last executing test programs: 3.357931068s ago: executing program 1 (id=63): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3.257092416s ago: executing program 1 (id=66): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3.165834774s ago: executing program 1 (id=68): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f1f11a85418018, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000003c0)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x401}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDDELIO(r4, 0x4b34, 0x3bf) ioctl$KDDISABIO(r4, 0x4b37) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="00000000000000000002000014000000b703000083000000b30900000000000055090100000000bf2b942873f6009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$EVIOCGMASK(r10, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 2.813804472s ago: executing program 1 (id=76): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/36, 0x24}, {0x0}, {&(0x7f0000000380)=""/75, 0x4b}], 0x3}, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) 2.34779055s ago: executing program 2 (id=80): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = io_uring_setup(0x413, &(0x7f0000000140)={0x0, 0xd78d, 0x20000, 0x1, 0xdd}) r1 = io_uring_setup(0x2e51, &(0x7f0000000680)={0x0, 0xb586, 0x8, 0xfffffffe, 0x3c1, 0x0, r0}) r2 = socket(0x1, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000003c0)={[{@fat=@nfs_nostale_ro}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@quiet}, {@fat=@showexec}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fat=@debug}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}]}, 0x1, 0x249, &(0x7f0000000500)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x403, 0x4000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2f) fcntl$setpipe(r1, 0x407, 0x6d) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801fc030000003b8162ab9ab99d3ff06a388b7f450000f7ffffff6d"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r7, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x9}}}}}, 0x28}}, 0x0) 2.284434385s ago: executing program 2 (id=81): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) socket$pppl2tp(0x18, 0x1, 0x1) msgsnd(0x0, 0x0, 0x401, 0x0) msgctl$IPC_RMID(0x0, 0x0) membarrier(0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@discard}, {@nodelalloc}]}, 0xfe, 0x473, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="3885b00a97126e9d"}}) fdatasync(r2) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 2.166784875s ago: executing program 4 (id=83): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x472, &(0x7f00000006c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a000000040000000400000006"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000800000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 2.000886598s ago: executing program 4 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB="0180c20000002059249b379086dd601081140008110000000000000000000000000000000000ff02000000000000000000000000000100000e220008907899144114574ecfd775e058cb1609032ca62600094d93fab02d2da89c9ec2c220ad1a896494a4756555b1e8c0d6c193ddda2fbc2cf49c564a3e0a64899ad501ccfb899eb2d4cbf0a1a027f2d5c0daec0678365e098a3ea7a44c3a312b9aaa9052d9f5a177e0fb327e145a5da9d0ba936cd5bb74fb8881ae2d088877aeb4cfbe94af13f5afa9653bebbd3a1e60e384f7aaa80c8431df5105a3260d34bb827019427ebb2460db8efa379037db04d671d2e59b6ce08b4fc12f0ec34945"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0x6, 0x7}) mount$9p_fd(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rf']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26}, 0x28) fcntl$lock(r5, 0x25, &(0x7f0000000300)={0x1, 0x2, 0x7ff, 0x9}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 1.940472703s ago: executing program 1 (id=88): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0x27, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_x_sec_ctx={0x23, 0x18, 0x43, 0x81, 0x10f, "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"}]}, 0x138}, 0x1, 0x7}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 1.85752354s ago: executing program 1 (id=89): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_open_pts(0xffffffffffffffff, 0x2800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x2, @loopback}}, 0x1e) r1 = socket(0x10, 0x3, 0x6) r2 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)="c6040f29028dcd8e5b1ab54932fb4ebd9485032e291e6e5e164e47868780b95369b45c81b8ba7a24e1dae14ac729452e155476de338c", &(0x7f00000004c0)="0de9fa4d2de7e8672d3ec34fea3a9440060ed445b0a1010afa91651a9a5e854dad3ac9695f30e08c3a2978682a0fe2293cf94ce91b7de2501acb9019f79bc29a7d4cc7356174ec3023238bf8f2162c9433f6c965b476ee15cb6b919b9140fcd7055a9c399babb046204db17b115024c8d8e0398f062f03774fe61b4926484785699676e1e3c3a86839addc40d2028c6687", 0x81, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1f) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x2, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6}]}, 0x90}}, 0x20008010) r7 = getpid() ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', r3, 0x2f, 0x9, 0xa, 0x1, 0x19, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x14}, 0x20, 0x700, 0x7, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000440)={'syztnl1\x00', r8, 0x2f, 0x2, 0x7, 0x80, 0x2c, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x20, 0xfff, 0xfffffff9}}) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000000f21c40539ac1a58a3b531fb385d0c5d732b1a2128eaf9e729016b2c5763a2a6e44526d764b82ded111c3", @ANYRES16=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="0c009900000800004c000000"], 0x28}}, 0xc004) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c"], 0xcc}}, 0x0) 1.743158549s ago: executing program 2 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1ffffe0e, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005009000018110000d2e037c9c8bb7132c33f8ca5a47ac172259933c19bc38e1a0a0bcd3ce38c54deda93885116545fc4476d2898bb250e58c63b008e67f259e8047b9c636925c1fd22448b53dea13be6fe69beea3b83d41d6603231365666364f812366989707e3e311268f074770a6119edb895811c53dcd7f230c5c781c15de36aa52f630f45d55c20bd15237fa3aa97d6cac2e04209e4b95ea43ef18ae4456f80f952902d6f72a09243d9f467c6a7bc070270c1c9d312", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000300)=""/126, &(0x7f0000000380)=0x7e) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x7, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}]}, &(0x7f0000001000)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000001bc0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x7, 0x2, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r0, r0, r0, 0xffffffffffffffff, r7, r7, r7, r7, r0], 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f00000011c0)='xdp_bulk_tx\x00', r11, 0x0, 0xe4b}, 0x18) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x7, 0x40, 0x10001, 0xd738, 0x3aa, 0xe3, 0x8, 0x9}, &(0x7f0000000340)={0x40, 0xa, 0x1310, 0x4, 0x7, 0x4, 0xfffffffffffffff9, 0x7b7}, 0x0, 0x0, 0x0) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="42110141"], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 1.345818191s ago: executing program 0 (id=96): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 1.294993885s ago: executing program 0 (id=97): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) 1.260466048s ago: executing program 0 (id=98): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = io_uring_setup(0x413, &(0x7f0000000140)={0x0, 0xd78d, 0x20000, 0x1, 0xdd}) r1 = io_uring_setup(0x2e51, &(0x7f0000000680)={0x0, 0xb586, 0x8, 0xfffffffe, 0x3c1, 0x0, r0}) r2 = socket(0x1, 0x803, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f00000003c0)={[{@fat=@nfs_nostale_ro}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x10}}, {@fat=@quiet}, {@fat=@showexec}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@fat=@debug}, {@dots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x4}}, {@dots}, {@nodots}, {@nodots}, {@dots}, {@dots}]}, 0x1, 0x249, &(0x7f0000000500)="$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") r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x403, 0x4000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}}, 0x10) fcntl$setsig(0xffffffffffffffff, 0xa, 0x2f) fcntl$setpipe(r1, 0x407, 0x6d) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801fc030000003b8162ab9ab99d3ff06a388b7f450000f7ffffff6d"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, r7, 0xc4fc9e906872338b, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x9}}}}}, 0x28}}, 0x0) 1.223723341s ago: executing program 0 (id=99): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010030bd7400fddbdf251f"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.146745957s ago: executing program 0 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1ffffe0e, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005009000018110000d2e037c9c8bb7132c33f8ca5a47ac172259933c19bc38e1a0a0bcd3ce38c54deda93885116545fc4476d2898bb250e58c63b008e67f259e8047b9c636925c1fd22448b53dea13be6fe69beea3b83d41d6603231365666364f812366989707e3e311268f074770a6119edb895811c53dcd7f230c5c781c15de36aa52f630f45d55c20bd15237fa3aa97d6cac2e04209e4b95ea43ef18ae4456f80f952902d6f72a09243d9f467c6a7bc070270c1c9d312", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000300)=""/126, &(0x7f0000000380)=0x7e) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, 0x0, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f00000011c0)='xdp_bulk_tx\x00', r11, 0x0, 0xe4b}, 0x18) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r12, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r12, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x7, 0x40, 0x10001, 0xd738, 0x3aa, 0xe3, 0x8, 0x9}, &(0x7f0000000340)={0x40, 0xa, 0x1310, 0x4, 0x7, 0x4, 0xfffffffffffffff9, 0x7b7}, 0x0, 0x0, 0x0) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="42110141"], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 1.10932217s ago: executing program 4 (id=101): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_x_sec_ctx={0x1, 0x18, 0x43, 0x81}]}, 0x28}, 0x1, 0x7}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 1.034528376s ago: executing program 4 (id=102): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) unshare(0x26000400) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r3, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 746.43622ms ago: executing program 2 (id=103): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 714.057182ms ago: executing program 3 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00200000ffffffffffffbbbbbbbbbbbb0800450000990000000000299078ac1e0001e00000010300000000859078dafc3fec9b284c93cf0da2c96b67919fb5146b8da82ae0aeddf99df0c319ce538cfc3de7eecc9ee2c173b54c6c0dd496bfebc9ed9b21bd9ab1a4d9cf48807509455fd4eb5a9323540f9281a9a9c0eb6d8df6bc10fdb2b3ad85dbd44027717a1056b0a157faa3ff684b257a5c5dcf9b722af1c60b745a2aaedfc5a18ed0"], 0xab) 695.918934ms ago: executing program 2 (id=105): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x400, 0x5) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000080)=0x100) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) r2 = syz_usbip_server_init(0x2) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = getuid() getgroups(0x0, &(0x7f0000000600)) stat(&(0x7f0000000640)='./file0\x00', 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="aa34d4dc2dffce9500fc2f4424576d71db3ba683924852afb57f584b45f6f1673a8bf044dd99de91fef4f52fd4ca57afdde4b0243ef1c3a0d8515dacbb4d9a56626911c3ee9bab7e452d1b554b3d4d0c6420d990a5d0dbfd13ddd9011be18a3145e5aea84f8c751bc9bed4f0c512710ddf8fe9cecbe65a576ce6e1731a3dd3ce16b022b062d797928c9ddf54248b250f9e3926703a46ec8351944b25fcffd4ceda24df2ded511412c47a764c6b119f4e3bc998ab7cab1472fe0203079757535b1fa9592cafed8654b3517d8e8f0af186b4a425b5d80d84f76600805a", 0xdc}, {&(0x7f0000000300)="603c32708dce00f89507aa8ed4ac3902413192be56ddd6c4b957650aeb3abb3dd1103d156f14de43480c33a6eecc611570beafc47f3c8c9c95cded88ec4bad27d837947b4690ea994dbfb47c1e934d0ddeb1bc4ee9a96133fe3c7e78e98d20c5df02bd0d308fec50d2eebb", 0x6b}, {&(0x7f0000000380)="13c45ece1aadb61c55e1f6a3226c4bab7d4b28fa91114a50c8f06655b128d85d9171bd0b4e0590e2fdae0847b9e0d0b37a980b2a9219ca88f914b6e5b3c7c4d51925870ef381096e1ef9f1c90a989c550aa5aeef9c97886389c86a9d774afc3d14a62f5c18ab8a36c8", 0x69}, {&(0x7f0000000400)="fe5ec9aec27f41897e71a0bed05dfd839b4d89651bfc7d29a5799b6129656c32ea862335f8842b1a90f56872e48c5141c58a0a1c521d2c128c246f6e06f599c81e335c6fc9c8bb64ab", 0x49}, {&(0x7f0000000480)="71bd747db23088b3c5a5aa6a94b426b2524bcf347c4429d5a258341193c13fe0103f5c1b9f2060a0cdb347948a7d40ffbff283fbf80894af7ef049ce01841502ebf8fb51331d25d9e576e07234cd27173a2024ae1bbb2352690ff3a3f2721b27f791877a366abefa61fca4743f8802b18b53e1aa324b066a5c8567ede0195c40bfe25f2c85aaa4718cccf5b8e5dfb420ea62257ad34e73431a4640dd5930ce15d33ed3826edb749a68e87fb00a7e22baa96e7713ec03bf1806d37b1f212b1d981557a44915e4b8201ba860b4a4bc456fd48180ade672e41bf1b9dbd24d319fab00638bdd6d3073a7868ccf50178fca", 0xef}], 0x5, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x10}}], 0x70, 0x40010}, 0x4000000) fadvise64(r0, 0x0, 0x0, 0x0) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) mount$9p_xen(0x0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x30002, &(0x7f0000000940)={'trans=xen,', {[{@cache_none}, {@version_u}], [{@euid_lt={'euid<', r4}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '/dev/uhid\x00'}}, {@fsname={'fsname', 0x3d, '\x0e'}}, {@dont_hash}, {@hash}, {@permit_directio}, {@flag='nomand'}, {@smackfsfloor={'smackfsfloor', 0x3d, ')#],-^'}}]}}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a00), 0x4d080, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r0) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x3c, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4008804) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)=@newspdinfo={0x54, 0x24, 0x414, 0x70bd28, 0x25dfdbff, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x24044804}, 0x4014) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r6) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0xa12c000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x2}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x401}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x24008810) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r10, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x28, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x15}}]}, 0x28}}, 0x40890) preadv(r5, &(0x7f0000001580)=[{&(0x7f0000001340)=""/34, 0x22}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001440)=""/79, 0x4f}, {&(0x7f00000014c0)=""/153, 0x99}], 0x5, 0x7, 0xce8) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x4c, r7, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x4c}}, 0x4) 596.490411ms ago: executing program 3 (id=106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) rmdir(&(0x7f0000000300)='./file0\x00') 563.002914ms ago: executing program 3 (id=107): setxattr$incfs_id(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={'0000000000000000000000000000000', 0x32}, 0x20, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 496.36117ms ago: executing program 3 (id=108): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 490.100921ms ago: executing program 3 (id=109): getpid() setns(0xffffffffffffffff, 0x8020000) 468.328022ms ago: executing program 3 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1ffffe0e, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005009000018110000d2e037c9c8bb7132c33f8ca5a47ac172259933c19bc38e1a0a0bcd3ce38c54deda93885116545fc4476d2898bb250e58c63b008e67f259e8047b9c636925c1fd22448b53dea13be6fe69beea3b83d41d6603231365666364f812366989707e3e311268f074770a6119edb895811c53dcd7f230c5c781c15de36aa52f630f45d55c20bd15237fa3aa97d6cac2e04209e4b95ea43ef18ae4456f80f952902d6f72a09243d9f467c6a7bc070270c1c9d312", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r6, 0x1, 0x1c, &(0x7f0000000300)=""/126, &(0x7f0000000380)=0x7e) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32], 0x1c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r8}, 0x10) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x18, 0x7, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x6}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}]}, &(0x7f0000001000)='syzkaller\x00', 0xc, 0x1000, &(0x7f0000001bc0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001040)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001080)={0x3, 0x7, 0x2, 0xffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[r0, r0, r0, 0xffffffffffffffff, r7, r7, r7, r7, r0], 0x0, 0x10, 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f00000011c0)='xdp_bulk_tx\x00', r12, 0x0, 0xe4b}, 0x18) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f0000000380)=0x2) ioctl$PPPIOCSPASS(r13, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) pselect6(0x40, &(0x7f0000000200)={0x7, 0x40, 0x10001, 0xd738, 0x3aa, 0xe3, 0x8, 0x9}, &(0x7f0000000340)={0x40, 0xa, 0x1310, 0x4, 0x7, 0x4, 0xfffffffffffffff9, 0x7b7}, 0x0, 0x0, 0x0) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="42110141"], 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 257.029999ms ago: executing program 0 (id=111): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0001}]}) socket$pppl2tp(0x18, 0x1, 0x1) msgsnd(0x0, 0x0, 0x401, 0x0) msgctl$IPC_RMID(0x0, 0x0) membarrier(0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed000a, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@nolazytime}, {@debug}, {@noload}, {@auto_da_alloc}, {@commit={'commit', 0x3d, 0x5}}, {@lazytime}, {@discard}, {@nodelalloc}]}, 0xfe, 0x473, &(0x7f00000004c0)="$eJzs3M1vFOUfAPDvTF8ob7/2h/gCglbRiG8tLS9y8KBGEw6YmOgB46m2C6ks1NCaCCFaPeDRkHg33v0DjCe9GPVk4lXvhoQYLqCnNbMzA0u7W7plywL7+STTfZ6ZZ3me78w8O8/Ms0sAPWs0+5NEbImIPyJiOM/eXGA0f7l25fz0P1fOTydRq739d1Ivd/XK+emyaPm+zXmmVivyG5rUe+G9iKlqtXKmyI8vnPpwfP7suRdnT02dqJyonJ48fPjA/t2DhyYPNr5taK1xZnFd3fnJ3K4dR969+Ob0sYvv//Jt1t4txfbGODplNN+7TT3d6cq6bGtDOunvYkNoS19EZIdroN7/h6MvNl7fNhxvfN7VxgHrqlar1ZpdnwuLNeA+lkS3WwB0R3mhz+5/y+UODT3uCpdfzW+AsrivFUu+pT/SPPH4wJL7204ajYhji/9+nS2xTs8hAAAa/ZCNf15oNv5L46E8MZj9+V8xhzISEf+PiG0R8UBEbI+IByPqZR+OiEfarH/pDMny8U96ac3BrUI2/nu5mNu6efyXlkVG+orc1nr8A8nx2WplX7FP9sbAhuOzSWVihTp+fP33L1ttaxz/ZUtWfzkWLNpxqX/JA7qZqYWp24m50eXPInb2N4s/iXIaJ4mIHRGxc411zD7XekLo1vGvoAPzTLVvIp7Jj/9iLIm/lLScn5x46dDkwfGhqFb2jZdnxXK//nbhrVb13xx/DLUVfwdkx39T0/P/evwjyVDE/NlzJ+vztfPt13Hhzy9a3tO0ef4f2Vqc/4PJO/UVg8WGj6cWFs5MRAwmR5evn7zxr5X5snwW/949zfv/trixJx6NiF0RsTsiHstuCou2PxERT0bEnhXi//m1pz5oP/4Vnsp3UBb/zK2OfzQe//YTfSd/+r79+EvZ8T9QT+0t1qzm82+1DbydfQcAAAD3irT+HfgkHbueTtOxsfw7/NtjU1qdm194/vjcR6dn8u/Kj8RAWj7pGm54HjpRPBsu85NL8vuL58Zf9W2s58em56oz3Q4eetzmFv0/81dft1sHrLs1zKO9sh7tAO48v9eE3qX/Q29K9H/oafo/9K5m/f/TlqXHvlvXxgB3lOs/9K5V9P/F/KX1qAC4N7n+Q+/S/6EntfxtfHpbP/mX6Fji6LNJ3AXNWJaI9K5oxv2f6F/1f2bRRqI2nPf/bM2GpmW6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQGf8FAAD//5qc4N0=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="3885b00a97126e9d"}}) fdatasync(r2) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000003c0)=0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r5}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 151.574628ms ago: executing program 4 (id=112): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x5, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}]}, 0x20}, 0x1, 0x7}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(r1, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 133.272049ms ago: executing program 2 (id=113): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800714, &(0x7f0000000180)={[{@dioread_nolock}, {@jqfmt_vfsv0}]}, 0xff, 0x4a9, &(0x7f0000000580)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r7, 0x5, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000d4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x4c831, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=114): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000004c0), 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r4, 0x0, 0x3ffff) sendfile(r6, r4, 0x0, 0x7ffff000) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000000240)={0x0, 0x2, 0x8}) syz_emit_ethernet(0x45, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, '\x00\x00eX\x00\x00\x00'}}}}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) kernel console output (not intermixed with test programs): rocess permissive=1 [ 19.065342][ T29] audit: type=1400 audit(1756569982.098:61): avc: denied { siginh } for pid=3237 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.543708][ T3238] sshd-session (3238) used greatest stack depth: 10888 bytes left Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. [ 26.390958][ T29] audit: type=1400 audit(1756569989.428:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.391842][ T3293] cgroup: Unknown subsys name 'net' [ 26.413692][ T29] audit: type=1400 audit(1756569989.428:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.441042][ T29] audit: type=1400 audit(1756569989.458:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.593555][ T3293] cgroup: Unknown subsys name 'cpuset' [ 26.599735][ T3293] cgroup: Unknown subsys name 'rlimit' [ 26.788497][ T29] audit: type=1400 audit(1756569989.828:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.812023][ T29] audit: type=1400 audit(1756569989.828:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.832578][ T29] audit: type=1400 audit(1756569989.828:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.840367][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.853274][ T29] audit: type=1400 audit(1756569989.828:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.882432][ T29] audit: type=1400 audit(1756569989.838:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.907306][ T29] audit: type=1400 audit(1756569989.838:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.930651][ T29] audit: type=1400 audit(1756569989.908:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.953080][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.860207][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.931730][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.938856][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.946202][ T3306] bridge_slave_0: entered allmulticast mode [ 28.952609][ T3306] bridge_slave_0: entered promiscuous mode [ 28.961157][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.968310][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.975609][ T3306] bridge_slave_1: entered allmulticast mode [ 28.982109][ T3306] bridge_slave_1: entered promiscuous mode [ 29.002790][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.028236][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.061472][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.075728][ T3306] team0: Port device team_slave_0 added [ 29.086790][ T3306] team0: Port device team_slave_1 added [ 29.103528][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.118778][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.159832][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.166901][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.192822][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.220568][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.227665][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.253765][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.271658][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.278770][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.286044][ T3307] bridge_slave_0: entered allmulticast mode [ 29.292387][ T3307] bridge_slave_0: entered promiscuous mode [ 29.306962][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.314134][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.321243][ T3307] bridge_slave_1: entered allmulticast mode [ 29.327748][ T3307] bridge_slave_1: entered promiscuous mode [ 29.346922][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.364710][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.373891][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.380949][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.388345][ T3302] bridge_slave_0: entered allmulticast mode [ 29.395274][ T3302] bridge_slave_0: entered promiscuous mode [ 29.418081][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.427265][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.434436][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.441593][ T3302] bridge_slave_1: entered allmulticast mode [ 29.447928][ T3302] bridge_slave_1: entered promiscuous mode [ 29.456286][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.463578][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.470698][ T3303] bridge_slave_0: entered allmulticast mode [ 29.477168][ T3303] bridge_slave_0: entered promiscuous mode [ 29.483766][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.490914][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.498150][ T3303] bridge_slave_1: entered allmulticast mode [ 29.504820][ T3303] bridge_slave_1: entered promiscuous mode [ 29.539970][ T3306] hsr_slave_0: entered promiscuous mode [ 29.545974][ T3306] hsr_slave_1: entered promiscuous mode [ 29.561320][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.573685][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.584028][ T3307] team0: Port device team_slave_0 added [ 29.594839][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.606693][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.621026][ T3307] team0: Port device team_slave_1 added [ 29.661433][ T3303] team0: Port device team_slave_0 added [ 29.667638][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.674688][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.700591][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.727786][ T3302] team0: Port device team_slave_0 added [ 29.734537][ T3302] team0: Port device team_slave_1 added [ 29.745220][ T3303] team0: Port device team_slave_1 added [ 29.750967][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.758078][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.765311][ T3313] bridge_slave_0: entered allmulticast mode [ 29.771616][ T3313] bridge_slave_0: entered promiscuous mode [ 29.778509][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.785481][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.811509][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.833890][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.841035][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.848335][ T3313] bridge_slave_1: entered allmulticast mode [ 29.854664][ T3313] bridge_slave_1: entered promiscuous mode [ 29.886108][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.893102][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.919194][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.930156][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.937149][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.963230][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.974264][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.981376][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.007423][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.028031][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.050886][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.057971][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.083876][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.096269][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.112587][ T3307] hsr_slave_0: entered promiscuous mode [ 30.118610][ T3307] hsr_slave_1: entered promiscuous mode [ 30.124594][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 30.130311][ T3307] Cannot create hsr debugfs directory [ 30.161741][ T3302] hsr_slave_0: entered promiscuous mode [ 30.167736][ T3302] hsr_slave_1: entered promiscuous mode [ 30.173821][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 30.179527][ T3302] Cannot create hsr debugfs directory [ 30.185796][ T3313] team0: Port device team_slave_0 added [ 30.207979][ T3313] team0: Port device team_slave_1 added [ 30.227375][ T3303] hsr_slave_0: entered promiscuous mode [ 30.233397][ T3303] hsr_slave_1: entered promiscuous mode [ 30.239385][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 30.245172][ T3303] Cannot create hsr debugfs directory [ 30.258068][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.265044][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.291526][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.318028][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.325028][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.350953][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.372739][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.380869][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.400555][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.423124][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.458956][ T3313] hsr_slave_0: entered promiscuous mode [ 30.465253][ T3313] hsr_slave_1: entered promiscuous mode [ 30.471179][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 30.476953][ T3313] Cannot create hsr debugfs directory [ 30.551245][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.570165][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.580203][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.591030][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.621283][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.630334][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.647287][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.656169][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.691114][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.699294][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.707923][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.716540][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.726163][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.752025][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.766988][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.774123][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.793332][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.803194][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.810254][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.823567][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.832312][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.846805][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.870270][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.891126][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.907763][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.914883][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.942650][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.949821][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.967360][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.990584][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.001299][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.029803][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.041582][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.052640][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.063101][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.070158][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.085614][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.094295][ T2642] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.101376][ T2642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.114715][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.126926][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.148883][ T2642] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.156010][ T2642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.166761][ T2642] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.173932][ T2642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.182632][ T2642] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.189729][ T2642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.224195][ T2642] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.231371][ T2642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.256632][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.290096][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.358599][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.382594][ T3306] veth0_vlan: entered promiscuous mode [ 31.425346][ T3306] veth1_vlan: entered promiscuous mode [ 31.440027][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.457224][ T3307] veth0_vlan: entered promiscuous mode [ 31.470408][ T3306] veth0_macvtap: entered promiscuous mode [ 31.477885][ T3302] veth0_vlan: entered promiscuous mode [ 31.494022][ T3306] veth1_macvtap: entered promiscuous mode [ 31.508158][ T3307] veth1_vlan: entered promiscuous mode [ 31.520550][ T3302] veth1_vlan: entered promiscuous mode [ 31.527664][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.538500][ T3313] veth0_vlan: entered promiscuous mode [ 31.546922][ T3313] veth1_vlan: entered promiscuous mode [ 31.557201][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.570272][ T3307] veth0_macvtap: entered promiscuous mode [ 31.580310][ T3313] veth0_macvtap: entered promiscuous mode [ 31.595951][ T3307] veth1_macvtap: entered promiscuous mode [ 31.604571][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.616243][ T3302] veth0_macvtap: entered promiscuous mode [ 31.624153][ T3302] veth1_macvtap: entered promiscuous mode [ 31.631159][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.640531][ T3313] veth1_macvtap: entered promiscuous mode [ 31.651880][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.664958][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.678012][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.690132][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.705570][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.715132][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.725241][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.741317][ T67] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.741793][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.741805][ T29] audit: type=1400 audit(1756569994.778:81): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.O7fAlf/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.761250][ T67] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.780408][ T29] audit: type=1400 audit(1756569994.778:82): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.790197][ T67] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.811019][ T29] audit: type=1400 audit(1756569994.778:83): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.O7fAlf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.845037][ T29] audit: type=1400 audit(1756569994.778:84): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.869163][ T29] audit: type=1400 audit(1756569994.798:85): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.O7fAlf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.895705][ T29] audit: type=1400 audit(1756569994.798:86): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/root/syzkaller.O7fAlf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.923155][ T29] audit: type=1400 audit(1756569994.798:87): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.942813][ T29] audit: type=1400 audit(1756569994.908:88): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.965557][ T29] audit: type=1400 audit(1756569994.908:89): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="gadgetfs" ino=4608 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.990350][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.992936][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.012475][ T67] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.032152][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.053611][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.054941][ T29] audit: type=1400 audit(1756569995.088:90): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.065054][ T3303] veth0_vlan: entered promiscuous mode [ 32.106867][ T3472] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.112258][ T3303] veth1_vlan: entered promiscuous mode [ 32.126617][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.135471][ T3472] 0·: renamed from hsr0 (while UP) [ 32.144889][ T3472] 0·: entered allmulticast mode [ 32.149874][ T3472] hsr_slave_0: entered allmulticast mode [ 32.155584][ T3472] hsr_slave_1: entered allmulticast mode [ 32.162364][ T3472] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 32.167075][ T3474] loop2: detected capacity change from 0 to 512 [ 32.189275][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.193579][ T3474] ======================================================= [ 32.193579][ T3474] WARNING: The mand mount option has been deprecated and [ 32.193579][ T3474] and is ignored by this kernel. Remove the mand [ 32.193579][ T3474] option from the mount to silence this warning. [ 32.193579][ T3474] ======================================================= [ 32.233975][ T2642] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.253033][ T3303] veth0_macvtap: entered promiscuous mode [ 32.268822][ T3474] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 32.273290][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.293288][ T3303] veth1_macvtap: entered promiscuous mode [ 32.301582][ T3474] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 32.318648][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.319387][ T3474] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 32.330717][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.359557][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.370803][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.405420][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.406022][ T3487] loop0: detected capacity change from 0 to 512 [ 32.430148][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.439318][ T3487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 32.451094][ T3486] loop1: detected capacity change from 0 to 512 [ 32.460382][ T3486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.465645][ T3487] System zones: 1-12 [ 32.474066][ T3486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.494433][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.517050][ T3487] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.7: corrupted in-inode xattr: e_value size too large [ 32.524053][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.540334][ T3486] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.2: invalid indirect mapped block 4294967295 (level 0) [ 32.541033][ T3487] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7: couldn't read orphan inode 15 (err -117) [ 32.567679][ T3486] EXT4-fs (loop1): Remounting filesystem read-only [ 32.574594][ T3487] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.578004][ T3486] EXT4-fs (loop1): 1 orphan inode deleted [ 32.592609][ T3486] EXT4-fs (loop1): 1 truncate cleaned up [ 32.600730][ T3486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.628808][ T3495] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 32.635424][ T3495] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 32.643208][ T3495] vhci_hcd vhci_hcd.0: Device attached [ 32.663529][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.672595][ T3496] vhci_hcd: connection closed [ 32.674846][ T67] vhci_hcd: stop threads [ 32.676454][ T3487] EXT4-fs (loop0): shut down requested (1) [ 32.679549][ T67] vhci_hcd: release socket [ 32.694203][ T67] vhci_hcd: disconnect device [ 32.805737][ C1] hrtimer: interrupt took 28003 ns [ 33.266289][ T3508] hub 2-0:1.0: USB hub found [ 33.266418][ T3508] hub 2-0:1.0: 8 ports detected [ 33.272495][ T3510] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11'. [ 33.301695][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.331776][ T3519] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 33.346842][ T3518] hub 2-0:1.0: USB hub found [ 33.357888][ T3518] hub 2-0:1.0: 8 ports detected [ 33.368291][ T3521] netlink: 9 bytes leftover after parsing attributes in process `syz.2.13'. [ 33.381878][ T3521] 0·: renamed from hsr0 (while UP) [ 33.383442][ T3521] 0·: entered allmulticast mode [ 33.383459][ T3521] hsr_slave_0: entered allmulticast mode [ 33.383534][ T3521] hsr_slave_1: entered allmulticast mode [ 33.383922][ T3521] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 33.452018][ T3532] loop2: detected capacity change from 0 to 512 [ 33.463842][ T3532] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 33.476697][ T3532] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.476793][ T3532] EXT4-fs (loop2): 1 truncate cleaned up [ 33.477622][ T3532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.557964][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.596368][ T3542] netlink: 100 bytes leftover after parsing attributes in process `syz.2.16'. [ 33.651434][ T3546] loop2: detected capacity change from 0 to 512 [ 33.671404][ T3546] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 33.679434][ T3546] System zones: 1-12 [ 33.679537][ T3546] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.19: corrupted in-inode xattr: e_value size too large [ 33.679755][ T3546] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.19: couldn't read orphan inode 15 (err -117) [ 33.680217][ T3546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.731586][ T3546] EXT4-fs (loop2): shut down requested (1) [ 34.006187][ T3556] process 'syz.1.22' launched './file0' with NULL argv: empty string added [ 34.189606][ T3563] loop1: detected capacity change from 0 to 512 [ 34.201574][ T3563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 34.211034][ T3563] System zones: 1-12 [ 34.215439][ T3563] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.25: corrupted in-inode xattr: e_value size too large [ 34.230481][ T3563] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.25: couldn't read orphan inode 15 (err -117) [ 34.244005][ T3563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.269810][ T3563] EXT4-fs (loop1): shut down requested (1) [ 34.310200][ T3568] loop0: detected capacity change from 0 to 1024 [ 34.326623][ T3568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.540253][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.551693][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.713915][ T3577] Zero length message leads to an empty skb [ 34.730410][ T3581] netlink: 'syz.2.29': attribute type 6 has an invalid length. [ 34.943601][ T3306] syz-executor (3306) used greatest stack depth: 10776 bytes left [ 34.981038][ T3588] netlink: 148 bytes leftover after parsing attributes in process `syz.4.32'. [ 35.060892][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.138682][ T3599] loop4: detected capacity change from 0 to 512 [ 35.155936][ T3599] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 35.181636][ T3599] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 35.194021][ T3599] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 35.281314][ T3608] loop1: detected capacity change from 0 to 512 [ 35.298820][ T3608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 35.307187][ T3608] System zones: 1-12 [ 35.312673][ T3608] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.37: corrupted in-inode xattr: e_value size too large [ 35.373537][ T3617] loop4: detected capacity change from 0 to 512 [ 35.377931][ T3608] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.37: couldn't read orphan inode 15 (err -117) [ 35.379552][ T3608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.385186][ T3617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.387817][ T3591] chnl_net:caif_netlink_parms(): no params data found [ 35.389416][ T3608] EXT4-fs (loop1): shut down requested (1) [ 35.392388][ T3617] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.36: corrupted in-inode xattr: overlapping e_value [ 35.392914][ T3617] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.36: couldn't read orphan inode 15 (err -117) [ 35.395727][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.599216][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.599248][ T3591] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.599373][ T3591] bridge_slave_0: entered allmulticast mode [ 35.600142][ T3591] bridge_slave_0: entered promiscuous mode [ 35.601305][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.601452][ T3591] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.601512][ T3591] bridge_slave_1: entered allmulticast mode [ 35.602057][ T3591] bridge_slave_1: entered promiscuous mode [ 35.694403][ T3591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.777235][ T3591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.821623][ T3591] team0: Port device team_slave_0 added [ 35.836925][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.849304][ T3591] team0: Port device team_slave_1 added [ 35.880758][ T3591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.880772][ T3591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.880867][ T3591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.881609][ T3591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.881690][ T3591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.881763][ T3591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.951549][ T3591] hsr_slave_0: entered promiscuous mode [ 35.952218][ T3591] hsr_slave_1: entered promiscuous mode [ 35.957980][ T3641] loop4: detected capacity change from 0 to 512 [ 35.964214][ T3641] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.049683][ T3641] EXT4-fs (loop4): 1 truncate cleaned up [ 36.050085][ T3641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.229244][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.249095][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.336688][ T3591] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.384652][ T3647] syz.0.43 uses obsolete (PF_INET,SOCK_PACKET) [ 36.384803][ T3655] hub 2-0:1.0: USB hub found [ 36.399915][ T3591] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.403156][ T3655] hub 2-0:1.0: 8 ports detected [ 36.467816][ T3591] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.547546][ T3591] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.701942][ T3591] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.725834][ T3591] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.744294][ T2642] bridge_slave_1: left allmulticast mode [ 36.749982][ T2642] bridge_slave_1: left promiscuous mode [ 36.755746][ T2642] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.774557][ T3673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.51'. [ 36.800013][ T2642] bridge_slave_0: left allmulticast mode [ 36.805767][ T2642] bridge_slave_0: left promiscuous mode [ 36.811574][ T2642] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.822964][ T3673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.51'. [ 36.845865][ T3677] loop1: detected capacity change from 0 to 512 [ 36.859146][ T3681] netlink: 9 bytes leftover after parsing attributes in process `syz.0.53'. [ 36.865007][ T3673] netlink: 44 bytes leftover after parsing attributes in process `syz.4.51'. [ 36.878040][ T3677] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.900914][ T3677] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.52: invalid indirect mapped block 4294967295 (level 0) [ 36.916175][ T3677] EXT4-fs (loop1): Remounting filesystem read-only [ 36.928751][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 36.928766][ T29] audit: type=1326 audit(1756569999.968:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 36.935464][ T3677] EXT4-fs (loop1): 1 orphan inode deleted [ 36.958344][ T29] audit: type=1326 audit(1756569999.968:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 36.964261][ T3677] EXT4-fs (loop1): 1 truncate cleaned up [ 36.973465][ T3677] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.987607][ T29] audit: type=1326 audit(1756569999.968:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 37.029793][ T29] audit: type=1326 audit(1756569999.968:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 37.053107][ T29] audit: type=1326 audit(1756569999.968:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 37.076494][ T29] audit: type=1326 audit(1756569999.968:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 37.077006][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.099715][ T29] audit: type=1326 audit(1756569999.968:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 37.132577][ T29] audit: type=1326 audit(1756569999.968:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 37.155801][ T29] audit: type=1326 audit(1756569999.968:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 37.179051][ T29] audit: type=1326 audit(1756569999.968:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.4.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2625ebe9 code=0x7ffc0000 [ 37.218700][ T2642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.232104][ T2642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.244952][ T3694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'. [ 37.254915][ T2642] bond0 (unregistering): Released all slaves [ 37.261110][ T3694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'. [ 37.271792][ T3591] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.281100][ T3681] 0·: renamed from hsr0 (while UP) [ 37.287824][ T3681] 0·: entered allmulticast mode [ 37.292697][ T3681] hsr_slave_0: entered allmulticast mode [ 37.297909][ T3694] netlink: 44 bytes leftover after parsing attributes in process `syz.2.58'. [ 37.298370][ T3681] hsr_slave_1: entered allmulticast mode [ 37.313681][ T3681] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 37.335834][ T3591] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.359167][ T3699] netlink: 'syz.2.59': attribute type 6 has an invalid length. [ 37.369705][ T2642] hsr_slave_0: left promiscuous mode [ 37.375977][ T2642] hsr_slave_1: left promiscuous mode [ 37.381696][ T2642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.389334][ T2642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.398100][ T2642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.405606][ T2642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.415323][ T2642] veth1_macvtap: left promiscuous mode [ 37.420791][ T2642] veth0_macvtap: left promiscuous mode [ 37.426319][ T2642] veth1_vlan: left promiscuous mode [ 37.432266][ T2642] veth0_vlan: left promiscuous mode [ 37.488199][ T2642] team0 (unregistering): Port device team_slave_1 removed [ 37.500729][ T2642] team0 (unregistering): Port device team_slave_0 removed [ 37.595464][ T3591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.606915][ T3591] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.618816][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.625910][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.650565][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.657699][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.700803][ T3591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.714634][ T3720] netlink: 9 bytes leftover after parsing attributes in process `syz.2.65'. [ 37.726418][ T3720] 1·: renamed from 70· (while UP) [ 37.734348][ T3720] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 37.808402][ T3591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.949302][ T3735] loop4: detected capacity change from 0 to 512 [ 37.981243][ T3735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 37.990893][ T3742] netlink: 9 bytes leftover after parsing attributes in process `syz.2.71'. [ 38.008183][ T3735] System zones: 1-12 [ 38.012682][ T3735] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.69: corrupted in-inode xattr: e_value size too large [ 38.019515][ T3591] veth0_vlan: entered promiscuous mode [ 38.050196][ T3742] 0·: renamed from 71· (while UP) [ 38.052693][ T3735] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.69: couldn't read orphan inode 15 (err -117) [ 38.069382][ T3742] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 38.087514][ T3735] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.090003][ T3591] veth1_vlan: entered promiscuous mode [ 38.124540][ T3735] EXT4-fs (loop4): shut down requested (1) [ 38.154883][ T3591] veth0_macvtap: entered promiscuous mode [ 38.175023][ T3591] veth1_macvtap: entered promiscuous mode [ 38.226314][ T3591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.238614][ T3591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.252564][ T3477] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.269339][ T3758] hub 2-0:1.0: USB hub found [ 38.274988][ T3758] hub 2-0:1.0: 8 ports detected [ 38.294790][ T3477] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.319764][ T3760] loop2: detected capacity change from 0 to 512 [ 38.334418][ T3477] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.345579][ T2642] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.355465][ T3762] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 38.362083][ T3762] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 38.370121][ T3762] vhci_hcd vhci_hcd.0: Device attached [ 38.378433][ T3760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 38.386285][ T3763] vhci_hcd: connection closed [ 38.389726][ T3477] vhci_hcd: stop threads [ 38.396564][ T3760] System zones: 1-12 [ 38.399420][ T3477] vhci_hcd: release socket [ 38.407793][ T3477] vhci_hcd: disconnect device [ 38.412261][ T3760] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.77: corrupted in-inode xattr: e_value size too large [ 38.434679][ T3760] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.77: couldn't read orphan inode 15 (err -117) [ 38.460943][ T3760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.478887][ T3760] EXT4-fs (loop2): shut down requested (1) [ 38.682767][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.702659][ T3777] loop2: detected capacity change from 0 to 512 [ 38.711920][ T3777] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 38.765600][ T3780] loop2: detected capacity change from 0 to 512 [ 38.777256][ T3780] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 38.788803][ T3780] System zones: 1-12 [ 38.794095][ T3780] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.81: corrupted in-inode xattr: e_value size too large [ 38.809297][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.819928][ T3780] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.81: couldn't read orphan inode 15 (err -117) [ 38.832297][ T3780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.857987][ T3780] EXT4-fs (loop2): shut down requested (1) [ 38.872844][ T3785] loop4: detected capacity change from 0 to 512 [ 38.880766][ T3785] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 38.900970][ T3785] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.83: invalid indirect mapped block 4294967295 (level 0) [ 38.915215][ T3785] EXT4-fs (loop4): Remounting filesystem read-only [ 38.935412][ T3785] EXT4-fs (loop4): 1 orphan inode deleted [ 38.941188][ T3785] EXT4-fs (loop4): 1 truncate cleaned up [ 38.970898][ T3785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.984638][ T3790] netlink: 9 bytes leftover after parsing attributes in process `syz.0.85'. [ 38.993634][ T3790] 1·: renamed from 70· (while UP) [ 39.000503][ T3790] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 39.030239][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.041660][ T3793] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 39.048225][ T3793] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 39.055868][ T3793] vhci_hcd vhci_hcd.0: Device attached [ 39.080645][ T3794] vhci_hcd: connection closed [ 39.081073][ T58] vhci_hcd: stop threads [ 39.089269][ T3797] 9pnet_fd: Insufficient options for proto=fd [ 39.090386][ T58] vhci_hcd: release socket [ 39.090396][ T58] vhci_hcd: disconnect device [ 39.266826][ T3801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7410 sclass=netlink_route_socket pid=3801 comm=syz.1.89 [ 39.286718][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.438473][ T3815] loop3: detected capacity change from 0 to 512 [ 39.441916][ T3815] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 39.442054][ T3815] System zones: 1-12 [ 39.442195][ T3815] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.93: corrupted in-inode xattr: e_value size too large [ 39.442442][ T3815] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.93: couldn't read orphan inode 15 (err -117) [ 39.450619][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.454871][ T3815] EXT4-fs (loop3): shut down requested (1) [ 39.708854][ T3825] netlink: 'syz.0.96': attribute type 6 has an invalid length. [ 39.813569][ T3832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.99'. [ 40.316218][ T3591] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.341449][ T3847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 40.348002][ T3847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 40.348104][ T3847] vhci_hcd vhci_hcd.0: Device attached [ 40.365338][ T3848] vhci_hcd: connection closed [ 40.365464][ T3477] vhci_hcd: stop threads [ 40.374469][ T3477] vhci_hcd: release socket [ 40.374556][ T3477] vhci_hcd: disconnect device [ 40.514565][ T3857] netlink: 'syz.3.108': attribute type 6 has an invalid length. [ 40.978067][ T3873] loop2: detected capacity change from 0 to 512 [ 40.993722][ T3873] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.057349][ T3873] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.113: corrupted in-inode xattr: overlapping e_value [ 41.059263][ T3873] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.113: couldn't read orphan inode 15 (err -117) [ 41.095711][ T3875] loop4: detected capacity change from 0 to 1024 [ 41.111191][ T3875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.126647][ T3873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.211790][ T3878] ================================================================== [ 41.211819][ T3878] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 41.211849][ T3878] [ 41.211855][ T3878] write to 0xffff88810bfc0ea8 of 4 bytes by task 3875 on cpu 0: [ 41.211871][ T3878] writeback_single_inode+0x14a/0x3e0 [ 41.211899][ T3878] sync_inode_metadata+0x5b/0x90 [ 41.211924][ T3878] generic_buffers_fsync_noflush+0xd9/0x120 [ 41.211947][ T3878] ext4_sync_file+0x1ab/0x690 [ 41.211977][ T3878] vfs_fsync_range+0x10d/0x130 [ 41.212005][ T3878] ext4_buffered_write_iter+0x34f/0x3c0 [ 41.212034][ T3878] ext4_file_write_iter+0x383/0xf00 [ 41.212057][ T3878] iter_file_splice_write+0x663/0xa60 [ 41.212072][ T3878] direct_splice_actor+0x153/0x2a0 [ 41.212089][ T3878] splice_direct_to_actor+0x30f/0x680 [ 41.212108][ T3878] do_splice_direct+0xda/0x150 [ 41.212126][ T3878] do_sendfile+0x380/0x650 [ 41.212153][ T3878] __x64_sys_sendfile64+0x105/0x150 [ 41.212179][ T3878] x64_sys_call+0x2bb0/0x2ff0 [ 41.212200][ T3878] do_syscall_64+0xd2/0x200 [ 41.212228][ T3878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.212249][ T3878] [ 41.212253][ T3878] read to 0xffff88810bfc0ea8 of 4 bytes by task 3878 on cpu 1: [ 41.212266][ T3878] __mark_inode_dirty+0x191/0x750 [ 41.212303][ T3878] ext4_write_inline_data_end+0x3e5/0x5f0 [ 41.212327][ T3878] ext4_write_end+0x3d7/0x730 [ 41.212348][ T3878] generic_perform_write+0x312/0x490 [ 41.212370][ T3878] ext4_buffered_write_iter+0x1ee/0x3c0 [ 41.212400][ T3878] ext4_file_write_iter+0x383/0xf00 [ 41.212429][ T3878] iter_file_splice_write+0x663/0xa60 [ 41.212448][ T3878] direct_splice_actor+0x153/0x2a0 [ 41.212464][ T3878] splice_direct_to_actor+0x30f/0x680 [ 41.212480][ T3878] do_splice_direct+0xda/0x150 [ 41.212495][ T3878] do_sendfile+0x380/0x650 [ 41.212516][ T3878] __x64_sys_sendfile64+0x105/0x150 [ 41.212542][ T3878] x64_sys_call+0x2bb0/0x2ff0 [ 41.212561][ T3878] do_syscall_64+0xd2/0x200 [ 41.212584][ T3878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.231914][ T3880] program syz.4.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.239011][ T3878] [ 41.239021][ T3878] value changed: 0x00000038 -> 0x00000002 [ 41.239031][ T3878] [ 41.239034][ T3878] Reported by Kernel Concurrency Sanitizer on: [ 41.239062][ T3878] CPU: 1 UID: 0 PID: 3878 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.443323][ T3878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.443338][ T3878] ================================================================== [ 41.590905][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.635786][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.