last executing test programs: 37.255512871s ago: executing program 2 (id=31): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=tcp']) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000003080300000500000000000000000005050003003a0000002c0004800800014000"], 0x48}}, 0x40) 37.149350461s ago: executing program 2 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x98}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}]}], {0x14}}, 0xd8}}, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x7000000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)=""/181, &(0x7f0000000140)=0xb5) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r5, r3}, 0xc) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x3c}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="c4860700000000003400128009000100626f6e64000000002400028005001000030000000500160000000000060018"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 37.000936541s ago: executing program 2 (id=38): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c21, 0x84, @mcast1, 0x5}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) write$binfmt_aout(r0, &(0x7f0000000540)=ANY=[], 0x28) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x92) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x16, 0x0, 0x9, 0x7, 0x9000, r2, 0x7, '\x00', 0x0, r4, 0x4, 0x2, 0x5, 0x0, @value=r4, @void, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000300)=0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40002000) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000080)=0x5) sysinfo(&(0x7f0000000640)=""/222) 36.868631891s ago: executing program 2 (id=40): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3314) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x58, r3, 0x1, 0xfffffffd, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x58}, 0x2, 0x34005}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000000000000a2800a709000a0101000000005e1affd502000000090001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000380), 0x1, 0x503, &(0x7f0000000bc0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000680000000000000000000000000000cc5a09d6df4bdfb9e43de0a8e4f8c3078713243f9b10ddf3281ce023d82a1fe2351740de17dea0a3a4102112da8fe79bc63d11b299c17a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000000100)={0x4, 'syz0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) move_mount(r6, 0x0, r6, &(0x7f0000000180)='./bus\x00', 0x141) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x711, 0x65, 0x6, 0xe000, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xa, @value=r7, @void, @void, @value}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x28) dup(r4) syz_clone(0x200000, &(0x7f00000002c0), 0x0, &(0x7f00000003c0), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="17e7166528a57c2d"}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xfff, {0x0, 0x6, "55c0e4", 0x3, 0x2f, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x7, 0x30, 0x9}]}}}}}}}, 0x0) 36.261998892s ago: executing program 2 (id=45): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x6, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x4, r2, 0x1, 0xfe}, 0x14) 35.818447302s ago: executing program 2 (id=58): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r3) io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d9}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000400)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=@newsa={0xf0, 0x12, 0x713, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0xfffe}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe}, 0x10) 35.800976643s ago: executing program 32 (id=58): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000030000000100000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ftruncate(r2, 0xc17a) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r3) io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d9}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f00000003c0), &(0x7f0000000400)=r5}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000002c0)=@newsa={0xf0, 0x12, 0x713, 0x0, 0x0, {{@in6=@private0, @in=@remote, 0x0, 0x0, 0xfffe}, {@in6=@remote, 0x0, 0x32}, @in6=@mcast1, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}, 0x1, 0xe}, 0x10) 2.282247196s ago: executing program 5 (id=438): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvndhx0uwmu+wBEOwuuwsFVXUSdzda7QGWEwK0EmKPIHVD4kZR7DiKndKEHtIzVyQqcYIjfwDnnrhzQXDjUg5I/IhADRIHoxlPUje1m6hJ7Cj+fKTRvDdv6u97Tee9+pvEL4CR9XZE7EVEMSI+i4iZ7HouO+LjzpHc92T//vLB/v3lXLTbn/4zl7Yn16LrzySuZa9ZiogffifiJ7nn4zZ3dteXarXqVlafa9U355o7uzfX6kur1dXqRqWyuLA4/+GtDyrnNta36sWs9OXHf9j7xs+Sbk1nV7rHcZ46Qy8cxUmMR8T3LyLYEIxl4ykOuyO8lHxEvB4R76TP/0yMpV9NAOAqa7dnoj3TXQcArrp8mgPL5ctZLmA68vlyuZPDeyOm8rVGs3XjTmN7Y6WTK5uNQv7OWq06n+UKZ6OQS+oLaflpvXKsfisiXouIX0xMpvXycqO2Msz/+ADACLt2bP3/z0Rn/QcArrjSsDsAAAyc9R8ARo/1HwBGj/UfAEZPZ/2fHHY3AIAB8v4fAEaP9R8ARsoPPvkkOdoH2edfr9zd2V5v3L25Um2ul+vby+XlxtZmebXRWE0/s6d+0uvVGo3Nhfdj+97sNzebrbnmzu7temN7o3U7/Vzv29VCetfeAEYGAPTz2luP/pxLVuSPJtMjuvZyKAy1Z8BFyw+7A8DQjA27A8DQ2O0LRtcZ3uNLD8AV0WOL3meUev2CULvdbl9cl4ALdv0L8v8wqrry/34KGEaM/D+MLvl/GF3tdu60e/7HaW8EAC43OX6gz/f/X8/Ov82+OfDjleN3PLzIXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDldrj/bznbC3w68vlyOeKViJiNQu7OWq06HxGvRsSfJgoTSX1hyH0GAM4q/7dctv/X9Zn3pp9pevPaUbEYET/91ae/vLfUam39MaKY+9fE4fXWw+x6ZfC9BwBOdrhOJ+dHXW/kn+zfXz48Btmfv387Ikqd+Af7xTg4ij8e4+m5FIWImPp3Lqt35LpyF2ex9yAiPt9r/LmYTnMgnZ1Pj8dPYr8y0Pj5Z+Ln07bOOfm7+Nw59AVGzaNk/vm41/OXj7fTc+/nv5TOUGeXzX/JSy0fpHPg0/iH899Yn/nv1DHe//13O6XJ59seRHxxPOIw9kHX/HMYP9cn/nunjP+XL735Tr+29q8jrkfv+N2x5lr1zbnmzu7NtfrSanW1ulGpLC4szn9464PKXJqjnuu/Gvzjoxuv9mtLxj/VJ37phPF/9ZTj/83/PvvRV14Q/+vv9oqfjzdeED9ZE792yvhLU78r9WtL4q/0Gf9JX/8bLw77vWJWePzX3ee2DQcAhqe5s7u+VKtVtxQULn8h+Sd7CbrRs/CtQcUqRu+mn7/beaaPNbXbLxWr34xxHlk34DI4eugj4r/D7gwAAAAAAAAAAAAAANDTIH5jadhjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Or6fwAAAP//sUPPoQ==") r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3314) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x58, r3, 0x1, 0xfffffffd, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x58}, 0x2, 0x34005}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000000000000a2800a709000a0101000000005e1affd502000000090001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000380), 0x1, 0x503, &(0x7f0000000bc0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000680000000000000000000000000000cc5a09d6df4bdfb9e43de0a8e4f8c3078713243f9b10ddf3281ce023d82a1fe2351740de17dea0a3a4102112da8fe79bc63d11b299c17a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000000100)={0x4, 'syz0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) move_mount(r6, 0x0, r6, &(0x7f0000000180)='./bus\x00', 0x141) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x711, 0x65, 0x6, 0xe000, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xa, @value, @void, @void, @value}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x28) dup(r4) syz_clone(0x200000, &(0x7f00000002c0), 0x0, &(0x7f00000003c0), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="17e7166528a57c2d"}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xfff, {0x0, 0x6, "55c0e4", 0x3, 0x2f, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x7, 0x30, 0x9}]}}}}}}}, 0x0) 2.157414486s ago: executing program 5 (id=443): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4300086c) msgsnd(0x0, 0x0, 0x839, 0x0) setresuid(0xee01, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)=']!\'\x00', 0xfffffffffffffffe) 2.099166347s ago: executing program 1 (id=448): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r3, &(0x7f00000009c0)=""/156, 0x9c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="1805000000dcc217f45fee40f2936ce20010000000000000000000b7080000000000007b8af844d238d7381ec8c5e359c0ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0xffffff85) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = getpgid(0x0) r7 = gettid() rt_tgsigqueueinfo(r6, r7, 0x0, &(0x7f0000000080)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r8 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ftruncate(r9, 0x100c17a) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./file2\x00', 0x1a4243c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESOCT, @ANYRESHEX, @ANYRESHEX=r4, @ANYRES8, @ANYRESHEX=r5, @ANYRES32, @ANYRES8, @ANYRES8], 0x1, 0x0, &(0x7f0000000000)) dup3(r8, r9, 0x147da90c9d99d384) truncate(&(0x7f0000000000)='./file2\x00', 0x3000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0) getsockname$packet(r11, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 2.067533176s ago: executing program 5 (id=449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0xf}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x1}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) shutdown(r7, 0x1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100), &(0x7f00000002c0)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@init_itable}, {@errors_remount}, {@norecovery}]}, 0x2, 0x44e, &(0x7f0000001640)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x0, 0x30, 0xe1515f8735398fa, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45b], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1.148521718s ago: executing program 3 (id=455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x44, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x80}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x23456}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x98, 0x30, 0xffff, 0x70bd2b, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x45b240d7, 0x4, 0x3, 0x7fff, 0x1}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc}}}, @m_csum={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0xffffffffffffffff}, 0x13) listen(r0, 0x0) close(r0) 1.148164928s ago: executing program 5 (id=456): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000859}, 0x20000804) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001300)=[{{&(0x7f00000001c0)={0x2, 0xfffb, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="a905000000007464005cfe9e0574a2000000003552ff7fc164c65ba7e0a4fec85009d239", 0x24}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000083132e"], 0x28}}], 0x2, 0x24040080) 1.036172068s ago: executing program 1 (id=457): r0 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d9}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x1, 0x0, 0x1000000, &(0x7f0000000200)=[{0x0}], 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) lsm_set_self_attr(0x65, 0x0, 0x105, 0x0) r2 = dup(r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000019000000", 0x8) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="8f00ac18f9ff0000", 0x8) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1.035771539s ago: executing program 3 (id=458): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0) 1.018514358s ago: executing program 3 (id=459): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4300086c) msgsnd(0x0, 0x0, 0x839, 0x0) setresuid(0xee01, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)=']!\'\x00', 0xfffffffffffffffe) 979.072439ms ago: executing program 1 (id=461): syz_emit_ethernet(0x4e, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}}, 0x0) 978.227838ms ago: executing program 3 (id=462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r2, 0x40095505, 0x0) 978.054179ms ago: executing program 4 (id=463): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001c00000018000180140002007665746831"], 0x2c}}, 0x0) 970.745598ms ago: executing program 5 (id=464): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000000440)={[{@grpquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x2f}}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9sCWE0KoEqJHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lAMSPyJQg8TBaMaT1E3tJtokdhR/PtJo3ps3nu97cea9+Dn2C2BoXY2I3YgYi4h7ETGdHc9lW9xqb8l5z/ceLe3vPVrKRat155+5tDw5Fh2PSVzJrlmMiB9+N+InuVfjNrZ31har1cpmlp9t1jZmG9s7N1ZriyuVlcp6ubwwvzD3yc2Py2fW1vdqY1nqq8/+sPutnyXVmsqOdLbjLLWbXjiMkxiNiO+fR7ABGMnaMzboivC55CPi7Yh4P73/p2MkfTYBgMus1ZqO1nRnHgC47PLpHFguX8rmAqYiny+V2nN478RkvlpvNK/fr2+tL7fnymaikL+/Wq3MZXOFM1HIJfn5NP0iXz6SvxkRb0XEL8Yn0nxpqV5dHuQfPgAwxK4cGf//M94e/wGAS6446AoAAH1n/AeA4WP8B4DhY/wHgOHTHv8nBl0NAKCPvP4HgOFj/AeAofKD27eTrbWfff/18oPtrbX6gxvLlcZaqba1VFqqb26UVur1lfQ7e2rHXa9ar2/MfxRbD2e+vdFozja2d+7W6lvrzbvp93rfrRTSs3b70DIAoJe33nv651wyIn86kW7RsZZDYaA1A85bftAVAAZmZNAVAAbGal8wvE7xGt/0AFwSXZbofUmx2weEWq1W6/yqBJyza18y/w/DqmP+338Bw5Ax/w/Dy/w/DK9WK3fSNf/jpCcCABebOX6gx/v/b2f732ZvDvx4+egZT7o+bjfrXs6uggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHABHaz/W8rWAp+KfL5UingjImaikLu/Wq3MRcSbEfGn8cJ4kp8fcJ0BgNPK/y2Xrf91bfrDqZeK3r1ymByLiJ/+6s4vHy42m5t/jBjL/Wv84HjzSXa83P/aAwDHOxin033HC/nne4+WDrZ+1ufv34mIYjv+/t5Y7B/GH43RdF+MQkRM/juX5dtyHXMXp7H7OCK+2K39uZhK50DaK58ejZ/EfqOv8fMvxc+nZe198rP4whnUBYbN06T/udXt/svH1XTf/f4vpj3U6WX9X3Kppf20D3wR/6D/G+nR/109aYyPfv+9dmri1bLHEV8ejTiIvd/R/xzEz/WI/+EJ4//lK+++36us9euIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m85Rz/YeDf7x6fU3e5Ul7Z/sEb94TPu/fsL2/+Z/9370tdfE/+YH3eLn453XxE/GxG+cMP7i5O+KvcqS+Ms92n/c83/9hPGf/XXnlWXDAYDBaWzvrC1Wq5VNCYmLn0h+ZS9ANbomPutXrLHoXvTzD9r39JGiVuv1F/yse1GvHuMsZt2Ai+Dwpo+I/w66MgAAAAAAAAAAAAAAQFf9+MTSoNsIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA5fX/AAAA//+YXdZi") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0xa, 0x0, @loopback}, 0x57) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) 960.026938ms ago: executing program 1 (id=465): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r3, @ANYBLOB="05002f00d2"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 931.644659ms ago: executing program 4 (id=466): syz_emit_ethernet(0x4e, &(0x7f0000000640)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}}, 0x0) (fail_nth: 1) 906.473539ms ago: executing program 1 (id=467): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x19, &(0x7f0000000ec0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x2000c084) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)="7b57f6ae", 0x4}], 0x1}, 0x4008094) 844.046639ms ago: executing program 4 (id=468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000740)=""/197, 0xc5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0xffffffffffffffa1) 785.979129ms ago: executing program 4 (id=470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x7, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000074000000740000000a00000002000000070000060400000008000000ca000000050000040300000008000000010000000d0000000800000003000000ea0a00000c0000000600000000000000c5000000000000000000000203000000040000000000000b04000000090000000000000802000000060000000000000a05000000005f5f005fd2305e2e"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x4000010, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_io_uring_setup(0x4b6, &(0x7f0000000080), &(0x7f0000ff0000), 0x0) mlockall(0x7) 785.652809ms ago: executing program 1 (id=471): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe35, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x2b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000600000000fffff70c0618fe7b872a0000c7000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff7d, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0x1, 0x0, &(0x7f0000000340)) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000080000000000000", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff0ef, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, 0x0, 0x0, 0x7, 0x126) mkdirat(0xffffffffffffffff, 0x0, 0x3f) mount$bind(0x0, 0x0, 0x0, 0x1101088, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r8, &(0x7f0000000300)=""/150, 0x96, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='environ\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000040)={[{@grpquota}, {@data_err_abort}]}, 0x1, 0x58c, &(0x7f00000005c0)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB="0000000600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) 785.506129ms ago: executing program 0 (id=472): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) 692.182119ms ago: executing program 0 (id=473): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e0000000400000008", @ANYBLOB="00000013"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x10}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) r6 = dup3(r5, r0, 0x0) sendmsg$key(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) 632.171279ms ago: executing program 0 (id=474): r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000859}, 0x20000804) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000001300)=[{{&(0x7f00000001c0)={0x2, 0xfffb, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000040)="a905000000007464005cfe9e0574a2000000003552ff7fc164c65ba7e0a4fec85009d239", 0x24}], 0x1}}, {{&(0x7f0000000740)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000083132e"], 0x28}}], 0x2, 0x24040080) 581.086009ms ago: executing program 0 (id=475): r0 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) dup3(r0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4300086c) msgsnd(0x0, 0x0, 0x839, 0x0) setresuid(0xee01, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)=']!\'\x00', 0xfffffffffffffffe) 571.561949ms ago: executing program 4 (id=476): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) ioctl$SNAPSHOT_S2RAM(r0, 0x3314) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x58, r3, 0x1, 0xfffffffd, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}]}, 0x58}, 0x2, 0x34005}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000000000000a2800a709000a0101000000005e1affd502000000090001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000380), 0x1, 0x503, &(0x7f0000000bc0)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0a00000001000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000680000000000000000000000000000cc5a09d6df4bdfb9e43de0a8e4f8c3078713243f9b10ddf3281ce023d82a1fe2351740de17dea0a3a4102112da8fe79bc63d11b299c17a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r5, 0x80184947, &(0x7f0000000100)={0x4, 'syz0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_j1939(0x1d, 0x2, 0x7) move_mount(r6, 0x0, r6, &(0x7f0000000180)='./bus\x00', 0x141) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x711, 0x65, 0x6, 0xe000, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xa, @value, @void, @void, @value}, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x28) dup(r4) syz_clone(0x200000, &(0x7f00000002c0), 0x0, &(0x7f00000003c0), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x4000, 0x0, @auto="17e7166528a57c2d"}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) syz_emit_ethernet(0x6e, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xfff, {0x0, 0x6, "55c0e4", 0x3, 0x2f, 0xff, @mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, [@srh={0x2b, 0x0, 0x4, 0x0, 0x7, 0x30, 0x9}]}}}}}}}, 0x0) 440.400199ms ago: executing program 0 (id=477): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r3, @ANYBLOB="05002f00d2"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 324.389869ms ago: executing program 0 (id=478): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000440)={[{@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000000), 0x1, 0x4ec, &(0x7f0000000140)="$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") lchown(&(0x7f0000000400)='./file0\x00', 0x0, 0xee01) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="06000000040000000900000008000000000000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) close(0xffffffffffffffff) clock_nanosleep(0x2, 0x0, 0x0, 0xfffffffffffffffe) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 308.89445ms ago: executing program 4 (id=479): ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c2, &(0x7f00000008c0)="$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") (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004884}, 0xc0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1300000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETA(r6, 0x5406, &(0x7f00000010c0)={0x2ce4, 0x81, 0x0, 0x1ff, 0x0, "610400"}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x82307201, &(0x7f0000001180)) 301.38513ms ago: executing program 5 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x10000}, 0x18) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x594, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) chdir(&(0x7f0000000300)='./file0\x00') 191.75072ms ago: executing program 3 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) fsetxattr$security_selinux(r1, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0xa1ff) 0s ago: executing program 3 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) kernel console output (not intermixed with test programs): [ 22.464601][ T29] audit: type=1400 audit(1733718403.424:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 27.963410][ T29] audit: type=1400 audit(1733718408.924:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.964668][ T3286] cgroup: Unknown subsys name 'net' [ 27.986137][ T29] audit: type=1400 audit(1733718408.924:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.013563][ T29] audit: type=1400 audit(1733718408.954:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.167406][ T3286] cgroup: Unknown subsys name 'cpuset' [ 28.173645][ T3286] cgroup: Unknown subsys name 'rlimit' [ 28.323849][ T29] audit: type=1400 audit(1733718409.284:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.349573][ T29] audit: type=1400 audit(1733718409.284:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.370152][ T29] audit: type=1400 audit(1733718409.284:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.377379][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.390502][ T29] audit: type=1400 audit(1733718409.284:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.419340][ T29] audit: type=1400 audit(1733718409.294:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.444289][ T29] audit: type=1400 audit(1733718409.294:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.454213][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.467495][ T29] audit: type=1400 audit(1733718409.374:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.413447][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 29.494517][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.501649][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.509371][ T3296] bridge_slave_0: entered allmulticast mode [ 29.516120][ T3296] bridge_slave_0: entered promiscuous mode [ 29.524539][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.531762][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.539091][ T3296] bridge_slave_1: entered allmulticast mode [ 29.545468][ T3296] bridge_slave_1: entered promiscuous mode [ 29.588668][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.607204][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.637381][ T3296] team0: Port device team_slave_0 added [ 29.644601][ T3296] team0: Port device team_slave_1 added [ 29.671528][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.678624][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.704640][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.728141][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.735283][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.761222][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.848107][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.858931][ T3296] hsr_slave_0: entered promiscuous mode [ 29.865012][ T3296] hsr_slave_1: entered promiscuous mode [ 29.930763][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.943587][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 29.974073][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.981218][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.988498][ T3309] bridge_slave_0: entered allmulticast mode [ 29.994907][ T3309] bridge_slave_0: entered promiscuous mode [ 30.022386][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.029564][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.036961][ T3309] bridge_slave_1: entered allmulticast mode [ 30.043335][ T3309] bridge_slave_1: entered promiscuous mode [ 30.063762][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 30.094334][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.123996][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.165837][ T3309] team0: Port device team_slave_0 added [ 30.171934][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.179142][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.186585][ T3306] bridge_slave_0: entered allmulticast mode [ 30.193070][ T3306] bridge_slave_0: entered promiscuous mode [ 30.201811][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.208966][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.216189][ T3306] bridge_slave_1: entered allmulticast mode [ 30.222527][ T3306] bridge_slave_1: entered promiscuous mode [ 30.228767][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.235850][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.243123][ T3305] bridge_slave_0: entered allmulticast mode [ 30.249461][ T3305] bridge_slave_0: entered promiscuous mode [ 30.256805][ T3309] team0: Port device team_slave_1 added [ 30.262467][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.269676][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.276935][ T3305] bridge_slave_1: entered allmulticast mode [ 30.283692][ T3305] bridge_slave_1: entered promiscuous mode [ 30.322989][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.340216][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.347241][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.373184][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.384478][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.391484][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.417480][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.429167][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.441902][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.451187][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.458320][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.465714][ T3307] bridge_slave_0: entered allmulticast mode [ 30.472256][ T3307] bridge_slave_0: entered promiscuous mode [ 30.479764][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.491965][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.501177][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.509939][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.517034][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.524165][ T3307] bridge_slave_1: entered allmulticast mode [ 30.530722][ T3307] bridge_slave_1: entered promiscuous mode [ 30.543328][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.559571][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.573222][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.593568][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.603617][ T3306] team0: Port device team_slave_0 added [ 30.615514][ T3305] team0: Port device team_slave_0 added [ 30.630574][ T3306] team0: Port device team_slave_1 added [ 30.647387][ T3305] team0: Port device team_slave_1 added [ 30.653322][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.660374][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.686443][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.703743][ T3309] hsr_slave_0: entered promiscuous mode [ 30.709829][ T3309] hsr_slave_1: entered promiscuous mode [ 30.715730][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.723335][ T3309] Cannot create hsr debugfs directory [ 30.734292][ T3307] team0: Port device team_slave_0 added [ 30.750711][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.757778][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.783741][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.795278][ T3307] team0: Port device team_slave_1 added [ 30.806580][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.813536][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.839474][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.853001][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.859977][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.885986][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.907105][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.914113][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.940105][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.951641][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.958693][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.984659][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.011155][ T3306] hsr_slave_0: entered promiscuous mode [ 31.017630][ T3306] hsr_slave_1: entered promiscuous mode [ 31.023508][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.031099][ T3306] Cannot create hsr debugfs directory [ 31.090477][ T3305] hsr_slave_0: entered promiscuous mode [ 31.096685][ T3305] hsr_slave_1: entered promiscuous mode [ 31.102628][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.110226][ T3305] Cannot create hsr debugfs directory [ 31.121124][ T3307] hsr_slave_0: entered promiscuous mode [ 31.127489][ T3307] hsr_slave_1: entered promiscuous mode [ 31.133321][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.141001][ T3307] Cannot create hsr debugfs directory [ 31.251898][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.274999][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.285646][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.307071][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.342417][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.351381][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.362393][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.374714][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.389031][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.401624][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.417320][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.427362][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.443230][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.460481][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.470257][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.487276][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.500547][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.507703][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.516827][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.523931][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.536420][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.546183][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.631960][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.644845][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.659199][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.669225][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.678381][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.685484][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.699191][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.706292][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.716285][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.727389][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.745890][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.757578][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.764685][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.790387][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.797564][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.816953][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.824096][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.845266][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.852450][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.882813][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.895875][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.906389][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.940796][ T3296] veth0_vlan: entered promiscuous mode [ 31.952508][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.963809][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.986079][ T3296] veth1_vlan: entered promiscuous mode [ 31.997519][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.004599][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.021951][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.029030][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.062777][ T3296] veth0_macvtap: entered promiscuous mode [ 32.077207][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.089867][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.104268][ T3296] veth1_macvtap: entered promiscuous mode [ 32.153330][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.198027][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.215819][ T3296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.224843][ T3296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.233594][ T3296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.242380][ T3296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.260928][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.284033][ T3305] veth0_vlan: entered promiscuous mode [ 32.293545][ T3306] veth0_vlan: entered promiscuous mode [ 32.306825][ T3306] veth1_vlan: entered promiscuous mode [ 32.316090][ T3305] veth1_vlan: entered promiscuous mode [ 32.349838][ T3306] veth0_macvtap: entered promiscuous mode [ 32.375350][ T3306] veth1_macvtap: entered promiscuous mode [ 32.383901][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.390457][ T3305] veth0_macvtap: entered promiscuous mode [ 32.413424][ T3305] veth1_macvtap: entered promiscuous mode [ 32.432916][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.443536][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.454770][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.471503][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.481977][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.491836][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.502344][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.513918][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.528808][ T3309] veth0_vlan: entered promiscuous mode [ 32.538370][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.548919][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.559432][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.569651][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.578465][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.587367][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.596233][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.610279][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.620886][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.630782][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.641230][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.651861][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.660781][ T3309] veth1_vlan: entered promiscuous mode [ 32.674863][ T3306] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.683695][ T3306] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.692525][ T3306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.701311][ T3306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.720681][ T3307] veth0_vlan: entered promiscuous mode [ 32.746948][ T3309] veth0_macvtap: entered promiscuous mode [ 32.763398][ T3307] veth1_vlan: entered promiscuous mode [ 32.778383][ T3309] veth1_macvtap: entered promiscuous mode [ 32.799349][ T3307] veth0_macvtap: entered promiscuous mode [ 32.801627][ T3441] syz.3.6[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.805648][ T3441] syz.3.6[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.811873][ T3444] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.826844][ T3441] syz.3.6[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.840679][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.862454][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.872443][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.882943][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.892863][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.903328][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.919782][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.934291][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.945003][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.954938][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.965686][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.975555][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.986078][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.996132][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 32.996147][ T29] audit: type=1400 audit(1733718413.904:144): avc: denied { read write } for pid=3440 comm="syz.3.6" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.997056][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.002237][ T29] audit: type=1400 audit(1733718413.904:145): avc: denied { open } for pid=3440 comm="syz.3.6" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.026869][ T3307] veth1_macvtap: entered promiscuous mode [ 33.066705][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.067156][ T29] audit: type=1400 audit(1733718414.024:146): avc: denied { read } for pid=3445 comm="syz.0.1" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.077226][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.099981][ T29] audit: type=1400 audit(1733718414.024:147): avc: denied { open } for pid=3445 comm="syz.0.1" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.109786][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.133551][ T29] audit: type=1400 audit(1733718414.024:148): avc: denied { ioctl } for pid=3445 comm="syz.0.1" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.143936][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.143973][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.144031][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.144042][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.210156][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.212531][ T3453] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 33.221831][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.242965][ T3309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.251815][ T3309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.260551][ T3309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.269270][ T3309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.307785][ T29] audit: type=1400 audit(1733718414.254:149): avc: denied { create } for pid=3454 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.313853][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.337554][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.347450][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.357965][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.367961][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.378459][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.388334][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.398923][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.410303][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.424979][ T29] audit: type=1400 audit(1733718414.364:150): avc: denied { create } for pid=3456 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.425685][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.453073][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.461816][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.470592][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.484507][ T3457] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9'. [ 33.509028][ T29] audit: type=1400 audit(1733718414.474:151): avc: denied { read } for pid=3456 comm="syz.3.9" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.529947][ T29] audit: type=1400 audit(1733718414.474:152): avc: denied { open } for pid=3456 comm="syz.3.9" path="net:[4026532375]" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.573854][ T29] audit: type=1400 audit(1733718414.474:153): avc: denied { create } for pid=3456 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.674725][ T3464] loop1: detected capacity change from 0 to 1024 [ 33.705780][ T3466] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11'. [ 33.724078][ T3464] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2: Failed to acquire dquot type 0 [ 33.729580][ T3470] loop0: detected capacity change from 0 to 1024 [ 33.803898][ T3470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.869034][ T3464] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 33.895278][ T3464] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.2: corrupted inode contents [ 33.909431][ T3464] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.2: mark_inode_dirty error [ 33.921403][ T3464] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.2: corrupted inode contents [ 33.936635][ T3464] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.2: mark_inode_dirty error [ 33.949004][ T3464] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.2: corrupted inode contents [ 33.984612][ T3464] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 33.994636][ T3464] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.2: corrupted inode contents [ 34.031811][ T3464] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.2: mark_inode_dirty error [ 34.071584][ T3464] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 34.092105][ T3464] EXT4-fs (loop1): 1 truncate cleaned up [ 34.105918][ T3464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.127002][ T3479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.152009][ T3479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.263379][ T3482] loop2: detected capacity change from 0 to 2048 [ 34.310594][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.326587][ T3482] loop2: p3 < > p4 < > [ 34.330817][ T3482] loop2: partition table partially beyond EOD, truncated [ 34.338445][ T3482] loop2: p3 start 4284289 is beyond EOD, truncated [ 34.371891][ T2999] loop2: p3 < > p4 < > [ 34.372214][ T3482] syz.2.13[3482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.376126][ T2999] loop2: partition table partially beyond EOD, [ 34.381942][ T3482] syz.2.13[3482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.387269][ T2999] truncated [ 34.403757][ T3482] syz.2.13[3482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.409600][ T2999] loop2: p3 start 4284289 is beyond EOD, truncated [ 34.454607][ T3489] loop3: detected capacity change from 0 to 512 [ 34.464426][ T3489] EXT4-fs: Mount option(s) incompatible with ext3 [ 34.487898][ T3491] loop1: detected capacity change from 0 to 512 [ 34.500477][ T3475] udevd[3475]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.501895][ T3482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 34.519073][ T3482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 34.537052][ T3491] ======================================================= [ 34.537052][ T3491] WARNING: The mand mount option has been deprecated and [ 34.537052][ T3491] and is ignored by this kernel. Remove the mand [ 34.537052][ T3491] option from the mount to silence this warning. [ 34.537052][ T3491] ======================================================= [ 34.582976][ C0] hrtimer: interrupt took 51088 ns [ 34.595215][ T3482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 34.624352][ T3495] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.652498][ T3495] loop3: detected capacity change from 0 to 512 [ 34.660879][ T3491] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.689877][ T3495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.726754][ T3495] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.737027][ T3491] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.799246][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.876760][ T3505] netlink: 2 bytes leftover after parsing attributes in process `syz.3.20'. [ 34.885696][ T3505] netlink: 2 bytes leftover after parsing attributes in process `syz.3.20'. [ 34.969191][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.236777][ T3513] loop1: detected capacity change from 0 to 1024 [ 35.342435][ T3514] loop2: detected capacity change from 0 to 512 [ 35.866296][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.929262][ T3521] loop4: detected capacity change from 0 to 512 [ 35.939834][ T3513] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.22: Failed to acquire dquot type 0 [ 35.940070][ T3514] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #15: comm syz.2.23: inline data xattr refers to an external xattr inode [ 35.951478][ T3521] EXT4-fs: Ignoring removed bh option [ 35.973425][ T3514] EXT4-fs (loop2): Remounting filesystem read-only [ 35.984022][ T3513] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 35.991365][ T3514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.012045][ T3514] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 36.021624][ T3513] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.22: corrupted inode contents [ 36.027655][ T3523] netlink: 224 bytes leftover after parsing attributes in process `syz.0.24'. [ 36.043982][ T3513] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #13: comm syz.1.22: mark_inode_dirty error [ 36.062026][ T3514] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.118374][ T3521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.131178][ T3521] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.132768][ T3513] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.22: corrupted inode contents [ 36.143629][ T3521] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.177414][ T3513] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #13: comm syz.1.22: mark_inode_dirty error [ 36.191484][ T3513] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.22: corrupted inode contents [ 36.203964][ T3513] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 36.214523][ T3528] bridge0: port 3(vlan2) entered blocking state [ 36.220886][ T3528] bridge0: port 3(vlan2) entered disabled state [ 36.228463][ T3513] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #13: comm syz.1.22: corrupted inode contents [ 36.240743][ T3513] EXT4-fs error (device loop1): ext4_truncate:4240: inode #13: comm syz.1.22: mark_inode_dirty error [ 36.290541][ T3513] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 36.300080][ T3528] vlan2: entered allmulticast mode [ 36.305670][ T3513] EXT4-fs (loop1): 1 truncate cleaned up [ 36.312746][ T3513] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.333833][ T3528] vlan2: left allmulticast mode [ 36.498666][ T3543] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.550171][ T3543] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 36.575897][ T3548] loop4: detected capacity change from 0 to 1024 [ 36.583307][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.585723][ T3547] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 36.616431][ T3547] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 36.649561][ T3548] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.35: Failed to acquire dquot type 0 [ 36.672787][ T3548] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 36.720595][ T3548] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.35: corrupted inode contents [ 36.769713][ T3554] ebtables: ebtables: counters copy to user failed while replacing table [ 36.781663][ T3548] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #13: comm syz.4.35: mark_inode_dirty error [ 36.823919][ T3548] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.35: corrupted inode contents [ 36.838928][ T3562] loop2: detected capacity change from 0 to 512 [ 36.866346][ T3548] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.35: mark_inode_dirty error [ 36.897598][ T3548] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.35: corrupted inode contents [ 36.910756][ T3562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.935181][ T3548] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 36.954525][ T3562] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.976517][ T3548] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.35: corrupted inode contents [ 37.013388][ T3548] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.35: mark_inode_dirty error [ 37.050064][ T3548] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 37.065630][ T3548] EXT4-fs (loop4): 1 truncate cleaned up [ 37.071405][ T3562] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #18: comm syz.2.40: corrupted inode contents [ 37.072080][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.101668][ T3574] Zero length message leads to an empty skb [ 37.111099][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.118612][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.126082][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.134246][ T3562] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #18: comm syz.2.40: mark_inode_dirty error [ 37.134652][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.152988][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.160492][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.162739][ T3562] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #18: comm syz.2.40: corrupted inode contents [ 37.167980][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.168018][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.194690][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.202186][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.203101][ T3562] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3006: inode #18: comm syz.2.40: mark_inode_dirty error [ 37.209652][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.209681][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.233163][ T3562] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3009: inode #18: comm syz.2.40: mark inode dirty (error -117) [ 37.236339][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.256232][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.256322][ T3562] EXT4-fs warning (device loop2): ext4_evict_inode:276: xattr delete (err -117) [ 37.272189][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.280273][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.287907][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.295326][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.302952][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.310394][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.318034][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.325465][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.332916][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.340362][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.347804][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.355212][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.362666][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.370095][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.377624][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.381123][ T3305] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #12: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 37.385033][ T3367] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.425914][ T3305] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #12: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 37.464825][ T3367] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.478511][ T3587] syz.1.46 uses obsolete (PF_INET,SOCK_PACKET) [ 37.561193][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.578585][ T3589] bond1: entered promiscuous mode [ 37.583857][ T3589] bond1: entered allmulticast mode [ 37.589321][ T3589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.600657][ T3589] bond1 (unregistering): Released all slaves [ 37.704536][ T3602] loop1: detected capacity change from 0 to 4096 [ 37.714483][ T3602] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.800596][ T3572] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.814229][ T3572] syz.2.40 (3572) used greatest stack depth: 9728 bytes left [ 37.823358][ T3613] ucma_write: process 29 (syz.3.49) changed security contexts after opening file descriptor, this is not allowed. [ 37.856080][ T2294] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.941303][ T2294] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.068462][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 38.068480][ T29] audit: type=1326 audit(1733718419.024:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 38.097896][ T29] audit: type=1326 audit(1733718419.024:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 38.121070][ T29] audit: type=1326 audit(1733718419.024:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 38.144333][ T29] audit: type=1326 audit(1733718419.024:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 38.167547][ T29] audit: type=1326 audit(1733718419.024:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 38.190802][ T29] audit: type=1400 audit(1733718419.024:528): avc: denied { audit_write } for pid=3627 comm="syz.0.62" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.211767][ T29] audit: type=1107 audit(1733718419.024:529): pid=3627 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 38.225353][ T29] audit: type=1326 audit(1733718419.024:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 38.248536][ T29] audit: type=1326 audit(1733718419.024:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 38.271775][ T29] audit: type=1326 audit(1733718419.024:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3627 comm="syz.0.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 38.305230][ T2294] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.348938][ T3636] __nla_validate_parse: 8 callbacks suppressed [ 38.348955][ T3636] netlink: 224 bytes leftover after parsing attributes in process `syz.0.64'. [ 38.350663][ T3634] bridge0: port 3(vlan2) entered blocking state [ 38.371126][ T3634] bridge0: port 3(vlan2) entered disabled state [ 38.390476][ T3634] vlan2: entered allmulticast mode [ 38.432478][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.441991][ T3634] vlan2: left allmulticast mode [ 38.486926][ T3645] loop1: detected capacity change from 0 to 512 [ 38.497372][ T2294] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.537996][ T3643] loop0: detected capacity change from 0 to 8192 [ 38.616307][ T3645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.691531][ T3645] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.720850][ T3624] chnl_net:caif_netlink_parms(): no params data found [ 38.773457][ T2294] bridge_slave_1: left allmulticast mode [ 38.779195][ T2294] bridge_slave_1: left promiscuous mode [ 38.784935][ T2294] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.809074][ T2294] bridge_slave_0: left allmulticast mode [ 38.814853][ T2294] bridge_slave_0: left promiscuous mode [ 38.820709][ T2294] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.828567][ T3652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.843451][ T3652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.908426][ T3645] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #19: comm syz.1.66: corrupted inode contents [ 38.938052][ T3645] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #19: comm syz.1.66: mark_inode_dirty error [ 38.977797][ T3645] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #19: comm syz.1.66: corrupted inode contents [ 39.017429][ T2294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.048498][ T2294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.049979][ T3645] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.66: mark_inode_dirty error [ 39.070408][ T2294] bond0 (unregistering): Released all slaves [ 39.104531][ T3673] loop4: detected capacity change from 0 to 164 [ 39.117341][ T3645] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.66: mark inode dirty (error -117) [ 39.144150][ T3645] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 39.193602][ T2294] hsr_slave_0: left promiscuous mode [ 39.201424][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.201745][ T3678] Cannot find del_set index 0 as target [ 39.216587][ T2294] hsr_slave_1: left promiscuous mode [ 39.231434][ T3678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 39.241594][ T2294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.249099][ T2294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.256877][ T2294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.264373][ T2294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.275660][ T2294] veth1_macvtap: left promiscuous mode [ 39.281259][ T2294] veth0_macvtap: left promiscuous mode [ 39.286874][ T2294] veth1_vlan: left promiscuous mode [ 39.292167][ T2294] veth0_vlan: left promiscuous mode [ 39.375435][ T2294] team0 (unregistering): Port device team_slave_1 removed [ 39.387708][ T2294] team0 (unregistering): Port device team_slave_0 removed [ 39.425237][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.432366][ T3624] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.446172][ T3624] bridge_slave_0: entered allmulticast mode [ 39.452642][ T3624] bridge_slave_0: entered promiscuous mode [ 39.453906][ T3692] process 'syz.3.75' launched './file0' with NULL argv: empty string added [ 39.491490][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.498681][ T3624] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.526651][ T3624] bridge_slave_1: entered allmulticast mode [ 39.533212][ T3624] bridge_slave_1: entered promiscuous mode [ 39.605095][ T3624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.630616][ T3692] loop3: detected capacity change from 0 to 8192 [ 39.658643][ T3624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.739700][ T3703] GUP no longer grows the stack in syz.4.77 (3703): 20004000-2000a000 (20002000) [ 39.748930][ T3703] CPU: 0 UID: 0 PID: 3703 Comm: syz.4.77 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 39.759510][ T3703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.769670][ T3703] Call Trace: [ 39.772962][ T3703] [ 39.775975][ T3703] dump_stack_lvl+0xf2/0x150 [ 39.780625][ T3703] dump_stack+0x15/0x1a [ 39.784885][ T3703] __get_user_pages+0x209b/0x2670 [ 39.789989][ T3703] ? __rcu_read_unlock+0x4e/0x70 [ 39.794944][ T3703] get_user_pages_remote+0x1df/0x790 [ 39.800262][ T3703] __access_remote_vm+0x15b/0x580 [ 39.805305][ T3703] access_remote_vm+0x34/0x50 [ 39.810044][ T3703] proc_pid_cmdline_read+0x3e6/0x660 [ 39.815385][ T3703] vfs_readv+0x3e2/0x660 [ 39.819638][ T3703] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 39.825519][ T3703] __x64_sys_preadv+0xf4/0x1c0 [ 39.830385][ T3703] x64_sys_call+0x2680/0x2dc0 [ 39.835092][ T3703] do_syscall_64+0xc9/0x1c0 [ 39.839611][ T3703] ? clear_bhb_loop+0x55/0xb0 [ 39.844354][ T3703] ? clear_bhb_loop+0x55/0xb0 [ 39.849053][ T3703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.855029][ T3703] RIP: 0033:0x7f14de55fed9 [ 39.859465][ T3703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.879110][ T3703] RSP: 002b:00007f14dcbd7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 39.887550][ T3703] RAX: ffffffffffffffda RBX: 00007f14de725fa0 RCX: 00007f14de55fed9 [ 39.895637][ T3703] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 000000000000000b [ 39.903645][ T3703] RBP: 00007f14de5d3cc8 R08: 00000000fffffff9 R09: 0000000000000000 [ 39.911642][ T3703] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 39.919631][ T3703] R13: 0000000000000000 R14: 00007f14de725fa0 R15: 00007fff9bdf59f8 [ 39.927626][ T3703] [ 39.947355][ T3624] team0: Port device team_slave_0 added [ 39.954260][ T3624] team0: Port device team_slave_1 added [ 40.023490][ T3624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.030713][ T3624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.056765][ T3624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.068589][ T3624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.075574][ T3624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.101799][ T3624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.138621][ T3624] hsr_slave_0: entered promiscuous mode [ 40.145118][ T3734] netlink: 'syz.0.82': attribute type 3 has an invalid length. [ 40.153145][ T3624] hsr_slave_1: entered promiscuous mode [ 40.160907][ T3624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.172987][ T3624] Cannot create hsr debugfs directory [ 40.195957][ T3732] bridge0: port 3(vlan2) entered blocking state [ 40.202399][ T3732] bridge0: port 3(vlan2) entered disabled state [ 40.230546][ T3739] syz.4.83[3739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.230759][ T3739] syz.4.83[3739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.236272][ T3732] vlan2: entered allmulticast mode [ 40.243579][ T3739] syz.4.83[3739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.274718][ T3732] vlan2: left allmulticast mode [ 40.389529][ T3751] loop3: detected capacity change from 0 to 1024 [ 40.438161][ T3751] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.86: Failed to acquire dquot type 0 [ 40.473897][ T3751] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 40.578810][ T3751] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.86: corrupted inode contents [ 40.615131][ T3751] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #13: comm syz.3.86: mark_inode_dirty error [ 40.648944][ T3624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.655776][ T3751] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.86: corrupted inode contents [ 40.673093][ T3624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.680258][ T3751] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.86: mark_inode_dirty error [ 40.697787][ T3624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.704783][ T3751] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.86: corrupted inode contents [ 40.720535][ T3624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.727516][ T3751] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 40.752262][ T3751] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #13: comm syz.3.86: corrupted inode contents [ 40.781587][ T3751] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.86: mark_inode_dirty error [ 40.810930][ T3751] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 40.821135][ T3624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.830565][ T3751] EXT4-fs (loop3): 1 truncate cleaned up [ 40.840974][ T3624] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.848669][ T3751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.869031][ T1751] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.876147][ T1751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.885741][ T1751] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.892848][ T1751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.001101][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.009250][ T3624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.074374][ T3782] Cannot find del_set index 0 as target [ 41.200220][ T3803] mmap: syz.3.87 (3803) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.253353][ T3807] ip6gretap1: entered promiscuous mode [ 41.258916][ T3807] ip6gretap1: entered allmulticast mode [ 41.429418][ T3824] loop4: detected capacity change from 0 to 512 [ 41.441244][ T3624] veth0_vlan: entered promiscuous mode [ 41.449306][ T3824] EXT4-fs error (device loop4): ext4_find_inline_data_nolock:164: inode #15: comm syz.4.97: inline data xattr refers to an external xattr inode [ 41.451227][ T3624] veth1_vlan: entered promiscuous mode [ 41.482714][ T3624] veth0_macvtap: entered promiscuous mode [ 41.495964][ T3624] veth1_macvtap: entered promiscuous mode [ 41.498986][ T3824] EXT4-fs (loop4): Remounting filesystem read-only [ 41.507387][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.518890][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.528818][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.536931][ T3824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.539255][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.539268][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.571616][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.581475][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.582836][ T3841] loop3: detected capacity change from 0 to 512 [ 41.591998][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.592862][ T3624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.614976][ T3824] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 41.619077][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.632650][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.642574][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.653062][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.662951][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.665462][ T3824] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.673397][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.673412][ T3624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.702681][ T3624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.713564][ T3624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.741605][ T3841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.763240][ T3841] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.789307][ T3624] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.798181][ T3624] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.807084][ T3624] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.815834][ T3624] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.858329][ T3841] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #18: comm syz.3.99: corrupted inode contents [ 41.894499][ T3841] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #18: comm syz.3.99: mark_inode_dirty error [ 41.915369][ T3855] loop4: detected capacity change from 0 to 1024 [ 41.938953][ T3841] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #18: comm syz.3.99: corrupted inode contents [ 41.938967][ T3855] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.102: Failed to acquire dquot type 0 [ 41.963712][ T3841] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #18: comm syz.3.99: mark_inode_dirty error [ 41.981536][ T3855] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 41.996155][ T3855] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.102: corrupted inode contents [ 42.008535][ T3855] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #13: comm syz.4.102: mark_inode_dirty error [ 42.019903][ T3841] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #18: comm syz.3.99: mark inode dirty (error -117) [ 42.038793][ T3855] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.102: corrupted inode contents [ 42.050836][ T3841] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 42.068209][ T3855] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.102: mark_inode_dirty error [ 42.106454][ T3855] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.102: corrupted inode contents [ 42.123844][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.141776][ T3855] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 42.174880][ T3855] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #13: comm syz.4.102: corrupted inode contents [ 42.193353][ T3855] EXT4-fs error (device loop4): ext4_truncate:4240: inode #13: comm syz.4.102: mark_inode_dirty error [ 42.210026][ T3855] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 42.219740][ T3855] EXT4-fs (loop4): 1 truncate cleaned up [ 42.225919][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.267647][ T3888] netlink: 224 bytes leftover after parsing attributes in process `syz.1.108'. [ 42.358404][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.415553][ T3897] loop3: detected capacity change from 0 to 1024 [ 42.441719][ T3900] FAULT_INJECTION: forcing a failure. [ 42.441719][ T3900] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.454837][ T3900] CPU: 0 UID: 0 PID: 3900 Comm: syz.1.113 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 42.465498][ T3900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 42.475599][ T3900] Call Trace: [ 42.478891][ T3900] [ 42.481865][ T3900] dump_stack_lvl+0xf2/0x150 [ 42.486587][ T3900] dump_stack+0x15/0x1a [ 42.490852][ T3900] should_fail_ex+0x223/0x230 [ 42.495584][ T3900] should_fail+0xb/0x10 [ 42.499854][ T3900] should_fail_usercopy+0x1a/0x20 [ 42.504950][ T3900] strncpy_from_user+0x25/0x210 [ 42.509860][ T3900] ? string+0x1ee/0x210 [ 42.514117][ T3900] strncpy_from_user_nofault+0x66/0xe0 [ 42.519785][ T3900] bpf_probe_read_compat_str+0xb3/0x130 [ 42.525545][ T3900] bpf_prog_597e1462992804d8+0x46/0x48 [ 42.531035][ T3900] bpf_trace_run2+0x104/0x1d0 [ 42.535914][ T3900] ? selinux_release_secctx+0x15/0x20 [ 42.541343][ T3900] ? selinux_release_secctx+0x15/0x20 [ 42.546786][ T3900] __traceiter_kfree+0x2b/0x50 [ 42.551645][ T3900] ? selinux_release_secctx+0x15/0x20 [ 42.557075][ T3900] kfree+0x247/0x2f0 [ 42.561106][ T3900] ? audit_log_format+0x8b/0xc0 [ 42.566206][ T3900] ? security_sid_to_context+0x27/0x30 [ 42.571861][ T3900] selinux_release_secctx+0x15/0x20 [ 42.577150][ T3900] security_release_secctx+0x38/0x50 [ 42.582555][ T3900] audit_log_task_context+0x103/0x1c0 [ 42.588026][ T3900] audit_log_task+0xf9/0x1c0 [ 42.592717][ T3900] audit_seccomp+0x68/0x130 [ 42.597326][ T3900] __seccomp_filter+0x6fa/0x1180 [ 42.602311][ T3900] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 42.608101][ T3900] ? vfs_write+0x596/0x920 [ 42.612687][ T3900] ? __schedule+0x6fa/0x930 [ 42.617235][ T3900] __secure_computing+0x9f/0x1c0 [ 42.622211][ T3900] syscall_trace_enter+0xd1/0x1f0 [ 42.627304][ T3900] do_syscall_64+0xaa/0x1c0 [ 42.631846][ T3900] ? clear_bhb_loop+0x55/0xb0 [ 42.636550][ T3900] ? clear_bhb_loop+0x55/0xb0 [ 42.641263][ T3900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.647405][ T3900] RIP: 0033:0x7f6f4cb7fed9 [ 42.651859][ T3900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.671671][ T3900] RSP: 002b:00007f6f4b1f7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000063 [ 42.680122][ T3900] RAX: ffffffffffffffda RBX: 00007f6f4cd45fa0 RCX: 00007f6f4cb7fed9 [ 42.681793][ T3916] bridge0: port 3(vlan2) entered blocking state [ 42.688100][ T3900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000300 [ 42.694424][ T3916] bridge0: port 3(vlan2) entered disabled state [ 42.702341][ T3900] RBP: 00007f6f4b1f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 42.702396][ T3900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.724642][ T3900] R13: 0000000000000000 R14: 00007f6f4cd45fa0 R15: 00007ffdd2b93f08 [ 42.732650][ T3900] [ 42.737923][ T3916] vlan2: entered allmulticast mode [ 42.752270][ T3916] vlan2: left allmulticast mode [ 42.754904][ T3897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.441470][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.498938][ T3949] loop3: detected capacity change from 0 to 512 [ 43.548399][ T3949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.561840][ T3952] loop4: detected capacity change from 0 to 512 [ 43.572524][ T3949] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.609016][ T3952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.645754][ T3949] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.120: corrupted inode contents [ 43.665018][ T3952] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.684299][ T3949] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #19: comm syz.3.120: mark_inode_dirty error [ 43.701150][ T3949] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.120: corrupted inode contents [ 43.717058][ T3949] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.120: mark_inode_dirty error [ 43.737794][ T3949] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.120: mark inode dirty (error -117) [ 43.757523][ T3949] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 43.768293][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.810099][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 43.810117][ T29] audit: type=1400 audit(1733718424.774:799): avc: denied { write } for pid=3960 comm="syz.5.125" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 43.847245][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.944388][ T3969] loop3: detected capacity change from 0 to 8192 [ 43.988562][ T3977] loop4: detected capacity change from 0 to 1024 [ 44.008431][ T3977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.191826][ T3993] FAULT_INJECTION: forcing a failure. [ 44.191826][ T3993] name failslab, interval 1, probability 0, space 0, times 1 [ 44.204609][ T3993] CPU: 1 UID: 0 PID: 3993 Comm: syz.1.137 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 44.215229][ T3993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 44.225585][ T3993] Call Trace: [ 44.228911][ T3993] [ 44.231875][ T3993] dump_stack_lvl+0xf2/0x150 [ 44.236586][ T3993] dump_stack+0x15/0x1a [ 44.240833][ T3993] should_fail_ex+0x223/0x230 [ 44.245540][ T3993] should_failslab+0x8f/0xb0 [ 44.250222][ T3993] kmem_cache_alloc_node_noprof+0x59/0x320 [ 44.256071][ T3993] ? __alloc_skb+0x10b/0x310 [ 44.260741][ T3993] __alloc_skb+0x10b/0x310 [ 44.265206][ T3993] alloc_skb_with_frags+0x80/0x450 [ 44.270431][ T3993] ? __sys_sendmmsg+0x227/0x4b0 [ 44.275329][ T3993] ? __x64_sys_sendmmsg+0x57/0x70 [ 44.280456][ T3993] ? x64_sys_call+0x29aa/0x2dc0 [ 44.285343][ T3993] ? do_syscall_64+0xc9/0x1c0 [ 44.290056][ T3993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.296195][ T3993] ? percpu_counter_add_batch+0xc6/0x140 [ 44.301993][ T3993] sock_alloc_send_pskb+0x435/0x4f0 [ 44.307222][ T3993] raw_send_hdrinc+0x18d/0xa70 [ 44.312025][ T3993] ? xfrm_lookup_route+0xcf/0x110 [ 44.317111][ T3993] raw_sendmsg+0xc59/0xe50 [ 44.321563][ T3993] ? __pfx_raw_sendmsg+0x10/0x10 [ 44.326529][ T3993] inet_sendmsg+0xc5/0xd0 [ 44.330927][ T3993] __sock_sendmsg+0x102/0x180 [ 44.335694][ T3993] ____sys_sendmsg+0x312/0x410 [ 44.340542][ T3993] __sys_sendmmsg+0x227/0x4b0 [ 44.345331][ T3993] __x64_sys_sendmmsg+0x57/0x70 [ 44.350195][ T3993] x64_sys_call+0x29aa/0x2dc0 [ 44.354953][ T3993] do_syscall_64+0xc9/0x1c0 [ 44.359462][ T3993] ? clear_bhb_loop+0x55/0xb0 [ 44.364150][ T3993] ? clear_bhb_loop+0x55/0xb0 [ 44.368853][ T3993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.374784][ T3993] RIP: 0033:0x7f6f4cb7fed9 [ 44.379262][ T3993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.398956][ T3993] RSP: 002b:00007f6f4b1f7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 44.407384][ T3993] RAX: ffffffffffffffda RBX: 00007f6f4cd45fa0 RCX: 00007f6f4cb7fed9 [ 44.415377][ T3993] RDX: 0000000000000001 RSI: 0000000020000440 RDI: 0000000000000003 [ 44.423356][ T3993] RBP: 00007f6f4b1f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 44.431365][ T3993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.439358][ T3993] R13: 0000000000000000 R14: 00007f6f4cd45fa0 R15: 00007ffdd2b93f08 [ 44.447348][ T3993] [ 44.674349][ T4009] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.736089][ T29] audit: type=1400 audit(1733718425.674:800): avc: denied { setopt } for pid=4011 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.755421][ T29] audit: type=1400 audit(1733718425.674:801): avc: denied { bind } for pid=4011 comm="syz.0.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.774593][ T29] audit: type=1400 audit(1733718425.694:802): avc: denied { sqpoll } for pid=4017 comm="syz.5.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.877972][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.978663][ T4030] netlink: 224 bytes leftover after parsing attributes in process `syz.4.147'. [ 45.011657][ T4036] Cannot find del_set index 0 as target [ 45.125437][ T4054] loop4: detected capacity change from 0 to 512 [ 45.292005][ T29] audit: type=1326 audit(1733718426.254:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbba8fed9 code=0x7ffc0000 [ 45.309670][ T4054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.315336][ T29] audit: type=1326 audit(1733718426.254:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbba8fed9 code=0x7ffc0000 [ 45.328201][ T4054] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.351212][ T29] audit: type=1326 audit(1733718426.254:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbba8fed9 code=0x7ffc0000 [ 45.384825][ T29] audit: type=1326 audit(1733718426.254:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbba8fed9 code=0x7ffc0000 [ 45.408102][ T29] audit: type=1326 audit(1733718426.254:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbba8fed9 code=0x7ffc0000 [ 45.431503][ T29] audit: type=1326 audit(1733718426.254:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4070 comm="syz.3.156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f5cbba8fed9 code=0x7ffc0000 [ 45.901065][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.299295][ T4095] Cannot find del_set index 0 as target [ 46.596745][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.610621][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.642773][ T4128] Cannot find del_set index 0 as target [ 48.395543][ T4166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.407117][ T4166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.640122][ T4184] netlink: 52 bytes leftover after parsing attributes in process `syz.5.197'. [ 48.685532][ T4188] netlink: 224 bytes leftover after parsing attributes in process `syz.5.198'. [ 48.818310][ T4194] netlink: 52 bytes leftover after parsing attributes in process `syz.5.200'. [ 48.878126][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 48.878144][ T29] audit: type=1326 audit(1733718429.844:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 48.909636][ T29] audit: type=1326 audit(1733718429.844:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 48.933161][ T29] audit: type=1326 audit(1733718429.844:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 48.956677][ T29] audit: type=1326 audit(1733718429.844:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 48.960595][ T4200] FAULT_INJECTION: forcing a failure. [ 48.960595][ T4200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.980025][ T29] audit: type=1326 audit(1733718429.844:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 48.993067][ T4200] CPU: 1 UID: 0 PID: 4200 Comm: syz.4.202 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 48.993099][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.993114][ T4200] Call Trace: [ 48.993122][ T4200] [ 48.993132][ T4200] dump_stack_lvl+0xf2/0x150 [ 48.993246][ T4200] dump_stack+0x15/0x1a [ 49.016649][ T29] audit: type=1326 audit(1733718429.844:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 49.027247][ T4200] should_fail_ex+0x223/0x230 [ 49.027283][ T4200] should_fail+0xb/0x10 [ 49.037395][ T29] audit: type=1326 audit(1733718429.844:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 49.040664][ T4200] should_fail_usercopy+0x1a/0x20 [ 49.043588][ T29] audit: type=1326 audit(1733718429.844:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 49.048163][ T4200] _copy_to_user+0x20/0xa0 [ 49.052346][ T29] audit: type=1326 audit(1733718429.844:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 49.075681][ T4200] simple_read_from_buffer+0xa0/0x110 [ 49.080530][ T29] audit: type=1326 audit(1733718429.844:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4196 comm="syz.5.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f92bc97fed9 code=0x7ffc0000 [ 49.084526][ T4200] proc_fail_nth_read+0xf9/0x140 [ 49.197618][ T4200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.203278][ T4200] vfs_read+0x1a2/0x700 [ 49.207468][ T4200] ? __rcu_read_unlock+0x4e/0x70 [ 49.212522][ T4200] ? __fget_files+0x17c/0x1c0 [ 49.217258][ T4200] ksys_read+0xe8/0x1b0 [ 49.221470][ T4200] __x64_sys_read+0x42/0x50 [ 49.226119][ T4200] x64_sys_call+0x2874/0x2dc0 [ 49.231007][ T4200] do_syscall_64+0xc9/0x1c0 [ 49.235536][ T4200] ? clear_bhb_loop+0x55/0xb0 [ 49.240325][ T4200] ? clear_bhb_loop+0x55/0xb0 [ 49.245029][ T4200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.250983][ T4200] RIP: 0033:0x7f14de55e8ec [ 49.255435][ T4200] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.275150][ T4200] RSP: 002b:00007f14dcbb6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.283596][ T4200] RAX: ffffffffffffffda RBX: 00007f14de726080 RCX: 00007f14de55e8ec [ 49.291594][ T4200] RDX: 000000000000000f RSI: 00007f14dcbb60b0 RDI: 0000000000000004 [ 49.299582][ T4200] RBP: 00007f14dcbb60a0 R08: 0000000000000000 R09: 0000000000000000 [ 49.307688][ T4200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.315678][ T4200] R13: 0000000000000001 R14: 00007f14de726080 R15: 00007fff9bdf59f8 [ 49.323718][ T4200] [ 51.398788][ T4225] netlink: 52 bytes leftover after parsing attributes in process `syz.1.209'. [ 51.639438][ T4238] netlink: 224 bytes leftover after parsing attributes in process `syz.5.212'. [ 52.452876][ T4254] netlink: 100 bytes leftover after parsing attributes in process `syz.3.220'. [ 52.503353][ T4256] netlink: 32 bytes leftover after parsing attributes in process `syz.0.219'. [ 52.690730][ T4263] netlink: 224 bytes leftover after parsing attributes in process `syz.1.224'. [ 52.716203][ T4255] netlink: 32 bytes leftover after parsing attributes in process `syz.5.218'. [ 54.146077][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 54.146094][ T29] audit: type=1326 audit(1733718435.104:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.175681][ T29] audit: type=1326 audit(1733718435.104:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.199152][ T29] audit: type=1326 audit(1733718435.104:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.222768][ T29] audit: type=1326 audit(1733718435.104:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.246138][ T29] audit: type=1326 audit(1733718435.104:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.269631][ T29] audit: type=1326 audit(1733718435.104:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.293181][ T29] audit: type=1326 audit(1733718435.104:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.316623][ T29] audit: type=1326 audit(1733718435.104:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.340093][ T29] audit: type=1326 audit(1733718435.104:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.363571][ T29] audit: type=1326 audit(1733718435.104:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4278 comm="syz.4.228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 54.620002][ T4286] Cannot find del_set index 0 as target [ 54.658244][ T4282] netlink: 224 bytes leftover after parsing attributes in process `syz.5.229'. [ 54.689708][ T4293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.230'. [ 54.742192][ T4293] all: renamed from gre0 (while UP) [ 54.787761][ T4304] netlink: 76 bytes leftover after parsing attributes in process `syz.0.230'. [ 54.803911][ T4303] netlink: 224 bytes leftover after parsing attributes in process `syz.3.236'. [ 55.055740][ T4313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.121774][ T4313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.573083][ T4353] Cannot find del_set index 0 as target [ 56.727144][ T4370] netlink: 224 bytes leftover after parsing attributes in process `syz.1.249'. [ 56.742101][ T4377] usb usb7: usbfs: process 4377 (syz.4.250) did not claim interface 0 before use [ 56.743210][ T4376] netlink: 224 bytes leftover after parsing attributes in process `syz.3.251'. [ 56.953776][ T4396] netlink: 32 bytes leftover after parsing attributes in process `syz.5.256'. [ 57.724110][ T4431] netlink: 224 bytes leftover after parsing attributes in process `syz.1.262'. [ 58.013213][ T4437] netlink: 224 bytes leftover after parsing attributes in process `syz.4.264'. [ 58.072555][ T4443] 9p: Unknown access argument 00000000000000000000t"pC`{Jheݶ+ ˹գ: -22 [ 58.162501][ T4459] netlink: 32 bytes leftover after parsing attributes in process `syz.4.269'. [ 59.239409][ T4488] netlink: 224 bytes leftover after parsing attributes in process `syz.3.276'. [ 59.478828][ T4507] netlink: 32 bytes leftover after parsing attributes in process `syz.3.281'. [ 60.129359][ T4521] netlink: 224 bytes leftover after parsing attributes in process `syz.0.282'. [ 60.429191][ T4543] netlink: 'syz.4.286': attribute type 322 has an invalid length. [ 60.460371][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 60.460389][ T29] audit: type=1326 audit(1733718441.424:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.520299][ T29] audit: type=1326 audit(1733718441.464:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.543837][ T29] audit: type=1326 audit(1733718441.464:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.567300][ T29] audit: type=1326 audit(1733718441.464:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.590583][ T29] audit: type=1326 audit(1733718441.464:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.613983][ T29] audit: type=1326 audit(1733718441.464:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.637471][ T29] audit: type=1326 audit(1733718441.464:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.660883][ T29] audit: type=1326 audit(1733718441.464:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.684260][ T29] audit: type=1326 audit(1733718441.464:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4540 comm="syz.4.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14de55fed9 code=0x7ffc0000 [ 60.718130][ T29] audit: type=1326 audit(1733718441.644:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.0.288" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dc01bfed9 code=0x7ffc0000 [ 60.841193][ T4561] netlink: 224 bytes leftover after parsing attributes in process `syz.4.290'. [ 61.344111][ T4577] Cannot find del_set index 0 as target [ 62.046438][ T4600] __nla_validate_parse: 2 callbacks suppressed [ 62.046460][ T4600] netlink: 224 bytes leftover after parsing attributes in process `syz.5.303'. [ 62.427353][ T4609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.307'. [ 63.112379][ T4625] netlink: 224 bytes leftover after parsing attributes in process `syz.0.312'. [ 63.389327][ T4633] netlink: 224 bytes leftover after parsing attributes in process `syz.0.316'. [ 63.406807][ T4641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.320'. [ 63.837682][ T4668] bond1: entered promiscuous mode [ 63.842816][ T4668] bond1: entered allmulticast mode [ 63.870783][ T4668] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.896612][ T4674] Cannot find del_set index 0 as target [ 63.904596][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.915052][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.924876][ T4668] bond1 (unregistering): Released all slaves [ 63.995829][ T4677] netlink: 224 bytes leftover after parsing attributes in process `syz.3.333'. [ 63.996599][ T4678] netlink: 32 bytes leftover after parsing attributes in process `syz.0.334'. [ 64.112131][ T4686] Cannot find del_set index 0 as target [ 64.657935][ T4705] netlink: 224 bytes leftover after parsing attributes in process `syz.5.346'. [ 65.013795][ T4718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.030538][ T4718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.486991][ T4765] netlink: 224 bytes leftover after parsing attributes in process `syz.1.359'. [ 65.563520][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 65.563538][ T29] audit: type=1326 audit(1733718446.524:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.569783][ T4688] syz.3.339 (4688) used greatest stack depth: 7016 bytes left [ 65.576447][ T29] audit: type=1326 audit(1733718446.534:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.646986][ T4775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.674603][ T29] audit: type=1326 audit(1733718446.584:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.698000][ T29] audit: type=1326 audit(1733718446.584:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.721438][ T29] audit: type=1326 audit(1733718446.584:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.744772][ T29] audit: type=1326 audit(1733718446.584:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.744886][ T4775] batadv_slave_0: entered promiscuous mode [ 65.768112][ T29] audit: type=1326 audit(1733718446.584:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.768145][ T29] audit: type=1326 audit(1733718446.584:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.820585][ T29] audit: type=1326 audit(1733718446.584:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 65.844005][ T29] audit: type=1326 audit(1733718446.584:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4772 comm="syz.1.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 66.008310][ T4786] netlink: 224 bytes leftover after parsing attributes in process `syz.3.370'. [ 66.474965][ T4801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.689191][ T4801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.164782][ T4824] __nla_validate_parse: 1 callbacks suppressed [ 67.164853][ T4824] netlink: 224 bytes leftover after parsing attributes in process `syz.4.385'. [ 68.692393][ T4860] netlink: 224 bytes leftover after parsing attributes in process `syz.5.399'. [ 68.986524][ T4865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.997981][ T4865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.342930][ T4882] FAULT_INJECTION: forcing a failure. [ 69.342930][ T4882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.356109][ T4882] CPU: 1 UID: 0 PID: 4882 Comm: syz.1.407 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 69.366836][ T4882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 69.376927][ T4882] Call Trace: [ 69.380212][ T4882] [ 69.383187][ T4882] dump_stack_lvl+0xf2/0x150 [ 69.387803][ T4882] dump_stack+0x15/0x1a [ 69.392074][ T4882] should_fail_ex+0x223/0x230 [ 69.396865][ T4882] should_fail+0xb/0x10 [ 69.401028][ T4882] should_fail_usercopy+0x1a/0x20 [ 69.406064][ T4882] strncpy_from_user+0x25/0x210 [ 69.411179][ T4882] strncpy_from_user_nofault+0x66/0xe0 [ 69.416749][ T4882] bpf_probe_read_user_str+0x2a/0x70 [ 69.422065][ T4882] bpf_prog_02a70dbeb5f742df+0x43/0x45 [ 69.427618][ T4882] bpf_trace_run2+0x104/0x1d0 [ 69.432414][ T4882] ? kvfree+0x39/0x40 [ 69.436413][ T4882] ? kvfree+0x39/0x40 [ 69.440411][ T4882] __traceiter_kfree+0x2b/0x50 [ 69.445230][ T4882] ? kvfree+0x39/0x40 [ 69.449261][ T4882] kfree+0x247/0x2f0 [ 69.453228][ T4882] kvfree+0x39/0x40 [ 69.457050][ T4882] path_setxattrat+0x2ff/0x310 [ 69.461833][ T4882] __x64_sys_setxattr+0x6e/0x90 [ 69.466779][ T4882] x64_sys_call+0x2247/0x2dc0 [ 69.471466][ T4882] do_syscall_64+0xc9/0x1c0 [ 69.475985][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 69.480734][ T4882] ? clear_bhb_loop+0x55/0xb0 [ 69.485437][ T4882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.491415][ T4882] RIP: 0033:0x7f6f4cb7fed9 [ 69.495885][ T4882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.515543][ T4882] RSP: 002b:00007f6f4b1d6058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 69.523971][ T4882] RAX: ffffffffffffffda RBX: 00007f6f4cd46080 RCX: 00007f6f4cb7fed9 [ 69.531950][ T4882] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000020000000 [ 69.539980][ T4882] RBP: 00007f6f4b1d60a0 R08: 0000000000000002 R09: 0000000000000000 [ 69.547989][ T4882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.555969][ T4882] R13: 0000000000000000 R14: 00007f6f4cd46080 R15: 00007ffdd2b93f08 [ 69.563954][ T4882] [ 70.033147][ T4903] netlink: 224 bytes leftover after parsing attributes in process `syz.3.414'. [ 70.666863][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 70.666881][ T29] audit: type=1326 audit(1733718451.634:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.3.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cbba8fed9 code=0x0 [ 70.773007][ T4934] netlink: 224 bytes leftover after parsing attributes in process `syz.1.427'. [ 70.875106][ T29] audit: type=1326 audit(1733718451.834:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 70.924054][ T29] audit: type=1326 audit(1733718451.834:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 70.947567][ T29] audit: type=1326 audit(1733718451.874:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 70.971273][ T29] audit: type=1326 audit(1733718451.874:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 70.984856][ T4945] FAULT_INJECTION: forcing a failure. [ 70.984856][ T4945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.994689][ T29] audit: type=1326 audit(1733718451.874:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 71.007784][ T4945] CPU: 0 UID: 0 PID: 4945 Comm: syz.0.428 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 71.031129][ T29] audit: type=1326 audit(1733718451.874:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 71.041686][ T4945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.041704][ T4945] Call Trace: [ 71.041712][ T4945] [ 71.041723][ T4945] dump_stack_lvl+0xf2/0x150 [ 71.065003][ T29] audit: type=1326 audit(1733718451.874:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 71.075019][ T4945] dump_stack+0x15/0x1a [ 71.075062][ T4945] should_fail_ex+0x223/0x230 [ 71.078378][ T29] audit: type=1326 audit(1733718451.874:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 71.081267][ T4945] should_fail+0xb/0x10 [ 71.085856][ T29] audit: type=1326 audit(1733718451.874:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.1.431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f6f4cb7fed9 code=0x7ffc0000 [ 71.109092][ T4945] should_fail_usercopy+0x1a/0x20 [ 71.109136][ T4945] _copy_to_user+0x20/0xa0 [ 71.178434][ T4945] simple_read_from_buffer+0xa0/0x110 [ 71.183879][ T4945] proc_fail_nth_read+0xf9/0x140 [ 71.188850][ T4945] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 71.194424][ T4945] vfs_read+0x1a2/0x700 [ 71.198721][ T4945] ? __rcu_read_unlock+0x4e/0x70 [ 71.203799][ T4945] ? __fget_files+0x17c/0x1c0 [ 71.208643][ T4945] ksys_read+0xe8/0x1b0 [ 71.212870][ T4945] __x64_sys_read+0x42/0x50 [ 71.217397][ T4945] x64_sys_call+0x2874/0x2dc0 [ 71.222269][ T4945] do_syscall_64+0xc9/0x1c0 [ 71.226799][ T4945] ? clear_bhb_loop+0x55/0xb0 [ 71.231495][ T4945] ? clear_bhb_loop+0x55/0xb0 [ 71.236243][ T4945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.242170][ T4945] RIP: 0033:0x7f4dc01be8ec [ 71.246606][ T4945] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 71.266302][ T4945] RSP: 002b:00007f4dbe837050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 71.274747][ T4945] RAX: ffffffffffffffda RBX: 00007f4dc0385fa0 RCX: 00007f4dc01be8ec [ 71.282871][ T4945] RDX: 000000000000000f RSI: 00007f4dbe8370b0 RDI: 0000000000000006 [ 71.290866][ T4945] RBP: 00007f4dbe8370a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.298978][ T4945] R10: 0000000020001dc0 R11: 0000000000000246 R12: 0000000000000001 [ 71.307015][ T4945] R13: 0000000000000000 R14: 00007f4dc0385fa0 R15: 00007ffcfb36d428 [ 71.315106][ T4945] [ 71.366512][ T4957] netlink: 'syz.4.435': attribute type 11 has an invalid length. [ 71.457870][ T4969] SELinux: syz.1.441 (4969) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 71.714065][ T4973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.724803][ T4973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.898345][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.907235][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.942296][ T5043] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 72.952509][ T5043] SELinux: failed to load policy [ 73.703472][ T5056] ================================================================== [ 73.711593][ T5056] BUG: KCSAN: data-race in n_tty_write / tty_set_termios [ 73.718649][ T5056] [ 73.720977][ T5056] read-write to 0xffff888116e0a914 of 4 bytes by task 5060 on cpu 0: [ 73.729051][ T5056] tty_set_termios+0x1a2/0x8b0 [ 73.733842][ T5056] set_termios+0x365/0x4e0 [ 73.738280][ T5056] tty_mode_ioctl+0x391/0x5d0 [ 73.742974][ T5056] n_tty_ioctl_helper+0x8d/0x240 [ 73.747931][ T5056] n_tty_ioctl+0xfd/0x200 [ 73.752273][ T5056] tty_ioctl+0x87a/0xbe0 [ 73.756535][ T5056] __se_sys_ioctl+0xc9/0x140 [ 73.761141][ T5056] __x64_sys_ioctl+0x43/0x50 [ 73.765756][ T5056] x64_sys_call+0x1690/0x2dc0 [ 73.770453][ T5056] do_syscall_64+0xc9/0x1c0 [ 73.774992][ T5056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.780997][ T5056] [ 73.783322][ T5056] read to 0xffff888116e0a914 of 4 bytes by task 5056 on cpu 1: [ 73.790868][ T5056] n_tty_write+0xa0/0xb80 [ 73.795204][ T5056] file_tty_write+0x37a/0x680 [ 73.799899][ T5056] tty_write+0x28/0x30 [ 73.803980][ T5056] vfs_write+0x77f/0x920 [ 73.808237][ T5056] ksys_write+0xe8/0x1b0 [ 73.812502][ T5056] __x64_sys_write+0x42/0x50 [ 73.817193][ T5056] x64_sys_call+0x287e/0x2dc0 [ 73.821878][ T5056] do_syscall_64+0xc9/0x1c0 [ 73.826389][ T5056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.832393][ T5056] [ 73.834715][ T5056] value changed: 0x00008a3b -> 0x000001ff [ 73.840434][ T5056] [ 73.842757][ T5056] Reported by Kernel Concurrency Sanitizer on: [ 73.848906][ T5056] CPU: 1 UID: 0 PID: 5056 Comm: syz.4.479 Not tainted 6.13.0-rc1-syzkaller-00378-g62b5a46999c7 #0 [ 73.859519][ T5056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 73.869578][ T5056] ==================================================================