last executing test programs: 8.384070397s ago: executing program 1 (id=14): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x200}) 5.014233295s ago: executing program 1 (id=37): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, 0x0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0x31}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) 3.533861412s ago: executing program 2 (id=44): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0200000004000000070000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x80, 0x100}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x6, 0x8, &(0x7f00000002c0)="0000ffffffff", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) rt_sigpending(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000880)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r7 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 3.399946s ago: executing program 1 (id=46): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0x98e7}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000022c0)=ANY=[@ANYBLOB="400100001a000100000000000000000000000000000000000000000000000000ff01000000000000000000000000000100000000fffe00020000002000000000", @ANYRES32=0x0, @ANYRES16=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20004040}, 0x80) 3.277308378s ago: executing program 1 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x2, 0x0, 0x6, 0x200}) 2.732859589s ago: executing program 0 (id=49): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x1, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x0, 0x0, 0x0, 0x1000000], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x230, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 2.697940811s ago: executing program 0 (id=50): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) sendfile(r0, r0, 0x0, 0x7a680000) 2.676413373s ago: executing program 2 (id=51): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x8000000000000000, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x21}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x8040600) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, r3, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0x31}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) 2.420161748s ago: executing program 1 (id=53): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140"], 0xe4}}, 0x10) 2.311423824s ago: executing program 1 (id=55): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, @perf_bp={0x0}, 0x1016c7, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) io_setup(0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x4, 0x0, 0x0, 0xfb, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xe) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={r3}, &(0x7f0000000140)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r7, 0x5) setsockopt(r8, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r8, &(0x7f0000002980), 0x400000000000239, 0x0) 2.04540273s ago: executing program 3 (id=56): syz_io_uring_setup(0xfb, &(0x7f0000000140)={0x0, 0x8e3c, 0x8000}, &(0x7f00000000c0), &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x2}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810dc}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) r5 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xb1, &(0x7f00000007c0)=""/177, 0x41000, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0xe, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980), &(0x7f00000009c0)=[{0x5, 0x2, 0x7, 0xb}], 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0x0) r7 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 1.859488981s ago: executing program 3 (id=57): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, 0x0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0x31}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) 1.639119544s ago: executing program 0 (id=59): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.260439326s ago: executing program 0 (id=61): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xf2dc39a4ac3b383a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x29, 0xb, "1c"}], 0x18}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) timer_getoverrun(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x5e, &(0x7f0000000340)={[{@errors_remount}, {@nodiscard}, {@dioread_nolock}]}, 0x2, 0x468, &(0x7f0000000f00)="$eJzs28tvVFUYAPDvTh/Iy1bEBw+likaisaUFlYULMJq40MREF7isbSHIQA2tiRCi1QUuDYl749LEv8CVLjTqysSVie4NCTHECLq65s7c206HmXGYDh3q/H7Jpefcx5zzzbln5px7mAD61lj2TxKxLSJ+jYiRanb1CWPVPzeuXZz5+9rFmSTS9PU/ksp5169dnClOLa7bWmSWqvk9DcpdOH/h9HS5PHcuz08snnlnYuH8hadPnZk+OXdy7uzUkSOHD00+9+zUM80rn7QfZ1an67vfn9+76+U3L786c/zyWz98mRTx18XRJWMN9g0Uice7XFivba9JJ4N5YqBHlaFtWRNlzTVU6f8jMRCDy8dG4qWPelo54LZK0zQdbnYwiaW0gZlfVq4FNrJEP4Y+VXzVZ/PfYlufkced4eqx6gQoi/tGvlWPDEYpP2eobn7bTdls6/jSP59lW9ye5xAAAKt8faz69+bxXynurznvaL42NBoR90TEjoi4NyJ2RsR9EZVzH4iIB2uuaWd5pn6R5ObxT+lKZ5G1Jxv/PZ+vba0e/xWjvxgdyHPbK/EPJSdOlecORsTdEXEghjZl+ckWZXzz4s+fNDs2VjP+y7as/GIsmNfjyuCm1dfMTi9OryXmWlc/jNg92Cj+ZHklIGvHXRGxe19nZZx68ou9zY79d/wtDHZWn1rp5xFPVNt/KeriLySt1ycn7ory3MGJ4q642Y8/XXqtWflrir8Lsvbf0vD+X45/NKldr11o8CJ/pS3LuPTbx03nNJ3e/8PJG5V08ez6venFxXOTEcPJK/n+oyv7p1auLfLF+Vn8B/Y37v87YuWd2BMR2U38UEQ8HBH78ro/EhGPRsT+FvF//8Jjb3ce/+2VxT97S+1/64mB0999tarQ0RbxJ9Gg/Q9XUgfyPe18/rVbwbW+fwAAALARlCJiWySl8eV0qTQ+Xv3/8jtjS6k8v7D41In5d8/OVn8jMBpDpeJJ10jN89DJ/IlBkZ/Kp/lF/lD+3PjTgc2V/PjMfHm218FDn9vapP9nfvf7Dfj/68I6GrBBddr/0zT9oMtVAdaZ73/oX/o/9K8G/X9zXX7TetUFWF+Nvv9N7KE/GP9D/9L/oX/p/9C/9H/oS2v5XX/XEtnnzx1QjbYTadqj0oe78zqbu1GfKK2xGn9+W70F74w2lahL9PqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDv+DQAA//8AXODS") connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 1.065348348s ago: executing program 0 (id=62): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 1.054801118s ago: executing program 2 (id=63): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") r0 = syz_open_dev$loop(&(0x7f0000002f40), 0x101000000000000, 0x801) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000002f80)={0x6, 0x8}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214000000000000000000140000001100"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x14, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001a00010001002000030000000a808000"/36], 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x5, 0x40, 0x0, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x7d6f, 0x8000}}) sendmsg$nl_route_sched(r1, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=@newqdisc={0x168, 0x24, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff1, 0x5}, {0xfff3, 0xa}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xd, 0x2, 0xf, 0x0, 0xb5b, 0x9, 0x2}}, {0x8, 0x2, [0x9731, 0x401]}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x9, 0x2, 0x5, 0x4, 0x2, 0x4}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x7110989a1feb810e}, @TCA_NETEM_CORR={0x10, 0x1, {0x8, 0x2, 0x2}}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x6, 0x800, 0xb}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffffffffffa}]}}}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x4f, 0x6, 0xfffffff1, 0x0, 0x6, 0x1000, 0x4}}, {0xc, 0x2, [0x4, 0xf, 0x9, 0x2]}}, {{0x1c, 0x1, {0x0, 0x9, 0x7, 0x8000, 0x2, 0x4, 0x69b8a8cc, 0x2}}, {0x8, 0x2, [0x7, 0x118b]}}, {{0x1c, 0x1, {0x2, 0x1, 0x401, 0x6, 0x0, 0x4, 0x4, 0x9}}, {0x16, 0x2, [0x2, 0x4, 0x6, 0x5, 0x8, 0x1, 0x6, 0xd4a, 0xffc0]}}]}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x3, '\x00', 0x1, 0x7, 0xe, 0x8}}}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xb}}, @TCA_RATE={0x6, 0x5, {0x7, 0xf}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002400)=@delchain={0x24, 0x64, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20008080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0400000000000000000200000024000480200001800e000100636f6e6e6c696d69740000000c00028008000140000004011500010073797a300000000008000b4000000004140000001100010000000000000000000000000a"], 0x74}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000580)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3, 0x6c, 0x0, 0x0, 0x0, 0x6, 0x0, @multicast2, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x16, 0x10, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@synack={0x1e, 0x10, 0x2, 0x2, 0x24, 0x9}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 780.879214ms ago: executing program 2 (id=64): lseek(0xffffffffffffffff, 0x80000000, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_vmscan_kswapd_sleep\x00', r0, 0x0, 0x6}, 0x18) r1 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)={0x0, 0x0, @c}, 0x29, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="1cebd89e1eef1ee787d72ffcd367985c47253c446d20598c5acd3864be8aaf790d3eae51c85c4798639c80f017841e9f205d5bf836196726e809d155e37ad0ecbb20dad700b51e3b3468e421cdece5bb394355c71613b84dced0cee04b957e410c47fcc88756c98bd194cbb7ad5044988589261f5aa4539cc1f28bd38d7e45d323abfc82de9199c0e5f7523898efd12637bc5c6cda09e9577d5898d7f0b64c720a4324309a9637c0b183898ffcd329623480ce174e08038fb4146145b501", 0xbe, 0xffffffffffffffff) keyctl$search(0xa, r1, &(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={'syz', 0x3}, r2) syz_open_dev$loop(&(0x7f0000000340), 0x18a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x19}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x3c}, 0x1, 0x0, 0x0, 0x40004}, 0x200008c0) setrlimit(0xd, &(0x7f0000000480)={0x1, 0x71}) keyctl$invalidate(0x15, r1) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000540)={r5, 0x1, 0x6, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0xc, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4014}, 0x401c0) syz_io_uring_setup(0x3e40, &(0x7f0000000680)={0x0, 0xe6c5, 0x1, 0x2, 0x177, 0x0, r3}, &(0x7f0000000700)=0x0, &(0x7f0000000740)) syz_io_uring_setup(0x42f2, &(0x7f0000000780)={0x0, 0x523f, 0x8000, 0x1, 0x2c9, 0x0, r0}, &(0x7f0000000800), &(0x7f0000000840)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000900)=@IORING_OP_SYMLINKAT={0x26, 0x2, 0x0, r0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r9}}) rt_sigprocmask(0x1, &(0x7f0000000940)={[0xfffffffffffff800]}, &(0x7f0000000980), 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000a40)={'nr0\x00', &(0x7f00000009c0)=@ethtool_coalesce={0xe, 0x1, 0x7, 0x9, 0xffffffff, 0xa, 0x7, 0x2, 0xb7, 0xb, 0x2, 0x2, 0x10001, 0x2, 0x71, 0x6, 0x3, 0x7, 0x0, 0x2c, 0x8, 0x3ff, 0x6}}) socket$isdn_base(0x22, 0x3, 0x0) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000a80)={{0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x10000}, 0xffffffffffffffff, {[0x3, 0x10e80000, 0x9, 0x3, 0x7, 0x14, 0x0, 0x1ff]}}, 0x5c) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x5, &(0x7f0000000b00)=0xffffffff, 0x4) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000b40)={'veth0_virt_wifi\x00', 0x4}) sendmsg$NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x30, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x7}}}}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x28004800}, 0x4c004) 706.678128ms ago: executing program 2 (id=66): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r3, &(0x7f00000004c0)="a16ef0c4f68020cbe69bbad0cb888af5bf32f5ce9e565b", 0x17, 0x4040, &(0x7f0000000500)={0x2, 0x4e20, @remote}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB="feffffff00"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000020000000000000000000000f800000000e1ffffff000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000000700)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x51) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x400, &(0x7f0000001080)=0x0) io_submit(r8, 0x20000029, &(0x7f0000000180)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sys_enter\x00', r12}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x4000054) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="017000fbdb0db905bb472d8c47017789f7a60893390499579d410055000000000000bd4dc65aaf1044ab4e572409580d77b2e68df64d66f2d4d3c792e1165ce99cc5e36003ea7db5ccf7a1dfdb52c7743697de7aa9078258e0793fed72f045e1054ee0dbb2dc222949f381b4a115ca662a6555580081396db661904e76dfff0397840fdd1b55ba78e57d03e3306356c91c9bf89f98543b549eeb8b035172af416c38f083ef215adb96c102eb"], 0x1c}}, 0x1000) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 677.250841ms ago: executing program 3 (id=67): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x29, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="37040000000000000000010000006400088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392230000080060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000100", @ANYRES32=r6], 0x80}}, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="edea4f8cfc7ebebbf89646d86edab4166dc1915762a6c1ed00eaa60d97d72c1e0d", 0x21}, {&(0x7f00000003c0)="09f95baffeca25c1990c44a04e9dd28a661440acc44aadb39135edb739fe95ef2439cb3b0a1ee51c9cf0d2f9e4b66c88caf7aaab98864e5e5f4b80dff57a565f167897019d1a04fcf4f210b0068e", 0x4e}], 0x2, &(0x7f00000006c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x2d, 0x0, 0x0, [0x0, 0xffffffff]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x34}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xe4, [@broadcast, @empty, @private=0xa010100, @broadcast, @broadcast, @rand_addr=0x64010102]}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0x6, "d1354430"}, {0x0, 0xd, "4abe65607a0add220b9c48"}, {0x2, 0xd, "4e7f831a48d2dbbfc30077"}, {0x5, 0x4, "e060"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8adc}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x158}, 0x44) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000500)={0x281, 0x3}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41000, 0xa0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0xffffffffffffffb3) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) 570.980857ms ago: executing program 2 (id=68): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x18, 0x3}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = io_uring_setup(0x70bf, &(0x7f0000000380)={0x0, 0x6ed8, 0x1, 0x0, 0x200}) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setresuid(0xee01, 0xee01, 0x0) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000440), 0x0, 0x0, 0x0) exit(0x5e0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc283, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xda, 0x0, 0x37, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0xc, 0x7, 0x1, {0x22, 0x33d}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x2}}}}}]}}]}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRESHEX=r9, @ANYBLOB="29738335f6c2f81f1b3df7a435b13a111638406d0744ab", @ANYBLOB="3e27c6a51042df50aa53d9c6652f7ebe21399c9dd7dea10d304f6cd971bc8d8a2574e03d0a32dba666a42678cc3cb514b763a52a3dce1d06ea52af3165681119fa41692911005f6cd67c04ce7c6661d9c23e1d3b8ed338c6b7c4dd0d13bd509987589134989935824a", @ANYRES16=r7, @ANYRES16=r8, @ANYRES32=0x0, @ANYRES32=r5], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10) munlock(&(0x7f0000d15000/0x4000)=nil, 0x4000) mmap(&(0x7f0000d16000/0x2000)=nil, 0x2000, 0x8, 0x100010, r5, 0x46fcd000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 511.02165ms ago: executing program 3 (id=71): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb0100528736dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 224.579107ms ago: executing program 0 (id=74): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 223.935757ms ago: executing program 3 (id=75): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x10012, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x19003}}], 0x48}, 0x0) 223.344207ms ago: executing program 4 (id=76): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f401088070"], 0x21c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000003c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0006}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], &(0x7f0000000280), 0x200) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 202.275668ms ago: executing program 3 (id=77): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000240)={[{@nogrpid}, {@resuid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsold}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x1c, 0x0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0x31}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044}, 0xc000) 121.156903ms ago: executing program 4 (id=78): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24048085) close(r0) 106.021474ms ago: executing program 4 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x0, 0x600, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) 76.780566ms ago: executing program 4 (id=80): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x5, {{0xa, 0x4e22, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1000, @rand_addr=' \x01\x00', 0x3}}, {{0xa, 0x4e21, 0xd4, @mcast2, 0x8}}, {{0xa, 0x4e22, 0x1ff, @mcast1, 0x2}}]}, 0x210) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000240)) fgetxattr(r0, &(0x7f0000000280)=@known='security.apparmor\x00', &(0x7f00000002c0)=""/86, 0x56) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x4001, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000380)={0x0, 0x3, [@broadcast, @broadcast, @remote]}) r2 = perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0xbf, 0x1, 0x1, 0xf, 0x0, 0x1, 0xe01a0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000003c0), 0x7}, 0x10, 0x200, 0x8, 0x6, 0xd, 0x1, 0x8, 0x0, 0xffffffe7, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x7ff) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'ipvlan0\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'veth0_to_team\x00', &(0x7f00000004c0)=@ethtool_stats={0x1d, 0x1, [0x81]}}) r5 = syz_open_dev$vcsn(&(0x7f0000000540), 0x4, 0x600980) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000580)) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x88, 0x12, 0x100, 0x70bd29, 0x25dfdbfc, {0x6, 0xd, 0x4, 0x3, {0x4e24, 0x4e22, [0xf3, 0x8, 0xa75, 0x1], [0x3a, 0xc, 0x5, 0x6], r4, [0x5, 0x7]}, 0xb93, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x3b, 0x1, "7ce57ce08e10ccdbdd373c8ac599ae066144e5eb59f427b6edf6ac170581523a577948479aecabd492ff458389b2b66afa64f7534f92da"}]}, 0x88}, 0x1, 0x0, 0x0, 0x200448d1}, 0x4844) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000740)=0x40, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x40a000, 0x0) statx(r5, &(0x7f00000007c0)='./file0\x00', 0x100, 0x4, &(0x7f0000000800)) fremovexattr(r3, &(0x7f0000000900)=@known='system.posix_acl_default\x00') ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000a40)=0xe8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r5) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r7, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x27}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$binfmt_script(r5, &(0x7f0000000bc0)={'#! ', './file0', [{0x20, '\x00'}], 0xa, "9ab773f5225468112b1afb1f15d06d96b598f6b09369cb86fe4c191d303b52c083bf781918f2a0b0ad3f9e3233a919a525e094ddea1fef12210b59113ef616beffd4978bcb41d1108b60"}, 0x57) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000c40)={0x0, 'syzkaller0\x00', {0x1}, 0x413e}) setsockopt$PNPIPE_ENCAP(r5, 0x113, 0x1, &(0x7f0000000c80)=0x1, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)={0x1b, 0x0, 0x0, 0x5, 0x0, r5, 0x54, '\x00', r6, r5, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) execve(&(0x7f0000000d40)='./file0/file0\x00', &(0x7f0000000e80)={[&(0x7f0000000d80)='$)[%\x00', &(0x7f0000000dc0)='/dev/net/tun\x00', &(0x7f0000000e00)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000e40)='\x00']}, &(0x7f0000000fc0)={[&(0x7f0000000ec0)='nl80211\x00', &(0x7f0000000f00)='\xff\xff\xff\xff\xff\xff', &(0x7f0000000f40)='system.posix_acl_default\x00', &(0x7f0000000f80)='nl80211\x00']}) socket$nl_netfilter(0x10, 0x3, 0xc) 914.5µs ago: executing program 4 (id=81): syz_io_uring_setup(0xfb, &(0x7f0000000140)={0x0, 0x8e3c, 0x8000}, &(0x7f00000000c0), &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x2}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810dc}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x18) r5 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xb1, &(0x7f00000007c0)=""/177, 0x41000, 0x29, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0xe, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980), &(0x7f00000009c0)=[{0x5, 0x2, 0x7, 0xb}], 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 0s ago: executing program 4 (id=82): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x29, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg2\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="80000000", @ANYRES16=r4, @ANYBLOB="37040000000000000000010000006400088030000080060005000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392230000080060005000080000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b392208000100", @ANYRES32=r6], 0x80}}, 0x0) sendmsg$inet(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="edea4f8cfc7ebebbf89646d86edab4166dc1915762a6c1ed00eaa60d97d72c1e0d", 0x21}, {&(0x7f00000003c0)="09f95baffeca25c1990c44a04e9dd28a661440acc44aadb39135edb739fe95ef2439cb3b0a1ee51c9cf0d2f9e4b66c88caf7aaab98864e5e5f4b80dff57a565f167897019d1a04fcf4f210b0068e", 0x4e}], 0x2, &(0x7f00000006c0)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x2d, 0x0, 0x0, [0x0, 0xffffffff]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x34}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @multicast1}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x58, 0x0, 0x7, {[@lsrr={0x83, 0x1b, 0xe4, [@broadcast, @empty, @private=0xa010100, @broadcast, @broadcast, @rand_addr=0x64010102]}, @cipso={0x86, 0x2a, 0x1, [{0x6, 0x6, "d1354430"}, {0x0, 0xd, "4abe65607a0add220b9c48"}, {0x2, 0xd, "4e7f831a48d2dbbfc30077"}, {0x5, 0x4, "e060"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @loopback, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8adc}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x158}, 0x44) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000500)={0x281, 0x3}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41000, 0xa0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0xffffffffffffffb3) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) kernel console output (not intermixed with test programs): [ 17.718426][ T29] audit: type=1400 audit(1740063907.116:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 21.361974][ T29] audit: type=1400 audit(1740063910.756:82): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.362720][ T3283] cgroup: Unknown subsys name 'net' [ 21.384689][ T29] audit: type=1400 audit(1740063910.756:83): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.412088][ T29] audit: type=1400 audit(1740063910.796:84): avc: denied { unmount } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.545323][ T3283] cgroup: Unknown subsys name 'cpuset' [ 21.551295][ T3283] cgroup: Unknown subsys name 'rlimit' [ 21.679994][ T29] audit: type=1400 audit(1740063911.076:85): avc: denied { setattr } for pid=3283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.703313][ T29] audit: type=1400 audit(1740063911.076:86): avc: denied { create } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.723788][ T29] audit: type=1400 audit(1740063911.076:87): avc: denied { write } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.744277][ T29] audit: type=1400 audit(1740063911.076:88): avc: denied { read } for pid=3283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 21.749953][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.764700][ T29] audit: type=1400 audit(1740063911.076:89): avc: denied { mounton } for pid=3283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.797992][ T29] audit: type=1400 audit(1740063911.076:90): avc: denied { mount } for pid=3283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.821298][ T29] audit: type=1400 audit(1740063911.166:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.850290][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.572986][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 23.595734][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 23.622686][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 23.633042][ T3295] chnl_net:caif_netlink_parms(): no params data found [ 23.697724][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.704849][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.711929][ T3301] bridge_slave_0: entered allmulticast mode [ 23.718235][ T3301] bridge_slave_0: entered promiscuous mode [ 23.736110][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.743175][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.750270][ T3301] bridge_slave_1: entered allmulticast mode [ 23.756724][ T3301] bridge_slave_1: entered promiscuous mode [ 23.772903][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.780103][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.787253][ T3296] bridge_slave_0: entered allmulticast mode [ 23.793714][ T3296] bridge_slave_0: entered promiscuous mode [ 23.807971][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 23.816448][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.823481][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.830737][ T3304] bridge_slave_0: entered allmulticast mode [ 23.836995][ T3304] bridge_slave_0: entered promiscuous mode [ 23.843193][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.850323][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.857534][ T3296] bridge_slave_1: entered allmulticast mode [ 23.863895][ T3296] bridge_slave_1: entered promiscuous mode [ 23.879891][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.886963][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.894169][ T3295] bridge_slave_0: entered allmulticast mode [ 23.900540][ T3295] bridge_slave_0: entered promiscuous mode [ 23.906963][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.914029][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.921187][ T3304] bridge_slave_1: entered allmulticast mode [ 23.927575][ T3304] bridge_slave_1: entered promiscuous mode [ 23.938187][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.950006][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.957099][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.964169][ T3295] bridge_slave_1: entered allmulticast mode [ 23.970563][ T3295] bridge_slave_1: entered promiscuous mode [ 23.990121][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.014278][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.030569][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.040534][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.050514][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.060257][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.070305][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.097468][ T3301] team0: Port device team_slave_0 added [ 24.120123][ T3301] team0: Port device team_slave_1 added [ 24.134489][ T3295] team0: Port device team_slave_0 added [ 24.140787][ T3304] team0: Port device team_slave_0 added [ 24.147069][ T3296] team0: Port device team_slave_0 added [ 24.157130][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.164187][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.171502][ T3297] bridge_slave_0: entered allmulticast mode [ 24.177820][ T3297] bridge_slave_0: entered promiscuous mode [ 24.184540][ T3295] team0: Port device team_slave_1 added [ 24.190883][ T3304] team0: Port device team_slave_1 added [ 24.201045][ T3296] team0: Port device team_slave_1 added [ 24.211812][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.218768][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.244672][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.255352][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.262504][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.269749][ T3297] bridge_slave_1: entered allmulticast mode [ 24.276013][ T3297] bridge_slave_1: entered promiscuous mode [ 24.295272][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.302218][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.328141][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.347999][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.354972][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.380955][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.392085][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.399042][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.424985][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.436010][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.442949][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.468851][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.482009][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.489099][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.514991][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.530088][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.537059][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.562967][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.580815][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.594612][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.601595][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.627559][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.652917][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.687711][ T3301] hsr_slave_0: entered promiscuous mode [ 24.693695][ T3301] hsr_slave_1: entered promiscuous mode [ 24.709312][ T3296] hsr_slave_0: entered promiscuous mode [ 24.715303][ T3296] hsr_slave_1: entered promiscuous mode [ 24.721163][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.728757][ T3296] Cannot create hsr debugfs directory [ 24.736093][ T3304] hsr_slave_0: entered promiscuous mode [ 24.742028][ T3304] hsr_slave_1: entered promiscuous mode [ 24.747782][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.755338][ T3304] Cannot create hsr debugfs directory [ 24.761326][ T3297] team0: Port device team_slave_0 added [ 24.767742][ T3297] team0: Port device team_slave_1 added [ 24.775312][ T3295] hsr_slave_0: entered promiscuous mode [ 24.781391][ T3295] hsr_slave_1: entered promiscuous mode [ 24.787213][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.794828][ T3295] Cannot create hsr debugfs directory [ 24.839027][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.846083][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.872000][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.897314][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.904272][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.930253][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.980368][ T3297] hsr_slave_0: entered promiscuous mode [ 24.986305][ T3297] hsr_slave_1: entered promiscuous mode [ 24.992114][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 24.999689][ T3297] Cannot create hsr debugfs directory [ 25.098081][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.106385][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.116807][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.130354][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.158273][ T3295] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.167618][ T3295] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.178005][ T3295] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.187755][ T3295] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.214247][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.222547][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.236626][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.256703][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.269058][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.279522][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.288775][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.301625][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.340481][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.349135][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.358372][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.367182][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.375834][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.389935][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.414285][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.427493][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.434612][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.445338][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.457937][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.465031][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.476455][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.483562][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.498887][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.505990][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.528708][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.558792][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.569332][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.584062][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.600789][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.614373][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.624802][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.639566][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.646620][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.656374][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.663438][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.680968][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.688044][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.707801][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.715511][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.722558][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.735784][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.752963][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.760162][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.768953][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.776004][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.806841][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.824940][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.865168][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.938515][ T3295] veth0_vlan: entered promiscuous mode [ 25.958730][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.981639][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.990022][ T3295] veth1_vlan: entered promiscuous mode [ 26.005422][ T3304] veth0_vlan: entered promiscuous mode [ 26.013606][ T3304] veth1_vlan: entered promiscuous mode [ 26.042843][ T3304] veth0_macvtap: entered promiscuous mode [ 26.054618][ T3304] veth1_macvtap: entered promiscuous mode [ 26.062341][ T3296] veth0_vlan: entered promiscuous mode [ 26.085951][ T3296] veth1_vlan: entered promiscuous mode [ 26.096499][ T3295] veth0_macvtap: entered promiscuous mode [ 26.107781][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.131011][ T3295] veth1_macvtap: entered promiscuous mode [ 26.141141][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.155747][ T3296] veth0_macvtap: entered promiscuous mode [ 26.163322][ T3296] veth1_macvtap: entered promiscuous mode [ 26.170464][ T3301] veth0_vlan: entered promiscuous mode [ 26.176361][ T3304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.185262][ T3304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.193971][ T3304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.202682][ T3304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.217537][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.228022][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.238515][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.249138][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.259714][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.270073][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.278068][ T3297] veth0_vlan: entered promiscuous mode [ 26.285234][ T3301] veth1_vlan: entered promiscuous mode [ 26.293191][ T3297] veth1_vlan: entered promiscuous mode [ 26.302311][ T3295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.311065][ T3295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.319825][ T3295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.328539][ T3295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.346833][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.357329][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.367204][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.377678][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.388424][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.401089][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.411565][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.421400][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.424775][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 26.424786][ T29] audit: type=1400 audit(1740063915.816:110): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.X92RIE/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 26.431822][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.437874][ T29] audit: type=1400 audit(1740063915.816:111): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 26.437894][ T29] audit: type=1400 audit(1740063915.816:112): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.X92RIE/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 26.467145][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.471978][ T29] audit: type=1400 audit(1740063915.816:113): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.496515][ T3297] veth0_macvtap: entered promiscuous mode [ 26.519225][ T29] audit: type=1400 audit(1740063915.816:114): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.X92RIE/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 26.530639][ T3297] veth1_macvtap: entered promiscuous mode [ 26.548156][ T29] audit: type=1400 audit(1740063915.816:115): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.X92RIE/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 26.559915][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.580502][ T29] audit: type=1400 audit(1740063915.816:116): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 26.586166][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.617435][ T29] audit: type=1400 audit(1740063916.016:117): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 26.623993][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.643436][ T29] audit: type=1400 audit(1740063916.016:118): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=4256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 26.653227][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.718725][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.729202][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.739646][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.753613][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.754292][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.764065][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.764076][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.764089][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.808734][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.819151][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.829830][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.838000][ T3296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.846992][ T3296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.855699][ T3296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.864370][ T3296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.877933][ T29] audit: type=1400 audit(1740063916.276:119): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 26.913068][ T3301] veth0_macvtap: entered promiscuous mode [ 26.920977][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.929771][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.938520][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.947327][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.961961][ T3301] veth1_macvtap: entered promiscuous mode [ 26.992054][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.002773][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.002784][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.002795][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.033044][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.043601][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.053523][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.064015][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.077160][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.093367][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.103851][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.113655][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.124168][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.134000][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.144473][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.154398][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.164843][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.175455][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.183789][ T3301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.192686][ T3301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.201577][ T3301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.210323][ T3301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.235254][ T3443] loop1: detected capacity change from 0 to 512 [ 27.244914][ T3443] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.258066][ T3443] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 27.297987][ T3443] EXT4-fs (loop1): 1 truncate cleaned up [ 27.304035][ T3443] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.385945][ T3458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5'. [ 27.406813][ T3459] loop0: detected capacity change from 0 to 512 [ 27.437506][ T3456] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 27.462035][ T3459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 27.477995][ T3456] 9pnet_fd: Insufficient options for proto=fd [ 27.506449][ T3459] EXT4-fs (loop0): 1 truncate cleaned up [ 27.512353][ T3462] loop3: detected capacity change from 0 to 512 [ 27.512664][ T3459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.538523][ T3462] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 27.544061][ T3465] loop2: detected capacity change from 0 to 1024 [ 27.554953][ T3462] EXT4-fs (loop3): orphan cleanup on readonly fs [ 27.562569][ T3462] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7: invalid indirect mapped block 256 (level 2) [ 27.578241][ T3465] EXT4-fs: Ignoring removed orlov option [ 27.586586][ T3462] EXT4-fs (loop3): 2 truncates cleaned up [ 27.592756][ T3462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 27.611708][ T3462] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.635900][ T3465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.918200][ T3460] process 'syz.3.7' launched '/dev/fd/13' with NULL argv: empty string added [ 27.931679][ T3460] loop3: detected capacity change from 0 to 512 [ 27.948222][ T3460] ======================================================= [ 27.948222][ T3460] WARNING: The mand mount option has been deprecated and [ 27.948222][ T3460] and is ignored by this kernel. Remove the mand [ 27.948222][ T3460] option from the mount to silence this warning. [ 27.948222][ T3460] ======================================================= [ 27.985316][ T3460] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 27.994669][ T3460] EXT4-fs (loop3): orphan cleanup on readonly fs [ 28.010482][ T3460] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7: bg 0: block 248: padding at end of block bitmap is not set [ 28.025679][ T3460] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.7: Failed to acquire dquot type 1 [ 28.041218][ T3460] EXT4-fs (loop3): 1 truncate cleaned up [ 28.049298][ T3460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.124052][ T3443] syz.1.6 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 28.138042][ T3443] CPU: 0 UID: 0 PID: 3443 Comm: syz.1.6 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 28.138100][ T3443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 28.138113][ T3443] Call Trace: [ 28.138117][ T3443] [ 28.138123][ T3443] dump_stack_lvl+0xf2/0x150 [ 28.138146][ T3443] dump_stack+0x15/0x1a [ 28.138164][ T3443] dump_header+0x83/0x2d0 [ 28.138236][ T3443] oom_kill_process+0x341/0x4c0 [ 28.138279][ T3443] out_of_memory+0x9af/0xbe0 [ 28.138310][ T3443] ? css_next_descendant_pre+0x11c/0x140 [ 28.138334][ T3443] mem_cgroup_out_of_memory+0x13e/0x190 [ 28.138362][ T3443] try_charge_memcg+0x508/0x7f0 [ 28.138451][ T3443] obj_cgroup_charge_pages+0xbd/0x1a0 [ 28.138469][ T3443] __memcg_kmem_charge_page+0x9d/0x170 [ 28.138544][ T3443] __alloc_frozen_pages_noprof+0x1bc/0x340 [ 28.138570][ T3443] alloc_pages_mpol+0xb4/0x260 [ 28.138589][ T3443] alloc_pages_noprof+0xe8/0x130 [ 28.138627][ T3443] __vmalloc_node_range_noprof+0x6e5/0xe70 [ 28.138715][ T3443] __kvmalloc_node_noprof+0x121/0x170 [ 28.138744][ T3443] ? ip_set_alloc+0x1f/0x30 [ 28.138767][ T3443] ip_set_alloc+0x1f/0x30 [ 28.138789][ T3443] hash_netiface_create+0x273/0x730 [ 28.138869][ T3443] ? __nla_parse+0x40/0x60 [ 28.138900][ T3443] ? __pfx_hash_netiface_create+0x10/0x10 [ 28.138925][ T3443] ip_set_create+0x3b1/0x970 [ 28.138953][ T3443] ? __nla_parse+0x40/0x60 [ 28.139021][ T3443] nfnetlink_rcv_msg+0x4a9/0x570 [ 28.139051][ T3443] netlink_rcv_skb+0x12c/0x230 [ 28.139108][ T3443] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 28.139134][ T3443] nfnetlink_rcv+0x16c/0x15d0 [ 28.139170][ T3443] ? kmem_cache_free+0xdc/0x2d0 [ 28.139190][ T3443] ? nlmon_xmit+0x51/0x60 [ 28.139214][ T3443] ? __kfree_skb+0x102/0x150 [ 28.139230][ T3443] ? consume_skb+0x49/0x160 [ 28.139245][ T3443] ? nlmon_xmit+0x51/0x60 [ 28.139345][ T3443] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 28.139369][ T3443] ? __dev_queue_xmit+0xb6e/0x2090 [ 28.139389][ T3443] ? ref_tracker_free+0x3a5/0x410 [ 28.139450][ T3443] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 28.139480][ T3443] netlink_unicast+0x599/0x670 [ 28.139502][ T3443] netlink_sendmsg+0x5cc/0x6e0 [ 28.139569][ T3443] ? __pfx_netlink_sendmsg+0x10/0x10 [ 28.139593][ T3443] __sock_sendmsg+0x140/0x180 [ 28.139617][ T3443] ____sys_sendmsg+0x326/0x4b0 [ 28.139643][ T3443] __sys_sendmsg+0x19d/0x230 [ 28.139766][ T3443] __x64_sys_sendmsg+0x46/0x50 [ 28.139788][ T3443] x64_sys_call+0x2734/0x2dc0 [ 28.139809][ T3443] do_syscall_64+0xc9/0x1c0 [ 28.139831][ T3443] ? clear_bhb_loop+0x55/0xb0 [ 28.139899][ T3443] ? clear_bhb_loop+0x55/0xb0 [ 28.139931][ T3443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.139956][ T3443] RIP: 0033:0x7f4aa90bcde9 [ 28.139974][ T3443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.139992][ T3443] RSP: 002b:00007f4aa7727038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 28.140016][ T3443] RAX: ffffffffffffffda RBX: 00007f4aa92d5fa0 RCX: 00007f4aa90bcde9 [ 28.140028][ T3443] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000004 [ 28.140039][ T3443] RBP: 00007f4aa913e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 28.140051][ T3443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.140063][ T3443] R13: 0000000000000000 R14: 00007f4aa92d5fa0 R15: 00007ffd28b54ac8 [ 28.140080][ T3443] [ 28.140087][ T3443] memory: usage 307200kB, limit 307200kB, failcnt 237 [ 28.479944][ T3443] memory+swap: usage 307644kB, limit 9007199254740988kB, failcnt 0 [ 28.479967][ T3443] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 28.479976][ T3443] Memory cgroup stats for /syz1: [ 28.480092][ T3443] cache 4096 [ 28.480101][ T3443] rss 0 [ 28.480106][ T3443] shmem 0 [ 28.480111][ T3443] mapped_file 0 [ 28.480116][ T3443] dirty 0 [ 28.480121][ T3443] writeback 0 [ 28.480127][ T3443] workingset_refault_anon 84 [ 28.480138][ T3443] workingset_refault_file 1 [ 28.480144][ T3443] swap 454656 [ 28.480149][ T3443] swapcached 0 [ 28.480154][ T3443] pgpgin 374 [ 28.480160][ T3443] pgpgout 373 [ 28.480166][ T3443] pgfault 358 [ 28.480172][ T3443] pgmajfault 41 [ 28.480177][ T3443] inactive_anon 0 [ 28.480257][ T3443] active_anon 0 [ 28.555297][ T3443] inactive_file 0 [ 28.558949][ T3443] active_file 4096 [ 28.562670][ T3443] unevictable 0 [ 28.566129][ T3443] hierarchical_memory_limit 314572800 [ 28.571519][ T3443] hierarchical_memsw_limit 9223372036854771712 [ 28.577671][ T3443] total_cache 4096 [ 28.581376][ T3443] total_rss 0 [ 28.584831][ T3443] total_shmem 0 [ 28.588272][ T3443] total_mapped_file 0 [ 28.592236][ T3443] total_dirty 0 [ 28.595711][ T3443] total_writeback 0 [ 28.599573][ T3443] total_workingset_refault_anon 84 [ 28.604655][ T3443] total_workingset_refault_file 1 [ 28.609762][ T3443] total_swap 454656 [ 28.613554][ T3443] total_swapcached 0 [ 28.617502][ T3443] total_pgpgin 374 [ 28.621215][ T3443] total_pgpgout 373 [ 28.625029][ T3443] total_pgfault 358 [ 28.628825][ T3443] total_pgmajfault 41 [ 28.632797][ T3443] total_inactive_anon 0 [ 28.636980][ T3443] total_active_anon 0 [ 28.640948][ T3443] total_inactive_file 0 [ 28.640951][ T3479] loop4: detected capacity change from 0 to 2048 [ 28.651585][ T3443] total_active_file 4096 [ 28.655837][ T3443] total_unevictable 0 [ 28.659865][ T3443] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.6,pid=3442,uid=0 [ 28.667109][ T3479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.674735][ T3443] Memory cgroup out of memory: Killed process 3442 (syz.1.6) total-vm:95820kB, anon-rss:912kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 28.689545][ T3460] syz.3.7 (3460) used greatest stack depth: 9552 bytes left [ 28.724099][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.739219][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.965152][ T3486] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'. [ 29.051874][ T3483] Zero length message leads to an empty skb [ 29.112378][ T3443] syz.1.6 (3443) used greatest stack depth: 7128 bytes left [ 29.130704][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.254272][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.345103][ T3482] dccp_close: ABORT with 60 bytes unread [ 29.615819][ T3529] loop2: detected capacity change from 0 to 512 [ 29.635584][ T3529] EXT4-fs: Ignoring removed i_version option [ 29.641621][ T3529] EXT4-fs: Ignoring removed mblk_io_submit option [ 29.701469][ T3529] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 29.743381][ T3529] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.767029][ T3529] EXT4-fs (loop2): 1 truncate cleaned up [ 29.836839][ T3529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.890080][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.934820][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.039509][ T3595] loop4: detected capacity change from 0 to 1024 [ 30.059147][ T3595] EXT4-fs: Ignoring removed orlov option [ 30.077036][ T3588] loop2: detected capacity change from 0 to 2048 [ 30.078622][ T3595] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.090749][ T3588] msdos: Unknown parameter '' [ 30.407529][ T3620] loop0: detected capacity change from 0 to 512 [ 30.428837][ T3620] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.457881][ T3620] EXT4-fs (loop0): 1 truncate cleaned up [ 30.476122][ T3620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.513323][ T3608] loop3: detected capacity change from 0 to 8192 [ 30.611477][ T3608] loop3: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 30.612366][ T3608] loop3: p1 size 108986237 extends beyond EOD, truncated [ 30.745689][ T3608] loop3: p3 size 50462720 extends beyond EOD, truncated [ 30.762544][ T3608] loop3: p5 size 108986237 extends beyond EOD, truncated [ 30.787330][ T3608] loop3: p6 size 108986237 extends beyond EOD, truncated [ 30.816751][ T3608] loop3: p7 size 108986237 extends beyond EOD, truncated [ 30.830341][ T3608] loop3: p8 size 108986237 extends beyond EOD, truncated [ 30.862257][ T3608] loop3: p9 size 108986237 extends beyond EOD, truncated [ 30.885967][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.899934][ T3608] loop3: p10 size 108986237 extends beyond EOD, truncated [ 30.954660][ T3608] loop3: p11 size 108986237 extends beyond EOD, truncated [ 31.039165][ T3608] loop3: p12 size 108986237 extends beyond EOD, truncated [ 31.472009][ T3608] loop3: p13 size 108986237 extends beyond EOD, truncated [ 31.577861][ T3608] loop3: p14 size 108986237 extends beyond EOD, truncated [ 31.585929][ T3608] loop3: p15 size 108986237 extends beyond EOD, truncated [ 31.593888][ T3608] loop3: p16 size 108986237 extends beyond EOD, truncated [ 31.603219][ T3608] loop3: p17 size 108986237 extends beyond EOD, truncated [ 31.611202][ T3608] loop3: p18 size 108986237 extends beyond EOD, truncated [ 31.619094][ T3608] loop3: p19 size 108986237 extends beyond EOD, truncated [ 31.627012][ T3608] loop3: p20 size 108986237 extends beyond EOD, truncated [ 31.634922][ T3608] loop3: p21 size 108986237 extends beyond EOD, truncated [ 31.642609][ T3608] loop3: p22 size 108986237 extends beyond EOD, truncated [ 31.660183][ T3608] loop3: p23 size 108986237 extends beyond EOD, truncated [ 31.677102][ T3608] loop3: p24 size 108986237 extends beyond EOD, truncated [ 31.692115][ T3608] loop3: p25 size 108986237 extends beyond EOD, truncated [ 31.710457][ T3608] loop3: p26 size 108986237 extends beyond EOD, truncated [ 31.730291][ T3608] loop3: p27 size 108986237 extends beyond EOD, truncated [ 31.752308][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.780025][ T3608] loop3: p28 size 108986237 extends beyond EOD, truncated [ 31.860764][ T3608] loop3: p29 size 108986237 extends beyond EOD, truncated [ 31.865309][ T3641] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.875335][ T3608] loop3: p30 size 108986237 extends beyond EOD, truncated [ 31.887933][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 31.887994][ T29] audit: type=1326 audit(1740063921.286:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 31.917371][ T29] audit: type=1326 audit(1740063921.286:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 31.945416][ T29] audit: type=1326 audit(1740063921.286:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 31.950747][ T3608] loop3: p31 size 108986237 extends beyond EOD, truncated [ 31.968615][ T29] audit: type=1326 audit(1740063921.286:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 31.968636][ T29] audit: type=1326 audit(1740063921.286:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 31.968655][ T29] audit: type=1326 audit(1740063921.286:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 32.045382][ T29] audit: type=1326 audit(1740063921.286:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 32.068517][ T29] audit: type=1326 audit(1740063921.286:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 32.086458][ T3608] loop3: p32 size 108986237 extends beyond EOD, truncated [ 32.091835][ T29] audit: type=1326 audit(1740063921.286:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 32.122120][ T29] audit: type=1326 audit(1740063921.286:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.0.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1967c3cde9 code=0x7ffc0000 [ 32.149957][ T3641] loop0: detected capacity change from 0 to 512 [ 32.156761][ T3608] loop3: p33 size 108986237 extends beyond EOD, truncated [ 32.164331][ T3608] loop3: p34 size 108986237 extends beyond EOD, truncated [ 32.172719][ T3641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 32.188249][ T3608] loop3: p35 size 108986237 extends beyond EOD, truncated [ 32.196676][ T3641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.205362][ T3608] loop3: p36 size 108986237 extends beyond EOD, truncated [ 32.210132][ T3641] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.218277][ T3608] loop3: p37 size 108986237 extends beyond EOD, truncated [ 32.242870][ T3608] loop3: p38 size 108986237 extends beyond EOD, truncated [ 32.247811][ T3641] SELinux: Context system_u:object_r:initrc_var_run_t:s0 is not valid (left unmapped). [ 32.250976][ T3608] loop3: p39 size 108986237 extends beyond EOD, truncated [ 32.267841][ T3608] loop3: p40 size 108986237 extends beyond EOD, truncated [ 32.275728][ T3608] loop3: p41 size 108986237 extends beyond EOD, truncated [ 32.283557][ T3608] loop3: p42 size 108986237 extends beyond EOD, truncated [ 32.291489][ T3608] loop3: p43 size 108986237 extends beyond EOD, truncated [ 32.299304][ T3608] loop3: p44 size 108986237 extends beyond EOD, truncated [ 32.307409][ T3641] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 32.307969][ T3608] loop3: p45 size 108986237 extends beyond EOD, truncated [ 32.333130][ T3608] loop3: p46 size 108986237 extends beyond EOD, truncated [ 32.341076][ T3608] loop3: p47 size 108986237 extends beyond EOD, truncated [ 32.348973][ T3608] loop3: p48 size 108986237 extends beyond EOD, truncated [ 32.357147][ T3608] loop3: p49 size 108986237 extends beyond EOD, truncated [ 32.364961][ T3608] loop3: p50 size 108986237 extends beyond EOD, truncated [ 32.372827][ T3608] loop3: p51 size 108986237 extends beyond EOD, truncated [ 32.380690][ T3608] loop3: p52 size 108986237 extends beyond EOD, truncated [ 32.388519][ T3608] loop3: p53 size 108986237 extends beyond EOD, truncated [ 32.396959][ T3608] loop3: p54 size 108986237 extends beyond EOD, truncated [ 32.404569][ T3608] loop3: p55 size 108986237 extends beyond EOD, truncated [ 32.412603][ T3608] loop3: p56 size 108986237 extends beyond EOD, truncated [ 32.420420][ T3608] loop3: p57 size 108986237 extends beyond EOD, truncated [ 32.429208][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.429778][ T3608] loop3: p58 size 108986237 extends beyond EOD, truncated [ 32.446423][ T3608] loop3: p59 size 108986237 extends beyond EOD, truncated [ 32.454201][ T3608] loop3: p60 size 108986237 extends beyond EOD, truncated [ 32.472894][ T3608] loop3: p61 size 108986237 extends beyond EOD, truncated [ 32.481928][ T3608] loop3: p62 size 108986237 extends beyond EOD, truncated [ 32.490599][ T3608] loop3: p63 size 108986237 extends beyond EOD, truncated [ 32.501117][ T3608] loop3: p64 size 108986237 extends beyond EOD, truncated [ 32.501780][ T3649] loop1: detected capacity change from 0 to 512 [ 32.510725][ T3608] loop3: p65 size 108986237 extends beyond EOD, truncated [ 32.518157][ T3649] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.523025][ T3608] loop3: p66 size 108986237 extends beyond EOD, truncated [ 32.539608][ T3649] EXT4-fs (loop1): 1 truncate cleaned up [ 32.545830][ T3649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.560050][ T3608] loop3: p67 size 108986237 extends beyond EOD, truncated [ 32.580963][ T3608] loop3: p68 size 108986237 extends beyond EOD, truncated [ 32.596588][ T3608] loop3: p69 size 108986237 extends beyond EOD, truncated [ 32.611824][ T3608] loop3: p70 size 108986237 extends beyond EOD, truncated [ 32.644659][ T3608] loop3: p71 size 108986237 extends beyond EOD, truncated [ 32.679465][ T3608] loop3: p72 size 108986237 extends beyond EOD, truncated [ 32.689363][ T3608] loop3: p73 size 108986237 extends beyond EOD, truncated [ 32.697466][ T3608] loop3: p74 size 108986237 extends beyond EOD, truncated [ 32.708395][ T3608] loop3: p75 size 108986237 extends beyond EOD, truncated [ 32.717906][ T3608] loop3: p76 size 108986237 extends beyond EOD, truncated [ 32.781141][ T3608] loop3: p77 size 108986237 extends beyond EOD, truncated [ 32.793500][ T3608] loop3: p78 size 108986237 extends beyond EOD, truncated [ 32.802468][ T3608] loop3: p79 size 108986237 extends beyond EOD, truncated [ 32.810491][ T3608] loop3: p80 size 108986237 extends beyond EOD, truncated [ 32.818442][ T3608] loop3: p81 size 108986237 extends beyond EOD, truncated [ 32.827215][ T3608] loop3: p82 size 108986237 extends beyond EOD, truncated [ 32.835499][ T3608] loop3: p83 size 108986237 extends beyond EOD, truncated [ 32.843600][ T3608] loop3: p84 size 108986237 extends beyond EOD, truncated [ 32.852913][ T3608] loop3: p85 size 108986237 extends beyond EOD, truncated [ 32.860857][ T3608] loop3: p86 size 108986237 extends beyond EOD, truncated [ 32.868927][ T3608] loop3: p87 size 108986237 extends beyond EOD, truncated [ 32.877297][ T3608] loop3: p88 size 108986237 extends beyond EOD, truncated [ 32.885238][ T3608] loop3: p89 size 108986237 extends beyond EOD, truncated [ 32.893188][ T3608] loop3: p90 size 108986237 extends beyond EOD, truncated [ 32.901208][ T3608] loop3: p91 size 108986237 extends beyond EOD, truncated [ 32.909217][ T3608] loop3: p92 size 108986237 extends beyond EOD, truncated [ 32.917203][ T3608] loop3: p93 size 108986237 extends beyond EOD, truncated [ 32.925046][ T3608] loop3: p94 size 108986237 extends beyond EOD, truncated [ 32.932809][ T3608] loop3: p95 size 108986237 extends beyond EOD, truncated [ 32.940880][ T3608] loop3: p96 size 108986237 extends beyond EOD, truncated [ 32.948712][ T3608] loop3: p97 size 108986237 extends beyond EOD, truncated [ 32.956659][ T3608] loop3: p98 size 108986237 extends beyond EOD, truncated [ 32.964607][ T3608] loop3: p99 size 108986237 extends beyond EOD, truncated [ 32.972474][ T3608] loop3: p100 size 108986237 extends beyond EOD, truncated [ 32.980548][ T3608] loop3: p101 size 108986237 extends beyond EOD, truncated [ 32.988494][ T3608] loop3: p102 size 108986237 extends beyond EOD, truncated [ 32.993300][ T3658] netlink: 68 bytes leftover after parsing attributes in process `syz.4.40'. [ 32.996500][ T3608] loop3: p103 size 108986237 extends beyond EOD, truncated [ 33.012581][ T3608] loop3: p104 size 108986237 extends beyond EOD, truncated [ 33.020510][ T3608] loop3: p105 size 108986237 extends beyond EOD, truncated [ 33.028468][ T3608] loop3: p106 size 108986237 extends beyond EOD, truncated [ 33.036465][ T3608] loop3: p107 size 108986237 extends beyond EOD, truncated [ 33.044495][ T3608] loop3: p108 size 108986237 extends beyond EOD, truncated [ 33.052510][ T3608] loop3: p109 size 108986237 extends beyond EOD, truncated [ 33.060338][ T3608] loop3: p110 size 108986237 extends beyond EOD, truncated [ 33.068220][ T3608] loop3: p111 size 108986237 extends beyond EOD, truncated [ 33.076152][ T3608] loop3: p112 size 108986237 extends beyond EOD, truncated [ 33.084185][ T3608] loop3: p113 size 108986237 extends beyond EOD, truncated [ 33.092108][ T3608] loop3: p114 size 108986237 extends beyond EOD, truncated [ 33.100228][ T3608] loop3: p115 size 108986237 extends beyond EOD, truncated [ 33.108286][ T3608] loop3: p116 size 108986237 extends beyond EOD, truncated [ 33.116313][ T3608] loop3: p117 size 108986237 extends beyond EOD, truncated [ 33.124501][ T3608] loop3: p118 size 108986237 extends beyond EOD, truncated [ 33.132496][ T3608] loop3: p119 size 108986237 extends beyond EOD, truncated [ 33.140292][ T3608] loop3: p120 size 108986237 extends beyond EOD, truncated [ 33.148893][ T3608] loop3: p121 size 108986237 extends beyond EOD, truncated [ 33.156717][ T3608] loop3: p122 size 108986237 extends beyond EOD, truncated [ 33.164766][ T3608] loop3: p123 size 108986237 extends beyond EOD, truncated [ 33.172872][ T3608] loop3: p124 size 108986237 extends beyond EOD, truncated [ 33.180743][ T3608] loop3: p125 size 108986237 extends beyond EOD, truncated [ 33.188965][ T3608] loop3: p126 size 108986237 extends beyond EOD, truncated [ 33.197285][ T3608] loop3: p127 size 108986237 extends beyond EOD, truncated [ 33.206275][ T3608] loop3: p128 size 108986237 extends beyond EOD, truncated [ 33.214128][ T3608] loop3: p129 size 108986237 extends beyond EOD, truncated [ 33.222259][ T3608] loop3: p130 size 108986237 extends beyond EOD, truncated [ 33.230268][ T3608] loop3: p131 size 108986237 extends beyond EOD, truncated [ 33.238113][ T3608] loop3: p132 size 108986237 extends beyond EOD, truncated [ 33.245963][ T3608] loop3: p133 size 108986237 extends beyond EOD, truncated [ 33.253985][ T3608] loop3: p134 size 108986237 extends beyond EOD, truncated [ 33.262170][ T3608] loop3: p135 size 108986237 extends beyond EOD, truncated [ 33.270063][ T3608] loop3: p136 size 108986237 extends beyond EOD, truncated [ 33.278424][ T3608] loop3: p137 size 108986237 extends beyond EOD, truncated [ 33.286547][ T3608] loop3: p138 size 108986237 extends beyond EOD, truncated [ 33.294423][ T3608] loop3: p139 size 108986237 extends beyond EOD, truncated [ 33.302527][ T3608] loop3: p140 size 108986237 extends beyond EOD, truncated [ 33.310468][ T3608] loop3: p141 size 108986237 extends beyond EOD, truncated [ 33.331808][ T3608] loop3: p142 size 108986237 extends beyond EOD, truncated [ 33.340815][ T3608] loop3: p143 size 108986237 extends beyond EOD, truncated [ 33.342308][ T3648] syz.1.37 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 33.348988][ T3608] loop3: p144 size 108986237 extends beyond EOD, [ 33.358879][ T3648] CPU: 0 UID: 0 PID: 3648 Comm: syz.1.37 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 33.358906][ T3648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 33.358915][ T3648] Call Trace: [ 33.358922][ T3648] [ 33.358930][ T3648] dump_stack_lvl+0xf2/0x150 [ 33.359006][ T3648] dump_stack+0x15/0x1a [ 33.359025][ T3648] dump_header+0x83/0x2d0 [ 33.359054][ T3648] oom_kill_process+0x341/0x4c0 [ 33.359083][ T3648] out_of_memory+0x9af/0xbe0 [ 33.359191][ T3648] ? css_next_descendant_pre+0x11c/0x140 [ 33.359212][ T3648] mem_cgroup_out_of_memory+0x13e/0x190 [ 33.359239][ T3648] try_charge_memcg+0x508/0x7f0 [ 33.359261][ T3648] charge_memcg+0x50/0xc0 [ 33.359344][ T3648] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 33.359368][ T3648] __read_swap_cache_async+0x236/0x480 [ 33.359452][ T3648] swap_cluster_readahead+0x279/0x3f0 [ 33.359478][ T3648] swapin_readahead+0xe4/0x6f0 [ 33.359500][ T3648] ? __rcu_read_unlock+0x34/0x70 [ 33.359531][ T3648] ? swap_cache_get_folio+0x77/0x210 [ 33.359553][ T3648] do_swap_page+0x31b/0x2550 [ 33.359644][ T3648] ? __rcu_read_lock+0x36/0x50 [ 33.359662][ T3648] ? __pfx_default_wake_function+0x10/0x10 [ 33.359689][ T3648] handle_mm_fault+0x8e4/0x2ac0 [ 33.359725][ T3648] exc_page_fault+0x3b9/0x650 [ 33.359767][ T3648] asm_exc_page_fault+0x26/0x30 [ 33.359792][ T3648] RIP: 0033:0x7f4aa8f93b78 [ 33.359806][ T3648] Code: 48 f7 f1 48 01 d8 49 39 c4 4c 0f 42 e0 83 3d 4a 40 34 00 00 0f 8e 09 fe ff ff e8 e3 a6 fe ff 49 39 c4 72 66 66 0f 1f 44 00 00 <69> 3d 16 1b e7 00 e8 03 00 00 48 8d 1d 17 24 34 00 e8 b2 91 12 00 [ 33.359822][ T3648] RSP: 002b:00007ffd28b54c30 EFLAGS: 00010212 [ 33.359836][ T3648] RAX: 0000000000008218 RBX: 00007f4aa92d7ba0 RCX: 00000000000080e8 [ 33.359847][ T3648] RDX: 0000000000000130 RSI: 00007ffd28b54c10 RDI: 0000000000000001 [ 33.359858][ T3648] RBP: 00007f4aa92d7ba0 R08: 00000000122182e0 R09: 7fffffffffffffff [ 33.359901][ T3648] R10: 00007f4aa9e17038 R11: 0000000000000010 R12: 0000000000008225 [ 33.359911][ T3648] R13: 00007f4aa92d6080 R14: ffffffffffffffff R15: 00007ffd28b54d40 [ 33.359927][ T3648] [ 33.359933][ T3648] memory: usage 307200kB, limit 307200kB, failcnt 549 [ 33.365320][ T3608] truncated [ 33.375784][ T3648] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 33.387927][ T3608] loop3: p145 size 108986237 extends beyond EOD, [ 33.389106][ T3648] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 33.392030][ T3608] truncated [ 33.392691][ T3608] loop3: p146 size 108986237 extends beyond EOD, [ 33.396610][ T3648] Memory cgroup stats for /syz1: [ 33.416216][ T3648] cache 24576 [ 33.420273][ T3608] truncated [ 33.425831][ T3648] rss 4096 [ 33.432060][ T3608] loop3: p147 size 108986237 extends beyond EOD, [ 33.434959][ T3648] shmem 0 [ 33.434966][ T3648] mapped_file 0 [ 33.434972][ T3648] dirty 0 [ 33.434978][ T3648] writeback 4096 [ 33.434984][ T3648] workingset_refault_anon 153 [ 33.440925][ T3608] truncated [ 33.441732][ T3608] loop3: p148 size 108986237 extends beyond EOD, [ 33.446378][ T3648] workingset_refault_file 67 [ 33.446387][ T3648] swap 446464 [ 33.446392][ T3648] swapcached 8192 [ 33.446398][ T3648] pgpgin 4803 [ 33.446403][ T3648] pgpgout 4795 [ 33.446409][ T3648] pgfault 8888 [ 33.451762][ T3608] truncated [ 33.453184][ T3608] loop3: p149 size 108986237 extends beyond EOD, [ 33.456529][ T3648] pgmajfault 61 [ 33.461434][ T3608] truncated [ 33.462121][ T3608] loop3: p150 size 108986237 extends beyond EOD, [ 33.466714][ T3648] inactive_anon 8192 [ 33.466723][ T3648] active_anon 0 [ 33.466728][ T3648] inactive_file 0 [ 33.466733][ T3648] active_file 24576 [ 33.466738][ T3648] unevictable 0 [ 33.466745][ T3648] hierarchical_memory_limit 314572800 [ 33.466784][ T3648] hierarchical_memsw_limit 9223372036854771712 [ 33.471347][ T3608] truncated [ 33.472939][ T3608] loop3: p151 size 108986237 extends beyond EOD, [ 33.476101][ T3648] total_cache 24576 [ 33.476110][ T3648] total_rss 4096 [ 33.476116][ T3648] total_shmem 0 [ 33.481894][ T3608] truncated [ 33.486764][ T3648] total_mapped_file 0 [ 33.486772][ T3648] total_dirty 0 [ 33.486778][ T3648] total_writeback 4096 [ 33.486784][ T3648] total_workingset_refault_anon 153 [ 33.486791][ T3648] total_workingset_refault_file 67 [ 33.486798][ T3648] total_swap 446464 [ 33.492942][ T3608] loop3: p152 size 108986237 extends beyond EOD, [ 33.496283][ T3648] total_swapcached 8192 [ 33.500684][ T3608] truncated [ 33.501803][ T3608] loop3: p153 size 108986237 extends beyond EOD, [ 33.520292][ T3648] total_pgpgin 4803 [ 33.520302][ T3648] total_pgpgout 4795 [ 33.520308][ T3648] total_pgfault 8888 [ 33.520314][ T3648] total_pgmajfault 61 [ 33.520320][ T3648] total_inactive_anon 8192 [ 33.520326][ T3648] total_active_anon 0 [ 33.520331][ T3648] total_inactive_file 0 [ 33.520338][ T3648] total_active_file 24576 [ 33.520345][ T3648] total_unevictable 0 [ 33.526401][ T3608] truncated [ 33.530255][ T3608] loop3: p154 size 108986237 extends beyond EOD, [ 33.534600][ T3648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 33.542591][ T3608] truncated [ 33.543327][ T3608] loop3: p155 size 108986237 extends beyond EOD, [ 33.550603][ T3648] ,cpuset=/,mems_allowed=0 [ 33.558663][ T3608] truncated [ 33.566613][ T3648] ,oom_memcg= [ 33.571649][ T3608] loop3: p156 size 108986237 extends beyond EOD, [ 33.576391][ T3648] /syz1 [ 33.579477][ T3608] truncated [ 33.587350][ T3648] ,task_memcg=/syz1,task=syz.1.37,pid=3648,uid=0 [ 33.587383][ T3648] Memory cgroup out of memory: Killed process 3648 (syz.1.37) total-vm:95760kB, anon-rss:916kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 33.739958][ T3664] loop4: detected capacity change from 0 to 512 [ 33.796725][ T3608] loop3: p157 size 108986237 extends beyond EOD, truncated [ 33.931620][ T3608] loop3: p158 size 108986237 extends beyond EOD, truncated [ 33.938302][ T3664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.954914][ T3608] loop3: p159 size 108986237 extends beyond EOD, truncated [ 33.963982][ T3608] loop3: p160 size 108986237 extends beyond EOD, truncated [ 33.975867][ T3608] loop3: p161 size 108986237 extends beyond EOD, truncated [ 33.980118][ T3664] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.993756][ T3608] loop3: p162 size 108986237 extends beyond EOD, truncated [ 34.001461][ T3608] loop3: p163 size 108986237 extends beyond EOD, truncated [ 34.003601][ T3670] loop2: detected capacity change from 0 to 1024 [ 34.017910][ T3608] loop3: p164 size 108986237 extends beyond EOD, truncated [ 34.027893][ T3608] loop3: p165 size 108986237 extends beyond EOD, truncated [ 34.046910][ T3670] EXT4-fs: Ignoring removed orlov option [ 34.067165][ T3608] loop3: p166 size 108986237 extends beyond EOD, truncated [ 34.075804][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.084833][ T3608] loop3: p167 size 108986237 extends beyond EOD, truncated [ 34.086068][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.095736][ T3608] loop3: p168 size 108986237 extends beyond EOD, truncated [ 34.114058][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.123370][ T3608] loop3: p169 size 108986237 extends beyond EOD, truncated [ 34.133411][ T3608] loop3: p170 size 108986237 extends beyond EOD, truncated [ 34.141613][ T3608] loop3: p171 size 108986237 extends beyond EOD, truncated [ 34.153516][ T3608] loop3: p172 size 108986237 extends beyond EOD, truncated [ 34.166691][ T3608] loop3: p173 size 108986237 extends beyond EOD, truncated [ 34.174905][ T3608] loop3: p174 size 108986237 extends beyond EOD, truncated [ 34.185257][ T3678] netlink: 60 bytes leftover after parsing attributes in process `syz.1.46'. [ 34.195750][ T3608] loop3: p175 size 108986237 extends beyond EOD, truncated [ 34.209269][ T3608] loop3: p176 size 108986237 extends beyond EOD, truncated [ 34.218227][ T3608] loop3: p177 size 108986237 extends beyond EOD, truncated [ 34.231140][ T3608] loop3: p178 size 108986237 extends beyond EOD, truncated [ 34.242787][ T3608] loop3: p179 size 108986237 extends beyond EOD, truncated [ 34.250789][ T3608] loop3: p180 size 108986237 extends beyond EOD, truncated [ 34.258693][ T3608] loop3: p181 size 108986237 extends beyond EOD, truncated [ 34.266720][ T3608] loop3: p182 size 108986237 extends beyond EOD, truncated [ 34.274472][ T3608] loop3: p183 size 108986237 extends beyond EOD, truncated [ 34.282287][ T3608] loop3: p184 size 108986237 extends beyond EOD, truncated [ 34.289985][ T3608] loop3: p185 size 108986237 extends beyond EOD, truncated [ 34.297826][ T3608] loop3: p186 size 108986237 extends beyond EOD, truncated [ 34.306379][ T3608] loop3: p187 size 108986237 extends beyond EOD, truncated [ 34.307518][ T3684] netlink: 32 bytes leftover after parsing attributes in process `syz.4.47'. [ 34.314669][ T3608] loop3: p188 size 108986237 extends beyond EOD, truncated [ 34.331273][ T3608] loop3: p189 size 108986237 extends beyond EOD, truncated [ 34.339240][ T3608] loop3: p190 size 108986237 extends beyond EOD, truncated [ 34.347297][ T3608] loop3: p191 size 108986237 extends beyond EOD, truncated [ 34.355471][ T3608] loop3: p192 size 108986237 extends beyond EOD, truncated [ 34.363273][ T3608] loop3: p193 size 108986237 extends beyond EOD, truncated [ 34.371290][ T3608] loop3: p194 size 108986237 extends beyond EOD, truncated [ 34.379026][ T3608] loop3: p195 size 108986237 extends beyond EOD, truncated [ 34.387673][ T3608] loop3: p196 size 108986237 extends beyond EOD, truncated [ 34.395522][ T3608] loop3: p197 size 108986237 extends beyond EOD, truncated [ 34.403329][ T3608] loop3: p198 size 108986237 extends beyond EOD, truncated [ 34.411234][ T3608] loop3: p199 size 108986237 extends beyond EOD, truncated [ 34.418902][ T3608] loop3: p200 size 108986237 extends beyond EOD, truncated [ 34.426655][ T3608] loop3: p201 size 108986237 extends beyond EOD, truncated [ 34.434414][ T3608] loop3: p202 size 108986237 extends beyond EOD, truncated [ 34.442341][ T3608] loop3: p203 size 108986237 extends beyond EOD, truncated [ 34.450226][ T3608] loop3: p204 size 108986237 extends beyond EOD, truncated [ 34.458015][ T3608] loop3: p205 size 108986237 extends beyond EOD, truncated [ 34.465891][ T3608] loop3: p206 size 108986237 extends beyond EOD, truncated [ 34.473578][ T3608] loop3: p207 size 108986237 extends beyond EOD, truncated [ 34.481411][ T3608] loop3: p208 size 108986237 extends beyond EOD, truncated [ 34.489249][ T3608] loop3: p209 size 108986237 extends beyond EOD, truncated [ 34.497011][ T3608] loop3: p210 size 108986237 extends beyond EOD, truncated [ 34.504768][ T3608] loop3: p211 size 108986237 extends beyond EOD, truncated [ 34.512594][ T3608] loop3: p212 size 108986237 extends beyond EOD, truncated [ 34.520426][ T3608] loop3: p213 size 108986237 extends beyond EOD, truncated [ 34.528349][ T3608] loop3: p214 size 108986237 extends beyond EOD, truncated [ 34.535958][ T3608] loop3: p215 size 108986237 extends beyond EOD, truncated [ 34.543653][ T3608] loop3: p216 size 108986237 extends beyond EOD, truncated [ 34.551477][ T3608] loop3: p217 size 108986237 extends beyond EOD, truncated [ 34.559722][ T3608] loop3: p218 size 108986237 extends beyond EOD, truncated [ 34.567731][ T3608] loop3: p219 size 108986237 extends beyond EOD, truncated [ 34.575499][ T3608] loop3: p220 size 108986237 extends beyond EOD, truncated [ 34.583232][ T3608] loop3: p221 size 108986237 extends beyond EOD, truncated [ 34.591003][ T3608] loop3: p222 size 108986237 extends beyond EOD, truncated [ 34.598893][ T3608] loop3: p223 size 108986237 extends beyond EOD, truncated [ 34.606892][ T3608] loop3: p224 size 108986237 extends beyond EOD, truncated [ 34.614622][ T3608] loop3: p225 size 108986237 extends beyond EOD, truncated [ 34.622350][ T3608] loop3: p226 size 108986237 extends beyond EOD, truncated [ 34.630107][ T3608] loop3: p227 size 108986237 extends beyond EOD, truncated [ 34.637847][ T3608] loop3: p228 size 108986237 extends beyond EOD, truncated [ 34.645729][ T3608] loop3: p229 size 108986237 extends beyond EOD, truncated [ 34.653357][ T3608] loop3: p230 size 108986237 extends beyond EOD, truncated [ 34.661098][ T3608] loop3: p231 size 108986237 extends beyond EOD, truncated [ 34.668889][ T3608] loop3: p232 size 108986237 extends beyond EOD, truncated [ 34.676564][ T3608] loop3: p233 size 108986237 extends beyond EOD, truncated [ 34.684153][ T3608] loop3: p234 size 108986237 extends beyond EOD, truncated [ 34.692417][ T3608] loop3: p235 size 108986237 extends beyond EOD, truncated [ 34.700214][ T3608] loop3: p236 size 108986237 extends beyond EOD, truncated [ 34.707985][ T3608] loop3: p237 size 108986237 extends beyond EOD, truncated [ 34.715796][ T3608] loop3: p238 size 108986237 extends beyond EOD, truncated [ 34.723574][ T3608] loop3: p239 size 108986237 extends beyond EOD, truncated [ 34.731245][ T3608] loop3: p240 size 108986237 extends beyond EOD, truncated [ 34.738937][ T3608] loop3: p241 size 108986237 extends beyond EOD, truncated [ 34.746965][ T3608] loop3: p242 size 108986237 extends beyond EOD, truncated [ 34.754743][ T3608] loop3: p243 size 108986237 extends beyond EOD, truncated [ 34.762461][ T3608] loop3: p244 size 108986237 extends beyond EOD, truncated [ 34.771319][ T3608] loop3: p245 size 108986237 extends beyond EOD, truncated [ 34.782351][ T3687] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 34.783928][ T3608] loop3: p246 size 108986237 extends beyond EOD, truncated [ 34.801055][ T3608] loop3: p247 size 108986237 extends beyond EOD, truncated [ 34.819354][ T3689] loop0: detected capacity change from 0 to 2048 [ 34.831899][ T3608] loop3: p248 size 108986237 extends beyond EOD, truncated [ 34.839789][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.841967][ T3608] loop3: p249 size 108986237 extends beyond EOD, truncated [ 34.856859][ T3608] loop3: p250 size 108986237 extends beyond EOD, truncated [ 34.866153][ T3689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.881667][ T3608] loop3: p251 size 108986237 extends beyond EOD, truncated [ 34.898579][ T3608] loop3: p252 size 108986237 extends beyond EOD, truncated [ 34.907254][ T3693] loop2: detected capacity change from 0 to 512 [ 34.913622][ T3608] loop3: p253 size 108986237 extends beyond EOD, truncated [ 34.925713][ T3608] loop3: p254 size 108986237 extends beyond EOD, truncated [ 34.934177][ T3693] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.944822][ T3608] loop3: p255 size 108986237 extends beyond EOD, truncated [ 34.971410][ T3693] EXT4-fs (loop2): 1 truncate cleaned up [ 34.988746][ T3693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.125956][ T3705] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 35.667882][ T3723] loop3: detected capacity change from 0 to 512 [ 35.688587][ T3521] udevd[3521]: inotify_add_watch(7, /dev/loop3p22, 10) failed: No such file or directory [ 35.709809][ T3518] udevd[3518]: inotify_add_watch(7, /dev/loop3p23, 10) failed: No such file or directory [ 35.709875][ T3696] udevd[3696]: inotify_add_watch(7, /dev/loop3p29, 10) failed: No such file or directory [ 35.721045][ T3698] udevd[3698]: inotify_add_watch(7, /dev/loop3p30, 10) failed: No such file or directory [ 35.732424][ T3701] udevd[3701]: inotify_add_watch(7, /dev/loop3p25, 10) failed: No such file or directory [ 35.751560][ T3700] udevd[3700]: inotify_add_watch(7, /dev/loop3p31, 10) failed: No such file or directory [ 35.762945][ T3697] udevd[3697]: inotify_add_watch(7, /dev/loop3p32, 10) failed: No such file or directory [ 35.766551][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p27, 10) failed: No such file or directory [ 35.774127][ T3520] udevd[3520]: inotify_add_watch(7, /dev/loop3p33, 10) failed: No such file or directory [ 35.793930][ T3699] udevd[3699]: inotify_add_watch(7, /dev/loop3p26, 10) failed: No such file or directory [ 35.797032][ T3723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.854279][ T3723] EXT4-fs (loop3): 1 truncate cleaned up [ 35.910787][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.173991][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.284082][ T3736] loop0: detected capacity change from 0 to 512 [ 36.297843][ T3736] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.61: bg 0: block 418: padding at end of block bitmap is not set [ 36.325491][ T3736] EXT4-fs (loop0): Remounting filesystem read-only [ 36.342301][ T3736] EXT4-fs (loop0): 1 truncate cleaned up [ 36.348385][ T3736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.361284][ T3736] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 36.368335][ T3736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.431377][ T3693] syz.2.51 (3693) used greatest stack depth: 6376 bytes left [ 36.440349][ T3739] loop0: detected capacity change from 0 to 2048 [ 36.450505][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.484030][ T3739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.517733][ T3743] loop2: detected capacity change from 0 to 1024 [ 36.557398][ T3743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.586257][ T3743] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.606231][ T3743] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 36.621751][ T3743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.63'. [ 36.683175][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.821327][ T3750] pim6reg1: entered promiscuous mode [ 36.826869][ T3750] pim6reg1: entered allmulticast mode [ 36.836227][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.861877][ T3753] loop3: detected capacity change from 0 to 512 [ 36.868735][ T3753] EXT4-fs: Ignoring removed i_version option [ 36.874937][ T3753] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.882095][ T3753] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 36.924867][ T3753] EXT4-fs (loop3): 1 truncate cleaned up [ 36.934926][ T3753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.958348][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 36.958361][ T29] audit: type=1400 audit(1740063926.356:685): avc: denied { ioctl } for pid=3752 comm="syz.3.67" path="socket:[5228]" dev="sockfs" ino=5228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 36.995528][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 37.004323][ T29] audit: type=1400 audit(1740063926.386:686): avc: denied { read write } for pid=3754 comm="syz.2.68" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.005988][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.68'. [ 37.027580][ T29] audit: type=1400 audit(1740063926.386:687): avc: denied { open } for pid=3754 comm="syz.2.68" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.027607][ T29] audit: type=1400 audit(1740063926.396:688): avc: denied { ioctl } for pid=3754 comm="syz.2.68" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.085209][ T29] audit: type=1326 audit(1740063926.476:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b9abcde9 code=0x7ffc0000 [ 37.091023][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.108456][ T29] audit: type=1326 audit(1740063926.476:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b9abcde9 code=0x7ffc0000 [ 37.108497][ T29] audit: type=1326 audit(1740063926.476:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb0b9abcde9 code=0x7ffc0000 [ 37.142680][ T29] audit: type=1326 audit(1740063926.546:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b9abcde9 code=0x7ffc0000 [ 37.164141][ T3765] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 37.186891][ T29] audit: type=1326 audit(1740063926.546:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3764 comm="syz.4.73" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b9abcde9 code=0x7ffc0000 [ 37.234202][ T3767] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 37.234202][ T3767] program syz.3.71 not setting count and/or reply_len properly [ 37.308581][ T3773] loop3: detected capacity change from 0 to 512 [ 37.322409][ T3773] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.348653][ T3773] EXT4-fs (loop3): 1 truncate cleaned up [ 37.356104][ T3773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.400831][ T3778] xt_TPROXY: Can be used only with -p tcp or -p udp [ 37.416788][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.490463][ T3788] loop4: detected capacity change from 0 to 512 [ 37.497974][ T3788] EXT4-fs: Ignoring removed i_version option [ 37.504054][ T3788] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.511366][ T3521] ================================================================== [ 37.519464][ T3521] BUG: KCSAN: data-race in do_mpage_readpage / set_blocksize [ 37.526846][ T3521] [ 37.529155][ T3521] write to 0xffff8881004c0a6e of 1 bytes by task 3788 on cpu 0: [ 37.536768][ T3521] set_blocksize+0x218/0x270 [ 37.541349][ T3521] sb_min_blocksize+0x63/0xe0 [ 37.546015][ T3521] ext4_fill_super+0x38b/0x3630 [ 37.550859][ T3521] get_tree_bdev_flags+0x29f/0x310 [ 37.555960][ T3521] get_tree_bdev+0x1f/0x30 [ 37.560366][ T3521] ext4_get_tree+0x1c/0x30 [ 37.564800][ T3521] vfs_get_tree+0x56/0x1e0 [ 37.569205][ T3521] do_new_mount+0x227/0x690 [ 37.573701][ T3521] path_mount+0x49b/0xb30 [ 37.578024][ T3521] __se_sys_mount+0x27f/0x2d0 [ 37.582700][ T3521] __x64_sys_mount+0x67/0x80 [ 37.587302][ T3521] x64_sys_call+0x2c84/0x2dc0 [ 37.592056][ T3521] do_syscall_64+0xc9/0x1c0 [ 37.596554][ T3521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.602440][ T3521] [ 37.604748][ T3521] read to 0xffff8881004c0a6e of 1 bytes by task 3521 on cpu 1: [ 37.612276][ T3521] do_mpage_readpage+0x55/0xcb0 [ 37.617121][ T3521] mpage_readahead+0x1ad/0x2d0 [ 37.621879][ T3521] blkdev_readahead+0x1c/0x30 [ 37.626546][ T3521] read_pages+0x9e/0x460 [ 37.630785][ T3521] page_cache_ra_unbounded+0x30d/0x350 [ 37.636241][ T3521] page_cache_sync_ra+0x252/0x680 [ 37.641257][ T3521] filemap_get_pages+0x2ca/0x11a0 [ 37.646265][ T3521] filemap_read+0x230/0x8c0 [ 37.650753][ T3521] blkdev_read_iter+0x228/0x2d0 [ 37.655594][ T3521] vfs_read+0x5cc/0x6f0 [ 37.659739][ T3521] ksys_read+0xe8/0x1b0 [ 37.663892][ T3521] __x64_sys_read+0x42/0x50 [ 37.668383][ T3521] x64_sys_call+0x2874/0x2dc0 [ 37.673051][ T3521] do_syscall_64+0xc9/0x1c0 [ 37.677547][ T3521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.683428][ T3521] [ 37.685733][ T3521] value changed: 0x0c -> 0x0a [ 37.690390][ T3521] [ 37.692694][ T3521] Reported by Kernel Concurrency Sanitizer on: [ 37.698825][ T3521] CPU: 1 UID: 0 PID: 3521 Comm: udevd Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 37.709073][ T3521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 37.719136][ T3521] ================================================================== [ 37.740456][ T3788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.754282][ T3788] EXT4-fs (loop4): 1 truncate cleaned up [ 37.763112][ T3788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.791018][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.306562][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.