last executing test programs: 6.194691354s ago: executing program 0 (id=263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) unshare(0x400) epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) timerfd_create(0x0, 0x0) pivot_root(0x0, &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000010000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfeb, &(0x7f0000001e00)=""/4075, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r7, r8, 0x200000000000000) write$binfmt_script(r4, &(0x7f00000008c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e22, 0x7, @remote, 0x53b}, r9}}, 0x30) sendmmsg$inet6(r4, &(0x7f0000001480)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x8, @mcast1, 0x7}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="6d1b1cba7663991c78d9fb2289fb78752a11b5318374b90f776c95789b32ae857c0b84d62b0a0f3070494e8d1b24f2993ea2cc70c29ccc63623de046160bfac4bb952080bb455283f8950bcd17f93864ba281b324ffb445f47ad51844cb2c8854f70197821b58c334744f2d042d47a", 0x6f}, {&(0x7f0000000300)="9779d4a142", 0x5}], 0x2, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000290000003600000001000000000039000000160c000200000000fe800000000000000000000000000020fc010000000000001c003850a139b22bc74f97e5000000000001200100fef7449a1197569d3fa23f2a0000000000000000000000000100000000000000000000000000000000ff02000000000000000000000000000100000000000000000000000000000001140000000000000029000000e7e5f4b8159cb650912be02324c2adecd47d8dbc01bab4b04811aef9fb3807c9f208bb2f228e623096b760eda21b3e9a72c815d84e53c3b7a9d13bbbefa895995c9f2c0c457ff1b772b067aa"], 0xa8}}, {{&(0x7f0000000680)={0xa, 0x4e22, 0x9, @private1, 0xe074}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000007c0)="59f4aeab4b29262f3e4a7cc8919558afbbed78df45c4ad47d2b0e44d635de8b7212c625563d453586b7f8bbf100f1da08a9bb5919f0bf169eebb2c6713122e53bed2ab1d66d133d866cfc2b97c6b85dcba217276aedafb557b1137879580bb989d7c1c7a436e650de629a33f553b21203a", 0x71}], 0x1, &(0x7f0000000900)=[@tclass={{0x14, 0x29, 0x43, 0x8000}}, @rthdr={{0xb8, 0x29, 0x39, {0x3b, 0x14, 0x1, 0x6, 0x0, [@empty, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @private0]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x0, 0x8, 0x1, 0xc, 0x0, [@mcast2, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}}}], 0x128}}, {{&(0x7f0000000880)={0xa, 0x4e24, 0xf, @loopback, 0x400}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000b00)="39f67dfc697c5c6d871311609b31416382fb1b37264ae8290b0f68383fa6c7", 0x1f}, {&(0x7f0000000b40)="f7967336cc5bdbce66edbba4399a0e3d2995a603fb1b986445d0a48eb5e473751b455340539330723cd7b9bb2a82aabda882cec7e23194f07df84ac04acdd483f032ee054990f0e2d72689483a4f22d9a7ea61a8038dfd9572267437ce34b1dfecc0a6b78fdae1a48a86fd497ffef6af11209a1ef2b3534bf79140fd2533c376fde4c6c73ec47daf9e19955593aad0cd441cfb86884cec1e0266732f6f03ff74212ebcf0aa023990fe639e5a07c6e9181a1afe8320ffe504932cdea89097cd3ce82ec9eee70b6a485e4223af8f37d92f627d93cb127a91775ba915ec24b06eb315555ab7c8af73f061", 0xe9}, {&(0x7f0000000c40)="4c0b790fc4d78cd9a3", 0x9}, {&(0x7f0000000c80)="877202850fa4", 0x6}, {&(0x7f0000000cc0)="391ee22fee7f6874e99a45f6d7c82f7fac0598216633d34c561c67c71ae52137988d7fe93120410a976ad5cd38b3c766aa6ad9ffd56c3fb9ae30ad69d5cdd4e4d8c01943aac229482db437382913993038059fe996f34eca8f48b6ab90b3f62cff56e134c39d0cb312b010ec60d3bdd055af61e4f6eef4d3de44d0f49d65c8e3e98769e1ab2fbed0d44b61709ce29e715260d8ffc65afd", 0x97}, {&(0x7f0000000d80)="12720eed3f335102242ac8a1274023a1568381d493ee25b9fde52c7c1d1ddac7809640736f96bf33b6b4e1fbfece66405d3a8220f8f33801f8f3fb76d65837cb48aa3271e6fa78bd912a155905514c774c7bd534d10ca2c27caa41a2dccaffb8c672aae0418a4f6280f1901d028175da7e20fc91c2ba3e74d8c82a9bf906d409b8a60484b98e037a8d5956ed63f71876345ca68ef74f473cf40f00ee66bff72b21f4062e31c4cf27c64786e87e9f55df7111ebd0e80b", 0xb6}, {&(0x7f0000000e40)="424fba2a6288d37bb069130b2fa46fd2fbc5655a3c85348250bacedc8cd20351fccd27e3dd57a066f460d6ef02249502f414692acb8c9a6e529f5b0e4ab2b0699a759cadb61b94962f451fd3d16058a968f0a93224f47ff16295e7942a95fa06b2275d134eb45a708b3560c05494dc48d7c7d107a31b23477f8df0849030de2569072cf38f0f646691fdf81dddba0040bc70aa14efee8d5ff27a00b502f5fe45de16335b6cc47be6", 0xa8}], 0x7, &(0x7f0000000f80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x87, 0x0, '\x00', [@ra={0x5, 0x2, 0xcc44}, @enc_lim={0x4, 0x1, 0x31}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x84, 0x0, '\x00', [@pad1, @ra={0x5, 0x2, 0x9b}]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x5e, 0x7, '\x00', [@calipso={0x7, 0x38, {0x1, 0xc, 0x1, 0x1, [0x7, 0x780, 0x9, 0x200000000, 0x80000000, 0x6]}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x1, 0x4, 0x0, [@remote, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x3b, 0x1d, '\x00', [@generic={0xc, 0x53, "23d8fc3a034420733fe60bcbf4145d9fe5db6b52cdbf43de500bd70041405c3f73c26cab2b81168b149481762ec950341126fec547d05ef2311604f6c13fc5bba4e6e8eb18e4e556d46e1799bfd199c6fdc7db"}, @generic={0x7, 0x92, "0006176e154ba501006de0ba33070519290d803e747f0e1bfe68240e387bb9c57999fb02ef7b06eaf00001cb59ba8e3f88637bd563186fbd57ed36e62cb2f17c20575b09cb3108722dcb61662e5ff4b3f9a261f11f9584597f701a9c67460f26a846465fbb4f65a773210cafa0426ad1995b68580ee5cb21fbeba7abf7a79703b57b32bcbf031db574ced732289631c397e6"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x248}}, {{&(0x7f0000001200)={0xa, 0x4e22, 0x73, @mcast1, 0x7f9}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001240)="78b76e4bef14087f4908b40e44ce88016dafe60337d34f0ef57aa9fb06a5b77cf9f6eefbe550f317e797d273fbf1331268c765baa7a74df555ab07ebd5a9ef873180573eb73ff3a1861f8134346d477d185c71a01922476dc9c8e6fbf0b049920acb9763955575e5c9010ccb506b948c29d97ea634c9e563cd58019c406a02a60a9e4e6a7df1865b8a98b4a98f906e65727cd54e55e553c3e6b23139910270f8babf6765a8cc1669235d3a9210d6bd5ee3106ba9faba6f9c2fda7ca58c18e79e25a92534cee4070b2816ed5270ef19866e023637e924209b7bd4f2e8e8ee2cf9e986b6a5f403be6a4a65becb82b5709e9dcec1", 0xf3}, {&(0x7f0000001340)="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", 0xfe}], 0x2}}], 0x4, 0x40000) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x850, 0x0) 5.821485405s ago: executing program 0 (id=268): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000030601020000000000"], 0x1c}}, 0x8000) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/67, 0x5}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x408c0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000900)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f0000000380)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0) 5.804746166s ago: executing program 0 (id=274): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setrlimit(0x9, &(0x7f0000000000)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002e80)={0x0, ""/256, 0x0, 0x0}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f0000001980)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000001b80)=ANY=[@ANYRES16=r6, @ANYRES64=r5, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRES32=0x0, @ANYRESDEC=r3, @ANYRESHEX=r4, @ANYRES8=r5, @ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000a80)={r1, r3, "cbd3d715ef38e7448db8a069796d4b1f0f4bd890402f4181fdd65b5af8547c533cbec87c0b60a0b2693b00b30682d559bc22ea3f2e9a0e75eb174feb7ee64e6fb0e8bef187877be6379e2dd7691ceb148642281bb5c0804d78dc4094c338ce96f15facc2874e1aa157788b5f5a6babc2a39a59f81009f9337442bc75088c41c8e89e6bd9354fd0a0bd1856a140e2fb519b845d00f827488b1d43fb770b8b9c3a15e866aa149c5f7ba2da817dcac2b4d9e52feee2e6dd933439a2b5dcc8892669cb1ba815c5fc7765a31aad029adb12b0b496480724a0719c76cd5db45f310447c8c99bb6f94a3881c720543890105141db477903ae889185ccfc4d7cef68b267", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000a40)={{r3, 0x1ac80, 0x7, 0xd0f6, 0x8000, 0x100000000, 0x9, 0x65f, 0x7fff, 0x6, 0x0, 0xd2, 0x8, 0x2, 0x100000000}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setrlimit(0x4, &(0x7f00000001c0)={0x39, 0x6}) msgctl$IPC_RMID(0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x7}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) timer_create(0x7, &(0x7f0000000940)={0x0, 0x29, 0x7, @thr={&(0x7f0000000400)="a59c18ccc1d8e5059a57fe0a6ed9894f0d6bf127a080", &(0x7f0000000900)="3712c99c2b0a99dbd36104a4af03f412d397e61c60961ef45b206b2d2fcdeded9c0c17"}}, &(0x7f0000000980)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) timer_settime(r8, 0x1, &(0x7f00000009c0)={{0x0, 0x989680}}, &(0x7f0000000a00)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dbf000/0x3000)=nil, 0x3000, 0x2, 0x13, 0xffffffffffffffff, 0xa0e46000) 5.706028732s ago: executing program 0 (id=275): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x3ec0) close(r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1e0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x168, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'pimreg\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @mcast2}}}}}}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) eventfd(0xfffffff8) write$P9_RLERRORu(r3, &(0x7f00000001c0)={0x11, 0x7, 0x2, {{0x4, '.\xec}{'}, 0x9}}, 0x11) 5.687998312s ago: executing program 0 (id=276): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ca3a0000000000000104000018240000", @ANYRES32, @ANYBLOB="0000292b3b4a0000181a0000", @ANYRES32, @ANYBLOB="00000000000000008520000003000000950000000000000018150000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000040000001861000009000000000000007f0000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x41, &(0x7f0000000240)=""/65, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x2, 0xe, 0x106}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0x9, 0x6}, {0x2, 0x4, 0xa, 0xb}], 0x10, 0x1, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="18130000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0x43, 0x4de, &(0x7f0000000c40)="$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") socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, 0xfffffffffffffffe, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7}, 0x10) 4.699157248s ago: executing program 0 (id=296): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket(0x22, 0x2, 0x3) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r5, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xffff, 0x78}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x200, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x44040) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0xf}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a2, &(0x7f0000000080)) 2.819839763s ago: executing program 4 (id=320): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x892, &(0x7f0000002900)=ANY=[@ANYBLOB="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"], 0xfe, 0x2aa, &(0x7f0000000a40)="$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") syz_emit_ethernet(0x2e, &(0x7f0000001cc0)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x0, 0x0, 0x5}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x67, 0x0, 0x32, 0x1, 0x0, @private=0xa010101, @remote}, @echo={0x8, 0x0, 0x0, 0x6afb, 0x5}}}}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f000010b000/0x4000)=nil, 0x4000, 0x2, 0x8031, 0xffffffffffffffff, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x22a00a1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x10, 0x9, 0x2, "ec28a144f11d7607"}) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRESDEC=r1], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x44) write$char_usb(r3, &(0x7f0000000100)="014f0af016e2cca4b3a389f17e874162c44916c53cf07ea70c2dd8904a9b92e510a2c0951bc24135efc721c23f0af7c350559f8c32a6b0e7f52a35f96415587745ac2438069fbc2d018c57b24ffef4ece3d4370bf82b5292f31181a869d4247b73eadbbe5e2a254c1235fad288d9c086fbc7c26f3eacf60b65032df72d63643e1e98409d1004a352f738e2a9dfe78136a2040cbe4d3a5dee23c31fffd9c2e39583", 0xa1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0x4, [@float={0x2, 0x0, 0x0, 0x10, 0xc}, @datasec={0xc, 0x4, 0x0, 0xf, 0x3, [{0x3, 0x2, 0xfff}, {0x3, 0x7, 0x800}, {0x1, 0x200, 0x101}, {0x2, 0x2, 0x298000}], "1cdbff"}, @ptr={0xd, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x5f]}}, &(0x7f0000000e00)=""/4096, 0x74, 0x1000, 0x0, 0x4, 0x10000, @value=r3}, 0x28) fcntl$setsig(r4, 0xa, 0x3b) 2.528757379s ago: executing program 1 (id=324): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x1}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, r2, 0x1, 0xfffffffe, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 2.462958163s ago: executing program 1 (id=326): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x10) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x18, 0x5, 0xe) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000)=0x8, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020178fa58bfb702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)='q', 0x1}], 0x1, 0x33000, 0x0, 0x3) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000101010100000000000000000a000000300001802c000180140003000000000000000000000000000000000014000400ff02000000000000000000000000eb1a89e7198008000100a5000000"], 0x50}}, 0x0) 2.040237416s ago: executing program 1 (id=329): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000012c0)=@newtaction={0x8e0, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x8cc, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xd12, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x0, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x200004, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0xe, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x7, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0x7, 0xff, 0x5, 0x1, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x7, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf3, 0x401, 0x401, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0x2, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x9df4, 0x2, 0xa, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x800081, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef6, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0x0, 0x0, 0xbc, 0xa8, 0x3e90, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x9, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}, @m_skbedit={0x54, 0x1a, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x18, 0x6, "72675e749c73bb9f56c96fe33340fc269e49df5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x8e0}}, 0x0) 1.931685752s ago: executing program 4 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_setup(0x2732, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000012c0)=@newtaction={0x8e0, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x8cc, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xd12, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x0, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x200004, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0xe, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x7, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0x7, 0xff, 0x5, 0x1, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x7, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf3, 0x401, 0x401, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0x2, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x9df4, 0x2, 0xa, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x800081, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef6, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0x0, 0x0, 0xbc, 0xa8, 0x3e90, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x9, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}, @m_skbedit={0x54, 0x1a, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x18, 0x6, "72675e749c73bb9f56c96fe33340fc269e49df5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x8e0}}, 0x0) 1.897286254s ago: executing program 1 (id=331): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r4 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r4, 0x2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}]}, 0x40}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r11}, 0x10) r13 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r12}, 0x8) close(r13) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000800000004af958034eae4121848c2cc62585ea6d5b0eed103f95e6abb735c1c9ff8f722ae640e0cdf2a6854e9efffdbd7c17dbc6dc33339f85236379d67e5601bc3cb8f3f9ea4e60380000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000480), 0x0) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)={'trans=tcp,', {'port', 0x3d, 0x20000004e23}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000090000000000000b8aad107b71b68537cc00000095000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x80, 0x0, 0x0, 0x41100, 0x24, '\x00', r9, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x0, 0x6, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000280)=[r6], &(0x7f00000002c0)=[{0x3, 0x5, 0x3, 0x5}, {0x0, 0x1, 0x2, 0xc}, {0x5, 0x1, 0x8, 0x7}, {0x0, 0x2, 0xf, 0x6}, {0x1, 0x5, 0x8, 0xc}], 0x10, 0x4, @void, @value}, 0x94) 1.831862338s ago: executing program 4 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x1}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, r3, 0x1, 0xfffffffe, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.748614512s ago: executing program 4 (id=334): getresgid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@sb={'sb', 0x3d, 0x3}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@dioread_nolock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@noblock_validity}, {@barrier}, {@nobh}, {@lazytime}]}, 0x64, 0x52a, &(0x7f0000000a40)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f0000000140)={0xb2082, 0x20, 0xe}, 0x18) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) (async) mknod(&(0x7f0000000240)='./bus\x00', 0xc000, 0x4) 1.671804177s ago: executing program 1 (id=336): prlimit64(0x0, 0xd, 0x0, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x2, &(0x7f0000000080)=0x7e, 0xa) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000cc0)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x9, 0x7, [0x1e, 0x3, 0xe, 0x2f, 0x2, 0x2d, 0x3f, 0x17, 0xb, 0x3b, 0x13, 0x2a, 0x8, 0x2e, 0x2, 0xa], 0x2, 0xfffffff9, 0x1}}}, {{@ip={@rand_addr=0x64010101, @empty, 0x0, 0xff, 'wlan0\x00', 'syzkaller0\x00', {0xff}, {}, 0x51, 0x2, 0xc}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "8a7c7dd99baea32d68d7d228cb7d924f5fadd8ace8da164861ea2181e158"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003e000000000000ff0000008500000007000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file1'}, 0xb) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) (async) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x49, 0x4, 0x0, 0x1, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2, 0x2, @perf_config_ext={0x4, 0x4}, 0x2020, 0x2000000, 0x0, 0x5, 0xfffffffffffffffe, 0x0, 0xfffa, 0x0, 0x4}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async, rerun: 64) syz_clone(0x4021400, 0x0, 0x44a5, 0x0, 0x0, 0x0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20001e, &(0x7f0000000040)={[{@nodelalloc}, {@orlov}, {@auto_da_alloc}]}, 0x1, 0x4fa, &(0x7f0000000a40)="$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") (rerun: 32) 1.650197438s ago: executing program 4 (id=337): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ca3a0000000000000104000018240000", @ANYRES32, @ANYBLOB="0000292b3b4a0000181a0000", @ANYRES32, @ANYBLOB="00000000000000008520000003000000950000000000000018150000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000040000001861000009000000000000007f0000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x41, &(0x7f0000000240)=""/65, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x2, 0xe, 0x106}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0x9, 0x6}, {0x2, 0x4, 0xa, 0xb}], 0x10, 0x1, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="18130000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 1.637545198s ago: executing program 1 (id=338): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x13, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x6, 0x4, 0x5, 0xfffffffffffffff4, 0xfffffffffffffffc}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x10003, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x200000000200}, 0x18) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r6, @ANYRESOCT=r4], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02"], 0xfe44, 0x0) setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, &(0x7f0000000380)=0x1, 0x4) r7 = shmget$private(0x0, 0x1000, 0x800, &(0x7f00002a2000/0x1000)=nil) shmctl$IPC_RMID(r7, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000280)={0x0, 0x0, 0xb0, 0x90, ""/144}, &(0x7f0000000040)=0xb0, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r8 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r8, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1.342837155s ago: executing program 4 (id=340): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000002c0)=[0x0, 0x0], 0x0, 0x35, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x38, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 1.321328857s ago: executing program 2 (id=341): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x6}, 0x8) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42673d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f435f28fbeda75cf971f54a9698cf3270f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b7403930fd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a51220c41b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41bcde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f392a38052f859ab5600000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000280)={0x200000, 0x200003, 0xfffffffd, 0x8001, 0x3}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x42, 0x47, 0x0, 0x0, 0x8d4d1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0xa1, 0x7ff, 0x200, 0x0, 0x0, 0x42, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100), 0x6) socket$inet_dccp(0x2, 0x6, 0x0) (async) r2 = socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2, @ANYRES8=0x0, @ANYRES32=r0], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES64=r2, @ANYRES8=0x0, @ANYRES32=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000480)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500)={[{@delalloc}, {@auto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) (async) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 995.786894ms ago: executing program 2 (id=342): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioprio_set$uid(0x3, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc11a900e8d164a40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@jqfmt_vfsv1}, {@auto_da_alloc}, {@barrier_val}, {@journal_ioprio}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") chdir(&(0x7f0000000100)='./file0\x00') link(&(0x7f0000000580)='./file0\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) name_to_handle_at(0xffffffffffffffff, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x4c0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x565) r8 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r8, 0xff09) 757.752408ms ago: executing program 2 (id=344): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a001600000000950000000000f900"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xb2, &(0x7f000000cf3d)=""/178, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000002000000080001"], 0x58}}, 0x0) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000400)='.\x00', 0x40003c0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0xe13da89, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x7, 0x8, 0xffff, 0x20000, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0xd, @void, @value, @void, @value}, 0x50) r11 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000900), 0x305000, 0x0) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r15}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xae) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x31, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x7, 0x1, 0x0, 0x5, 0x0, 0x40, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}, @map_val={0x18, 0xa, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x41}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x52e, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x26f8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x1ff, 0x3e, &(0x7f00000004c0)=""/62, 0x41100, 0x20, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x8, 0x9, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[r10, r11, r12, r13, r14, r15], 0x0, 0x10, 0x101, @void, @value}, 0x94) inotify_rm_watch(r3, r4) pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 560.836319ms ago: executing program 3 (id=345): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x1}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x30, r3, 0x1, 0xfffffffe, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 538.53074ms ago: executing program 2 (id=346): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000008004500001c00660000001190780800001ce0000001000017c100089078"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000001340), 0x2931b90f, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18cec40001003e7a59d0e76714701771c468eef66a12abf515dc6eaa01f56178242d76240b0f2b99787533e051a1fc199ecddb9c9f6ad9e1d137ac6939d9b8443be64b98dd47092ce605029a820ca03faa543b2116fe2162a8ad490cf55c3a3ab244fb029ea4b8c6b78d847dcc2b15db9678f68fb9e4eb3afa469e8e298d3d4ba68d4253e6f12424ce86b5100bd131ba791ba14d26ee38d0510a3cd75ffb881b8bd7ae44d9def93613369bf3e0d765e2d2c41267b2446779740063bfe86b3ed183d4bbe39536f88bd5cf220261", @ANYRES64, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007060000f8ffffffb703000008000000b704000002010000856032ec0d59437a8a417282779c00000143000000959f50085a1c8c103f25af3c40850e11bda854370411161f5ea14629669f437ce1ef2cd4eb54802bc4df3d50415b18c20c8f6b3dcb38ac22e225506014819175f77c499fdcb2d18802a6bb27ab5fe26685961a539d8aa167398be2d4e3a799f66823eb730e530aa29676d6b94f590113e2023e6419b6d2eb16127fa4b4bd94e82e2acde1180771439d59ad6542daa9e6923f57f995905390c90d7612fc01e68cd0e69fdf69a88b80d2218e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x6000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 463.312724ms ago: executing program 3 (id=347): ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x4d3aa367) getresgid(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000040)=0x4d3aa367) (async) getresgid(&(0x7f0000000000), 0xffffffffffffffff, 0x0) (async) 373.948589ms ago: executing program 3 (id=348): semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x3, 0x81, 0x1000}, {0x4, 0xd880}, {0x0, 0x5, 0x800}, {0x1, 0x400, 0x800}, {0x3, 0xf87e, 0x2800}, {0x1, 0x4, 0x1000}, {0x4, 0xc7}, {0x1, 0x9, 0x800}, {0x2, 0x80, 0x800}], 0x9, &(0x7f0000000100)={0x0, 0x989680}) r0 = socket$unix(0x1, 0x1, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000000), 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) shutdown(0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0x5, 0x7, 0xffffffdf}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r6) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="240003"], 0x10e0}}, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r9, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) 353.04568ms ago: executing program 3 (id=349): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x400000000000247, 0x3ec0) close(r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x2a8, 0xffffffff, 0x1e0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x168, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'pimreg\x00', 'veth1_to_hsr\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) open(&(0x7f0000000140)='./file0\x00', 0xec40, 0x12) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00') syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x0, 0x1ff0000aa}, @mcast2}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) rt_sigprocmask(0x0, &(0x7f0000000180)={[0x3]}, 0x0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) eventfd(0xfffffff8) write$P9_RLERRORu(r3, &(0x7f00000001c0)={0x11, 0x7, 0x2, {{0x4, '.\xec}{'}, 0x9}}, 0x11) 279.146695ms ago: executing program 3 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x8000}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) io_uring_setup(0x2732, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000012c0)=@newtaction={0x8e0, 0x30, 0x12f, 0x4000, 0x0, {}, [{0x8cc, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x7c3, 0x2, 0x3, 0xffffff81, 0x10, 0xc, 0x2, 0x3, 0x40, 0x200, 0x8, 0x9, 0x6, 0x5, 0x0, 0x8, 0xa, 0x6, 0x200, 0x1, 0x3, 0xcc37, 0x5, 0xb5, 0x649f, 0x4, 0x0, 0x4, 0xfb1, 0x72a4, 0xd, 0x7fff, 0x5, 0x3, 0x0, 0x3, 0x7, 0xd12, 0x4, 0xc, 0x0, 0xaf, 0x1, 0x6, 0x5, 0xfffffffd, 0x5, 0x80, 0xe, 0x2, 0x7, 0x6, 0x7, 0x1991, 0x8, 0xfffffe29, 0x5, 0x3, 0x101, 0xfff, 0x4, 0x5, 0x8000, 0x4, 0x7, 0x3, 0x0, 0xfffffff3, 0x1, 0x9, 0x80020003, 0x2, 0x3, 0x5, 0x101, 0x1, 0xfffffffc, 0x6, 0xfffffffb, 0x200, 0x1, 0x7309, 0x6, 0x3, 0x100, 0x2, 0x7, 0x6d0, 0x224, 0x7ff, 0x0, 0x6, 0x7, 0xfffff001, 0x6, 0x7ed8, 0x3, 0xffff, 0x0, 0x0, 0x249, 0x5, 0x2fbf, 0x2, 0x8000, 0x7, 0x25fe9fd5, 0x1, 0x9, 0x1, 0xe, 0x9, 0x0, 0x3, 0x4f, 0xffffffff, 0x8, 0x1, 0x119203c5, 0xd0, 0x7, 0x80000001, 0x3226, 0x8, 0x3, 0x200004, 0xc64f, 0xffffff6d, 0x5, 0x6, 0x6, 0xfffffff7, 0x6, 0x7, 0x5, 0xc, 0xe, 0x7, 0x200, 0x60459141, 0x1, 0x5, 0x6, 0x84, 0x0, 0x1, 0x5, 0x2, 0x29dc, 0x0, 0x2d5, 0x7, 0xfffffffa, 0x1000, 0x6, 0x94, 0x15a, 0x4, 0x6, 0x2, 0x4002, 0x2, 0x4, 0xfff, 0x5, 0xe, 0x3, 0x4003, 0x80, 0x7a5b054a, 0x8, 0xffffff80, 0x4b1, 0xfff, 0x3, 0xb, 0x8, 0x3, 0x4, 0x2, 0x6, 0xf, 0x2, 0x7, 0x1, 0x77, 0x20009, 0x274d, 0x6, 0x40, 0xfffffffe, 0xb, 0x7, 0x1, 0x9ab, 0x7, 0xffffffc0, 0x200, 0x7, 0x3c, 0x2c7, 0x7, 0x8, 0x4, 0x0, 0x99f, 0x5, 0x7ff, 0x6, 0x31e1, 0x4, 0x4, 0xb, 0x7ff, 0x1e, 0x3, 0xe49, 0x56, 0x9, 0x1, 0x6, 0x2, 0x6a1c, 0x9, 0x8, 0x4dbda2da, 0x7fff, 0x5, 0x5, 0x0, 0x7, 0x8, 0x7fff, 0xed, 0x7fff, 0x1000, 0xcbe, 0x7ff, 0x6, 0x8, 0x7, 0xff, 0x5, 0x1, 0x7, 0x9, 0x0, 0x8, 0x5, 0x4, 0xfffffffd, 0x2, 0xeffe, 0xe74, 0xfffffffa]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x3a40da20, 0x9, 0x6, 0x4, 0x8000, 0x7fffffff, 0x2, 0x1, 0x7fff, 0x86, 0x10000, 0x7, 0x40, 0x2, 0x99d, 0x6, 0xffffff92, 0xe9c, 0x3ff, 0xfffffffe, 0x10001, 0xa, 0xfffff000, 0x7f, 0x4, 0x0, 0x81, 0x6f0, 0x18e, 0x8, 0x4, 0x3, 0x4, 0x2, 0xffffffff, 0x0, 0x80000000, 0x3, 0x9, 0xfffc, 0x2, 0xd, 0x3, 0x5, 0x1, 0x4, 0x8, 0x7, 0x2, 0xd92e, 0x7fffffff, 0x3, 0x90, 0xc0, 0x5b, 0x1, 0xe6, 0x40, 0x5, 0x1000, 0x3, 0x10, 0x0, 0x5, 0x6, 0x6, 0x100, 0xf3, 0x1, 0xa92, 0x0, 0x6, 0x7, 0x0, 0x8, 0x8, 0x10000, 0x3, 0x3, 0x0, 0xa, 0x5, 0x1, 0xee7e, 0x800, 0xd1, 0x7fff, 0x1, 0x4, 0x5, 0x4, 0xffffff89, 0x7, 0xfffffff3, 0x2, 0xffffffff, 0x9, 0x5, 0x2, 0x101, 0x7fffffff, 0xfffff001, 0x64, 0x4, 0xffffffff, 0x5, 0x9, 0x1, 0x0, 0xb3e, 0x8, 0xf3, 0x401, 0x401, 0x9, 0x8, 0x2, 0xb, 0x0, 0x0, 0x9, 0xffffffff, 0x25c, 0x7, 0x5, 0x0, 0x9, 0xfffffff9, 0x3, 0xe2, 0x8, 0x1, 0x8, 0x9, 0x0, 0x9, 0x2, 0x1, 0x9, 0x80, 0x5, 0xd3c3, 0x5, 0x2, 0x1, 0x472a8800, 0xc, 0xfffffff0, 0x2, 0x9, 0x8, 0xfffffffc, 0x9, 0x5, 0x9, 0x5, 0x6, 0x6, 0x7, 0x87f, 0x59, 0x4fedcacd, 0x1, 0x4, 0x9df4, 0x2, 0xa, 0x5, 0xfff, 0x3828, 0x0, 0x1, 0x7, 0x401, 0x7f, 0x4, 0x7, 0x2120, 0xfffffffa, 0x80, 0x3, 0xdbff, 0x52b6, 0xfffffffa, 0x49, 0x70, 0x0, 0xe1, 0x401, 0xa, 0x101, 0x3ff, 0x101, 0x0, 0x7ffe, 0x80000000, 0x800081, 0xfffffff7, 0x3, 0x1, 0x7514, 0x7, 0x3, 0x1, 0x4, 0x2, 0x9, 0x4, 0x10000, 0x3ff, 0x0, 0x100, 0x7ef6, 0x0, 0x1, 0xe, 0xd, 0x4, 0x6, 0x8, 0x4, 0x10001, 0x6, 0x400, 0x436, 0x3, 0x202, 0x0, 0x0, 0x0, 0xbc, 0xa8, 0x3e90, 0x6, 0x7, 0x1, 0x81, 0x3, 0x2, 0x3, 0x4, 0x4, 0x2445c87b, 0x6, 0xd, 0x9, 0x2, 0x10, 0x4, 0x7, 0x57, 0x5, 0xd, 0x1000, 0x3]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0x8, 0x3, 0x7b2, 0x400, {0x1, 0x2, 0x8, 0x624, 0x0, 0xfffffff8}, {0x9, 0x2, 0x7, 0x7ff, 0xff01, 0x4}, 0x9, 0x4, 0x923}}]]}, {0x4}, {0xc, 0xb, {0x0, 0x1}}, {0xc, 0xa}}}, @m_skbedit={0x54, 0x1a, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1ff}]}, {0x18, 0x6, "72675e749c73bb9f56c96fe33340fc269e49df5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x8e0}}, 0x0) 197.197679ms ago: executing program 2 (id=351): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x13, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ca3a0000000000000104000018240000", @ANYRES32, @ANYBLOB="0000292b3b4a0000181a0000", @ANYRES32, @ANYBLOB="00000000000000008520000003000000950000000000000018150000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000040000001861000009000000000000007f0000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x6, 0x41, &(0x7f0000000240)=""/65, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x4, 0x2, 0xe, 0x106}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x1, 0x4, 0x9, 0x6}, {0x2, 0x4, 0xa, 0xb}], 0x10, 0x1, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r1, 0xfffffffffffffffe, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xd2, &(0x7f0000000040)=""/210, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="18130000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x9000, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) connect$inet(r3, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 150.204861ms ago: executing program 3 (id=352): timer_getoverrun(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x9) getitimer(0x5, 0x0) io_uring_setup(0x36dc, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x0, 0x0, 0x200000000000000}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet6(0xa, 0x80004, 0xad9) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000004880)=[{{&(0x7f0000000b00)={0xa, 0x4e1e, 0x0, @mcast1}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000b40)="f0dedb1f7bba2a474fa521a0da0ed37bc80c9b36f4ba7704bf950d7530551ebe3a0f7c5b220e53765f42d61fb3f60719f74839569e35b700257657363ce937820fc49394a5b1a6c9c20f36d7fc2b0fe134e358d528acd225991960d0259d843b7a", 0x61}, {&(0x7f0000000bc0)="00b5ce92cbe7dbc701884458519e3d6ee9a5478a8047f99ca233465bf0c288fc7b79c58949e467fd1e8b979d5d5732cc35321485b4cd12b1f61e8a59facb2bd0b434860c27c06fb49253e8d8396ceae231ae59f022f255fa85e85c74b3f37cf7cd773ecd8565528f088332e60550155bf579daba9b6235f985c4711722e3c94a2a0b793b3426c78189024d4b14dee3af56b9eeeb50cd98d9a2d74f4f93cfac8f47ff", 0xa2}, {&(0x7f0000003500)="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", 0x4a7}], 0x3}}], 0x1, 0x8001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r7, &(0x7f0000004500)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8030000}}], 0x1, 0x814) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000015c0)={'ip6_vti0\x00', &(0x7f0000001540)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x2, 0xfffffffb, 0x11, @dev={0xfe, 0x80, '\x00', 0x3c}, @local, 0x7800, 0x8000, 0x8, 0x8}}) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000001600)={@dev={0xfe, 0x80, '\x00', 0x34}, r8}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r9, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r10 = openat$cgroup(r0, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r10, 0xf517, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 0s ago: executing program 2 (id=353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000004) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000d40)='./file1\x00', 0x313093, &(0x7f0000000200)=ANY=[], 0x1, 0x7db, &(0x7f0000000d80)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0xb73d) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b80)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = timerfd_create(0x0, 0x0) read(r5, &(0x7f0000000380)=""/189, 0x8) timerfd_settime(r5, 0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414bb000000000000000000000000e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1414168b710f91c82c58000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004e7327fe865d9ba10000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c2900"], 0x138}}, 0x4040080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='initcall_finish\x00', r3, 0x0, 0x10}, 0x18) clock_adjtime(0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff0400008000000000000000110000000000000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) io_uring_setup(0x1691, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x8c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.079004][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 15.079018][ T29] audit: type=1400 audit(1740429620.075:76): avc: denied { transition } for pid=3178 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.082759][ T29] audit: type=1400 audit(1740429620.075:77): avc: denied { noatsecure } for pid=3178 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.085305][ T29] audit: type=1400 audit(1740429620.075:78): avc: denied { write } for pid=3178 comm="sh" path="pipe:[1525]" dev="pipefs" ino=1525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.088274][ T29] audit: type=1400 audit(1740429620.075:79): avc: denied { rlimitinh } for pid=3178 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.090821][ T29] audit: type=1400 audit(1740429620.075:80): avc: denied { siginh } for pid=3178 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.064704][ T29] audit: type=1400 audit(1740429624.065:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 22.387478][ T29] audit: type=1400 audit(1740429627.385:82): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.388252][ T3288] cgroup: Unknown subsys name 'net' [ 22.410176][ T29] audit: type=1400 audit(1740429627.385:83): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.437521][ T29] audit: type=1400 audit(1740429627.415:84): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.614290][ T3288] cgroup: Unknown subsys name 'cpuset' [ 22.620282][ T3288] cgroup: Unknown subsys name 'rlimit' [ 22.729230][ T29] audit: type=1400 audit(1740429627.725:85): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.754426][ T29] audit: type=1400 audit(1740429627.725:86): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.775020][ T29] audit: type=1400 audit(1740429627.725:87): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.780505][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.795360][ T29] audit: type=1400 audit(1740429627.725:88): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.824195][ T29] audit: type=1400 audit(1740429627.725:89): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.848977][ T29] audit: type=1400 audit(1740429627.725:90): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.872265][ T29] audit: type=1400 audit(1740429627.805:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.900754][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.011851][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 24.031193][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.047440][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 24.134521][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.141608][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.148824][ T3298] bridge_slave_0: entered allmulticast mode [ 24.155238][ T3298] bridge_slave_0: entered promiscuous mode [ 24.188340][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.195395][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.202439][ T3298] bridge_slave_1: entered allmulticast mode [ 24.208852][ T3298] bridge_slave_1: entered promiscuous mode [ 24.214951][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.221993][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.229561][ T3297] bridge_slave_0: entered allmulticast mode [ 24.235803][ T3297] bridge_slave_0: entered promiscuous mode [ 24.244170][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 24.264518][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.271669][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.278992][ T3297] bridge_slave_1: entered allmulticast mode [ 24.285464][ T3297] bridge_slave_1: entered promiscuous mode [ 24.308209][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 24.327522][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.334633][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.342247][ T3302] bridge_slave_0: entered allmulticast mode [ 24.348582][ T3302] bridge_slave_0: entered promiscuous mode [ 24.355231][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.362247][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.369373][ T3302] bridge_slave_1: entered allmulticast mode [ 24.375794][ T3302] bridge_slave_1: entered promiscuous mode [ 24.382650][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.399335][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.409453][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.428166][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.438183][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.461541][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.484707][ T3298] team0: Port device team_slave_0 added [ 24.490979][ T3298] team0: Port device team_slave_1 added [ 24.502972][ T3297] team0: Port device team_slave_0 added [ 24.509260][ T3297] team0: Port device team_slave_1 added [ 24.514925][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.522059][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.529312][ T3301] bridge_slave_0: entered allmulticast mode [ 24.535512][ T3301] bridge_slave_0: entered promiscuous mode [ 24.565964][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.573033][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.580145][ T3301] bridge_slave_1: entered allmulticast mode [ 24.586538][ T3301] bridge_slave_1: entered promiscuous mode [ 24.596600][ T3302] team0: Port device team_slave_0 added [ 24.606375][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.613441][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.620796][ T3307] bridge_slave_0: entered allmulticast mode [ 24.626959][ T3307] bridge_slave_0: entered promiscuous mode [ 24.633409][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.640378][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.666291][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.681863][ T3302] team0: Port device team_slave_1 added [ 24.692100][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.699059][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.724955][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.735683][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.742717][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.750974][ T3307] bridge_slave_1: entered allmulticast mode [ 24.757181][ T3307] bridge_slave_1: entered promiscuous mode [ 24.767851][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.774811][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.800669][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.812142][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.828267][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.835255][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.861156][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.877018][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.886322][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.893246][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.919132][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.930816][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.937803][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.963688][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.978136][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.003399][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.022250][ T3301] team0: Port device team_slave_0 added [ 25.029372][ T3297] hsr_slave_0: entered promiscuous mode [ 25.035521][ T3297] hsr_slave_1: entered promiscuous mode [ 25.050242][ T3301] team0: Port device team_slave_1 added [ 25.060675][ T3307] team0: Port device team_slave_0 added [ 25.066977][ T3307] team0: Port device team_slave_1 added [ 25.102881][ T3302] hsr_slave_0: entered promiscuous mode [ 25.108864][ T3302] hsr_slave_1: entered promiscuous mode [ 25.114781][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.122321][ T3302] Cannot create hsr debugfs directory [ 25.132264][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.139291][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.165168][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.177845][ T3298] hsr_slave_0: entered promiscuous mode [ 25.183838][ T3298] hsr_slave_1: entered promiscuous mode [ 25.189686][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.197287][ T3298] Cannot create hsr debugfs directory [ 25.203003][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.210001][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.235879][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.246881][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.253901][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.279853][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.295585][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.302513][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.328397][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.381190][ T3301] hsr_slave_0: entered promiscuous mode [ 25.387093][ T3301] hsr_slave_1: entered promiscuous mode [ 25.392893][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.400796][ T3301] Cannot create hsr debugfs directory [ 25.429056][ T3307] hsr_slave_0: entered promiscuous mode [ 25.434966][ T3307] hsr_slave_1: entered promiscuous mode [ 25.440693][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.448370][ T3307] Cannot create hsr debugfs directory [ 25.566895][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.587114][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.605246][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.615371][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.631847][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.643529][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.656629][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.666919][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.679581][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.691027][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.712303][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.728190][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.737294][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.749038][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.765000][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.791288][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.810265][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.825835][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.833075][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.846083][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.855794][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.879280][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.887252][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.907832][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.914879][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.926489][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.941292][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.948348][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.960883][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.967975][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.987347][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.994449][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.037945][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.048714][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.060347][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.069051][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.081219][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.088289][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.105795][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.112833][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.122526][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.136322][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.178628][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.185766][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.200365][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.207429][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.222923][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.229993][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.238771][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.245810][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.289672][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.303000][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.356678][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.388182][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.406148][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.430057][ T3302] veth0_vlan: entered promiscuous mode [ 26.463362][ T3302] veth1_vlan: entered promiscuous mode [ 26.472016][ T3297] veth0_vlan: entered promiscuous mode [ 26.492866][ T3302] veth0_macvtap: entered promiscuous mode [ 26.500647][ T3301] veth0_vlan: entered promiscuous mode [ 26.507602][ T3302] veth1_macvtap: entered promiscuous mode [ 26.515012][ T3297] veth1_vlan: entered promiscuous mode [ 26.528727][ T3301] veth1_vlan: entered promiscuous mode [ 26.555411][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.571286][ T3297] veth0_macvtap: entered promiscuous mode [ 26.588515][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.597577][ T3297] veth1_macvtap: entered promiscuous mode [ 26.608161][ T3302] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.616997][ T3302] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.625891][ T3302] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.634632][ T3302] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.647530][ T3301] veth0_macvtap: entered promiscuous mode [ 26.657149][ T3298] veth0_vlan: entered promiscuous mode [ 26.669393][ T3301] veth1_macvtap: entered promiscuous mode [ 26.693004][ T3307] veth0_vlan: entered promiscuous mode [ 26.700000][ T3298] veth1_vlan: entered promiscuous mode [ 26.708208][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.718700][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.730433][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.739339][ T3307] veth1_vlan: entered promiscuous mode [ 26.749803][ T3307] veth0_macvtap: entered promiscuous mode [ 26.770388][ T3307] veth1_macvtap: entered promiscuous mode [ 26.777986][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.788491][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.800510][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.809395][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.827207][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.837722][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.847650][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 26.858093][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.868612][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.880031][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.890584][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.900437][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 26.910886][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 26.921201][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.931060][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.939809][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.948548][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.957319][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.967905][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.976764][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.985477][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.994179][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.010194][ T3437] loop2: detected capacity change from 0 to 164 [ 27.015589][ T3298] veth0_macvtap: entered promiscuous mode [ 27.027416][ T3437] ======================================================= [ 27.027416][ T3437] WARNING: The mand mount option has been deprecated and [ 27.027416][ T3437] and is ignored by this kernel. Remove the mand [ 27.027416][ T3437] option from the mount to silence this warning. [ 27.027416][ T3437] ======================================================= [ 27.064784][ T3298] veth1_macvtap: entered promiscuous mode [ 27.065586][ T3437] Unable to read rock-ridge attributes [ 27.074481][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.086518][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.087264][ T3437] Unable to read rock-ridge attributes [ 27.096318][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.096334][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.122039][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.132513][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.144370][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.154885][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.165402][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.175293][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.185716][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.195547][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.205972][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.226242][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.226704][ T3439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 27.269245][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.278081][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.286820][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.295689][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.308628][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.319189][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.329019][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.339692][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.349601][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.360045][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.369868][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.380319][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.380374][ T3440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 27.391930][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.421588][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.432302][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.442167][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.452593][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.462514][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.472946][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.482746][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.493325][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.505458][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.539628][ T3298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.548525][ T3298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.557500][ T3298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.566369][ T3298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.617771][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 27.617785][ T29] audit: type=1400 audit(1740429632.615:133): avc: denied { write } for pid=3445 comm="syz.0.1" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 27.702405][ T29] audit: type=1400 audit(1740429632.695:134): avc: denied { create } for pid=3445 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.722059][ T29] audit: type=1400 audit(1740429632.695:135): avc: denied { connect } for pid=3445 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 27.756297][ T3446] loop0: detected capacity change from 0 to 1024 [ 27.772753][ T29] audit: type=1400 audit(1740429632.765:136): avc: denied { create } for pid=3450 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.792127][ T29] audit: type=1400 audit(1740429632.765:137): avc: denied { ioctl } for pid=3450 comm="syz.1.2" path="socket:[4704]" dev="sockfs" ino=4704 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.817266][ T29] audit: type=1400 audit(1740429632.765:138): avc: denied { read } for pid=3450 comm="syz.1.2" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.817617][ T3446] EXT4-fs: Ignoring removed bh option [ 27.840054][ T29] audit: type=1400 audit(1740429632.765:139): avc: denied { open } for pid=3450 comm="syz.1.2" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.882655][ T29] audit: type=1400 audit(1740429632.875:140): avc: denied { create } for pid=3453 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.907604][ T3455] loop3: detected capacity change from 0 to 764 [ 27.919897][ T29] audit: type=1400 audit(1740429632.905:141): avc: denied { bind } for pid=3450 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.923053][ T3456] netlink: 'syz.4.5': attribute type 4 has an invalid length. [ 27.939156][ T29] audit: type=1400 audit(1740429632.905:142): avc: denied { setopt } for pid=3450 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.951822][ T3451] SELinux: ebitmap: truncated map [ 27.974049][ T3451] SELinux: failed to load policy [ 28.002671][ T3446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.139159][ T3446] EXT4-fs error (device loop0): ext4_xattr_inode_iget:440: comm syz.0.1: inode #13617: comm syz.0.1: iget: illegal inode # [ 28.153369][ T3468] sock: sock_timestamping_bind_phc: sock not bind to device [ 28.153354][ T3446] EXT4-fs (loop0): Remounting filesystem read-only [ 28.167895][ T3446] EXT4-fs warning (device loop0): ext4_xattr_inode_inc_ref_all:1146: inode #18: comm syz.0.1: cleanup dec ref error -5 [ 28.180697][ T3446] EXT4-fs warning (device loop0): ext4_xattr_block_set:2198: inode #18: comm syz.0.1: dec ref error=-5 [ 28.199444][ T3468] loop1: detected capacity change from 0 to 8192 [ 28.239995][ T3469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 28.264190][ T3468] loop1: p2 p3 p4 [ 28.268932][ T3468] loop1: p3 start 458783 is beyond EOD, truncated [ 28.275438][ T3468] loop1: p4 size 65536 extends beyond EOD, truncated [ 28.305877][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.413354][ T3000] loop1: p2 p3 p4 [ 28.431082][ T3000] loop1: p3 start 458783 is beyond EOD, truncated [ 28.437689][ T3000] loop1: p4 size 65536 extends beyond EOD, truncated [ 28.471651][ T3474] loop2: detected capacity change from 0 to 764 [ 28.651843][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 28.677545][ T3375] udevd[3375]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 28.707551][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 28.746335][ T3283] udevd[3283]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 28.946215][ T3486] loop4: detected capacity change from 0 to 512 [ 28.953407][ T3486] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 28.962548][ T3486] EXT4-fs (loop4): failed to open journal device unknown-block(7,4171) -6 [ 28.978935][ T3488] loop0: detected capacity change from 0 to 164 [ 28.986419][ T3488] Unable to read rock-ridge attributes [ 28.994496][ T3488] Unable to read rock-ridge attributes [ 29.030162][ T3492] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3492 comm=syz.4.17 [ 29.058131][ T3494] loop0: detected capacity change from 0 to 164 [ 29.065441][ T3494] Unable to read rock-ridge attributes [ 29.072356][ T3494] Unable to read rock-ridge attributes [ 29.102444][ T3497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'. [ 29.111316][ T3497] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'. [ 29.120164][ T3497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'. [ 29.129503][ T3497] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19'. [ 29.166075][ T3499] loop0: detected capacity change from 0 to 1024 [ 29.186844][ T3499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.201000][ T3499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.214830][ T3499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.20'. [ 29.313369][ T3499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.20'. [ 29.326983][ T3503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 29.339505][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 29.344639][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.380513][ T3507] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 29.636859][ T3511] rdma_op ffff888118a60d80 conn xmit_rdma 0000000000000000 [ 29.645247][ T3511] netlink: 268 bytes leftover after parsing attributes in process `syz.3.24'. [ 29.654179][ T3511] unsupported nla_type 65024 [ 29.696176][ T3516] loop3: detected capacity change from 0 to 512 [ 29.725717][ T3516] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.26: Failed to acquire dquot type 1 [ 29.737314][ T3516] EXT4-fs (loop3): 1 truncate cleaned up [ 29.743370][ T3516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.756968][ T3516] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.784272][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.793708][ T53] EXT4-fs error (device loop3): ext4_release_dquot:6950: comm kworker/u8:5: Failed to release dquot type 1 [ 29.819126][ T3521] syz.3.27 uses obsolete (PF_INET,SOCK_PACKET) [ 29.881986][ T3525] netlink: 'syz.1.29': attribute type 4 has an invalid length. [ 29.959993][ T3531] loop4: detected capacity change from 0 to 256 [ 29.977652][ T3531] FAT-fs (loop4): Directory bread(block 64) failed [ 29.984412][ T3531] FAT-fs (loop4): Directory bread(block 65) failed [ 29.990931][ T3531] FAT-fs (loop4): Directory bread(block 66) failed [ 29.997504][ T3531] FAT-fs (loop4): Directory bread(block 67) failed [ 30.004111][ T3531] FAT-fs (loop4): Directory bread(block 68) failed [ 30.010750][ T3531] FAT-fs (loop4): Directory bread(block 69) failed [ 30.017337][ T3531] FAT-fs (loop4): Directory bread(block 70) failed [ 30.022394][ T3533] capability: warning: `syz.1.32' uses deprecated v2 capabilities in a way that may be insecure [ 30.024082][ T3531] FAT-fs (loop4): Directory bread(block 71) failed [ 30.041752][ T3531] FAT-fs (loop4): Directory bread(block 72) failed [ 30.048282][ T3531] FAT-fs (loop4): Directory bread(block 73) failed [ 30.199021][ T3538] netlink: 'syz.4.35': attribute type 4 has an invalid length. [ 30.308845][ T3541] rdma_op ffff888118dbd580 conn xmit_rdma 0000000000000000 [ 30.357517][ T3546] loop4: detected capacity change from 0 to 512 [ 30.373955][ T3546] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 30.388727][ T3544] loop0: detected capacity change from 0 to 512 [ 30.398902][ T3546] EXT4-fs (loop4): failed to open journal device unknown-block(7,4171) -6 [ 30.407854][ T3544] EXT4-fs: Ignoring removed i_version option [ 30.413912][ T3544] EXT4-fs: Ignoring removed mblk_io_submit option [ 30.449016][ T3544] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.462123][ T3544] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.485710][ T3544] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.511045][ T3544] EXT4-fs (loop0): 1 truncate cleaned up [ 30.518186][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.583238][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.668980][ T3539] Set syz1 is full, maxelem 65536 reached [ 30.686564][ T3555] netlink: 'syz.0.41': attribute type 4 has an invalid length. [ 30.716928][ T3539] syz.1.34 (3539) used greatest stack depth: 10968 bytes left [ 30.741320][ T3559] loop0: detected capacity change from 0 to 512 [ 30.752110][ T3559] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 30.757622][ T3561] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 30.761344][ T3559] EXT4-fs (loop0): failed to open journal device unknown-block(7,4171) -6 [ 30.783525][ T3561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.807274][ T3563] loop0: detected capacity change from 0 to 764 [ 31.575018][ T3571] netlink: 'syz.3.46': attribute type 39 has an invalid length. [ 31.657027][ T3576] netlink: 'syz.0.47': attribute type 4 has an invalid length. [ 31.665545][ T3561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.676460][ T3574] loop4: detected capacity change from 0 to 764 [ 31.706644][ T3578] loop0: detected capacity change from 0 to 512 [ 31.717611][ T3578] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 31.727981][ T3578] EXT4-fs (loop0): failed to open journal device unknown-block(7,4171) -6 [ 31.739831][ T3561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.766748][ T3583] netlink: 'syz.0.51': attribute type 2 has an invalid length. [ 31.774931][ T3580] loop3: detected capacity change from 0 to 512 [ 31.785648][ T3580] EXT4-fs: Ignoring removed i_version option [ 31.791682][ T3580] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.800708][ T3561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.813602][ T3580] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.836070][ T3580] EXT4-fs (loop3): 1 truncate cleaned up [ 31.842136][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.866000][ T3561] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.866582][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.877777][ T3561] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.895959][ T3561] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.908835][ T3561] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.928373][ T3590] netlink: 'syz.3.52': attribute type 4 has an invalid length. [ 31.986363][ T3596] loop1: detected capacity change from 0 to 764 [ 32.035953][ T3601] netlink: 'syz.3.57': attribute type 10 has an invalid length. [ 32.044760][ T3601] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.051940][ T3601] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.062281][ T3601] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.069371][ T3601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.076717][ T3601] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.083868][ T3601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.092853][ T3601] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 32.398981][ T3605] netlink: 'syz.2.58': attribute type 4 has an invalid length. [ 32.423101][ T3607] loop2: detected capacity change from 0 to 764 [ 32.498514][ T3610] Cannot find add_set index 4 as target [ 32.613495][ T3619] loop4: detected capacity change from 0 to 1024 [ 32.620426][ T3619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.634295][ T3619] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c119, mo2=0002] [ 32.642388][ T3619] System zones: 0-1, 3-12 [ 32.648156][ T3619] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.667448][ T29] kauditd_printk_skb: 572 callbacks suppressed [ 32.667457][ T29] audit: type=1400 audit(1740429637.665:712): avc: denied { setattr } for pid=3618 comm="syz.4.65" name="cgroup.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 32.705333][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.749308][ T29] audit: type=1400 audit(1740429637.745:713): avc: denied { create } for pid=3628 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.768846][ T29] audit: type=1400 audit(1740429637.745:714): avc: denied { bind } for pid=3628 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.788391][ T29] audit: type=1326 audit(1740429637.745:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f281d169 code=0x7ffc0000 [ 32.796157][ T3630] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.811726][ T29] audit: type=1326 audit(1740429637.745:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56f281d169 code=0x7ffc0000 [ 32.846595][ T29] audit: type=1326 audit(1740429637.745:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f281d169 code=0x7ffc0000 [ 32.855332][ T3630] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 32.870430][ T29] audit: type=1326 audit(1740429637.745:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56f281d169 code=0x7ffc0000 [ 32.901940][ T29] audit: type=1326 audit(1740429637.745:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f281d169 code=0x7ffc0000 [ 32.928175][ T29] audit: type=1326 audit(1740429637.745:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56f281d169 code=0x7ffc0000 [ 32.951371][ T29] audit: type=1326 audit(1740429637.785:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3628 comm="syz.0.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56f281d169 code=0x7ffc0000 [ 33.001180][ T3635] loop3: detected capacity change from 0 to 764 [ 33.004788][ T3637] __nla_validate_parse: 3 callbacks suppressed [ 33.004802][ T3637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.72'. [ 33.022428][ T3637] netlink: 16 bytes leftover after parsing attributes in process `syz.4.72'. [ 33.031294][ T3637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.72'. [ 33.041939][ T3637] netlink: 36 bytes leftover after parsing attributes in process `syz.4.72'. [ 33.086866][ T3639] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 33.120159][ T3646] ip6t_rpfilter: unknown options [ 33.132479][ T3641] loop0: detected capacity change from 0 to 512 [ 33.139744][ T3641] EXT4-fs: Ignoring removed i_version option [ 33.145820][ T3641] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.161727][ T3641] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.175039][ T3641] EXT4-fs (loop0): 1 truncate cleaned up [ 33.181003][ T3641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.207161][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.233038][ T3653] loop0: detected capacity change from 0 to 2048 [ 33.288782][ T3653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.348416][ T3653] bond1: entered promiscuous mode [ 33.353491][ T3653] bond1: entered allmulticast mode [ 33.362753][ T3653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.374007][ T3653] netlink: 'syz.0.77': attribute type 4 has an invalid length. [ 33.377671][ T3664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.80'. [ 33.385776][ T3653] sctp: [Deprecated]: syz.0.77 (pid 3653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 33.385776][ T3653] Use struct sctp_sack_info instead [ 33.390484][ T3664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.80'. [ 33.410947][ T3653] netlink: 'syz.0.77': attribute type 4 has an invalid length. [ 33.415354][ T3664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.80'. [ 33.428663][ T3653] EXT4-fs error (device loop0): ext4_find_extent:938: inode #2: comm syz.0.77: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 33.448719][ T3664] netlink: 36 bytes leftover after parsing attributes in process `syz.2.80'. [ 33.454236][ T3653] EXT4-fs (loop0): Remounting filesystem read-only [ 33.478876][ T3653] syz.0.77 (3653) used greatest stack depth: 10288 bytes left [ 33.487724][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.532529][ T3669] loop0: detected capacity change from 0 to 764 [ 33.568260][ T3673] Zero length message leads to an empty skb [ 33.581389][ T3673] netlink: 92 bytes leftover after parsing attributes in process `syz.2.84'. [ 33.590291][ T3673] netlink: 92 bytes leftover after parsing attributes in process `syz.2.84'. [ 33.776760][ T3688] loop2: detected capacity change from 0 to 512 [ 33.796810][ T3688] EXT4-fs (loop2): 1 orphan inode deleted [ 33.803108][ T3688] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.816847][ T3688] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.835465][ T52] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:4: Failed to release dquot type 1 [ 33.852359][ T3692] loop3: detected capacity change from 0 to 764 [ 33.858140][ T3688] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.868498][ T3688] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 33.942700][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.974921][ T3697] dccp_invalid_packet: P.Data Offset(172) too large [ 33.984470][ T3697] mmap: syz.2.89 (3697) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.013768][ T3702] loop4: detected capacity change from 0 to 512 [ 34.020935][ T3702] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 34.036362][ T3702] EXT4-fs (loop4): failed to open journal device unknown-block(7,4171) -6 [ 34.107109][ T3717] loop1: detected capacity change from 0 to 764 [ 34.132461][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.140119][ T3715] loop4: detected capacity change from 0 to 512 [ 34.140464][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.155537][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.165513][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.190632][ T3715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.203456][ T3715] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.282229][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.308358][ T3725] netlink: 'syz.4.99': attribute type 4 has an invalid length. [ 34.338304][ T3727] loop4: detected capacity change from 0 to 256 [ 34.345538][ T3727] msdos: Unknown parameter '' [ 34.408212][ T3734] loop0: detected capacity change from 0 to 512 [ 34.420717][ T3734] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.102: invalid indirect mapped block 11 (level 0) [ 34.439446][ T3734] EXT4-fs (loop0): Remounting filesystem read-only [ 34.446452][ T3734] EXT4-fs (loop0): 1 truncate cleaned up [ 34.452594][ T3734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.466421][ T3734] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 34.473409][ T3734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.492832][ T3734] loop0: detected capacity change from 0 to 512 [ 34.501372][ T3734] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.102: invalid indirect mapped block 11 (level 0) [ 34.516752][ T3734] EXT4-fs (loop0): Remounting filesystem read-only [ 34.523474][ T3734] EXT4-fs (loop0): 1 truncate cleaned up [ 34.529535][ T3734] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.542007][ T3734] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 34.548906][ T3734] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.578156][ T3739] netlink: 'syz.0.103': attribute type 4 has an invalid length. [ 34.600864][ T3741] netlink: 'syz.0.104': attribute type 4 has an invalid length. [ 34.621723][ T3743] FAULT_INJECTION: forcing a failure. [ 34.621723][ T3743] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.634905][ T3743] CPU: 1 UID: 0 PID: 3743 Comm: syz.0.105 Not tainted 6.14.0-rc4-syzkaller #0 [ 34.634925][ T3743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 34.634940][ T3743] Call Trace: [ 34.634945][ T3743] [ 34.634952][ T3743] dump_stack_lvl+0xf2/0x150 [ 34.634982][ T3743] dump_stack+0x15/0x1a [ 34.635001][ T3743] should_fail_ex+0x24a/0x260 [ 34.635025][ T3743] should_fail+0xb/0x10 [ 34.635065][ T3743] should_fail_usercopy+0x1a/0x20 [ 34.635087][ T3743] _copy_from_iter+0xd5/0xd00 [ 34.635110][ T3743] ? kmalloc_reserve+0x16e/0x190 [ 34.635127][ T3743] ? __build_skb_around+0x196/0x1f0 [ 34.635145][ T3743] ? __alloc_skb+0x21f/0x310 [ 34.635226][ T3743] ? __virt_addr_valid+0x1ed/0x250 [ 34.635244][ T3743] ? __check_object_size+0x364/0x520 [ 34.635262][ T3743] netlink_sendmsg+0x460/0x6e0 [ 34.635354][ T3743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.635378][ T3743] __sock_sendmsg+0x140/0x180 [ 34.635406][ T3743] ____sys_sendmsg+0x326/0x4b0 [ 34.635429][ T3743] __sys_sendmsg+0x19d/0x230 [ 34.635505][ T3743] __x64_sys_sendmsg+0x46/0x50 [ 34.635551][ T3743] x64_sys_call+0x2734/0x2dc0 [ 34.635570][ T3743] do_syscall_64+0xc9/0x1c0 [ 34.635622][ T3743] ? clear_bhb_loop+0x55/0xb0 [ 34.635645][ T3743] ? clear_bhb_loop+0x55/0xb0 [ 34.635668][ T3743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.635698][ T3743] RIP: 0033:0x7f56f281d169 [ 34.635772][ T3743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.635785][ T3743] RSP: 002b:00007f56f0e81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.635800][ T3743] RAX: ffffffffffffffda RBX: 00007f56f2a35fa0 RCX: 00007f56f281d169 [ 34.635812][ T3743] RDX: 0000000000000000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 34.635823][ T3743] RBP: 00007f56f0e81090 R08: 0000000000000000 R09: 0000000000000000 [ 34.635835][ T3743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.635916][ T3743] R13: 0000000000000000 R14: 00007f56f2a35fa0 R15: 00007fffe93df348 [ 34.635929][ T3743] [ 34.882330][ T3747] loop2: detected capacity change from 0 to 512 [ 34.889560][ T3747] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 34.899481][ T3747] EXT4-fs (loop2): failed to open journal device unknown-block(7,4171) -6 [ 34.906828][ T3745] hub 2-0:1.0: USB hub found [ 34.924607][ T3745] hub 2-0:1.0: 8 ports detected [ 35.022676][ T3776] netlink: 'syz.3.114': attribute type 4 has an invalid length. [ 35.031876][ T3779] loop0: detected capacity change from 0 to 128 [ 35.072940][ T3779] syz.0.115: attempt to access beyond end of device [ 35.072940][ T3779] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 35.111406][ T3779] syz.0.115: attempt to access beyond end of device [ 35.111406][ T3779] loop0: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 35.126382][ T3779] syz.0.115: attempt to access beyond end of device [ 35.126382][ T3779] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.144437][ T3779] syz.0.115: attempt to access beyond end of device [ 35.144437][ T3779] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.152223][ T3789] loop2: detected capacity change from 0 to 764 [ 35.157801][ T3779] syz.0.115: attempt to access beyond end of device [ 35.157801][ T3779] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.193974][ T3779] syz.0.115: attempt to access beyond end of device [ 35.193974][ T3779] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.211602][ T3779] syz.0.115: attempt to access beyond end of device [ 35.211602][ T3779] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.253636][ T3794] FAULT_INJECTION: forcing a failure. [ 35.253636][ T3794] name failslab, interval 1, probability 0, space 0, times 0 [ 35.261702][ T3779] syz.0.115: attempt to access beyond end of device [ 35.261702][ T3779] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.266317][ T3794] CPU: 1 UID: 0 PID: 3794 Comm: syz.4.120 Not tainted 6.14.0-rc4-syzkaller #0 [ 35.266399][ T3794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 35.266415][ T3794] Call Trace: [ 35.266421][ T3794] [ 35.266428][ T3794] dump_stack_lvl+0xf2/0x150 [ 35.266451][ T3794] dump_stack+0x15/0x1a [ 35.266469][ T3794] should_fail_ex+0x24a/0x260 [ 35.266494][ T3794] ? __se_sys_memfd_create+0x1ea/0x5a0 [ 35.266542][ T3794] should_failslab+0x8f/0xb0 [ 35.266639][ T3794] __kmalloc_cache_noprof+0x4e/0x320 [ 35.266667][ T3794] __se_sys_memfd_create+0x1ea/0x5a0 [ 35.266760][ T3794] __x64_sys_memfd_create+0x31/0x40 [ 35.266861][ T3794] x64_sys_call+0x2d4c/0x2dc0 [ 35.266883][ T3794] do_syscall_64+0xc9/0x1c0 [ 35.266907][ T3794] ? clear_bhb_loop+0x55/0xb0 [ 35.266931][ T3794] ? clear_bhb_loop+0x55/0xb0 [ 35.267016][ T3794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.267038][ T3794] RIP: 0033:0x7fbebdb6d169 [ 35.267052][ T3794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.267068][ T3794] RSP: 002b:00007fbebc1d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 35.267084][ T3794] RAX: ffffffffffffffda RBX: 000000000000048a RCX: 00007fbebdb6d169 [ 35.267095][ T3794] RDX: 00007fbebc1d6ef0 RSI: 0000000000000000 RDI: 00007fbebdbeec3c [ 35.267106][ T3794] RBP: 0000400000000b00 R08: 00007fbebc1d6bb7 R09: 00007fbebc1d6e40 [ 35.267130][ T3794] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000480 [ 35.267141][ T3794] R13: 00007fbebc1d6ef0 R14: 00007fbebc1d6eb0 R15: 00004000000001c0 [ 35.267156][ T3794] [ 35.444516][ T3779] syz.0.115: attempt to access beyond end of device [ 35.444516][ T3779] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.470405][ T3796] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.481435][ T3779] syz.0.115: attempt to access beyond end of device [ 35.481435][ T3779] loop0: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.546979][ T3796] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.605667][ T3811] loop4: detected capacity change from 0 to 512 [ 35.624713][ T3811] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.124: bad orphan inode 15 [ 35.635895][ T3811] ext4_test_bit(bit=14, block=18) = 1 [ 35.641369][ T3811] is_bad_inode(inode)=0 [ 35.645553][ T3811] NEXT_ORPHAN(inode)=1023 [ 35.649874][ T3811] max_ino=32 [ 35.653146][ T3811] i_nlink=0 [ 35.657475][ T3796] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.658122][ T3811] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.124: corrupted xattr block 19: bad e_name length [ 35.683013][ T3811] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 35.694656][ T3811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 35.706936][ T3811] ext4 filesystem being mounted at /31/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 35.746741][ T3796] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.851584][ T3796] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.887046][ T3796] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.917140][ T3796] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.944689][ T3796] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.005993][ T3820] loop2: detected capacity change from 0 to 164 [ 36.017960][ T3819] netlink: 'syz.1.127': attribute type 4 has an invalid length. [ 36.027709][ T3820] ISOFS: unable to read i-node block [ 36.033040][ T3820] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 36.051685][ T3820] batadv1: entered promiscuous mode [ 36.062066][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 36.071378][ T3825] loop1: detected capacity change from 0 to 512 [ 36.079704][ T3825] EXT4-fs (loop1): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 36.174670][ T3841] loop2: detected capacity change from 0 to 512 [ 36.182764][ T3843] loop3: detected capacity change from 0 to 164 [ 36.192489][ T3845] netlink: 'syz.4.136': attribute type 2 has an invalid length. [ 36.215000][ T3848] loop0: detected capacity change from 0 to 1024 [ 36.225463][ T3841] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.134: bg 0: block 248: padding at end of block bitmap is not set [ 36.246942][ T3854] loop4: detected capacity change from 0 to 764 [ 36.254070][ T3841] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.134: Failed to acquire dquot type 1 [ 36.276710][ T3848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.284669][ T3841] EXT4-fs (loop2): 1 truncate cleaned up [ 36.288909][ T3848] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.312771][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.333292][ T3829] loop1: detected capacity change from 0 to 512 [ 36.343757][ T3841] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.355955][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.356822][ T3829] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.385634][ T3829] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.132: corrupted in-inode xattr: e_name out of bounds [ 36.402451][ T3829] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.132: couldn't read orphan inode 15 (err -117) [ 36.414980][ T3829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.468591][ T3841] syz.2.134 (3841) used greatest stack depth: 9280 bytes left [ 36.515072][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.548664][ T3880] netlink: 'syz.0.145': attribute type 5 has an invalid length. [ 36.571358][ T3882] loop0: detected capacity change from 0 to 512 [ 36.578423][ T3882] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.592397][ T3883] loop1: detected capacity change from 0 to 512 [ 36.600056][ T3882] EXT4-fs (loop0): 1 truncate cleaned up [ 36.606138][ T3882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.616993][ T3883] EXT4-fs (loop1): 1 orphan inode deleted [ 36.624995][ T3883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.638085][ T3773] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:14: Failed to release dquot type 1 [ 36.649680][ T3883] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.651063][ T3882] 9pnet: Could not find request transport: 0xffffffffffffffff [ 36.665096][ T3883] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz.1.143: deleted inode referenced: 16 [ 36.731516][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.772938][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.791017][ T3896] netlink: 'syz.2.148': attribute type 2 has an invalid length. [ 36.969350][ C1] hrtimer: interrupt took 47826 ns [ 37.041479][ T3912] loop3: detected capacity change from 0 to 2048 [ 37.054991][ T3912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.092529][ T3916] loop4: detected capacity change from 0 to 256 [ 37.105202][ T3916] FAT-fs (loop4): Directory bread(block 64) failed [ 37.111717][ T3916] FAT-fs (loop4): Directory bread(block 65) failed [ 37.118239][ T3916] FAT-fs (loop4): Directory bread(block 66) failed [ 37.124878][ T3916] FAT-fs (loop4): Directory bread(block 67) failed [ 37.131523][ T3916] FAT-fs (loop4): Directory bread(block 68) failed [ 37.138119][ T3916] FAT-fs (loop4): Directory bread(block 69) failed [ 37.144752][ T3916] FAT-fs (loop4): Directory bread(block 70) failed [ 37.151256][ T3916] FAT-fs (loop4): Directory bread(block 71) failed [ 37.158616][ T3916] FAT-fs (loop4): Directory bread(block 72) failed [ 37.165245][ T3916] FAT-fs (loop4): Directory bread(block 73) failed [ 37.192915][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.208375][ T3922] SELinux: Context : is not valid (left unmapped). [ 37.279481][ T3938] loop0: detected capacity change from 0 to 512 [ 37.286411][ T3938] EXT4-fs: Ignoring removed i_version option [ 37.292420][ T3938] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.303856][ T3938] EXT4-fs: Ignoring removed bh option [ 37.314755][ T3938] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.328114][ T3938] EXT4-fs (loop0): 1 truncate cleaned up [ 37.339111][ T3938] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.363018][ T3941] loop3: detected capacity change from 0 to 512 [ 37.370434][ T3941] EXT4-fs: Ignoring removed i_version option [ 37.376491][ T3941] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.384387][ T3941] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.403271][ T3941] EXT4-fs (loop3): 1 truncate cleaned up [ 37.410348][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.410508][ T3941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.433990][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.467438][ T3955] loop1: detected capacity change from 0 to 764 [ 37.475790][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.533846][ T3969] process 'syz.3.169' launched './file0' with NULL argv: empty string added [ 37.620515][ T3978] loop3: detected capacity change from 0 to 8192 [ 37.624792][ T3981] loop2: detected capacity change from 0 to 512 [ 37.688996][ T29] kauditd_printk_skb: 948 callbacks suppressed [ 37.689149][ T29] audit: type=1400 audit(1740429642.685:1666): avc: denied { mounton } for pid=3992 comm="syz.4.177" path="/37/file0" dev="tmpfs" ino=219 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.760989][ T29] audit: type=1400 audit(1740429642.715:1667): avc: denied { mount } for pid=3992 comm="syz.4.177" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.783048][ T29] audit: type=1400 audit(1740429642.715:1668): avc: denied { setattr } for pid=3992 comm="syz.4.177" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 37.804606][ T29] audit: type=1400 audit(1740429642.725:1669): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 37.824939][ T29] audit: type=1400 audit(1740429642.735:1670): avc: denied { write } for pid=3997 comm="syz.3.176" name="kcm" dev="proc" ino=4026532877 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 37.847387][ T29] audit: type=1400 audit(1740429642.755:1671): avc: denied { read } for pid=4003 comm="syz.0.179" dev="nsfs" ino=4026532770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.868703][ T29] audit: type=1400 audit(1740429642.755:1672): avc: denied { open } for pid=4003 comm="syz.0.179" path="net:[4026532770]" dev="nsfs" ino=4026532770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 37.868724][ T29] audit: type=1400 audit(1740429642.755:1673): avc: denied { create } for pid=4003 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.869950][ T29] audit: type=1400 audit(1740429642.755:1674): avc: denied { append } for pid=2982 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.869991][ T29] audit: type=1400 audit(1740429642.825:1675): avc: denied { setopt } for pid=4003 comm="syz.0.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.896451][ T4006] loop3: detected capacity change from 0 to 512 [ 37.896699][ T4006] EXT4-fs: Ignoring removed i_version option [ 37.896793][ T4006] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.898441][ T4006] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.938764][ T4019] loop0: detected capacity change from 0 to 128 [ 38.116275][ T4006] EXT4-fs (loop3): 1 truncate cleaned up [ 38.128793][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.139187][ T4032] loop2: detected capacity change from 0 to 4096 [ 38.171179][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.181998][ T4032] EXT4-fs (loop2): can't mount with both data=journal and delalloc [ 38.210819][ T4034] ip6t_rpfilter: unknown options [ 38.623370][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.648853][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.670301][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.694002][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.712254][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.739988][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.747934][ T4047] SELinux: security_context_str_to_sid () failed with errno=-22 [ 38.748041][ T4048] SELinux: security_context_str_to_sid () failed with errno=-22 [ 38.775147][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.790988][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.839953][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.873797][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.888622][ T4040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.897167][ T4052] loop1: detected capacity change from 0 to 1764 [ 38.897296][ T4040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.903701][ T4052] iso9660: Unknown parameter '01777777777777777777777' [ 38.975708][ T4062] __nla_validate_parse: 15 callbacks suppressed [ 38.975723][ T4062] netlink: 244 bytes leftover after parsing attributes in process `syz.4.195'. [ 39.037047][ T4069] loop1: detected capacity change from 0 to 1024 [ 39.066833][ T4069] EXT4-fs: Ignoring removed bh option [ 39.072348][ T4070] loop3: detected capacity change from 0 to 764 [ 39.082839][ T4069] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.087222][ T4062] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 39.102938][ T4066] loop0: detected capacity change from 0 to 512 [ 39.113567][ T4066] EXT4-fs: Ignoring removed i_version option [ 39.119661][ T4066] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.130668][ T4069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 39.149298][ T4066] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.161460][ T4069] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 2: comm syz.1.198: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.186528][ T4069] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 48: comm syz.1.198: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.202186][ T4066] EXT4-fs (loop0): 1 truncate cleaned up [ 39.211997][ T4066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.230374][ T4069] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.198: Failed to acquire dquot type 0 [ 39.234106][ T4077] bond0: entered promiscuous mode [ 39.246537][ T4077] bond_slave_0: entered promiscuous mode [ 39.246703][ T4077] bond_slave_1: entered promiscuous mode [ 39.253393][ T4069] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 39.267530][ T4077] bond0: left promiscuous mode [ 39.268870][ T4069] EXT4-fs error (device loop1): ext4_evict_inode:256: inode #11: comm syz.1.198: mark_inode_dirty error [ 39.272309][ T4077] bond_slave_0: left promiscuous mode [ 39.272384][ T4077] bond_slave_1: left promiscuous mode [ 39.283645][ T4069] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -117) [ 39.316160][ T4069] EXT4-fs (loop1): 1 orphan inode deleted [ 39.316227][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.333289][ T4069] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.346294][ T3766] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.369223][ T3766] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:11: Failed to release dquot type 0 [ 39.416927][ T1764] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.433581][ T1764] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 0 [ 39.448157][ T4069] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 16: comm syz.1.198: lblock 0 mapped to illegal pblock 16 (length 1) [ 39.463976][ T4092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.479652][ T4092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.489793][ T4069] ------------[ cut here ]------------ [ 39.495293][ T4069] WARNING: CPU: 0 PID: 4069 at mm/page_alloc.c:4715 __alloc_frozen_pages_noprof+0x204/0x340 [ 39.505448][ T4069] Modules linked in: [ 39.509339][ T4069] CPU: 0 UID: 0 PID: 4069 Comm: syz.1.198 Not tainted 6.14.0-rc4-syzkaller #0 [ 39.518221][ T4069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 39.528532][ T4069] RIP: 0010:__alloc_frozen_pages_noprof+0x204/0x340 [ 39.535249][ T4069] Code: 00 48 3b 44 24 30 0f 85 b5 00 00 00 48 89 e8 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc c6 05 4a ec 31 05 01 90 <0f> 0b 90 41 83 fd 0a 0f 87 fc fe ff ff e9 52 fe ff ff a9 00 00 08 [ 39.535947][ T4109] validate_nla: 2 callbacks suppressed [ 39.535958][ T4109] netlink: 'syz.4.209': attribute type 4 has an invalid length. [ 39.555121][ T4069] RSP: 0018:ffffc900116d3a28 EFLAGS: 00010246 [ 39.561194][ T4110] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 16: comm syz.1.198: lblock 0 mapped to illegal pblock 16 (length 1) [ 39.568120][ T4069] [ 39.568127][ T4069] RAX: eec0e1998f120400 RBX: 0000000000040dc0 RCX: 0000000000000000 [ 39.568141][ T4069] RDX: 0000000000000000 RSI: 0000000000000015 RDI: 0000000000040dc0 [ 39.568152][ T4069] RBP: 0000000000040dc0 R08: ffffffff81cbebce R09: 0000000000000000 [ 39.614551][ T4069] R10: ffff88811737efa8 R11: 000188811737efb8 R12: 0000000200000000 [ 39.622617][ T4069] R13: 0000000000000015 R14: 0000000000000000 R15: 0000000000000000 [ 39.630626][ T4069] FS: 00007f4de12976c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 [ 39.639616][ T4069] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.646284][ T4069] CR2: 0000400000001000 CR3: 000000011a35a000 CR4: 00000000003506f0 [ 39.654288][ T4069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.662274][ T4069] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.670338][ T4069] Call Trace: [ 39.673637][ T4069] [ 39.676596][ T4069] ? __warn+0x141/0x350 [ 39.680840][ T4069] ? report_bug+0x315/0x420 [ 39.685407][ T4069] ? __alloc_frozen_pages_noprof+0x204/0x340 [ 39.691512][ T4069] ? handle_bug+0x60/0x90 [ 39.695917][ T4069] ? exc_invalid_op+0x1a/0x50 [ 39.700612][ T4069] ? asm_exc_invalid_op+0x1a/0x20 [ 39.705750][ T4069] ? hashtab_init+0x4e/0xf0 [ 39.710294][ T4069] ? __alloc_frozen_pages_noprof+0x204/0x340 [ 39.716372][ T4069] ? set_pte_range+0x26d/0x430 [ 39.721300][ T4069] ? should_fail_ex+0x31/0x260 [ 39.726501][ T4069] __alloc_pages_noprof+0x9/0x20 [ 39.731455][ T4069] ___kmalloc_large_node+0x7a/0x120 [ 39.736866][ T4069] __kmalloc_large_node_noprof+0x17/0xa0 [ 39.742517][ T4069] __kmalloc_noprof+0x2b8/0x3f0 [ 39.747414][ T4069] ? hashtab_init+0x82/0xf0 [ 39.751967][ T4069] hashtab_init+0x82/0xf0 [ 39.756411][ T4069] symtab_init+0x2a/0x40 [ 39.760664][ T4069] common_read+0x10f/0x2f0 [ 39.765116][ T4069] ? __pfx_common_read+0x10/0x10 [ 39.770141][ T4069] policydb_read+0x649/0x1320 [ 39.774873][ T4069] security_load_policy+0xbf/0x8d0 [ 39.780005][ T4069] ? rep_movs_alternative+0x4a/0x70 [ 39.785245][ T4069] sel_write_load+0x1d1/0x360 [ 39.789976][ T4069] ? __pfx_sel_write_load+0x10/0x10 [ 39.795219][ T4069] vfs_write+0x27d/0x920 [ 39.799546][ T4069] ? __fget_files+0x17c/0x1c0 [ 39.804276][ T4069] ksys_write+0xe8/0x1b0 [ 39.808524][ T4069] __x64_sys_write+0x42/0x50 [ 39.813119][ T4069] x64_sys_call+0x287e/0x2dc0 [ 39.817840][ T4069] do_syscall_64+0xc9/0x1c0 [ 39.822398][ T4069] ? clear_bhb_loop+0x55/0xb0 [ 39.827147][ T4069] ? clear_bhb_loop+0x55/0xb0 [ 39.831846][ T4069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.837862][ T4069] RIP: 0033:0x7f4de2c2d169 [ 39.842291][ T4069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.861956][ T4069] RSP: 002b:00007f4de1297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.870391][ T4069] RAX: ffffffffffffffda RBX: 00007f4de2e45fa0 RCX: 00007f4de2c2d169 [ 39.878386][ T4069] RDX: 0000000000002000 RSI: 0000400000000000 RDI: 0000000000000006 [ 39.886462][ T4069] RBP: 00007f4de2cae2a0 R08: 0000000000000000 R09: 0000000000000000 [ 39.894453][ T4069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.902614][ T4069] R13: 0000000000000000 R14: 00007f4de2e45fa0 R15: 00007ffe1a47f928 [ 39.910643][ T4069] [ 39.913836][ T4069] ---[ end trace 0000000000000000 ]--- [ 39.921696][ T4069] SELinux: failed to load policy [ 39.945655][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.959336][ T3301] EXT4-fs error (device loop1): __ext4_get_inode_loc:4435: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 39.960658][ T4120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4120 comm=syz.0.215 [ 39.988133][ T3301] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 39.997958][ T4121] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 40.021682][ T3301] EXT4-fs error (device loop1): ext4_quota_off:7194: inode #3: comm syz-executor: mark_inode_dirty error [ 40.029263][ T4121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 40.051296][ T4120] bond2: (slave ip6gretap1): making interface the new active one [ 40.059942][ T4120] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 40.081041][ T4128] veth0_macvtap: left promiscuous mode [ 40.085124][ T4129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.211'. [ 40.095445][ T4129] netlink: 16 bytes leftover after parsing attributes in process `syz.4.211'. [ 40.104320][ T4129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.211'. [ 40.113328][ T4128] macvtap0: entered promiscuous mode [ 40.113401][ T4129] netlink: 36 bytes leftover after parsing attributes in process `syz.4.211'. [ 40.127731][ T4128] veth0_macvtap: entered promiscuous mode [ 40.149511][ T4132] loop1: detected capacity change from 0 to 512 [ 40.174609][ T4128] team0: Device macvtap0 failed to register rx_handler [ 40.210334][ T4132] EXT4-fs: Ignoring removed i_version option [ 40.227104][ T4128] veth0_macvtap: left promiscuous mode [ 40.263806][ T4134] loop3: detected capacity change from 0 to 8192 [ 40.279074][ T4134] bio_check_eod: 14858 callbacks suppressed [ 40.279087][ T4134] syz.3.218: attempt to access beyond end of device [ 40.279087][ T4134] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 40.303467][ T4144] loop2: detected capacity change from 0 to 764 [ 40.304837][ T4140] netlink: 'syz.4.220': attribute type 4 has an invalid length. [ 40.319766][ T4134] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 40.327677][ T4134] FAT-fs (loop3): Filesystem has been set read-only [ 40.344158][ T4132] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.214: bad orphan inode 16384 [ 40.356030][ T4132] EXT4-fs (loop1): Remounting filesystem read-only [ 40.363572][ T4132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.367606][ T4134] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 40.385626][ T4134] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 40.389620][ T4132] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 40.408207][ T4132] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.420377][ T4155] qrtr: Invalid version 0 [ 40.441090][ T4159] netlink: 76 bytes leftover after parsing attributes in process `syz.4.228'. [ 40.485314][ T4163] tls_set_device_offload: netdev not found [ 40.491839][ T4128] syzkaller0: entered promiscuous mode [ 40.497348][ T4128] syzkaller0: entered allmulticast mode [ 40.536414][ T4171] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 40.588835][ T4177] loop4: detected capacity change from 0 to 512 [ 40.631872][ T4182] netlink: 'syz.4.233': attribute type 4 has an invalid length. [ 40.640245][ T4175] netlink: 56 bytes leftover after parsing attributes in process `syz.3.227'. [ 40.703867][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.227'. [ 40.724438][ T4183] netlink: 20 bytes leftover after parsing attributes in process `syz.0.230'. [ 40.799575][ T4186] loop4: detected capacity change from 0 to 512 [ 40.806145][ T4186] EXT4-fs: Ignoring removed i_version option [ 40.812164][ T4186] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.818964][ T4186] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.836261][ T4186] EXT4-fs (loop4): 1 truncate cleaned up [ 40.842364][ T4186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.866595][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.913498][ T4200] loop4: detected capacity change from 0 to 512 [ 40.926694][ T4200] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #17: comm syz.4.238: iget: bogus i_mode (0) [ 40.938066][ T4200] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.238: couldn't read orphan inode 17 (err -117) [ 40.950264][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.963614][ T4200] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.238: bg 0: block 7: invalid block bitmap [ 41.055300][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.074717][ T4213] serio: Serial port ptm0 [ 41.080249][ T4212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=4212 comm=syz.4.242 [ 41.093641][ T4212] 9pnet_fd: Insufficient options for proto=fd [ 41.190579][ T4220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.244'. [ 41.371190][ T4223] loop4: detected capacity change from 0 to 2048 [ 41.414141][ T4223] loop4: p1 < > p4 [ 41.418922][ T4223] loop4: p4 size 8388608 extends beyond EOD, truncated [ 41.495557][ T4233] capability: warning: `syz.3.251' uses 32-bit capabilities (legacy support in use) [ 41.539622][ T4229] loop1: detected capacity change from 0 to 512 [ 41.541065][ T4241] loop3: detected capacity change from 0 to 512 [ 41.553087][ T4241] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.563994][ T4229] EXT4-fs: Ignoring removed i_version option [ 41.570040][ T4229] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.579134][ T4241] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #17: comm syz.3.252: iget: bad i_size value: -6917529027641081756 [ 41.593117][ T4229] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.623080][ T4241] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.252: couldn't read orphan inode 17 (err -117) [ 41.638571][ T4229] EXT4-fs (loop1): 1 truncate cleaned up [ 41.649425][ T4229] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.670036][ T4241] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.692816][ T4241] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.252: bg 0: block 65: padding at end of block bitmap is not set [ 41.697371][ T4248] loop4: detected capacity change from 0 to 764 [ 41.714462][ T4241] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.252: Failed to acquire dquot type 0 [ 41.737048][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.746655][ T4241] syz.3.252 (4241) used greatest stack depth: 9264 bytes left [ 41.757005][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.871937][ T4262] loop0: detected capacity change from 0 to 512 [ 41.887130][ T4262] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.260: Failed to acquire dquot type 1 [ 41.904339][ T4262] EXT4-fs (loop0): 1 truncate cleaned up [ 41.913999][ T4262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.926959][ T4262] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.950548][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.990654][ T4281] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 42.019224][ T4286] loop2: detected capacity change from 0 to 512 [ 42.035434][ T4286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.048462][ T4279] loop3: detected capacity change from 0 to 512 [ 42.049423][ T4286] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.055112][ T4279] EXT4-fs: Ignoring removed i_version option [ 42.071362][ T4279] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.078344][ T4279] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.088351][ T4292] loop1: detected capacity change from 0 to 512 [ 42.094828][ T4292] journal_path: Lookup failure for './file0' [ 42.100918][ T4292] EXT4-fs: error: could not find journal device path [ 42.108694][ T4279] EXT4-fs (loop3): 1 truncate cleaned up [ 42.112194][ T4285] loop1: detected capacity change from 0 to 512 [ 42.114762][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.120897][ T4285] journal_path: Lookup failure for './file0' [ 42.138787][ T4285] EXT4-fs: error: could not find journal device path [ 42.167438][ T4298] loop1: detected capacity change from 0 to 128 [ 42.174825][ T4298] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.187048][ T4298] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.198902][ T4298] ./file0: Can't lookup blockdev [ 42.204731][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.279401][ T4293] loop0: detected capacity change from 0 to 8192 [ 42.315641][ T4308] loop1: detected capacity change from 0 to 256 [ 42.357411][ T4308] bridge_slave_0: left allmulticast mode [ 42.363069][ T4308] bridge_slave_0: left promiscuous mode [ 42.368864][ T4308] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.378491][ T4308] bridge_slave_1: left allmulticast mode [ 42.384330][ T4308] bridge_slave_1: left promiscuous mode [ 42.390324][ T4308] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.400515][ T4308] bond0: (slave bond_slave_0): Releasing backup interface [ 42.412662][ T4308] bond0: (slave bond_slave_1): Releasing backup interface [ 42.439593][ T4308] team0: Port device team_slave_0 removed [ 42.456023][ T4308] team0: Port device team_slave_1 removed [ 42.463069][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.470563][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.480139][ T4308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.487589][ T4308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.641693][ T4325] loop0: detected capacity change from 0 to 512 [ 42.656175][ T4316] infiniband syz!: set down [ 42.660768][ T4316] infiniband syz!: added team_slave_0 [ 42.662187][ T4331] loop3: detected capacity change from 0 to 1764 [ 42.668871][ T4325] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.276: invalid block [ 42.698953][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 42.698965][ T29] audit: type=1400 audit(1740429647.695:2119): avc: denied { mount } for pid=4329 comm="syz.3.281" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.735594][ T4330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4330 comm=syz.1.280 [ 42.748416][ T4330] netlink: 'syz.1.280': attribute type 1 has an invalid length. [ 42.756372][ T4316] RDS/IB: syz!: added [ 42.760640][ T4316] smc: adding ib device syz! with port count 1 [ 42.768358][ T4316] smc: ib device syz! port 1 has pnetid [ 42.788314][ T4325] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.276: invalid indirect mapped block 4294967295 (level 1) [ 42.837106][ T29] audit: type=1326 audit(1740429647.725:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4320 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fbebdb6d169 code=0x7ffc0000 [ 42.860478][ T29] audit: type=1326 audit(1740429647.725:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbebdb09359 code=0x7ffc0000 [ 42.883704][ T29] audit: type=1326 audit(1740429647.725:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbebdb6d169 code=0x7ffc0000 [ 42.907199][ T29] audit: type=1326 audit(1740429647.725:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4318 comm="syz.4.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbebdb6d169 code=0x7ffc0000 [ 42.930581][ T29] audit: type=1400 audit(1740429647.755:2124): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.966352][ T29] audit: type=1400 audit(1740429647.835:2125): avc: denied { tracepoint } for pid=4336 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.986141][ T29] audit: type=1400 audit(1740429647.955:2126): avc: denied { create } for pid=4341 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 43.005897][ T29] audit: type=1400 audit(1740429647.955:2127): avc: denied { write } for pid=4341 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 43.025561][ T29] audit: type=1400 audit(1740429647.955:2128): avc: denied { connect } for pid=4341 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 43.037616][ T4325] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.276: invalid indirect mapped block 4294967295 (level 1) [ 43.066333][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.101646][ T4325] EXT4-fs (loop0): 2 truncates cleaned up [ 43.118489][ T4325] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.156119][ T4351] loop3: detected capacity change from 0 to 764 [ 43.178034][ T4353] netlink: 'syz.2.286': attribute type 4 has an invalid length. [ 43.200607][ T4358] loop4: detected capacity change from 0 to 128 [ 43.234695][ T4357] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 43.265471][ T4361] 9pnet_fd: Insufficient options for proto=fd [ 43.269567][ T4366] loop1: detected capacity change from 0 to 128 [ 43.280650][ T4366] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.293327][ T4366] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.313111][ T4368] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.292: bg 0: bad block bitmap checksum [ 43.330675][ T4370] netlink: 'syz.2.293': attribute type 27 has an invalid length. [ 43.359120][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.402618][ T4370] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.409823][ T4370] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.446894][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.448659][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.476921][ T4370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.500719][ T4370] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.509832][ T4370] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.518832][ T4370] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.527810][ T4370] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.585555][ T4374] bridge_slave_0: left allmulticast mode [ 43.591237][ T4374] bridge_slave_0: left promiscuous mode [ 43.591843][ T4381] loop2: detected capacity change from 0 to 128 [ 43.596966][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.626110][ T4374] bridge_slave_1: left allmulticast mode [ 43.631763][ T4374] bridge_slave_1: left promiscuous mode [ 43.637780][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.662947][ T4374] bond0: (slave bond_slave_0): Releasing backup interface [ 43.685711][ T4374] bond0: (slave bond_slave_1): Releasing backup interface [ 43.708617][ T4374] team0: Port device team_slave_0 removed [ 43.717669][ T4374] team0: Port device team_slave_1 removed [ 43.734432][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.741856][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.758025][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.765529][ T4374] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.776780][ T4385] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 43.857179][ T4385] bridge_slave_1: left allmulticast mode [ 43.862861][ T4385] bridge_slave_1: left promiscuous mode [ 43.868739][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.880964][ T4385] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 43.938534][ T4387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 43.986406][ T4392] netlink: 'syz.4.301': attribute type 4 has an invalid length. [ 44.028678][ T4396] loop3: detected capacity change from 0 to 764 [ 44.516837][ T4404] loop1: detected capacity change from 0 to 1024 [ 44.539067][ T4404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.574098][ T4404] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.609502][ T4420] loop4: detected capacity change from 0 to 512 [ 44.639950][ T4404] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 44.666530][ T4420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.738089][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.748382][ T4409] __nla_validate_parse: 12 callbacks suppressed [ 44.748397][ T4409] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 44.776822][ T4433] validate_nla: 1 callbacks suppressed [ 44.776836][ T4433] netlink: 'syz.4.312': attribute type 4 has an invalid length. [ 44.791985][ T4404] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28 [ 44.804232][ T4435] loop2: detected capacity change from 0 to 764 [ 44.804377][ T4404] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.804377][ T4404] [ 44.820261][ T4404] EXT4-fs (loop1): Total free blocks count 0 [ 44.826325][ T4404] EXT4-fs (loop1): Free/Dirty block details [ 44.832214][ T4404] EXT4-fs (loop1): free_blocks=4293918720 [ 44.838005][ T4404] EXT4-fs (loop1): dirty_blocks=16 [ 44.843105][ T4404] EXT4-fs (loop1): Block reservation details [ 44.849221][ T4404] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 44.859445][ T4405] Direct I/O collision with buffered writes! File: /file1 Comm: syz.1.305 [ 44.922599][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'. [ 44.938932][ T4437] hsr_slave_1 (unregistering): left promiscuous mode [ 45.102259][ T4447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.316'. [ 45.127375][ T4446] ext2: Invalid uid '0x00000000ffffffff' [ 45.195650][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.252235][ T4454] netlink: 36 bytes leftover after parsing attributes in process `syz.4.319'. [ 45.305202][ T4458] loop4: detected capacity change from 0 to 256 [ 45.434692][ T4466] netlink: 'syz.1.322': attribute type 4 has an invalid length. [ 45.614756][ T4474] netlink: 'syz.1.324': attribute type 4 has an invalid length. [ 45.663541][ T4476] loop2: detected capacity change from 0 to 128 [ 45.710729][ T4476] syz.2.325: attempt to access beyond end of device [ 45.710729][ T4476] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 45.719062][ T4478] loop1: detected capacity change from 0 to 2048 [ 45.762270][ T4475] syz.2.325: attempt to access beyond end of device [ 45.762270][ T4475] loop2: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 45.796430][ T4478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.840550][ T4482] loop3: detected capacity change from 0 to 164 [ 45.847180][ T4476] syz.2.325: attempt to access beyond end of device [ 45.847180][ T4476] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 45.868291][ T4476] syz.2.325: attempt to access beyond end of device [ 45.868291][ T4476] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 45.905774][ T4478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 45.941910][ T4476] syz.2.325: attempt to access beyond end of device [ 45.941910][ T4476] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.004630][ T4484] syzkaller0: entered promiscuous mode [ 46.010197][ T4484] syzkaller0: entered allmulticast mode [ 46.023788][ T4476] syz.2.325: attempt to access beyond end of device [ 46.023788][ T4476] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.055570][ T4476] syz.2.325: attempt to access beyond end of device [ 46.055570][ T4476] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.081148][ T4476] syz.2.325: attempt to access beyond end of device [ 46.081148][ T4476] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.104706][ T4485] syz.2.325: attempt to access beyond end of device [ 46.104706][ T4485] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.109698][ T4484] bond1: entered promiscuous mode [ 46.118239][ T4476] syz.2.325: attempt to access beyond end of device [ 46.118239][ T4476] loop2: rw=0, sector=145, nr_sectors = 8 limit=128 [ 46.122868][ T4484] bond1: entered allmulticast mode [ 46.134456][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.171669][ T4484] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.216263][ T4484] bond1 (unregistering): Released all slaves [ 46.335846][ T4496] netlink: 'syz.4.332': attribute type 4 has an invalid length. [ 46.356490][ T4498] netlink: 'syz.3.333': attribute type 4 has an invalid length. [ 46.373104][ T4499] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.331'. [ 46.383112][ T4494] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.331'. [ 46.406682][ T4501] loop4: detected capacity change from 0 to 512 [ 46.443981][ T4501] EXT4-fs: Ignoring removed nobh option [ 46.444298][ T4504] loop3: detected capacity change from 0 to 764 [ 46.453980][ T4501] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 46.520845][ T4511] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 46.620269][ T4519] loop2: detected capacity change from 0 to 2048 [ 46.629767][ T4516] loop1: detected capacity change from 0 to 2048 [ 46.666288][ T4516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.694973][ T4519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.713930][ T4519] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.829764][ T11] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 46.877311][ T11] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 436 with error 117 [ 46.890000][ T11] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.890000][ T11] [ 46.921211][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.152421][ T4532] loop2: detected capacity change from 0 to 1024 [ 47.204194][ T4532] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.237569][ T4532] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2793: inode #12: comm syz.2.342: corrupted in-inode xattr: bad magic number in in-inode xattr [ 47.353397][ T4539] loop3: detected capacity change from 0 to 128 [ 47.387503][ T4539] EXT4-fs: Ignoring removed nobh option [ 47.387623][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.415418][ T4539] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.448274][ T4539] ext4 filesystem being mounted at /59/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.467023][ T4542] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'. [ 47.584878][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.644721][ T4546] netlink: 'syz.3.345': attribute type 4 has an invalid length. [ 47.744476][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 47.744497][ T29] audit: type=1400 audit(1740429652.745:2351): avc: denied { create } for pid=4550 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 47.795495][ T29] audit: type=1400 audit(1740429652.765:2352): avc: denied { ioctl } for pid=4550 comm="syz.3.348" path="socket:[40121]" dev="sockfs" ino=40121 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 47.820105][ T29] audit: type=1400 audit(1740429652.775:2353): avc: denied { getopt } for pid=4550 comm="syz.3.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.847235][ T4553] 9pnet_fd: Insufficient options for proto=fd [ 47.917152][ T29] audit: type=1326 audit(1740429652.905:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4661d169 code=0x7ffc0000 [ 47.935172][ T4557] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 47.940525][ T29] audit: type=1326 audit(1740429652.905:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4661d169 code=0x7ffc0000 [ 47.970558][ T29] audit: type=1326 audit(1740429652.915:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fbc4661d169 code=0x7ffc0000 [ 47.994216][ T29] audit: type=1326 audit(1740429652.915:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4558 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbc4664fa25 code=0x7ffc0000 [ 48.017722][ T29] audit: type=1326 audit(1740429652.915:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4661d169 code=0x7ffc0000 [ 48.041042][ T29] audit: type=1326 audit(1740429652.915:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc4661d169 code=0x7ffc0000 [ 48.154962][ T29] audit: type=1326 audit(1740429652.945:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4554 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbc4661d169 code=0x7ffc0000 [ 48.436498][ T3302] ================================================================== [ 48.444612][ T3302] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 48.451308][ T3302] [ 48.453619][ T3302] write to 0xffff888106a239d0 of 8 bytes by task 3297 on cpu 1: [ 48.461240][ T3302] __dentry_kill+0x13e/0x4c0 [ 48.465838][ T3302] dput+0x5c/0xd0 [ 48.469468][ T3302] __fput+0x428/0x640 [ 48.473446][ T3302] __fput_sync+0x96/0xc0 [ 48.477679][ T3302] __x64_sys_close+0x55/0xe0 [ 48.482265][ T3302] x64_sys_call+0x266c/0x2dc0 [ 48.486939][ T3302] do_syscall_64+0xc9/0x1c0 [ 48.491446][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.497346][ T3302] [ 48.499669][ T3302] read to 0xffff888106a239d0 of 8 bytes by task 3302 on cpu 0: [ 48.507201][ T3302] fast_dput+0x65/0x2c0 [ 48.511357][ T3302] dput+0x24/0xd0 [ 48.514996][ T3302] __fput+0x428/0x640 [ 48.519000][ T3302] __fput_sync+0x96/0xc0 [ 48.523235][ T3302] __x64_sys_close+0x55/0xe0 [ 48.527824][ T3302] x64_sys_call+0x266c/0x2dc0 [ 48.532509][ T3302] do_syscall_64+0xc9/0x1c0 [ 48.537017][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.542911][ T3302] [ 48.545229][ T3302] value changed: 0xffff888237b337c8 -> 0x0000000000000000 [ 48.552329][ T3302] [ 48.554647][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 48.560791][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Tainted: G W 6.14.0-rc4-syzkaller #0 [ 48.571376][ T3302] Tainted: [W]=WARN [ 48.575173][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 48.585223][ T3302] ================================================================== [ 52.595165][ T3302] ================================================================== [ 52.603279][ T3302] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 52.609967][ T3302] [ 52.612272][ T3302] write to 0xffff8881069b9850 of 8 bytes by task 3297 on cpu 1: [ 52.619880][ T3302] __dentry_kill+0x13e/0x4c0 [ 52.624456][ T3302] dput+0x5c/0xd0 [ 52.628077][ T3302] __fput+0x428/0x640 [ 52.632035][ T3302] __fput_sync+0x96/0xc0 [ 52.636256][ T3302] __x64_sys_close+0x55/0xe0 [ 52.640826][ T3302] x64_sys_call+0x266c/0x2dc0 [ 52.645488][ T3302] do_syscall_64+0xc9/0x1c0 [ 52.649982][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.655855][ T3302] [ 52.658157][ T3302] read to 0xffff8881069b9850 of 8 bytes by task 3302 on cpu 0: [ 52.665677][ T3302] fast_dput+0x65/0x2c0 [ 52.669814][ T3302] dput+0x24/0xd0 [ 52.673453][ T3302] do_unlinkat+0x258/0x4d0 [ 52.677853][ T3302] __x64_sys_unlink+0x2e/0x40 [ 52.682518][ T3302] x64_sys_call+0x2329/0x2dc0 [ 52.687188][ T3302] do_syscall_64+0xc9/0x1c0 [ 52.691680][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.697551][ T3302] [ 52.699854][ T3302] value changed: 0xffff888237b337c8 -> 0x0000000000000000 [ 52.706934][ T3302] [ 52.709234][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 52.715367][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Tainted: G W 6.14.0-rc4-syzkaller #0 [ 52.725932][ T3302] Tainted: [W]=WARN [ 52.729711][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 52.739748][ T3302] ================================================================== [ 53.637604][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.874454][ T3298] ================================================================== [ 55.882568][ T3298] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 55.889272][ T3298] [ 55.891586][ T3298] write to 0xffff88811d4a4a90 of 8 bytes by task 3297 on cpu 0: [ 55.899205][ T3298] __dentry_kill+0x13e/0x4c0 [ 55.903803][ T3298] dput+0x5c/0xd0 [ 55.907440][ T3298] __fput+0x428/0x640 [ 55.911416][ T3298] __fput_sync+0x96/0xc0 [ 55.915650][ T3298] __x64_sys_close+0x55/0xe0 [ 55.920261][ T3298] x64_sys_call+0x266c/0x2dc0 [ 55.924943][ T3298] do_syscall_64+0xc9/0x1c0 [ 55.929450][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.935341][ T3298] [ 55.937657][ T3298] read to 0xffff88811d4a4a90 of 8 bytes by task 3298 on cpu 1: [ 55.945194][ T3298] fast_dput+0x65/0x2c0 [ 55.949356][ T3298] dput+0x24/0xd0 [ 55.952989][ T3298] __fput+0x428/0x640 [ 55.956973][ T3298] __fput_sync+0x96/0xc0 [ 55.961206][ T3298] __x64_sys_close+0x55/0xe0 [ 55.965790][ T3298] x64_sys_call+0x266c/0x2dc0 [ 55.970472][ T3298] do_syscall_64+0xc9/0x1c0 [ 55.974980][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.980867][ T3298] [ 55.983177][ T3298] value changed: 0xffff888237b337c8 -> 0x0000000000000000 [ 55.990268][ T3298] [ 55.992585][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 55.998729][ T3298] CPU: 1 UID: 0 PID: 3298 Comm: syz-executor Tainted: G W 6.14.0-rc4-syzkaller #0 [ 56.009321][ T3298] Tainted: [W]=WARN [ 56.013115][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 56.023158][ T3298] ================================================================== [ 58.405561][ T3297] ================================================================== [ 58.413661][ T3297] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 58.420546][ T3297] [ 58.422865][ T3297] read-write to 0xffff88811d5e66c0 of 4 bytes by task 3298 on cpu 1: [ 58.430942][ T3297] __dentry_kill+0x22e/0x4c0 [ 58.435555][ T3297] dput+0x5c/0xd0 [ 58.439205][ T3297] do_unlinkat+0x258/0x4d0 [ 58.443635][ T3297] __x64_sys_unlink+0x2e/0x40 [ 58.448318][ T3297] x64_sys_call+0x2329/0x2dc0