.038950][ T4605] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 63.052360][ T4605] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 63.470859][ T179] Bluetooth: hci1: Frame reassembly failed (-84) [ 63.477271][ T3629] Bluetooth: hci0: command 0x1003 tx timeout [ 63.477304][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 63.547935][ T4624] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.572415][ T4626] loop3: detected capacity change from 0 to 128 [ 63.587115][ T4624] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.606683][ T4627] tipc: Started in network mode [ 63.611723][ T4627] tipc: Node identity 365f00688359, cluster identity 4711 [ 63.618935][ T4627] tipc: Enabled bearer , priority 0 [ 63.629204][ T4627] tipc: Disabling bearer [ 63.647253][ T4624] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.733281][ T4624] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.791994][ T4635] loop2: detected capacity change from 0 to 128 [ 63.818999][ T3331] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.832854][ T3331] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.856969][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.876745][ T3331] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.041924][ T4626] bio_check_eod: 1 callbacks suppressed [ 64.041939][ T4626] syz.3.231: attempt to access beyond end of device [ 64.041939][ T4626] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 64.061130][ T4626] buffer_io_error: 1 callbacks suppressed [ 64.061155][ T4626] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 64.208209][ T4635] syz.2.234: attempt to access beyond end of device [ 64.208209][ T4635] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 64.222183][ T4635] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 64.654155][ T4656] loop2: detected capacity change from 0 to 128 [ 65.086026][ T4656] syz.2.243: attempt to access beyond end of device [ 65.086026][ T4656] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.099622][ T4656] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 65.138603][ T4657] syz.2.243: attempt to access beyond end of device [ 65.138603][ T4657] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.152006][ T4657] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 65.286290][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 65.286320][ T29] audit: type=1326 audit(1760601929.140:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64758aeec9 code=0x7ffc0000 [ 65.326066][ T4668] 9pnet: Could not find request transport: f [ 65.382620][ T29] audit: type=1326 audit(1760601929.180:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f64758aeec9 code=0x7ffc0000 [ 65.406123][ T29] audit: type=1326 audit(1760601929.180:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64758aeec9 code=0x7ffc0000 [ 65.429622][ T29] audit: type=1326 audit(1760601929.180:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f64758aeec9 code=0x7ffc0000 [ 65.453379][ T29] audit: type=1326 audit(1760601929.180:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64758aeec9 code=0x7ffc0000 [ 65.476813][ T29] audit: type=1326 audit(1760601929.180:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f64758aeec9 code=0x7ffc0000 [ 65.479607][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 65.500159][ T29] audit: type=1326 audit(1760601929.180:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f64758aef03 code=0x7ffc0000 [ 65.500193][ T29] audit: type=1326 audit(1760601929.180:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f64758aef03 code=0x7ffc0000 [ 65.552721][ T29] audit: type=1326 audit(1760601929.180:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64758aeec9 code=0x7ffc0000 [ 65.552755][ T29] audit: type=1326 audit(1760601929.180:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.2.247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64758aeec9 code=0x7ffc0000 [ 65.553090][ T3591] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 65.725778][ T4680] loop4: detected capacity change from 0 to 128 [ 65.765370][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.786659][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.803570][ T179] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.852461][ T179] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.046040][ T4676] loop2: detected capacity change from 0 to 32768 [ 66.103119][ T4676] loop2: p1 p2 p3 < p5 p6 > [ 66.108678][ T4676] loop2: p2 size 16775168 extends beyond EOD, truncated [ 66.133835][ T4676] loop2: p5 start 4294970168 is beyond EOD, truncated [ 66.208409][ T3001] loop2: p1 p2 p3 < p5 p6 > [ 66.238521][ T3001] loop2: p2 size 16775168 extends beyond EOD, truncated [ 66.254541][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 66.266140][ T3001] loop2: p5 start 4294970168 is beyond EOD, truncated [ 66.274740][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 66.284061][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 66.299863][ T4686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 66.339726][ T4680] syz.4.249: attempt to access beyond end of device [ 66.339726][ T4680] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 66.354083][ T4680] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 66.364173][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 66.375490][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 66.393628][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 66.393789][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 66.440817][ T3495] udevd[3495]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 66.443369][ T3515] udevd[3515]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 66.452215][ T3743] udevd[3743]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 66.471773][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 66.691278][ T4702] loop1: detected capacity change from 0 to 128 [ 66.987114][ T4704] syz.1.258: attempt to access beyond end of device [ 66.987114][ T4704] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 67.001228][ T4704] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 67.013287][ T4702] syz.1.258: attempt to access beyond end of device [ 67.013287][ T4702] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 67.027130][ T4702] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 67.041451][ T138] Bluetooth: hci0: Frame reassembly failed (-84) [ 67.052012][ T4702] syz.1.258: attempt to access beyond end of device [ 67.052012][ T4702] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 67.065677][ T4702] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 67.203247][ T4712] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.244446][ T4712] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.268807][ T4713] tipc: Started in network mode [ 67.273750][ T4713] tipc: Node identity 12a87e5321d5, cluster identity 4711 [ 67.281070][ T4713] tipc: Enabled bearer , priority 0 [ 67.289715][ T4713] tipc: Disabling bearer [ 67.304323][ T4712] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.364591][ T4712] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.411333][ T4716] loop0: detected capacity change from 0 to 128 [ 67.442306][ T138] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.450608][ T138] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.493990][ T179] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.523974][ T179] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.905384][ T4721] syz.0.261: attempt to access beyond end of device [ 67.905384][ T4721] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 67.918841][ T4721] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 67.945390][ T4721] syz.0.261: attempt to access beyond end of device [ 67.945390][ T4721] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 67.958802][ T4721] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 68.035086][ T4731] loop0: detected capacity change from 0 to 128 [ 68.222850][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 68.232335][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 68.241672][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 68.271149][ T4735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 68.386726][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 68.424437][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 68.453663][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 68.479977][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 68.490307][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.270'. [ 68.500041][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 68.618567][ T4750] loop3: detected capacity change from 0 to 128 [ 69.072255][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 69.075552][ T4750] bio_check_eod: 1 callbacks suppressed [ 69.075572][ T4750] syz.3.276: attempt to access beyond end of device [ 69.075572][ T4750] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 69.078379][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 69.084163][ T4750] buffer_io_error: 1 callbacks suppressed [ 69.084178][ T4750] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 69.168140][ T4754] syz.3.276: attempt to access beyond end of device [ 69.168140][ T4754] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 69.181657][ T4754] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 69.252234][ T4771] loop1: detected capacity change from 0 to 128 [ 69.656039][ T4786] loop3: detected capacity change from 0 to 128 [ 69.693698][ T4771] syz.1.283: attempt to access beyond end of device [ 69.693698][ T4771] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 69.707294][ T4771] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 69.848773][ T4792] loop0: detected capacity change from 0 to 512 [ 69.948953][ T4794] 9pnet: Could not find request transport: f [ 69.955106][ T4792] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.292: error while reading EA inode 32 err=-116 [ 69.984555][ T4792] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.292: error while reading EA inode 32 err=-116 [ 70.003470][ T4792] EXT4-fs (loop0): 1 orphan inode deleted [ 70.015741][ T4792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.143587][ T4792] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.292: deleted inode referenced: 15 [ 70.339715][ T4794] loop1: detected capacity change from 0 to 32768 [ 70.369498][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.382561][ T3297] loop1: p1 p2 p3 < p5 p6 > [ 70.389530][ T3297] loop1: p2 size 16775168 extends beyond EOD, truncated [ 70.514666][ T3297] loop1: p5 start 4294970168 is beyond EOD, truncated [ 70.600268][ T4794] loop1: p1 p2 p3 < p5 p6 > [ 70.649573][ T4794] loop1: p2 size 16775168 extends beyond EOD, truncated [ 70.687147][ T4813] loop3: detected capacity change from 0 to 128 [ 70.701379][ T4815] loop0: detected capacity change from 0 to 512 [ 70.708671][ T4815] EXT4-fs: Ignoring removed oldalloc option [ 70.714916][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 70.714933][ T29] audit: type=1326 audit(1760601934.560:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9715eec9 code=0x7ffc0000 [ 70.744722][ T29] audit: type=1326 audit(1760601934.560:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a9715eec9 code=0x7ffc0000 [ 70.753937][ T4794] loop1: p5 start 4294970168 is beyond EOD, [ 70.768743][ T29] audit: type=1326 audit(1760601934.560:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9715eec9 code=0x7ffc0000 [ 70.774893][ T4794] truncated [ 70.801662][ T29] audit: type=1326 audit(1760601934.560:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a9715eec9 code=0x7ffc0000 [ 70.825408][ T29] audit: type=1326 audit(1760601934.560:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a9715eec9 code=0x7ffc0000 [ 70.848963][ T29] audit: type=1326 audit(1760601934.560:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7a9715eec9 code=0x7ffc0000 [ 70.872362][ T29] audit: type=1326 audit(1760601934.560:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a9715ef03 code=0x7ffc0000 [ 70.895628][ T29] audit: type=1326 audit(1760601934.560:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7a9715d97f code=0x7ffc0000 [ 70.896132][ T4815] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.919052][ T29] audit: type=1326 audit(1760601934.560:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f7a9715ef57 code=0x7ffc0000 [ 70.919092][ T29] audit: type=1326 audit(1760601934.560:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.0.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7a9715d710 code=0x7ffc0000 [ 71.005332][ T3001] loop1: p1 p2 p3 < p5 p6 > [ 71.010807][ T3001] loop1: p2 size 16775168 extends beyond EOD, truncated [ 71.023859][ T4815] EXT4-fs (loop0): 1 truncate cleaned up [ 71.032653][ T4815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.044969][ T3001] loop1: p5 start 4294970168 is beyond EOD, truncated [ 71.192565][ T4826] loop4: detected capacity change from 0 to 512 [ 71.199898][ T4826] EXT4-fs: Ignoring removed oldalloc option [ 71.236467][ T4826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.291628][ T4826] EXT4-fs (loop4): 1 truncate cleaned up [ 71.292286][ T4826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.655266][ T4837] loop3: detected capacity change from 0 to 128 [ 71.810118][ T4841] loop0: detected capacity change from 0 to 128 [ 71.991331][ T4850] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.040509][ T4856] tipc: Enabled bearer , priority 0 [ 72.059872][ T4856] tipc: Disabling bearer [ 72.082882][ T4850] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.153799][ T4850] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.225174][ T4850] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.275965][ T4837] syz.3.305: attempt to access beyond end of device [ 72.275965][ T4837] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 72.289601][ T4837] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 72.298266][ T3331] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.323335][ T3331] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.336696][ T4866] loop2: detected capacity change from 0 to 512 [ 72.344061][ T4866] EXT4-fs: Ignoring removed oldalloc option [ 72.350510][ T4866] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.352666][ T3331] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.370530][ T4866] EXT4-fs (loop2): 1 truncate cleaned up [ 72.384676][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.404262][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.418147][ T4866] EXT4-fs mount: 2 callbacks suppressed [ 72.418203][ T4866] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.715451][ T4885] loop1: detected capacity change from 0 to 128 [ 72.808287][ T4891] loop1: detected capacity change from 0 to 128 [ 73.044600][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.110291][ T4893] syz.1.323: attempt to access beyond end of device [ 73.110291][ T4893] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 73.123778][ T4893] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 73.133051][ T4891] syz.1.323: attempt to access beyond end of device [ 73.133051][ T4891] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 73.146463][ T4891] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 73.284352][ T4906] loop1: detected capacity change from 0 to 1024 [ 73.291191][ T4906] EXT4-fs: inline encryption not supported [ 73.303878][ T4906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.350765][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.407638][ T4915] loop1: detected capacity change from 0 to 512 [ 73.416442][ T4915] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.331: error while reading EA inode 32 err=-116 [ 73.430527][ T4915] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.331: error while reading EA inode 32 err=-116 [ 73.447220][ T4918] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.458912][ T4915] EXT4-fs (loop1): 1 orphan inode deleted [ 73.473175][ T4915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.494073][ T4915] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.331: deleted inode referenced: 15 [ 73.510598][ T4919] tipc: Enabled bearer , priority 0 [ 73.519009][ T4919] tipc: Disabling bearer [ 73.534554][ T4915] veth0_to_team: entered promiscuous mode [ 73.546885][ T4918] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.571250][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.595598][ T4918] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.621206][ T4922] __nla_validate_parse: 10 callbacks suppressed [ 73.621239][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 73.638037][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 73.647248][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 73.665292][ T4918] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.676459][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.334'. [ 73.743728][ T4929] loop3: detected capacity change from 0 to 512 [ 73.750833][ T4929] EXT4-fs: Ignoring removed oldalloc option [ 73.757730][ T4929] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.770072][ T4929] EXT4-fs (loop3): 1 truncate cleaned up [ 73.776525][ T4929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.103078][ T4933] loop2: detected capacity change from 0 to 128 [ 74.352141][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 74.358374][ T3591] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.383473][ T4933] syz.2.337: attempt to access beyond end of device [ 74.383473][ T4933] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.397018][ T4933] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 74.407744][ T4933] syz.2.337: attempt to access beyond end of device [ 74.407744][ T4933] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.421409][ T4933] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 74.450706][ T4937] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.511566][ T4942] tipc: Started in network mode [ 74.516578][ T4942] tipc: Node identity c60d691b4549, cluster identity 4711 [ 74.523861][ T4942] tipc: Enabled bearer , priority 0 [ 74.532544][ T4937] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.544611][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.576029][ T4942] tipc: Disabling bearer [ 74.609625][ T4937] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.685462][ T4937] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.700012][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 74.709809][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 74.719630][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 74.728952][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 74.747875][ T138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.760289][ T3331] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.777696][ T3331] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.791787][ T3331] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.864167][ T4963] netlink: 'syz.2.348': attribute type 10 has an invalid length. [ 74.873993][ T4963] team0: Device ipvlan0 failed to register rx_handler [ 74.909130][ T4966] loop2: detected capacity change from 0 to 128 [ 75.122823][ T4966] ================================================================== [ 75.130969][ T4966] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 75.138921][ T4966] [ 75.141268][ T4966] write to 0xffff88811a80d928 of 4 bytes by task 4967 on cpu 0: [ 75.149096][ T4966] __mark_inode_dirty+0x248/0x750 [ 75.154248][ T4966] fat_update_time+0x1ec/0x200 [ 75.156975][ T4967] syz.2.349: attempt to access beyond end of device [ 75.156975][ T4967] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 75.159048][ T4966] touch_atime+0x148/0x340 [ 75.172585][ T4967] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 75.176944][ T4966] filemap_splice_read+0x6ba/0x740 [ 75.176987][ T4966] splice_direct_to_actor+0x26f/0x680 [ 75.177019][ T4966] do_splice_direct+0xda/0x150 [ 75.177044][ T4966] do_sendfile+0x380/0x650 [ 75.205250][ T4966] __x64_sys_sendfile64+0x105/0x150 [ 75.210467][ T4966] x64_sys_call+0x2bb4/0x3000 [ 75.215156][ T4966] do_syscall_64+0xd2/0x200 [ 75.219682][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.225593][ T4966] [ 75.227919][ T4966] read to 0xffff88811a80d928 of 4 bytes by task 4966 on cpu 1: [ 75.235831][ T4966] __mark_inode_dirty+0x55/0x750 [ 75.240808][ T4966] fat_update_time+0x1ec/0x200 [ 75.245673][ T4966] touch_atime+0x148/0x340 [ 75.250123][ T4966] filemap_splice_read+0x6ba/0x740 [ 75.255355][ T4966] splice_direct_to_actor+0x26f/0x680 [ 75.260805][ T4966] do_splice_direct+0xda/0x150 [ 75.265582][ T4966] do_sendfile+0x380/0x650 [ 75.270015][ T4966] __x64_sys_sendfile64+0x105/0x150 [ 75.275239][ T4966] x64_sys_call+0x2bb4/0x3000 [ 75.280060][ T4966] do_syscall_64+0xd2/0x200 [ 75.284609][ T4966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.290552][ T4966] [ 75.292875][ T4966] value changed: 0x00000000 -> 0x00000070 [ 75.298591][ T4966] [ 75.300927][ T4966] Reported by Kernel Concurrency Sanitizer on: [ 75.307090][ T4966] CPU: 1 UID: 0 PID: 4966 Comm: syz.2.349 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.316918][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 75.326986][ T4966] ================================================================== [ 75.336813][ T4966] syz.2.349: attempt to access beyond end of device [ 75.336813][ T4966] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 75.350321][ T4966] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 76.127403][ T179] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.139421][ T179] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.150594][ T179] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.163106][ T179] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0