last executing test programs: 8.637258291s ago: executing program 3 (id=12): r0 = semget$private(0x0, 0x7, 0x3c0) semop(r0, &(0x7f0000000200)=[{0x2, 0xfffe}, {0x4, 0x0, 0x1800}, {0x5, 0xfc01, 0x1800}], 0x3) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x60aa00, 0x0) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r3}, 0x18) process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 7.834978647s ago: executing program 3 (id=25): r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe000000ffffa88808000f00fd000000", 0x85) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) dup3(r2, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000002c40)={0x14, r7, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) r8 = syz_open_procfs$userns(r1, &(0x7f0000000000)) setns(r8, 0x10000000) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) sendmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x1, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) read(r5, &(0x7f0000002340)=""/232, 0xe8) 7.744511009s ago: executing program 3 (id=28): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 7.65747023s ago: executing program 3 (id=30): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) eventfd2(0x9, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000bc0)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa467", 0xb1, 0x52, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x5}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x6e20, 0xb, @empty, 0xfffffffd}, {0xa, 0x4e23, 0x2, @local}, r7, 0xfffffe4d}}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 6.993015463s ago: executing program 3 (id=39): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff"], 0x0}, 0x94) write$tun(r0, &(0x7f00000003c0)=ANY=[], 0xdc) 5.776885227s ago: executing program 3 (id=59): getpid() setns(0xffffffffffffffff, 0x10000000) 5.776715757s ago: executing program 32 (id=59): getpid() setns(0xffffffffffffffff, 0x10000000) 2.692754017s ago: executing program 1 (id=91): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.611163329s ago: executing program 0 (id=94): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r2, &(0x7f00000001c0)='GPL\x00', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.350764324s ago: executing program 1 (id=95): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000940)=0x707987cd) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) 2.323757714s ago: executing program 1 (id=96): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1000040, &(0x7f0000000000)={[{@errors_remount}]}, 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x2) write$snapshot(r0, &(0x7f0000000180)='3', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x4) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x18100, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)="390000001400818c0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) prctl$PR_GET_UNALIGN(0x5, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095000000000000000c74a139"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$inet6(0xa, 0x0, 0xff) socket$key(0xf, 0x3, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r10, &(0x7f0000000380)={0xa, 0x4e22, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x12}, 0x4}, 0x1c) write$tun(0xffffffffffffffff, 0x0, 0x46) 2.279650665s ago: executing program 2 (id=97): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$FIOCLEX(r0, 0x5451) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) dup3(r2, r0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x4, "8100e1c8e80b598c36ff000800"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) setreuid(0x0, 0x0) 2.180988467s ago: executing program 5 (id=98): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x8006d89, 0x400, 0x2, 0x66}, &(0x7f0000000400)=0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc1}, &(0x7f0000000300)={0x0, "2e7a2333ce74f6fa9f991d6d5c2910b0b2a7c8038b7cac484bfe1c7853e5f91473d09769c084d9616db460d2c237a70899e9387438fd97ab1702b991dffc40de", 0x36}, 0x48, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x7f, 0x2, 0x800, 0x59}) eventfd(0xe74b6ba1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000"], 0x50) 2.124544548s ago: executing program 2 (id=99): pipe(0x0) r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e30", 0x3, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r4], 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b000000050000000500000009"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x1, 0x644, &(0x7f00000012c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f00000008c0)='-0', 0x2) syz_io_uring_setup(0x17dc, &(0x7f0000000100)={0x0, 0x92ac, 0x0, 0x1004, 0x5cc}, &(0x7f0000000300), 0x0) syz_clone(0x40ac8000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.02673304s ago: executing program 1 (id=100): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x7, 0x40, 0xee, 0x8, {{0xa, 0x4, 0x3, 0x1f, 0x28, 0x67, 0x0, 0xab, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@timestamp={0x44, 0x10, 0x95, 0x0, 0x7, [0x9, 0xa, 0xe2a]}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = open(0x0, 0x60840, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYBLOB="000426bd7000fedbdf2567000000080001002c00000008000300", @ANYRES32=r10, @ANYBLOB="aa00c50066f8a7755f4b6ab3d6a986d832acd6f064a8e26d17e0dc9712ebceaf70274474add672fd7ab2dd7280cd3c899241c28f375b40600f824d2553edbee5728e1f6b14116b246453e403810725ba94e4c8dc123382566fe5a1a2a543fad9e34d97a029377bb7479efa4a3310ec3526c818851a66d5c92c3a90031c4bbb2a5a30916d985fd2316b113dee58a75365988857c2fd87209c9d0715f5418cc2559a98de16ad508e2ee6990000"], 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x20004880) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000001880)=ANY=[@ANYBLOB="7c0b008c", @ANYRES16=r5, @ANYBLOB="000225bd7000fedbdf258300000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0xb7c}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) recvmmsg(r4, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000100)={@mcast2, r3}, 0x14) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000004c0)={[{@check_relaxed}, {@uid}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@block={'block', 0x3d, 0x200}}, {@gid}, {@map_acorn}, {@map_normal}, {@overriderock}, {@nojoliet}, {@map_off}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x2, 0xa1a, &(0x7f0000000e40)="$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") 1.995725921s ago: executing program 5 (id=101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x1, 0x0, 0x0, 0x0, 0x100, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="04000000fbff03000000050000", @ANYRES64=r0, @ANYRES32=r0, @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) perf_event_open(&(0x7f0000000740)={0x0, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0xfff}, 0x100042, 0x10000, 0x8, 0x9, 0x8, 0x401, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r1, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000200)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000400)={0x800000, 0x880, 0x7, 0x241, 0x8001, 0x800004}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="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", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsmount(0xffffffffffffffff, 0x0, 0x70) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r7, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r8 = syz_open_pts(r7, 0x900) r9 = dup3(r8, r7, 0x80000) read(r9, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r9, &(0x7f0000001d40)=""/4079, 0xfdef) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r10, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4) sendmmsg$inet(r10, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5c6bad", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="9969", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)='r', 0x1}], 0x1}}], 0x3, 0x40001) 1.795485335s ago: executing program 0 (id=102): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 1.599164968s ago: executing program 0 (id=105): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.50448182s ago: executing program 5 (id=109): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) 1.431522212s ago: executing program 0 (id=111): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000000340)={&(0x7f0000000300), 0x0}) 1.378999332s ago: executing program 4 (id=112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000780)={0x28, 0x0, 0xffffffff, @host}, 0x10) 1.320715074s ago: executing program 4 (id=113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r2, &(0x7f00000001c0)='GPL\x00', 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1.318809204s ago: executing program 5 (id=114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000080000000000000003000000180600000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4a241, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8, 0x0, 0x401}, 0x18) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r9}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r6) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1.295383934s ago: executing program 2 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b000000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) (fail_nth: 3) 948.285081ms ago: executing program 1 (id=116): syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 855.588723ms ago: executing program 2 (id=117): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 852.630123ms ago: executing program 1 (id=118): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x1, 0x5, 0x20, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x80030, 0x2, 0x8, 0x0, 0x9, 0x0, 0x9, 0x0, 0x10000, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r2 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r6, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x2000000) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x709}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r2, 0x0, 0x200000}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r1}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) 836.750023ms ago: executing program 2 (id=119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b000000"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 799.850514ms ago: executing program 4 (id=120): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x3) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000380)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x400c040) 603.511837ms ago: executing program 4 (id=121): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f00000004c0), &(0x7f0000001c40)=r1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) utimensat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000680), 0x100) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000", 0x17}], 0x1}, 0x4058880) ioctl$TCFLSH(r3, 0x5608, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) 588.132338ms ago: executing program 2 (id=122): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmsg(0xffffffffffffffff, 0x0, 0x10000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x3, 0x1, 0x0, 0x2, 0x5}}) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) r4 = socket$inet6(0xa, 0x2, 0x1) getsockopt$inet6_opts(r4, 0x29, 0x2, 0x0, &(0x7f0000000740)) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000400)="ba7f", 0x2}], 0x9}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0), &(0x7f0000000100)=0x8) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6000a81300142c00fe80000000000000000000bbfe80001000000000000000000000b0a2d9ea00aa3a000033"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\a\x00'], 0x48) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000c3000000f10000009500000c00000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10}, 0x94) 544.321619ms ago: executing program 0 (id=123): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000500)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0xfd, 0x0}}, @in6={0xa, 0x4e24, 0x8000, @rand_addr=' \x01\x00', 0x200}, @in6={0xa, 0x4e23, 0xfffffff6, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e23, @rand_addr=0x64010100}], 0x68) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1082302, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb08"], 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="940000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000020e814d6497699cde458addc78e052c34fb31abb4c782270b702c18f5ddeb7e240c2f34e014b76b82b28c9994b79162d6a442fea53259a0f880b227d04ba7128a044084711f1e692ba46524a7725a18ad95f10ac8674cc73ebdc9374532bc1"], 0x94}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) recvmsg(r6, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1018ed8, &(0x7f0000000640)={[{@sysvgroups}, {@noload}, {@data_err_ignore}, {}, {}, {@norecovery}, {@commit={'commit', 0x3d, 0x8000}}, {@quota}], [{@hash}, {@fsname={'fsname', 0x3d, 'security.capability\x00'}}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x180b059, 0x0, 0xff, 0xfffffe04, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x7, 0x84000) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 344.355913ms ago: executing program 5 (id=124): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/13], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000280)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r1, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)}, 0x20) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xb, &(0x7f0000000040)=ANY=[@ANYRESDEC=r3], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2000000000000258, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x102012, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r0}, 0x18) r6 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") r7 = fspick(r6, &(0x7f0000000300)='./file2\x00', 0x1) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000680)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '\xde\x10I\xbd\x7f\x92*7\x03\xc4~ \x9fG\xa0~/\x102\xa3_`\x7f]\xaeHH\x8c#\x95\x92)\xbe\x98\xc7\xc2\xdf\xc7\xddP\xa2\xc5r\xb7\xde\f\xd8\xc4q\xa7\x05\x88\xf5[\x17\xe2\x95\x95h\x8f\x81)\xa4\x13\xb5\xed\x92%\xc2\xe0qx\xb4\xfbh\xcc\xf0\xeb\x8dw\xb4\xb4\x14\xc7]\x1d\xaa\xe9N\x1a\xad\x1d?\xf0\x84\xdc\xbf\x1cY\x1c\x94\x98\xbd\xe4M\x05W\xde\x11\xec\xa15\xaf\x11\xa0\xde\x1d+\x10~k\x99;G*S\xf8\xa3\x05\xd1\x1d8\xc8\xdbC\xb4\xce\xf2\xea=\xd3\xf1\x84\xc0P0i\xdf4>\x12\x96o+\x1b\xbd\xed\xd8\"a\xb1\x8d\xf8\x05\x14c\x1f\x8a\xdaPGG\xd5\xdf\xf9\xda\xccZbF\x84', 0x3a, './file2', 0x3a, [0x46]}, 0xe7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff64000200475486dd", 0xe, 0x0, &(0x7f0000000140), 0x14) r9 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x20) getdents(r9, &(0x7f000001fc00)=""/179, 0xb3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1100000007000000190700000200000020b50000", @ANYRES32=r5, @ANYBLOB='@\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="00000000000000000000000008f2e450e677c674", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x50) socket$inet6(0xa, 0x1, 0x8010000000000084) 148.343796ms ago: executing program 0 (id=125): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) eventfd2(0x9, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000bc0)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) sendfile(r3, r0, 0x0, 0x3ffff) sendfile(r3, r0, 0x0, 0x7ffff000) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa467", 0xb1, 0x52, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x5}, 0x0) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x6e20, 0xb, @empty, 0xfffffffd}, {0xa, 0x4e23, 0x2, @local}, r7, 0xfffffe4d}}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 131.603637ms ago: executing program 4 (id=126): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, 0x0, 0x603f) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) 1.667639ms ago: executing program 5 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r5, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x85) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0x5}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r6, 0x4000, r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020200020300000000000000000000000100080000000000e6ad76b3fbd2833209da5ada64866ec5bf7a02a305589973a7024a5c925987e55096abfd383733dff9cd85ba0fc9a76d231e8f533c0332ff27d9efdf599292c1d56ee70177f236c6b214259073e32aec67141360f5ed2e18b976d9e0026ff7585f34b531cb17a935a62094382ab321419ceaf67258"], 0x18}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r11 = dup2(r10, r10) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r11, 0x1276, 0x0) 0s ago: executing program 4 (id=128): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18000, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES32, @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec00000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b37a120", @ANYRESOCT], 0x8, 0x2f6, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000100)="ecb2d5cbde8069324a04ca01b564d6b0dafbcf2fc2fbb11384b275b4b420dd601be6fcccfb2bea1c47a8277ec8f9636facd89adfa62753b700650d5680", &(0x7f0000001d00)=""/4096}, 0x20) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0xfd, 0x648, &(0x7f0000002280)="$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") r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x3) r11 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r11, 0x1, 0x23, 0x0, &(0x7f0000002640)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000010180)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x1, 0x4, 0x4, {0x3, 0x0, 0x101, 0x9, 0x5, 0x2}, {0x3, 0x1, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x100000, 0x2, 0x8, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0xffffffff, 0x1, 0x3, 0xffffffda, 0x8, 0x2, 0x76ccfa5f, 0x5, 0x8, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x3, 0x9, 0x2, 0xc, 0x1, 0x8, 0x7, 0x4, 0x8, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xffffff01, 0x1, 0x80, 0xa9, 0x7f, 0x84, 0x6, 0x637, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x40007, 0xab5, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1eb, 0x7, 0xd43, 0x9, 0x6, 0x7, 0x7, 0x4, 0x4, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x3, 0xaa2, 0x400, 0x40, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x7, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x7ff, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x10000000, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x6, 0x1ff, 0x1ff, 0x8, 0x2, 0x5, 0xffffffff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x9, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0x2, 0x8, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x0, 0x1, 0x1, 0xd0c0, 0xfffff33c, 0xc974, 0x3, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x9, 0x24c, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0xffffffe4, 0x9, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0x10000, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x103, 0xa, 0x6, 0x3, 0xf, 0x1, 0x9, 0x9, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x104, 0xa27d, 0x9, 0x9, 0x0, 0x81, 0x4, 0x7f8000, 0x9, 0x0, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x401, 0x40, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x490}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r7, 0x40089413, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYBLOB="302b6eff52a55a9c3ff89c5391ed0178b7d6df01911c727d8c7a8d340a26ff2cb8921987aab69a1fb47fa5edf3bee3d2ca09657d8f2cc07be31fc642150b9ef2713becedbcc15cb8f783369416847ab9e77cd53f9026e0c77fe6f2fbff2b1a332c4344eb249088cd52895b0e1a309825e5cf51c5cbe8a460cbe94538496111b394f5dc09b64e9dbd25085e14659cd3203fd7c10cb02800b7360fd3d69ca5eabca7c397a554c715df475d5dd4820a47", @ANYRES16=r7, @ANYRES64=r7, @ANYRESOCT, @ANYRES16=r6, @ANYBLOB="0ffe05", @ANYRES8, @ANYBLOB="e8fa88e70da1b9c76cfaf3d80659ae68eb29563234049e665da79cebc620be16778776225013943b37faa22e2cf1c8182f9f145839b2c310bbb276b81cf5e8f79bbcdaca26dc11e2aac8f915fd6f248216e714865dc635d6f0f3b375b0dbba056bdf18a7f200de6a9e995dca5fa8beda1ef93e1a9b241640634e6a6687d44c4cb189bcdfa08b86714d70495d799a713d0b284c17e515c6f31fb7427d327feaf324", @ANYBLOB="8e992400028447ab6903d457b10100c104a0b14ac8f07d96cff44ef48944010165fbcfdd", @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e745", @ANYRESDEC=r8, @ANYRESOCT, @ANYBLOB='\b', @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="080004", @ANYRES16=r9], 0x94, 0x1) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000400, r8, &(0x7f0000000040)) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): =process permissive=1 [ 17.992869][ T29] audit: type=1400 audit(1757071560.501:61): avc: denied { siginh } for pid=3182 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 25.241163][ T29] audit: type=1400 audit(1757071567.761:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.241989][ T3293] cgroup: Unknown subsys name 'net' [ 25.263895][ T29] audit: type=1400 audit(1757071567.761:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.291186][ T29] audit: type=1400 audit(1757071567.791:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.469031][ T3293] cgroup: Unknown subsys name 'cpuset' [ 25.475129][ T3293] cgroup: Unknown subsys name 'rlimit' [ 25.593719][ T29] audit: type=1400 audit(1757071568.111:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.616938][ T29] audit: type=1400 audit(1757071568.111:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.632327][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.637381][ T29] audit: type=1400 audit(1757071568.111:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.666212][ T29] audit: type=1400 audit(1757071568.111:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.686447][ T29] audit: type=1400 audit(1757071568.121:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.711192][ T29] audit: type=1400 audit(1757071568.121:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.719459][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.734526][ T29] audit: type=1400 audit(1757071568.161:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.615493][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.647341][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.660812][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.692430][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 27.742201][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.749406][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.757061][ T3303] bridge_slave_0: entered allmulticast mode [ 27.763573][ T3303] bridge_slave_0: entered promiscuous mode [ 27.788358][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.795427][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.802601][ T3303] bridge_slave_1: entered allmulticast mode [ 27.809107][ T3303] bridge_slave_1: entered promiscuous mode [ 27.819367][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.826391][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.833695][ T3305] bridge_slave_0: entered allmulticast mode [ 27.840067][ T3305] bridge_slave_0: entered promiscuous mode [ 27.860181][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.867204][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.874273][ T3313] bridge_slave_0: entered allmulticast mode [ 27.880651][ T3313] bridge_slave_0: entered promiscuous mode [ 27.886947][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.894009][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.901788][ T3305] bridge_slave_1: entered allmulticast mode [ 27.908040][ T3305] bridge_slave_1: entered promiscuous mode [ 27.926369][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.933425][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.940586][ T3308] bridge_slave_0: entered allmulticast mode [ 27.946820][ T3308] bridge_slave_0: entered promiscuous mode [ 27.957363][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.964414][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.971570][ T3313] bridge_slave_1: entered allmulticast mode [ 27.977812][ T3313] bridge_slave_1: entered promiscuous mode [ 27.995458][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.004576][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.011630][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.018853][ T3308] bridge_slave_1: entered allmulticast mode [ 28.025183][ T3308] bridge_slave_1: entered promiscuous mode [ 28.032182][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.042379][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.055554][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.064980][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.095076][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.109695][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.125957][ T3303] team0: Port device team_slave_0 added [ 28.132701][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.146916][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.156575][ T3305] team0: Port device team_slave_0 added [ 28.167608][ T3303] team0: Port device team_slave_1 added [ 28.178911][ T3305] team0: Port device team_slave_1 added [ 28.204013][ T3313] team0: Port device team_slave_0 added [ 28.210291][ T3313] team0: Port device team_slave_1 added [ 28.237064][ T3308] team0: Port device team_slave_0 added [ 28.244573][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.251535][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.277458][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.288266][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.295287][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.321228][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.337589][ T3308] team0: Port device team_slave_1 added [ 28.347719][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.354663][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.380545][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.392430][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.399394][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.425367][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.436318][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.443286][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.469193][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.489090][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.496131][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.503380][ T3311] bridge_slave_0: entered allmulticast mode [ 28.509959][ T3311] bridge_slave_0: entered promiscuous mode [ 28.521126][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.528090][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.554039][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.569075][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.576193][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.583290][ T3311] bridge_slave_1: entered allmulticast mode [ 28.589624][ T3311] bridge_slave_1: entered promiscuous mode [ 28.609447][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.616377][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.642318][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.663541][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.673985][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.687462][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.694457][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.720437][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.745930][ T3303] hsr_slave_0: entered promiscuous mode [ 28.751799][ T3303] hsr_slave_1: entered promiscuous mode [ 28.769952][ T3305] hsr_slave_0: entered promiscuous mode [ 28.775834][ T3305] hsr_slave_1: entered promiscuous mode [ 28.781828][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 28.787535][ T3305] Cannot create hsr debugfs directory [ 28.801546][ T3311] team0: Port device team_slave_0 added [ 28.807935][ T3311] team0: Port device team_slave_1 added [ 28.837868][ T3313] hsr_slave_0: entered promiscuous mode [ 28.843795][ T3313] hsr_slave_1: entered promiscuous mode [ 28.849552][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.855255][ T3313] Cannot create hsr debugfs directory [ 28.862669][ T3308] hsr_slave_0: entered promiscuous mode [ 28.868554][ T3308] hsr_slave_1: entered promiscuous mode [ 28.874236][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 28.879998][ T3308] Cannot create hsr debugfs directory [ 28.907736][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.914712][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.940610][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.951717][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.958718][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.984686][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.063025][ T3311] hsr_slave_0: entered promiscuous mode [ 29.069150][ T3311] hsr_slave_1: entered promiscuous mode [ 29.074860][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 29.080617][ T3311] Cannot create hsr debugfs directory [ 29.190776][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.201402][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.211904][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.220077][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.246375][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.262815][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.273444][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.287467][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.302945][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.313755][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.322440][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.330887][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.364781][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.385102][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.393454][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.402620][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.426356][ T3308] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.435986][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.446660][ T3308] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.461905][ T3308] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.470474][ T3308] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.483473][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.501627][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.513378][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.530150][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.537225][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.546582][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.553681][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.563178][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.571346][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.587942][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.594997][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.603986][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.611007][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.623158][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.630243][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.642858][ T1752] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.649904][ T1752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.673447][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.714004][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.729629][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.736736][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.749967][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.760330][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.784660][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.791888][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.804890][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.834559][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.846772][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.866182][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.889123][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.896236][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.905528][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.912583][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.951359][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.959142][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.969503][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.007516][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.074232][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.084374][ T3313] veth0_vlan: entered promiscuous mode [ 30.108388][ T3313] veth1_vlan: entered promiscuous mode [ 30.118310][ T3303] veth0_vlan: entered promiscuous mode [ 30.137552][ T3303] veth1_vlan: entered promiscuous mode [ 30.169896][ T3313] veth0_macvtap: entered promiscuous mode [ 30.181355][ T3303] veth0_macvtap: entered promiscuous mode [ 30.188287][ T3303] veth1_macvtap: entered promiscuous mode [ 30.202086][ T3313] veth1_macvtap: entered promiscuous mode [ 30.217524][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.225170][ T3305] veth0_vlan: entered promiscuous mode [ 30.240981][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.253390][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.261905][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.271650][ T3305] veth1_vlan: entered promiscuous mode [ 30.283216][ T3308] veth0_vlan: entered promiscuous mode [ 30.291390][ T3311] veth0_vlan: entered promiscuous mode [ 30.297114][ T3308] veth1_vlan: entered promiscuous mode [ 30.313230][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.329882][ T3311] veth1_vlan: entered promiscuous mode [ 30.337887][ T3308] veth0_macvtap: entered promiscuous mode [ 30.345790][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.355016][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.371750][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.383142][ T3308] veth1_macvtap: entered promiscuous mode [ 30.390163][ T3305] veth0_macvtap: entered promiscuous mode [ 30.397641][ T3305] veth1_macvtap: entered promiscuous mode [ 30.405157][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.413895][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.426490][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.426501][ T29] audit: type=1400 audit(1757071572.941:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.J6RJAY/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.427055][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.437178][ T29] audit: type=1400 audit(1757071572.951:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.458766][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.464052][ T29] audit: type=1400 audit(1757071572.951:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.J6RJAY/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.518143][ T29] audit: type=1400 audit(1757071572.951:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.539888][ T29] audit: type=1400 audit(1757071572.951:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.J6RJAY/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.566377][ T29] audit: type=1400 audit(1757071572.951:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.J6RJAY/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.593657][ T29] audit: type=1400 audit(1757071572.951:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.614850][ T29] audit: type=1400 audit(1757071573.131:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.637590][ T29] audit: type=1400 audit(1757071573.131:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.663680][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.663921][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.685703][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.703364][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.715738][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.723100][ T29] audit: type=1400 audit(1757071573.231:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.752098][ T3311] veth0_macvtap: entered promiscuous mode [ 30.768999][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.784889][ T3311] veth1_macvtap: entered promiscuous mode [ 30.803934][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.832552][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.844767][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.855032][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.878755][ T3475] loop1: detected capacity change from 0 to 128 [ 30.886083][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.933174][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.964315][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.977200][ T3489] syz.1.2: attempt to access beyond end of device [ 30.977200][ T3489] loop1: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 30.984271][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.026357][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.036516][ T3491] loop0: detected capacity change from 0 to 736 [ 31.043123][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.068185][ T3489] syz.1.2: attempt to access beyond end of device [ 31.068185][ T3489] loop1: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 31.086841][ T3489] syz.1.2: attempt to access beyond end of device [ 31.086841][ T3489] loop1: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 31.094901][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.107757][ T3501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.119816][ T3502] syz.4.9 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.127818][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.138860][ T3502] netlink: 'syz.4.9': attribute type 10 has an invalid length. [ 31.146416][ T3502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9'. [ 31.166666][ T3501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.175604][ T3489] syz.1.2: attempt to access beyond end of device [ 31.175604][ T3489] loop1: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 31.182380][ T3502] batman_adv: batadv0: Adding interface: veth1_vlan [ 31.190635][ T3489] syz.1.2: attempt to access beyond end of device [ 31.190635][ T3489] loop1: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 31.195375][ T3502] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.195617][ T3502] batman_adv: batadv0: Interface activated: veth1_vlan [ 31.208885][ T3489] syz.1.2: attempt to access beyond end of device [ 31.208885][ T3489] loop1: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 31.255779][ T3489] syz.1.2: attempt to access beyond end of device [ 31.255779][ T3489] loop1: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 31.269348][ T3489] syz.1.2: attempt to access beyond end of device [ 31.269348][ T3489] loop1: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 31.282851][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.305044][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 31.307988][ T3491] netlink: 'syz.0.7': attribute type 2 has an invalid length. [ 31.321448][ T3491] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 31.356035][ T3489] syz.1.2: attempt to access beyond end of device [ 31.356035][ T3489] loop1: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 31.368582][ T3491] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 31.370962][ T3489] syz.1.2: attempt to access beyond end of device [ 31.370962][ T3489] loop1: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 31.478929][ T3518] syz_tun: entered allmulticast mode [ 31.510582][ T3518] syz_tun: left allmulticast mode [ 31.511054][ T3522] loop1: detected capacity change from 0 to 1024 [ 31.536821][ T3522] ======================================================= [ 31.536821][ T3522] WARNING: The mand mount option has been deprecated and [ 31.536821][ T3522] and is ignored by this kernel. Remove the mand [ 31.536821][ T3522] option from the mount to silence this warning. [ 31.536821][ T3522] ======================================================= [ 31.616985][ T3522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.632882][ T3506] capability: warning: `syz.2.11' uses 32-bit capabilities (legacy support in use) [ 31.675781][ T3531] loop0: detected capacity change from 0 to 1024 [ 31.680153][ T3522] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.694825][ T3531] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 31.705810][ T3531] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 31.720494][ T3531] JBD2: no valid journal superblock found [ 31.726215][ T3531] EXT4-fs (loop0): Could not load journal inode [ 31.733388][ T3522] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.15: lblock 0 mapped to illegal pblock 0 (length 1) [ 31.746854][ T3522] EXT4-fs (loop1): Remounting filesystem read-only [ 31.788355][ T3536] loop4: detected capacity change from 0 to 1764 [ 31.808706][ T3536] ISOFS: Unable to identify CD-ROM format. [ 31.841763][ C0] hrtimer: interrupt took 57699 ns [ 31.966808][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.121528][ T3548] loop1: detected capacity change from 0 to 8192 [ 32.134813][ T3550] SELinux: failed to load policy [ 32.224616][ T3559] loop0: detected capacity change from 0 to 1024 [ 32.254113][ T3559] EXT4-fs: Ignoring removed orlov option [ 32.273001][ T3563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 32.295299][ T3559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.380515][ T3568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 32.396783][ T3570] loop3: detected capacity change from 0 to 1024 [ 32.431272][ T3570] EXT4-fs: Ignoring removed orlov option [ 32.517513][ T3570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.554071][ T3578] loop1: detected capacity change from 0 to 1024 [ 32.627557][ T3571] syz.0.24 (3571) used greatest stack depth: 10736 bytes left [ 32.638174][ T3579] loop4: detected capacity change from 0 to 8192 [ 32.669012][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.681073][ T3578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.693526][ T3578] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.711310][ T3588] FAULT_INJECTION: forcing a failure. [ 32.711310][ T3588] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.724431][ T3588] CPU: 1 UID: 0 PID: 3588 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.724465][ T3588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 32.724478][ T3588] Call Trace: [ 32.724483][ T3588] [ 32.724491][ T3588] __dump_stack+0x1d/0x30 [ 32.724513][ T3588] dump_stack_lvl+0xe8/0x140 [ 32.724533][ T3588] dump_stack+0x15/0x1b [ 32.724604][ T3588] should_fail_ex+0x265/0x280 [ 32.724625][ T3588] should_fail+0xb/0x20 [ 32.724643][ T3588] should_fail_usercopy+0x1a/0x20 [ 32.724667][ T3588] strncpy_from_user+0x25/0x230 [ 32.724768][ T3588] strncpy_from_user_nofault+0x68/0xf0 [ 32.724795][ T3588] bpf_probe_read_compat_str+0xb4/0x130 [ 32.724831][ T3588] bpf_prog_e42f6260c1b72fb3+0x3e/0x44 [ 32.724853][ T3588] bpf_trace_run3+0x10c/0x1d0 [ 32.724926][ T3588] ? security_file_free+0x61/0xa0 [ 32.724961][ T3588] ? security_file_free+0x61/0xa0 [ 32.724993][ T3588] __traceiter_kmem_cache_free+0x35/0x60 [ 32.725064][ T3588] ? security_file_free+0x61/0xa0 [ 32.725104][ T3588] kmem_cache_free+0x257/0x300 [ 32.725213][ T3588] security_file_free+0x61/0xa0 [ 32.725240][ T3588] __fput+0x478/0x650 [ 32.725340][ T3588] ____fput+0x1c/0x30 [ 32.725364][ T3588] task_work_run+0x131/0x1a0 [ 32.725385][ T3588] exit_to_user_mode_loop+0xe4/0x100 [ 32.725404][ T3588] do_syscall_64+0x1d6/0x200 [ 32.725497][ T3588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.725517][ T3588] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 32.725539][ T3588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.725591][ T3588] RIP: 0033:0x7fa94086ebe9 [ 32.725604][ T3588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.725617][ T3588] RSP: 002b:00007fa93f2cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 32.725639][ T3588] RAX: 0000000000000000 RBX: 00007fa940aa5fa0 RCX: 00007fa94086ebe9 [ 32.725648][ T3588] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 32.725658][ T3588] RBP: 00007fa93f2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 32.725667][ T3588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.725676][ T3588] R13: 00007fa940aa6038 R14: 00007fa940aa5fa0 R15: 00007ffdb3f92d98 [ 32.725708][ T3588] [ 32.737568][ T3578] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.32: lblock 0 mapped to illegal pblock 0 (length 1) [ 32.970275][ T3578] EXT4-fs (loop1): Remounting filesystem read-only [ 32.977686][ T3591] loop2: detected capacity change from 0 to 2048 [ 33.012775][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.037475][ T3311] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 33.099319][ T3311] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 33.116120][ T3601] delete_channel: no stack [ 33.128861][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.234281][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.242425][ T3616] loop1: detected capacity change from 0 to 1024 [ 33.253999][ T3616] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 33.264972][ T3616] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 33.313360][ T3616] JBD2: no valid journal superblock found [ 33.319231][ T3616] EXT4-fs (loop1): Could not load journal inode [ 33.350480][ T3600] loop0: detected capacity change from 0 to 2048 [ 33.399302][ T3600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 33.634254][ T3600] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 33.649417][ T3600] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 600 with error 28 [ 33.661808][ T3600] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.661808][ T3600] [ 33.671486][ T3600] EXT4-fs (loop0): Total free blocks count 0 [ 33.677507][ T3600] EXT4-fs (loop0): Free/Dirty block details [ 33.683476][ T3600] EXT4-fs (loop0): free_blocks=2415919104 [ 33.689222][ T3600] EXT4-fs (loop0): dirty_blocks=608 [ 33.694417][ T3600] EXT4-fs (loop0): Block reservation details [ 33.700478][ T3600] EXT4-fs (loop0): i_reserved_data_blocks=38 [ 33.710104][ T3637] loop2: detected capacity change from 0 to 128 [ 33.782541][ T3643] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.819627][ T51] Buffer I/O error on dev loop2, logical block 320, lost async page write [ 33.829606][ T3600] syz.0.36 (3600) used greatest stack depth: 10120 bytes left [ 33.840379][ T3646] netlink: 'syz.1.51': attribute type 13 has an invalid length. [ 33.854811][ T3643] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.887549][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 33.935354][ T3646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 33.956579][ T3643] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.967755][ T3658] syz_tun: entered allmulticast mode [ 33.978320][ T3648] syz_tun: left allmulticast mode [ 34.003864][ T3643] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.021266][ T3665] FAULT_INJECTION: forcing a failure. [ 34.021266][ T3665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.034477][ T3665] CPU: 1 UID: 0 PID: 3665 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.034505][ T3665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 34.034518][ T3665] Call Trace: [ 34.034524][ T3665] [ 34.034610][ T3665] __dump_stack+0x1d/0x30 [ 34.034686][ T3665] dump_stack_lvl+0xe8/0x140 [ 34.034706][ T3665] dump_stack+0x15/0x1b [ 34.034737][ T3665] should_fail_ex+0x265/0x280 [ 34.034761][ T3665] should_fail+0xb/0x20 [ 34.034807][ T3665] should_fail_usercopy+0x1a/0x20 [ 34.034832][ T3665] _copy_from_user+0x1c/0xb0 [ 34.034928][ T3665] ___sys_sendmsg+0xc1/0x1d0 [ 34.035061][ T3665] __x64_sys_sendmsg+0xd4/0x160 [ 34.035092][ T3665] x64_sys_call+0x191e/0x2ff0 [ 34.035117][ T3665] do_syscall_64+0xd2/0x200 [ 34.035178][ T3665] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 34.035204][ T3665] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 34.035252][ T3665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.035332][ T3665] RIP: 0033:0x7fa94086ebe9 [ 34.035347][ T3665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.035365][ T3665] RSP: 002b:00007fa93f2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.035384][ T3665] RAX: ffffffffffffffda RBX: 00007fa940aa5fa0 RCX: 00007fa94086ebe9 [ 34.035398][ T3665] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 34.035411][ T3665] RBP: 00007fa93f2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 34.035486][ T3665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.035499][ T3665] R13: 00007fa940aa6038 R14: 00007fa940aa5fa0 R15: 00007ffdb3f92d98 [ 34.035517][ T3665] [ 34.222191][ T3661] vlan2: entered allmulticast mode [ 34.227342][ T3661] batadv_slave_1: entered allmulticast mode [ 34.254460][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.273987][ T3671] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 34.281607][ T3671] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.60'. [ 34.282487][ T1971] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.299060][ T3670] delete_channel: no stack [ 34.324283][ T1971] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.349597][ T3679] loop0: detected capacity change from 0 to 1024 [ 34.356043][ T1971] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.372514][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.379492][ T3679] EXT4-fs: Ignoring removed orlov option [ 34.404770][ T1971] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.431509][ T3679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.517259][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.586401][ T3698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'. [ 34.619986][ T3697] loop1: detected capacity change from 0 to 1764 [ 34.636978][ T3698] netlink: 'syz.2.65': attribute type 2 has an invalid length. [ 34.643481][ T3697] ISOFS: Unable to identify CD-ROM format. [ 34.652481][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.672373][ T3672] chnl_net:caif_netlink_parms(): no params data found [ 34.729629][ T3672] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.736727][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.744516][ T3672] bridge_slave_0: entered allmulticast mode [ 34.745004][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.751016][ T3672] bridge_slave_0: entered promiscuous mode [ 34.767152][ T3672] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.774419][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.782992][ T3672] bridge_slave_1: entered allmulticast mode [ 34.789426][ T3672] bridge_slave_1: entered promiscuous mode [ 34.822674][ T12] bridge_slave_1: left allmulticast mode [ 34.828327][ T12] bridge_slave_1: left promiscuous mode [ 34.834069][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.864480][ T12] bridge_slave_0: left allmulticast mode [ 34.870244][ T12] bridge_slave_0: left promiscuous mode [ 34.876014][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.900728][ T3719] syz.4.68 uses obsolete (PF_INET,SOCK_PACKET) [ 35.004940][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.016122][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.025763][ T12] bond0 (unregistering): Released all slaves [ 35.045341][ T3723] syz_tun: entered allmulticast mode [ 35.069750][ T3672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.084453][ T3672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.095303][ T3718] syz_tun: left allmulticast mode [ 35.118304][ T12] hsr_slave_0: left promiscuous mode [ 35.124127][ T12] hsr_slave_1: left promiscuous mode [ 35.131752][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.139979][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.167523][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.174977][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.191842][ T12] veth1_macvtap: left promiscuous mode [ 35.197496][ T12] veth0_macvtap: left promiscuous mode [ 35.207083][ T12] veth1_vlan: left promiscuous mode [ 35.222344][ T12] veth0_vlan: left promiscuous mode [ 35.253947][ T3733] loop4: detected capacity change from 0 to 1024 [ 35.267923][ T3733] EXT4-fs: Ignoring removed orlov option [ 35.307551][ T3733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.350940][ T12] team0 (unregistering): Port device team_slave_1 removed [ 35.380448][ T12] team0 (unregistering): Port device team_slave_0 removed [ 35.470219][ T3672] team0: Port device team_slave_0 added [ 35.482477][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 35.482489][ T29] audit: type=1326 audit(1757071578.001:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94086ebe9 code=0x7ffc0000 [ 35.511945][ T3731] syz_tun: entered allmulticast mode [ 35.517470][ T3731] syz_tun: left allmulticast mode [ 35.531412][ T29] audit: type=1326 audit(1757071578.031:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.0.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94086ebe9 code=0x7ffc0000 [ 35.563399][ T3672] team0: Port device team_slave_1 added [ 35.600067][ T29] audit: type=1326 audit(1757071578.091:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c71ebe9 code=0x7ffc0000 [ 35.623842][ T29] audit: type=1326 audit(1757071578.091:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c71ebe9 code=0x7ffc0000 [ 35.647241][ T29] audit: type=1326 audit(1757071578.091:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c71ebe9 code=0x7ffc0000 [ 35.670362][ T29] audit: type=1326 audit(1757071578.091:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c71ebe9 code=0x7ffc0000 [ 35.693469][ T29] audit: type=1326 audit(1757071578.091:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f797c71ebe9 code=0x7ffc0000 [ 35.716850][ T29] audit: type=1326 audit(1757071578.091:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f797c71ebe9 code=0x7ffc0000 [ 35.740254][ T29] audit: type=1326 audit(1757071578.091:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f797c71ebe9 code=0x7ffc0000 [ 35.763496][ T29] audit: type=1326 audit(1757071578.091:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.2.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f797c71ebe9 code=0x7ffc0000 [ 35.792719][ T3752] loop0: detected capacity change from 0 to 1024 [ 35.800649][ T3672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.807613][ T3672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.808781][ T3752] EXT4-fs: Ignoring removed orlov option [ 35.833599][ T3672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.881947][ T3672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.888933][ T3672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.914900][ T3672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.924092][ T3769] netlink: 14 bytes leftover after parsing attributes in process `syz.2.77'. [ 35.926787][ T3752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.952262][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.963291][ T3769] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.979011][ T3769] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.002952][ T3771] loop4: detected capacity change from 0 to 128 [ 36.019426][ T3769] bond0 (unregistering): Released all slaves [ 36.115740][ T3672] hsr_slave_0: entered promiscuous mode [ 36.127961][ T3672] hsr_slave_1: entered promiscuous mode [ 36.140303][ T3672] debugfs: 'hsr0' already exists in 'hsr' [ 36.146077][ T3672] Cannot create hsr debugfs directory [ 36.155142][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.187317][ T3771] bio_check_eod: 195 callbacks suppressed [ 36.187332][ T3771] syz.4.78: attempt to access beyond end of device [ 36.187332][ T3771] loop4: rw=2049, sector=145, nr_sectors = 88 limit=128 [ 36.210401][ T3771] syz.4.78: attempt to access beyond end of device [ 36.210401][ T3771] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 36.224314][ T3771] syz.4.78: attempt to access beyond end of device [ 36.224314][ T3771] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 36.239388][ T3771] syz.4.78: attempt to access beyond end of device [ 36.239388][ T3771] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 36.260752][ T3779] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 36.273513][ T3781] syz_tun: entered allmulticast mode [ 36.279112][ T3779] loop0: detected capacity change from 0 to 1024 [ 36.279262][ T3771] syz.4.78: attempt to access beyond end of device [ 36.279262][ T3771] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 36.295784][ T3781] syz_tun: left allmulticast mode [ 36.303875][ T3779] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.314882][ T3779] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.318547][ T3771] syz.4.78: attempt to access beyond end of device [ 36.318547][ T3771] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 36.337888][ T3779] JBD2: no valid journal superblock found [ 36.343705][ T3779] EXT4-fs (loop0): Could not load journal inode [ 36.349782][ T3771] syz.4.78: attempt to access beyond end of device [ 36.349782][ T3771] loop4: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 36.384871][ T3771] syz.4.78: attempt to access beyond end of device [ 36.384871][ T3771] loop4: rw=2049, sector=337, nr_sectors = 8 limit=128 [ 36.429376][ T3672] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.439217][ T3672] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.452607][ T3672] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.460463][ T3771] syz.4.78: attempt to access beyond end of device [ 36.460463][ T3771] loop4: rw=2049, sector=353, nr_sectors = 8 limit=128 [ 36.475794][ T3771] syz.4.78: attempt to access beyond end of device [ 36.475794][ T3771] loop4: rw=2049, sector=369, nr_sectors = 8 limit=128 [ 36.480244][ T3672] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.550371][ T3801] loop1: detected capacity change from 0 to 1764 [ 36.591084][ T3801] ISOFS: Unable to identify CD-ROM format. [ 36.597044][ T3800] loop2: detected capacity change from 0 to 8192 [ 36.601868][ T3813] netlink: 'syz.0.86': attribute type 1 has an invalid length. [ 36.608397][ T3672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.611032][ T3813] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.86'. [ 36.641981][ T3672] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.671094][ T3812] delete_channel: no stack [ 36.675805][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.676215][ T3818] loop4: detected capacity change from 0 to 1024 [ 36.682864][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.712905][ T3818] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.723833][ T3818] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.773134][ T3828] loop2: detected capacity change from 0 to 1024 [ 36.780488][ T3828] EXT4-fs: Ignoring removed orlov option [ 36.786028][ T3672] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.788747][ T3818] JBD2: no valid journal superblock found [ 36.796539][ T3672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.802291][ T3818] EXT4-fs (loop4): Could not load journal inode [ 36.823106][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.829127][ T3828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.830278][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.950930][ T3672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.214846][ T3672] veth0_vlan: entered promiscuous mode [ 37.230322][ T3846] loop0: detected capacity change from 0 to 2048 [ 37.241453][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.245245][ T3672] veth1_vlan: entered promiscuous mode [ 37.258941][ T3846] EXT4-fs: Ignoring removed orlov option [ 37.302997][ T3873] netlink: 14 bytes leftover after parsing attributes in process `syz.2.90'. [ 37.310552][ T3846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.327764][ T3672] veth0_macvtap: entered promiscuous mode [ 37.346515][ T3672] veth1_macvtap: entered promiscuous mode [ 37.416410][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.440081][ T3672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.454826][ T3672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.470417][ T3884] lo speed is unknown, defaulting to 1000 [ 37.472655][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.493840][ T3884] lo speed is unknown, defaulting to 1000 [ 37.505482][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.515281][ T3884] lo speed is unknown, defaulting to 1000 [ 37.515771][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.539116][ T3884] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 37.556834][ T3884] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 37.562306][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.606189][ T3884] lo speed is unknown, defaulting to 1000 [ 37.620169][ T3884] lo speed is unknown, defaulting to 1000 [ 37.626319][ T3884] lo speed is unknown, defaulting to 1000 [ 37.648932][ T3884] lo speed is unknown, defaulting to 1000 [ 37.668983][ T3884] lo speed is unknown, defaulting to 1000 [ 37.724502][ T3904] loop1: detected capacity change from 0 to 1024 [ 37.748386][ T3889] loop0: detected capacity change from 0 to 2048 [ 37.772485][ T3889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 37.784929][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.803912][ T3904] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.815876][ T3904] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.96: lblock 0 mapped to illegal pblock 0 (length 1) [ 37.837931][ T3904] EXT4-fs (loop1): Remounting filesystem read-only [ 37.975207][ T3889] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.991088][ T3889] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 778 with error 28 [ 38.003528][ T3889] EXT4-fs (loop0): This should not happen!! Data will be lost [ 38.003528][ T3889] [ 38.013180][ T3889] EXT4-fs (loop0): Total free blocks count 0 [ 38.019173][ T3889] EXT4-fs (loop0): Free/Dirty block details [ 38.025072][ T3889] EXT4-fs (loop0): free_blocks=2415919104 [ 38.030823][ T3889] EXT4-fs (loop0): dirty_blocks=784 [ 38.036013][ T3889] EXT4-fs (loop0): Block reservation details [ 38.042014][ T3889] EXT4-fs (loop0): i_reserved_data_blocks=49 [ 38.043078][ T3925] loop5: detected capacity change from 0 to 1024 [ 38.058186][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.071358][ T3919] loop2: detected capacity change from 0 to 1024 [ 38.083809][ T3919] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.094874][ T3919] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.095018][ T3925] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 38.102929][ T3919] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.113688][ T3925] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 38.120911][ T3919] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 38.144196][ T3919] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 38.151058][ T3919] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.99: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.159092][ T3925] JBD2: no valid journal superblock found [ 38.164857][ T3919] EXT4-fs (loop2): 1 orphan inode deleted [ 38.169875][ T3925] EXT4-fs (loop5): Could not load journal inode [ 38.176097][ T3919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.199401][ T3919] EXT4-fs error (device loop2): ext4_lookup:1787: inode #15: comm syz.2.99: iget: bad extended attribute block 6 [ 38.233381][ T3919] lo speed is unknown, defaulting to 1000 [ 38.255545][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 38.323837][ T3934] loop1: detected capacity change from 0 to 1764 [ 38.357192][ T3934] ISOFS: Unable to identify CD-ROM format. [ 38.492275][ T3948] SELinux: Context Ü is not valid (left unmapped). [ 38.544544][ T3956] netlink: 14 bytes leftover after parsing attributes in process `syz.4.110'. [ 38.556426][ T3956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.566366][ T3956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.575998][ T3956] bond0 (unregistering): Released all slaves [ 38.731456][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.761846][ T3967] bridge_slave_0: left allmulticast mode [ 38.767519][ T3967] bridge_slave_0: left promiscuous mode [ 38.773419][ T3967] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.787853][ T3967] bridge_slave_1: left allmulticast mode [ 38.793678][ T3967] bridge_slave_1: left promiscuous mode [ 38.799494][ T3967] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.856937][ T3967] team0: Port device team_slave_0 removed [ 38.881644][ T3967] team0: Port device team_slave_1 removed [ 38.908231][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.915702][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.959201][ T3967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.966622][ T3967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.989468][ T3963] loop4: detected capacity change from 0 to 2048 [ 39.010543][ T3963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 39.058304][ T1094] lo speed is unknown, defaulting to 1000 [ 39.096813][ T3963] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 39.113641][ T3963] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 296 with error 28 [ 39.126045][ T3963] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.126045][ T3963] [ 39.135824][ T3963] EXT4-fs (loop4): Total free blocks count 0 [ 39.141905][ T3963] EXT4-fs (loop4): Free/Dirty block details [ 39.147823][ T3963] EXT4-fs (loop4): free_blocks=2415919104 [ 39.153594][ T3963] EXT4-fs (loop4): dirty_blocks=624 [ 39.158837][ T3963] EXT4-fs (loop4): Block reservation details [ 39.164846][ T3963] EXT4-fs (loop4): i_reserved_data_blocks=39 [ 39.190764][ T3963] syz.4.113 (3963) used greatest stack depth: 10072 bytes left [ 39.250724][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 39.303964][ T4043] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 39.311852][ T4043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'. [ 39.323792][ T4043] batman_adv: batadv0: Adding interface: veth1_vlan [ 39.330601][ T4043] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.368048][ T4043] batman_adv: batadv0: Interface activated: veth1_vlan [ 39.455576][ T4051] lo speed is unknown, defaulting to 1000 [ 39.480070][ T4051] lo speed is unknown, defaulting to 1000 [ 39.504907][ T4058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.123'. [ 39.508996][ T4051] lo speed is unknown, defaulting to 1000 [ 39.529319][ T4051] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.586268][ T4063] loop0: detected capacity change from 0 to 1024 [ 39.597907][ T4063] ext4: Unknown parameter 'hash' [ 39.684676][ T4051] lo speed is unknown, defaulting to 1000 [ 39.714228][ T4069] loop5: detected capacity change from 0 to 512 [ 39.716274][ T4051] lo speed is unknown, defaulting to 1000 [ 39.726672][ T4051] lo speed is unknown, defaulting to 1000 [ 39.734737][ T4069] EXT4-fs (loop5): orphan cleanup on readonly fs [ 39.744718][ T4069] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.124: bad orphan inode 13 [ 39.755514][ T4051] lo speed is unknown, defaulting to 1000 [ 39.761659][ T4051] lo speed is unknown, defaulting to 1000 [ 39.766153][ T4069] ext4_test_bit(bit=12, block=18) = 1 [ 39.772776][ T4069] is_bad_inode(inode)=0 [ 39.776342][ T4051] lo speed is unknown, defaulting to 1000 [ 39.776933][ T4069] NEXT_ORPHAN(inode)=2130706432 [ 39.787473][ T4069] max_ino=32 [ 39.790746][ T4069] i_nlink=1 [ 39.808937][ T4066] lo speed is unknown, defaulting to 1000 [ 39.819258][ T4069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.895054][ T4072] loop0: detected capacity change from 0 to 1024 [ 39.917307][ T4072] EXT4-fs: Ignoring removed orlov option [ 39.962660][ T4074] vhci_hcd: invalid port number 96 [ 39.967870][ T4074] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 39.975890][ T4072] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.009001][ T3672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.036896][ T4079] loop4: detected capacity change from 0 to 128 [ 40.164936][ T4082] ================================================================== [ 40.173046][ T4082] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 40.182254][ T4082] [ 40.184564][ T4082] write to 0xffff88811a093a18 of 4 bytes by task 4072 on cpu 0: [ 40.192178][ T4082] writeback_single_inode+0x14a/0x3e0 [ 40.197559][ T4082] sync_inode_metadata+0x5b/0x90 [ 40.202505][ T4082] generic_buffers_fsync_noflush+0xd9/0x120 [ 40.208409][ T4082] ext4_sync_file+0x1ab/0x690 [ 40.213082][ T4082] vfs_fsync_range+0x10d/0x130 [ 40.217845][ T4082] ext4_buffered_write_iter+0x34f/0x3c0 [ 40.223407][ T4082] ext4_file_write_iter+0x383/0xf00 [ 40.228611][ T4082] iter_file_splice_write+0x663/0xa60 [ 40.233982][ T4082] direct_splice_actor+0x153/0x2a0 [ 40.239094][ T4082] splice_direct_to_actor+0x30f/0x680 [ 40.244466][ T4082] do_splice_direct+0xda/0x150 [ 40.249230][ T4082] do_sendfile+0x380/0x650 [ 40.253658][ T4082] __x64_sys_sendfile64+0x105/0x150 [ 40.258870][ T4082] x64_sys_call+0x2bb0/0x2ff0 [ 40.263543][ T4082] do_syscall_64+0xd2/0x200 [ 40.268049][ T4082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.273933][ T4082] [ 40.276241][ T4082] read to 0xffff88811a093a18 of 4 bytes by task 4082 on cpu 1: [ 40.283768][ T4082] generic_buffers_fsync_noflush+0x80/0x120 [ 40.289652][ T4082] ext4_sync_file+0x1ab/0x690 [ 40.294310][ T4082] vfs_fsync_range+0x10d/0x130 [ 40.299072][ T4082] ext4_buffered_write_iter+0x34f/0x3c0 [ 40.304612][ T4082] ext4_file_write_iter+0x383/0xf00 [ 40.309804][ T4082] iter_file_splice_write+0x663/0xa60 [ 40.315160][ T4082] direct_splice_actor+0x153/0x2a0 [ 40.320254][ T4082] splice_direct_to_actor+0x30f/0x680 [ 40.325613][ T4082] do_splice_direct+0xda/0x150 [ 40.330360][ T4082] do_sendfile+0x380/0x650 [ 40.334766][ T4082] __x64_sys_sendfile64+0x105/0x150 [ 40.339956][ T4082] x64_sys_call+0x2bb0/0x2ff0 [ 40.344621][ T4082] do_syscall_64+0xd2/0x200 [ 40.349116][ T4082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.355000][ T4082] [ 40.357303][ T4082] value changed: 0x00000038 -> 0x00000002 [ 40.363008][ T4082] [ 40.365312][ T4082] Reported by Kernel Concurrency Sanitizer on: [ 40.371444][ T4082] CPU: 1 UID: 0 PID: 4082 Comm: syz.0.125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.381058][ T4082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.391096][ T4082] ================================================================== [ 40.488531][ T29] kauditd_printk_skb: 276 callbacks suppressed [ 40.488545][ T29] audit: type=1400 audit(1757071583.001:720): avc: denied { connect } for pid=4078 comm="syz.4.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 40.514432][ T29] audit: type=1326 audit(1757071583.001:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.537755][ T29] audit: type=1326 audit(1757071583.001:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.561013][ T29] audit: type=1326 audit(1757071583.001:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.584323][ T29] audit: type=1326 audit(1757071583.001:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.607527][ T29] audit: type=1326 audit(1757071583.001:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.630752][ T29] audit: type=1326 audit(1757071583.001:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.653947][ T29] audit: type=1326 audit(1757071583.001:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.677330][ T29] audit: type=1326 audit(1757071583.001:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.700355][ T29] audit: type=1326 audit(1757071583.001:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4078 comm="syz.4.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18eddeebe9 code=0x7ffc0000 [ 40.724712][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.