last executing test programs: 2.931008345s ago: executing program 1 (id=476): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f00000000c0)={'system_u:object_r:systemd_systemctl_exec_t:s0', 0x20, 'system_u:object_r:memory_device_t:s0', 0x20, 0x0, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x86) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x18) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x141301) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f00000000c0)={0x80, 0x17, 0x6, 0x3, 0x0, 0x6e9, 0x0}) 2.790385361s ago: executing program 1 (id=482): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfffe, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r0, 0x2e, 0x4608, @void}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r8, 0x508, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48011}, 0x4090) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, 0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r10, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) 2.308807332s ago: executing program 3 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'netdevsim0\x00', {0x3}, 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x22020600) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0xfffffffd, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) r5 = dup(r4) r6 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b435f5dd9b4ae337bbf37b108c1ec26276567359e079abe967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) lstat(&(0x7f0000000540)='./bus/file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$get_persistent(0x16, r8, r7) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180), 0xa2000, &(0x7f0000000600)=ANY=[@ANYBLOB='usrquota,usrquota_inode_hardlimit=egm74W1,usrquota,mpol=default=static,usrquota,huge=always,huge=never,gid=', @ANYRES16=r2, @ANYBLOB=',indo64,usrquota_block_hardlimit=e51969pg7,rootcontext=user_u,fowner<', @ANYRESDEC=r8, @ANYBLOB="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", @ANYRESDEC=r9, @ANYBLOB=',smackfsfloor=\x00,defcontext=user_u,obj_role=syzkaller\x00,obj_role=kfree\x00,\x00']) ftruncate(r6, 0xee72) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000380)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_pauseparam={0x12, 0xf, 0x5, 0x7}}) sendfile(r5, r6, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x19) 2.018357624s ago: executing program 2 (id=491): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) fstat(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r2) r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)='}$\x00') keyctl$unlink(0x9, r3, r3) keyctl$get_persistent(0x16, 0x0, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f00000004c0), &(0x7f0000001c40)=r4}, 0x20) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x61, 0x5f, 0x30, 0x61, 0x30]}}, &(0x7f0000000240)=""/157, 0x2f, 0x9d, 0x1, 0x8, 0x10000}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x178, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20}}, 0x1cc}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001dc0)=ANY=[@ANYBLOB="620af8ff0c011021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e4000000000d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100"/3816], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) process_mrelease(0xffffffffffffffff, 0x0) symlink(0x0, 0x0) unlink(0x0) r10 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r10, 0x5522) close_range(r0, 0xffffffffffffffff, 0x0) 1.922542148s ago: executing program 4 (id=492): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private=0xa010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r1, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.900786189s ago: executing program 2 (id=493): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x1005a2c, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x3, 0x34e, &(0x7f0000000480)="$eJzs3M9LI2cYwPEnP4xJrCaH0tJC8aW9tJegac+loSiUBipqSrUgjDppQ6aJZIIlpVQ99VQovfdU6EHszZvQ+g/YQ2/tpZe95SLsYWVZdpb5ZZJJ1JiNG1e/H5B58r7vM3nfzCjPDE6aX/z8TbloZopaXcJxJSERkTORtITFF/K2YSeOSbtdeW/i4b9vLa2sfprL5+cWlZrPLb+fVUpNTf/57fcJb9jRuJyk15qn2Qcnr5280Xy6/HXJVCVTVap1pan16v91bd3Q1WbJLGeUWjB0zdRVqWLqNbe/6vYXjerWVkNplc3J5FZNN02lVRqqrDdUvarqtYbSvtJKFZXJZNRkUnAF+4AuarkBszeGPBvckFotp0VEJNHVU9gfyYQAAMBIBev/sF3SD1T/y5RT/9uDW/X/wdvH9YnPD6eO7Ny15lGsV/3/wX/uvjrq/7iIDFL//yrXqP+7K6L7pbC/OHj9j9thOtbVFOp4Zdf/Se/317H35cGME1D/AwAAAAAAAAAAAAAAAAAAAADwMjizrJRlWSl/6/+0HiHwXuNOuuj4j4tI3D76Fsf/LltaWZW48+CefYyNH7cL2wV36w04FhFDdJmRlDxxzgePHftPHilbWv4ydpz8x/Y24vTkilJy8mclJelgvmXNf5Kfm1UuL//8MaVke35WUvJq7/xsZ749/53tQkzefactPyMp+WdDqmLIpnNet/J/mFXq48/ygfyE+yYAAAAAANwBGaVC3uVzuvP6N+J8u4+rV7/7LSO5onOb6IL7A+719UzP6/No6s3oiBcPAAAAAMA9YTa+K2uGodcuCRJy9ZhgsPK39JkV7W+HsUDL2GWDI20r7HfOMedGhsh1VxoMfuvzU+0I/H+k6OiKe42Dzcdf/3MupxXstreEpY+saHDy03aD6hx8+opIW8tPXfvZ8xZy3uLfNopd8DnLQvd8wpecCWPD+XwMvfb6L78/GsZ+3ODDQ/8MuHrw3qDvFQ+edU4wdtN/dwAAAAC8eK2i32/5qL07NJJJAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABwzwzrm8+c4I+Jnjsc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2+JZAAAA//+8+/eK") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x88040, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00'], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=r1], 0x50}}, 0x20000800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000005c0)={'filter\x00', 0x0, 0x0, 0x0, [0x40000000000004, 0x5, 0x8, 0xe, 0x9, 0x4]}, &(0x7f0000000640)=0x78) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000700)={{0x1, 0x1, 0x18, r4, {r6}}, './file1\x00'}) syz_usbip_server_init(0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000300)='ufshcd_exception_event\x00', r7, 0x0, 0xd0000000000000}, 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x0) r9 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r9, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xa3b, 0x80, 0x3, 0x1af, 0x0, r8}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4) 1.868169131s ago: executing program 0 (id=494): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b00000000000001000000090002007379"], 0xb4}}, 0x8085) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000ccd8095beaaa00000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r8}, 0x10) r9 = io_uring_setup(0x6426, &(0x7f0000000640)={0x0, 0x8e8c, 0x1, 0x103fc, 0x8101014e}) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.65115491s ago: executing program 1 (id=495): bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0\x00', 0x238028, &(0x7f0000000e40)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="2eb582bbd8e1b71e45341ec08b6e2104fe8a68bd7ea60bff6724d31a20d69ff0ff4f704fbdd669d9525224c4d3a7629f27fd465ab0de342da67dfd131d92728051de340125eb4c1381036479c42397064f5590276c82f661c8afae0cd37c8a7d9b8b06d0dd01cb7ca772a66a311ba84fdfe6444ae17e92d3779dbf38c24568cfd937", @ANYRESOCT, @ANYRES16=0x0, @ANYRES8], 0x1, 0x2f4, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c00)={'nicvf0\x00', 0x20}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=@gettfilter={0x8e, 0x2e, 0x300, 0x70bd2a, 0x25d7dbfe, {0x0, 0x0, 0x0, r2, {0xfff1, 0xc}, {0x6, 0x8}, {0xf, 0x2}}, [{0x8, 0xb, 0x401}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x401}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0xb0bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0xfff3}, {0x0, 0xb}, {0x10, 0xd}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000100), &(0x7f0000000200)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) clock_getres(0x0, &(0x7f0000000400)) r4 = syz_clone3(&(0x7f0000000f80)={0x3400c0500, &(0x7f0000000540), &(0x7f0000000580), &(0x7f0000000600), {0x21}, &(0x7f0000000640)=""/245, 0xf5, &(0x7f0000000740)=""/211, &(0x7f0000000440)=[0x0], 0x1}, 0x58) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={r4, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000900)=':$}%\x92+#/./|\x00'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x17, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$LINK_DETACH(0x22, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180)={0xffffffffffffffff}, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000f5004b64ffec8500000050000000850000000f46000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000004c0)='mr_dereg\x00', r6}, 0x18) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x33}, 0x48, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) 1.447794658s ago: executing program 1 (id=496): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001e80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df71f34fe5cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be3956030097e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0xc, 0xc, &(0x7f0000000480)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffcf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r7, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'}) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000001d00)=ANY=[@ANYBLOB="1800000000000000000000550d5b4567eff55bee8cfd2592bec4e1e09d21ee8944650e86316bd44759f7462b8efd2d9b7c5d354cea9e4641bed17e6f42bc56e137f91d93a35553a324ffc6b7441ade63bb683793512fb5e47fe14a46db3e2a492c6fd342cbd5f7c8460e26b20585b47aee6b0b4750b5ef1cee24470dc121b1b79a1858e9bde6725f3df84af6a3f7a35b4672f7ad12b5ce3c370b9895bf5d368c96d08790f0f2955dafbee1700d8eb714a60bbda53470f181e1c04e83d65202a0", @ANYBLOB="aa97e2971323eb7a264697989d7dd136ed66e5ba740e06a1c4eec4e11cceb3019702af769ce5c7438ff1bbde4fa556d3ef0b5dd55fd7c540bc2753ed1cdd1741fe2d65e71cf8e9b8aabd2f908f8c8d2442336d5642f1187c7ba0c6811e5795087e2d34ca6239ffe2515f2d1c1b8ff728b6061afe326ba8dec325877df475b381892cb1107dc3936769d480b68c697389108294a5adf8ec424f335933494dbc71738386cdaba6480fa942fd85295a9b7f8a0c93ef07", @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) iopl(0x3) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000440)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r9, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r10, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x110c40, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000003c0)='vnet_rx_stopped_ack\x00', r0, 0x0, 0xfffffffffffffffa}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) r13 = socket(0x10, 0x3, 0x0) sendto$inet6(r13, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0) 1.447547248s ago: executing program 4 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) syz_read_part_table(0x1051, &(0x7f0000000000)="$eJzsz7utAjEUBNB5eou1KwIktD2QkBJTBCKnEkQLtEFEgwhkzKcDtME5gcfXGgc3TMK5xeqaTY7j8vP+/8rbdyrbrl773JPMM2uFLkONv/ecvh67MTk8f5Z1ktOQLLqU1ijZX36zHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABM2yMAAP//2qsHZg==") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000001080)={0xa, 0x4e20, 0x7f, @mcast1, 0x6}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 1.441275739s ago: executing program 0 (id=498): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) readv(r0, 0x0, 0x0) 1.367044432s ago: executing program 0 (id=499): r0 = fsopen(&(0x7f0000000000)='ntfs3\x00', 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = getpid() move_pages(r2, 0x2, &(0x7f0000000080)=[&(0x7f0000fec000/0x11000)=nil, &(0x7f0000ffa000/0x3000)=nil], &(0x7f00000000c0)=[0x6, 0x9, 0x800, 0xe, 0xb06f, 0x4, 0x0, 0x2], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0xd0, 0x1, 0x4, 0x20, @remote, @dev={0xfe, 0x80, '\x00', 0x32}, 0x40, 0x7800, 0x7, 0x1}}) r5 = open_tree(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x1000) r6 = signalfd(r0, &(0x7f0000000500)={[0x8]}, 0x8) r7 = dup3(r1, r0, 0x0) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ldst={0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0x8}, @call={0x85, 0x0, 0x0, 0xb3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x401, 0xc1, &(0x7f00000002c0)=""/193, 0x40f00, 0x1a, '\x00', r4, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x2, 0xf, 0x40, 0xf}, 0x10, 0x0, r5, 0x1, &(0x7f0000000600)=[r6, r7, r8, r9, r10], &(0x7f0000000640)=[{0x4, 0x2, 0x10, 0x9}], 0x10, 0x3}, 0x94) openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x800, 0x0) kexec_load(0x9, 0x8, &(0x7f0000000bc0)=[{&(0x7f0000000780)="2393c7fd790a66015d585d694508c15746c97b", 0x13, 0xfffffffffffffffa, 0xff}, {&(0x7f00000007c0)="a4c7", 0x2, 0x9, 0x6}, {&(0x7f0000000800)="5a3766a754058931d730c03dc9cf90191297b96406c4ee031fbbcd595e89cdf8888b25505f65560be42dce9b3700c516cdcc1aaedff7591482edfaa2d9d5e828df12fa7c09dd2eea6e40c7c04a1c13346f1b7273783bae48b297f25a377f81d996a9a3f83273f5c4e77dc94dfdab35880c26397124dd11c3e7412e16c8975bcf4d45bd306f5fa9fd6d7a719f0dbc6d9d06d61af8a119ae03e489206a2427e1644e18a5905ae79eaa6ee54d893cdbb12377472bb6a98e6d6c6696ddd5fb3caf946e109a1de0ba07dd8337d5d052d3214d93b06a84c0521d61abe6a593e02f805ee1b8795812db4e19437a68a05992fb71a4c9fa32", 0xf4, 0xffffffff, 0x5}, {&(0x7f0000000900)="a2bf22554e9dac427fedac95961bfcb21823c7bc1a427c41921018f3f30493be7a139eb7bf191d6b5c88e293ce96ab023d7c52c9120b927fa4ae94ca299601859078d70de3ac81afad754499c73f5ce59c7d332844a4c65d4be065a2977170fc228013971e5cad31404a2924133264cc693694d065502543dced4e0a663f3642fefe92c6b55c29e63377ed3792847756eab65ce7c2be2da80a79f5f06fafb7de488fedc347bfb662ea", 0xa9, 0x0, 0xfffffffffffffff7}, {&(0x7f00000009c0)="a60841c97a91b8ec3b45145363e8b83029ef233dae2de5ed5d7f5fe02952fb52", 0x20, 0x1, 0xa}, {&(0x7f0000000a00), 0x0, 0xc, 0xe}, {&(0x7f0000000a40)="07f2908ca0e9f7f9db7b1136d6c887df58179d2ca619822b58104b5f75c8f1049033e00b780b457455996be1cbedc6eef2841eb8b217fc7550b0a7e20ddb9b30c9801fc8b4e54cd8d758024906f748fdc7af904ae1d481e92adbb788343fd2ea9019d1681e18064fbb99934b44d139b2757cf61d89aa3532b08407b58786d785227b69ff9aa9b2f20bbbf0f1b996fa277134521177244ecf7d0c035dacde8a1fc9df16e0d651c220bb648a5167bf3a16ad2d6e6fcac31204a41fd251bb082872", 0xc0, 0x88, 0xebb0}, {&(0x7f0000000b00)="e003316ea3b4775187b7f15d602326164a29e747f1867e0cfc72a21ecdde08de97cc6cf1cb233deacaebacad3433bde1a6999e22f7633fa6a1418db158e7ed6a75d8dd15dcc4a91d52c23ced8057f54bbfad7a01a15531bfc621e57c5683f8e2136ab5dbcade67c1e94ad5668b3fe44f9d6bc34c92477dd43168203b20b6ea490dfa87680e77474a7b22fc7b946d740f84fd665fab0bf864d37e76aa898e7097d299be15b3af214b6eb1b71300ec7b2fb70e07367c9e3ac66ffe1a53", 0xbc, 0x7fff, 0x6}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000cc0), 0x13f, 0x9}}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x2, 0x0, r8, 0x7a, '\x00', r4, r9, 0x3, 0x4, 0x2}, 0x50) accept4$unix(r8, &(0x7f0000000dc0), &(0x7f0000000e40)=0x6e, 0x80000) sendmsg$unix(r9, &(0x7f0000001000)={&(0x7f0000000e80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000fc0)=[{&(0x7f0000000f00)="7c539edef0766901f3cd563e00abd49aa5bc5265208ae0bedcda999b70600852c25cb2f8c50273c68bacb1a47fe1d76308b033f33f9b8e1ea377de12ca5a2805bbb64f7da5d9eede004d70c11f32f2efea6d520cf6ef6f1072c2568cd72e074fa2a056ff648c8170b44a3bbad5282a77c0888bd1bb07a5525072e1aba42bbed49b10ec44d8be437a5bd32801fa09a00c087b56c8d93cd9480089c04c42315cd73ff5", 0xa2}], 0x1, 0x0, 0x0, 0xc0c0}, 0x20040841) sendmsg$NFNL_MSG_CTHELPER_GET(r7, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x38, 0x1, 0x9, 0x5, 0x0, 0x0, {0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x38}}, 0x8080) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r11, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x5c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x1) lstat(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000001380)=[r12]) capset(&(0x7f00000013c0)={0x20071026, r2}, &(0x7f0000001400)={0x3, 0x8000, 0x5, 0x37, 0x1, 0x6}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$batadv(&(0x7f0000001480), r7) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r13, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x24, r14, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x5) 1.366649062s ago: executing program 3 (id=500): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xa0, r1, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffffffff}]}]}, @NL80211_ATTR_TID_CONFIG={0x58, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbe}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5e}]}]}, @NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4800}, 0x40000) 1.365416672s ago: executing program 3 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000039000900000000000000000001000000040000000c0001800600000005470000080002"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x14) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c00ff9632f473712f1a0d40b8f8d6b73a6777b1b0c2147eb1ba934093170285bfa10437504eaad314bdcdc3009af5407ffbc0cca17d91f142cb87194c654db617cfff3dca3a44c1724dde56ddfbafc926ff3a0d3bd197649a600046ec6a4550d99cbdf9e160ee478c26de46d1bbc5d3060a635beb1fae7a0ae9ad4e313df372e95394562c5cf1d5353df36b332943613a4ec081d15123304c442fa6b4d23c137e64fe71d7a59bb0b7e5926ddaa9bbd4fa553d3368509b"]) 1.331837964s ago: executing program 0 (id=502): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64, @ANYRES8, @ANYRESHEX=0x0, @ANYBLOB="a779568f98e00449f0fd82dc21acb85de3fcd346e0bf2a29df6ce0d6b3a4f1348d865ef937600cdc7d74647e23e34d62bc3627045ab632aa6b6b532797a9681ec7c4474cf8c33da98e7e2f1c496c65795120196547306836e8ee2867bb27a511cffc8f5eacea91b7a48940967fca0fc5cbb67e13783e5ad67a0c", @ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x2, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x16, 0x0, 0x7, 0x4, &(0x7f00000004c0)="083dcc8402377aaae2176554d516b4ae7bb6184f8ba7a5068b16828c25a6bc98a1f73628f4aab7b10a167412764d4330586290749064d1347cd56b66e80bffab665a92f51d2b95133de0200b38e75d15ea0652d5828b9be69241642a0aef1bbf0c12716b77c097f56401631c9c9a9a077966e946e1c9aa034ef756b1c6455843b32f3fcde1b2ce68a368e32704499777", 0x6, 0x0, 0x1, {0x2}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)=ANY=[@ANYBLOB="48004000130005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c617665", @ANYRES32=0x0, @ANYRES64=0x0], 0x48}}, 0x4000090) shutdown(0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xbb) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0xfffffff4}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.298640245s ago: executing program 1 (id=503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYRESOCT, @ANYBLOB="b80220b554df75875cf2921c12af2649b78563785b2a2885f3f23558bf944cb6ca7284510b177f585b9077cd3386fab7f091412a07cc91a034acadf2df9a9289a5460b9efc8bccff9121e7bfadf163764342dfdbb8e31e6b78da4b0eb5ec6ceb8766aad04d2ed23c0ac99fc37f5dfddba41c10d4ee156566b0bb46406cb1933bdf963d2a20008389ffae7c846df8ff6efb7ff920ede62113e7b23e4ebd3fdb3de6c991981801dc1e911f348a632851c178b462fd0c8564e28f90bba6b8b67a4c819e93b15dc0e4f73ce450bf90a42e7f8e78789a2efb3580c5d04af4a4d8e51a2fa96e85cf27ff4b2e89e645c3cd2215d8ae42bbcac9330b0ed9e4c003322f009f7997d6d919d34c6a38329267b33493c0f0b6ca515578d3a021ee603dea5f0e8917abd2ae231698cc231cd92c3aab02621e42f64c3d56cbe3981d516cdc5b8e01192e7f8d60927d0d70b507f115531d9b5573082f6d310120a636d72d0b14996f99ec3d23ecf314d7dc7831322df58f9a8943f8a3cb5df727df3aacb9d12727e900f6810933b2d0de3c5d4e0771d8f2d8e1e4c0f44e9ca34ecdc99fd8c9531a487c83b55d828dbd577bfcb810e84ffd907bbaf5ea05ea3b7257ba873a71f094aff2569229d9faa1b55d557ebaf6933d23ea5f8b2930c49ad7a45131f1b42a9a05d5cf381b280392b1df088e9fee4e0dc12fcfa3260cfc8681c8929344142051bee9cdacbc36b6d50c480eb0ea0a1db6421574c11ddc20758f4ac5fd2b60d6d794d9b58ed35262e2855e7ee07f38bc87a7aaf91f8e960428fa8a13011e23b7cd0a4daf8dd02471af7308c7a9e4f3f9fa5d34e4af2d529732c31498cb0f95ad0c20bb0bc8e8a5f48df3b3c348865354cc1fd31248684c71e6060d3437c67ee4bf021fdb4e0f2323b8879eac6e33b38818b92b2afe4d9bd3e77c8c2f3ce999fa7d38e37fe14cc04d2ec4358d76903b3f965d27583c997bee0698a38ab1a57cd3d6633b4b0723bc42f405111b3ae4384c95b0c0c745a78f40ab5cfc9dc1304e3172d46014808badbac4485428be29f0232619fff6bd1e3d3bea45ef2dc5cd7b2b34d652c8e7a5032a8da6b652f5bb95d5980620e7da3121194566c7efc66665579f54d6c6d28201d45d59e00956a15adf644f0c73e48908d227b3d05222b96452eb31152fc9478ee233b2e0cfd6ce40398f7b4d097a57032f7f8858c8cadc13f49874f50bbec9019f016af6a6ff7f44286dfdd6865c1e607995afe2130032e661dee4caa5c06c7ee43e0a23e66171728146de4415278c65ee0651a5f0194a8f428931e7abb85fe018e157329320513db795d3acecaf4e7dc16ed5fb0dbb81a4d4af304a657b288c8fc5e210d4bcde9a0c6e60a633efd280b369d440bed40b0c603695a742d1795a5f1ee7b94ba53208400a54b82109ce2851089111f301887d0b6ba29db45340abfb936641a83dad1d79bcb09048b2ed8f3e9de5603e8d66ac2a858b5db311b32cc2cea3bb46aabcf9a27a8ab462f003469bab02ab11fb0accf4e4391f448f0c8c9b8307bb5ef2100872141b00b955d5431564fb447314ebef92f77949f9c6b10dd93bc79608b3d5fac937aee9b6289bea762f4c2ff3d25f551bbd47b26459af8143fef32dc39339ef6d0988dde9345771a7dfc81d250485283f8b948ed2e64cfd14620f184fd40d438a9fbe1697d80af612dcf5f0fea3b5ff49d751de74d454420bb5219843930fd671f3824392cdc7997396d217489b3bc25a0f8e3bf54212f5393b0881aef18894251962c0a6906c4d42dcab16f6343f2c8579edd3996dc91c57163e1f88833cc8146893fad94dcf2eb19436f0f24eba81f4dcf7fc976b6e2f8444ae009b22c5b341db4553a35ba0f4d81fca407d76f8ee6c77db9f35ee9ebd0ae4ff2a6a3aec2df20ee430dc63cd4777e07334812c6e3c3d4867e3e85e5800d0bb1b4d3a2faac188991860232be7ca533f03b65d6f182c9a1e0e75bb392a6f47d00f5585952c3fb96ac9ba96ee6281a8f6cf464f7cf88cdb9e1eb7a630c239a45abf98f4f345beb8bbd89e0829e97b7c9cbbd8e32be701dcfe94cad561d9a9f87cd29cef7de7de6d46aed83b9235cdd8ba973599767971b455bd2803ff4cacd87dbab978b90ebc093853a46382a701fc8ae0f89af981ca1e57010e780570852e9a0e3e364771f7c25825d983e8eb8a8a2d114bda0a28117844b2f87602da5ef494a50badd1e8c7f054832aeb6aec229958846dd5a72f25ead78387241cb50013bfd915e6af7e39f8c030fda80416efc69cf6f22cf2b7f89895ac98831d0ec8dadd211c722f4ae7f8edd9af96d6ed979db61c59daa1dbd54613f6cc71d757a999f6fb49601968baa724d37066be7fc51a497b21518f612123f38a0e49a27afd05b0b22d3960846aa0f69fd70c7c74d79d9f9e33addfe3d8b63104d164b937c2b74433c38bb926b0398be74bf2704b4fd844acc66e4fd2029bb4f91331ea1378cccbe85ac8d265e67a3d33a75c5a71f38ba19bdfbefee24d479ec6268aaf7fbc630ca32fcca73d0b6add6d98e683fc8261248a0ce2ec47bbce13369aadd72af63fabc554dfe9e19905fb8845c63e9b4df5c6abeda6e89443d67e8f796cfe5f255da1d9335f5e3b543e4c9729179069f7ddbed6cf4a25db04b2e694ca6a71206e0505bb7e7669bbcc602b8f85e6524bc05d10ce146a2cb03ec4f0e9711b040672db4cb7b77c9f541cb08c67992711cb30c8643778c05908d43283c3085e047c8aaa1974e55b3ebd54300823667117eaf1de79e4345aa79dc1b308da8736657c4492b8edd96257a06b71cf9228fc4b838a02bafa9033a3e5c0ce4700a2841ddf931fe89a325b9b8e8c6d656e9001946cbc6f9b1237d7c05e418598f4d9d81e94154e4b398fd304bd9a091f3cce50732bfc591ee4875bb3a91a09ffa742f9c02cf4ff34c07a8ac9cbb4017dec712ce3a403b1d7e15eca585a95efc3238b4512ea74cbb08024a7b4a49e7b2a22f3fb14ff5cb03d99742de02859ab3f5a102f88169891ebfd0d17bc1c9d5cd7bf17b255fcaa9b165096899e7a331113240687c0b13f54021b7be553f3a093471ad5db07279fca60b98c5eabc53ef434148bb6dd12deefa27a1d273e92019562806b0c75f34227a00ca0d7133655e9dca0a68480dfc5cf00965663a48e95af8db7705e23fc19fbae12c77a3e2ce77f689b03ff54f51c81fd045baa9b5e8de4a1b7676104e3f9dd9b09ecc2bdbdb27ff774b8337c92716c22c94b985b2bff38247001554cf632b5ed7ee76fb6dc74cc0ef0a0888736e3418ce270408163e2a6f04b9ab245100538acfb2fc95ccc6768fb901e5b405b71cf9932a931303fd5d3226b7fe6b6067615678f3e228a02eb3c4250aca27bd16368536d651c6aeb933619d841932b0a77bc1cf8dffa5e77ebb193726defdd4c3b56616b2f806a38802e9958ea44230ea706ffefc2647a96ca1f23c187d33b2c8440a49418ea9a00038b8b5e2b1c20d4ef9dc671c443034245e72a2ceadc2de3f947e31f820a92e09781796187f9cf413dd69d15008314e3528598fed3756495d866b2668e67cf5bdd73e602c215cb84be81b876c4b4b3709010a7a9166bdd8f8d135280652a7f11edbaa25ee5cf1d6e71eb515623f2351ddf0713aba667d29189eba3c6e03e0f224e435e36edec0b12389d3c1d15132641312aa793d0b792d930eed2de56ca58e839ccd78b92b2c8fdcb0ce1d1096a8f72c46ec8fc439e7acc54c14ff66343e0250b0b7811a020ce782a824ddac818c685f493de5cd202c01f0aac7d9682a8c51279699d059f5094e0fe1338bf3688db00284451249dfd2f98da5787249777091812f44116bc9cd397ddc2d919c1f913f4ab43e59c8db432b866db9ad3888160a19f1ca742de40d8d87f109879a92185c6f1aaa57fe947ab0f953ff119fa5377b5779aa06edada9d0460381f3fc5392c0d4f128772b99f27a97460fbd69d0347b406f39113b68b5f20b62e20f3587961d5fac95b49e266afe33e7181a8b9c781cbcc6cbf830aca63eb8c37fd6a401f6bf7a2b7df623541e1289336a297c7b172b326d3e10ef4d49a8bb7cbf7bea114870b68304090be0f453a6aedd62c6a64968faae9deca528f95ac8241403666192054f119fc19992857b1b9b764bd1b497ca82be5de780f1813c658b6a7ac60df742c7b74fabb61dfac05af9745e2f066c8b0d34aafd10b5403a5ad41e6c5472179f5545545eeb9386d37ff30303f352be4a72bc51c262fb9beaa7482d37acee7f84c53338f1531bb8d142fe07bc8fa135a05f48a0390c30d565215952fb47e74ea41d49a5b28411507214505cc382a60393098da70b38ed97417473ad1c01aa1468c9c301f7cf0e36f5867994ea2fdeb59f856732be243b1a7ecb9dc86822bcdabd351656b92f96e603c523f9e8bd20f7a496a89baa27800c59faa4cac674c7b2103c4ce7df779d263289f094c5de9202674c50a8f2660dc7db625bc43f91f9f827596bd95853124211e9725082174763c6f985050e905a53a904ff5d47ad1418aadd3d279ae2fa1f244b42b95fe76b8c7aef952ff8c6e29dd781190694e4c80d98d1e9c47f27085205867fc38490927468500cc66e60f87b097b94d0bf857fbb0d93a0921ee29f0d9c957f119562293fa71b5f1382e66c59c8b2867a0b150d514824946afa08df2a531a99cbac62b878dfc3616b118c415ace4e41f1e8e313e54e5747e77fe67c191dbf2e20e5a417a42e6a94473febcc9bbee680013f7c482b14aa3fcf3152aeec13d2cabf581d6a383226ef1d3456d9672c075727e63c5fe1dc95bf2fb73429faa3affa5234a6a932f28f656e13383d8f21956bffca4d64af5213e2154718c0fbfbb28a764fdc1a06b4ee256419f509510ad56958f4840e06dde2677b3862be6cecec6f18c9c2b43f5b181b4e06e82ca2da910acea3613fec330df39e2be9cb3634765e7bdd4b3e30f8376fd6699820632a29aa7329e63297c389ffce5000f6638694f1e0a2641d3a4dbbf188130073cb73180fe9e793697c075e6afad990d13ca4b226d4991181985e8cdf818baf491975272906201e8a57ce1517c046b50314cac15145e53b916e580aa90a5a7b7266b065ec65cdc4239c695193859a4ba49deebcee3c80d0b1e88a5d4a68db6228040d6d35b5f74f6c0e557bdca1a155a74b8b7c542aaa9c3ff2fb6a4cca58a4cb7b6f274d1653debb120cc5816d2d117f2305ab3a462fa8f30434c956903982334fc7897ae2990cb6c74bcb34de83a0db0d162edf4206258ba29d768e01a2b87f085781b7358d9174d47ba7ffeac5940e6f2cdb25c0ad3573973893b6e5f439a1a6a8803a9e1dd733559a6410b8397bea324cac7a2c8a714a0981488efe6eaa64af6875e2499db67cc8177ae39c6b1d2f9806c5d15fd1432fe45b9c8e63c1bc2eb8bdcdc8cbb9611f1a6a38414eb883f15eaff4fabda6b282f2b7daeb86313f301c906f9210db64f6aef1f89cc7fce9791efc2f8771d7f703cab7c875166c06a56d406526f9519e21fa1d1ec84471ba8c8b1ea738d228bfb83bd1c6d6fe2de2a07599cd6e4d0dce718e5a3351bca0d4cdd92a9d4832ca7b72e97c911cb158f9ad3e1995ac69c277c407ae648887e2e86e47228238d3000334e8fe3ae869355d1807146d46b58e661768385c964535ccb322a851e3ebdc36d47763d1060312f323200488caf00e11e4c5ab1aa8fe0ec525ad5923068a6a37edf843bfc82aad32cce517a5f57eb0887817fbf8c3b75", @ANYRES8=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT], 0x48) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101042, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x18, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) write(r1, &(0x7f0000000580)="3aa0", 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='jbd2_checkpoint\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="b8348604e7c2ee6dc717c914e545ae18000000000010010000", @ANYRES32=r1, @ANYRESDEC=r6], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0x2000000000000}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfd, 0x7fc00100}]}) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) 1.243074157s ago: executing program 0 (id=504): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xffffffffffffffff, 0x7, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x1006, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000030000000600000018"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000077b8af8ff00000000b7a20000a9abef52030909bb232c1823a1416da8152c1e5e930007020000f8ffffffb703000008000000b70400000003000000850000000500000095000000000000000000b07ca4936a3d9e1e110e8573c85e441ee1"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) sysinfo(&(0x7f0000000280)=""/24) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x8000, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) openat$snapshot(0xffffffffffffff9c, 0x0, 0x403f, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0xee01, 0xee00) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x1, 0x1}, 0xc) sysinfo(&(0x7f0000000180)=""/102) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) 1.230031248s ago: executing program 3 (id=505): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x7) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f00000004c0)={{0x80}, 'port0\x00', 0x50, 0x100c75, 0x7, 0x4, 0x1ff, 0x0, 0x0, 0x0, 0x6}) 1.221214408s ago: executing program 2 (id=506): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) write$binfmt_script(r4, &(0x7f0000000000), 0x4) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) splice(r3, 0x0, r6, 0x0, 0x100000004, 0x0) 1.195782049s ago: executing program 2 (id=507): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x4, 0xb0, 0x3c3}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r1, 0xc60, 0x10}, &(0x7f0000000240)=0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x588, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x250, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@broadcast, [0xff000000, 0x0, 0xff], @ipv4=@private=0xa010100, [0xff000000, 0xffffffff, 0xffffff00, 0xff], 0x4d4, 0x3500, 0x2b, 0x1, 0xa, 0x8}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xff000000, 0xff], @ipv4=@private=0xa010100, [0x0, 0x0, 0x0, 0xff000000], 0x4d4, 0x0, 0x4, 0x84c8c1ffaf088238, 0x6}, {@ipv6=@private1, [0x0, 0x0, 0x6471b27323fbf78f], @ipv6=@private1, [0xff, 0x0, 0x0, 0xffffff00], 0x4d4, 0x3501, 0x87, 0x1, 0x2, 0x2}, {@ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xff000000], @ipv4=@broadcast, [0xff000000, 0xff, 0xff000000, 0xffffffff], 0x4d2, 0x3506, 0x2f, 0x0, 0x0, 0x1e}], 0xf, 0x6}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [0xffffffff], 'batadv0\x00', 'veth1\x00', {0xff}}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES64=r3], 0x20, 0xd0}], 0x1, 0x10) 1.043224946s ago: executing program 2 (id=508): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x10, 0x40, 0x3775f044, 0x24, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8, 0x4e6, 0x3}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4c7, 0x9, 0x8001, 0x4800, r0, 0x7, '\x00', r1, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x6}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}, {0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r6 = syz_io_uring_setup(0x14f5, &(0x7f0000000400)={0x0, 0xd144, 0x1000, 0xffffffff, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r6, 0x3516, 0xddd6, 0x4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES32=0x0], 0x28}}, 0x0) 503.922359ms ago: executing program 4 (id=509): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x28}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)={0xe8, r1, 0x400, 0x70bd26, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x7b, 0xa9, @random="07c7649329c0bd9ff02a050b92844d2c4d5947b31a087e9a8bb1a6988524decdaf076c51c471bffb1f43e6c7c19613995ad19dcde022c28ac49b7f21416bb3ab6dc09ae2747e8a250e2b504efaf59997bfa9e3915356fcace31aaa990b578eac2ea8b2c12512506d887ed8d5a0938cddae7b63d811e388"}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x2e, 0xa8, @random="5ea7d800fec6e2f3bb38cf75501d4fe34443f645863c460657528e40c4657dfc88065cab609ca91e59aa"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4c805}, 0x4004080) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 327.578527ms ago: executing program 4 (id=510): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6400, 0x2, &(0x7f00000002c0)) (async) statx(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x6400, 0x2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000040)=@sr0, r2, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = openat$cgroup_ro(r3, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r3], 0x4}}, 0x0) ioctl$PPPIOCGIDLE32(r4, 0x8008743f, &(0x7f0000000400)) sendfile(r7, r6, 0x0, 0x100000002) 207.228642ms ago: executing program 4 (id=511): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) creat(0x0, 0x0) truncate(0x0, 0x8fff5) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e0280085000000700000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 206.747172ms ago: executing program 2 (id=512): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x118822, &(0x7f0000002cc0)=ANY=[], 0x8, 0x2ee, &(0x7f00000029c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, r1, 0x7, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000044697b7886867cd5d3d5d2357a234731abc0b4f38c01d7197197124a1cdb5d85c4cfd450cacdce65abbe422724ebe9b3c0b047bc989deb5649afadf13f76525ec36bf8e5d46809f574ca8b53e2854cd46d6535a19a04d3138458e900"/132], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}}, 0x0) r4 = timerfd_create(0x0, 0x0) readv(r4, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@deltfilter={0x98, 0x2d, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3, 0xb}, {0x7fe4, 0xa}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'veth0_macvtap\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x30, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x98}}, 0x20000000) socket(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x800006, 0x9, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r7 = socket(0x10, 0x803, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85100000040000009500000000000000180000"], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0x0, 0x0}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="09000000fbffffff080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000008d92a6b4521bb9d5be950eb6d57bf33863cdf96d56a5ffa0622ad289f34d7166fdacbc6d1c26d1672593e994cf14017d125ff63deea0482e7bf73fc6f15e8aa097f3b7e0e42f5b1c39a64694e2a384f0421bda8f06cf6adfe44a1dda8fc584313abc40064cf870b2d89a2a09405fbf99c091b38803dbe8141a6f0b9efa5349404a2f6624aa58e0377d04be6f5d4b4840413fcace172cd773f086b55977ae93031996a42c2c52e529da0b710bb817450c0eb240366bb1b4d388c46713036636b689abb3d865f6c2d93386a86d1c72a4b81869012af187255c02312d2e657a584928e16700"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000700), 0xffe, r9}, 0x38) getsockopt$EBT_SO_GET_INFO(r7, 0x0, 0x80, &(0x7f0000000380)={'filter\x00', 0x0, 0x0, 0x0, [0x0, 0x5, 0x4, 0x2, 0xfffffffffffffffa, 0xce]}, &(0x7f00000000c0)=0x78) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r9, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) 162.659644ms ago: executing program 0 (id=513): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x1, 0x2d, 0x0, 0xffff}, {0x9, 0xff, 0xff}, {0xc, 0x6, 0x4, 0x67}, {0x3, 0x6, 0xa, 0x2}, {0x7, 0x43, 0x86, 0x2}, {0x58aa, 0xb7, 0x5, 0x3}, {0x3, 0x9, 0x9, 0x5}, {0x0, 0x8, 0x7, 0x6}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x1, 0x2d, 0x0, 0xffff}, {0x9, 0xff, 0xff}, {0xc, 0x6, 0x4, 0x67}, {0x3, 0x6, 0xa, 0x2}, {0x7, 0x43, 0x86, 0x2}, {0x58aa, 0xb7, 0x5, 0x3}, {0x3, 0x9, 0x9, 0x5}, {0x0, 0x8, 0x7, 0x6}]}) ustat(0x3, &(0x7f0000000080)) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x71, 0x71, 0x8, [@union={0x6, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x4, 0x3, 0x1}]}, @enum={0xd, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x7255}]}, @datasec={0xe, 0x1, 0x0, 0xf, 0x1, [{0x2, 0xc958143, 0x8}], 'k'}, @enum={0x3, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x3}, {0x7, 0xf8}, {0x7, 0x4}, {0x5, 0x4}]}]}, {0x0, [0x30, 0x5f, 0x30, 0x61, 0x30, 0x2e]}}, &(0x7f0000000180)=""/216, 0x94, 0xd8, 0x0, 0x4, 0x10000}, 0x28) close(r0) (async) close(r0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000300)="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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x6, &(0x7f0000000400)=[{0x1000, 0x6, 0x46, 0x5}, {0x8, 0x3d}, {0x96, 0x10, 0x8, 0x92}, {0x3, 0x9, 0x1, 0x3}, {0x5, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x34, 0x7}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000440)={0x6, &(0x7f0000000400)=[{0x1000, 0x6, 0x46, 0x5}, {0x8, 0x3d}, {0x96, 0x10, 0x8, 0x92}, {0x3, 0x9, 0x1, 0x3}, {0x5, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x34, 0x7}]}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000004c0)={0x7, &(0x7f0000000480)=[{0xffff, 0x9, 0x0, 0x7ff}, {0x1, 0x8, 0x3, 0x40}, {0x6, 0x0, 0x8, 0x1}, {0x0, 0x9, 0xc1, 0x3ff}, {0xff, 0x9, 0x6, 0x3}, {0x7, 0xe, 0x8, 0x4}, {0x19, 0xd, 0x1, 0x8}]}, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000500)=0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000600)={0x10, 0x4, {0x4, @struct={0x9}, 0x0, 0x8, 0x100, 0xfc5, 0x7, 0xbd, 0x1, @struct={0x6, 0x5}, 0x2d0, 0x739, [0xb, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x3]}, {0xfffffffffffffffd, @struct={0xfffffffe, 0x1}, 0x0, 0xfffffffffffffff7, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x8, 0x9deb, 0x422, @usage=0x4, 0xfffffff4, 0x8001, [0xffffffffffffffff, 0x9, 0x2, 0x52c3, 0x8, 0xff]}, {0xffffffffffff0000, @struct={0x9, 0x1ff}, 0x0, 0x8, 0xfffffffffffffff2, 0x8, 0x2, 0x6, 0x81, @usage=0x9, 0x43e, 0x3, [0xa, 0x2ef, 0x5, 0x6, 0x100000001, 0x8]}, {0x401, 0x6}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000600)={0x10, 0x4, {0x4, @struct={0x9}, 0x0, 0x8, 0x100, 0xfc5, 0x7, 0xbd, 0x1, @struct={0x6, 0x5}, 0x2d0, 0x739, [0xb, 0x3, 0xfffffffffffffff7, 0x0, 0x0, 0x3]}, {0xfffffffffffffffd, @struct={0xfffffffe, 0x1}, 0x0, 0xfffffffffffffff7, 0xfffffffffffffff9, 0xfffffffffffffffd, 0x8, 0x9deb, 0x422, @usage=0x4, 0xfffffff4, 0x8001, [0xffffffffffffffff, 0x9, 0x2, 0x52c3, 0x8, 0xff]}, {0xffffffffffff0000, @struct={0x9, 0x1ff}, 0x0, 0x8, 0xfffffffffffffff2, 0x8, 0x2, 0x6, 0x81, @usage=0x9, 0x43e, 0x3, [0xa, 0x2ef, 0x5, 0x6, 0x100000001, 0x8]}, {0x401, 0x6}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000a00)={{r1}, r2, 0x4, @inherit={0x98, &(0x7f0000000540)={0x552a40bda915e77e, 0xa, 0x1, 0xa, {0x32, 0x10001, 0x0, 0x101, 0x9}, [0x8, 0x0, 0x9, 0x401, 0xff, 0x3, 0x57, 0xaa, 0x4, 0xf325]}}, @devid=r3}) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000a00)={{r1}, r2, 0x4, @inherit={0x98, &(0x7f0000000540)={0x552a40bda915e77e, 0xa, 0x1, 0xa, {0x32, 0x10001, 0x0, 0x101, 0x9}, [0x8, 0x0, 0x9, 0x401, 0xff, 0x3, 0x57, 0xaa, 0x4, 0xf325]}}, @devid=r3}) ioctl(r0, 0x3, &(0x7f0000001a00)="6ac551c61fb7a7d1c5a377ece18a28894c2c17946a7ca2e3d27701263c314c1db3991a2750671bcd7c7be4b07f2dd3616fc040e32434af8f38ef84589efe2edfa7ff16017fd09a4f74") socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001a80)) (async) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000001a80)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001ac0)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000001b00)={0x7f, 0xa, 0x0, 0x108ef631, 0x1, [0x6, 0x0, 0xff, 0x2]}) iopl(0x4f) (async) iopl(0x4f) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000001b40)={0x6, 0x1, "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"}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000001d00)={'sit0\x00', &(0x7f0000001c80)={@broadcast, 0x1, 0x0, 0x50, 0x0, [{@initdev}, {@broadcast}, {@local}, {@loopback}, {}]}}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001d40)) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000001dc0)={0x4, &(0x7f0000001d80)=[{}, {}, {}, {}]}) (async) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000001dc0)={0x4, &(0x7f0000001d80)=[{}, {}, {}, {}]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e40), r1) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, r6, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x37}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x2004c0d0}, 0x280c1) sendmsg$key(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x2, 0x17, 0xed, 0x9, 0x9, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd28, 0x3505}, @sadb_x_sec_ctx={0x5, 0x18, 0xd9, 0x0, 0x1f, "d660d2d25d2ab5d15dc828966b82b47fb5eb54dba9f15cb0c5f9989066fdca"}]}, 0x48}}, 0x8000) (async) sendmsg$key(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x2, 0x17, 0xed, 0x9, 0x9, 0x0, 0x70bd2b, 0x25dfdbfb, [@sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd28, 0x3505}, @sadb_x_sec_ctx={0x5, 0x18, 0xd9, 0x0, 0x1f, "d660d2d25d2ab5d15dc828966b82b47fb5eb54dba9f15cb0c5f9989066fdca"}]}, 0x48}}, 0x8000) r7 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r7, &(0x7f0000002040)=""/73, 0x49, 0x40000002, &(0x7f00000020c0)={0xa, 0x0, 0x0, @mcast1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@bloom_filter={0x1e, 0x2, 0x7, 0x8001, 0x60082, r1, 0x7, '\x00', 0x0, r0, 0x2, 0x2, 0x1, 0x1}, 0x50) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b) 83.171937ms ago: executing program 3 (id=514): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x14) syz_clone(0x100b300, 0x0, 0x0, 0x0, 0x0, 0x0) 3.0831ms ago: executing program 1 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0x0, 0x3, 0x18}, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000000)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x3}}], [{@pcr={'pcr', 0x3d, 0x23}}, {@subj_role={'subj_role', 0x3d, '\xa5,,+@(^{[{!$.&*'}}, {@seclabel}]}}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300032d0000002cbd7040fcdbdf2502000900080000001c00000000000000030006000000000002004e22ac1e0001000000000000000002000100000000000000020c00000080030005000000000002004e22ac14140a000000000000000021000800000800"], 0x168}, 0x1, 0x7}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001", @ANYRES32=r5, @ANYRES64=r4], 0x110}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000005c0), r9) sendmsg$FOU_CMD_ADD(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x14, r10, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x8840) sendmsg$FOU_CMD_ADD(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000010", @ANYRES16=r10, @ANYBLOB="08002abf7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40080) 2.58632ms ago: executing program 3 (id=516): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 32) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) connect$rxrpc(r4, &(0x7f0000000400)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x15}, 0xe562}}, 0x24) (async) fcntl$setlease(r4, 0x400, 0x1) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0001}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x24, &(0x7f0000000540)=ANY=[], 0x4, 0x307, &(0x7f00000000c0)="$eJzs3U1rE1sYwPFnkqZ56e1tF5fL5XIvHHrhci/SoQ24c2GRFsWA0jaCFYSpnWrINClJKETEdiG4de2iC5ciiODOjYjbbvwEat11051dBI9MZibNyxhTJX3R/2/RPJ1znjmnc05aeto5s3PmwUp+OSEihojInhbPqEQk6scb8v/rzXd/z736xftcqZmp+cm0UhERuXbnydjLytCV57++iMvW6PWd3fSHrb/mRT7N35KIypVVQWtlqcViseI2oZZy5byp1GXHtsq2yhXKdqnil1uLjq2WneLqalVZhaXh1GrJLpeVVaiqvF1VlaKqlKrKumnlCso0TTWcEtQHKxDpKDO6JWYf72ktu1prHd8QrXVI7Y0giPmv8e/rLI6TtvHvWrdjckT72TMchj090PP448fjvf/fP+xt/PX6IXULh2Tu6sLFqUxmelaphMjK/bXsWtZ79crfDklOHLFlc/bUQk3cOeITw/04cyEzPaHqRuXflXU/f30t6/1wmFqu528HSU35EuRPevmqNT8mqf18W9IyIr9JaH46yJdIU/6g/PdPU74pI/LmhhTFkSV3Jjfl351U6tylTFv7yXo9AAAAAAAAAABOIlM17K/fG40/9SZNM17/j49GedI97NbzKjTW1ydkRGrh6/MToev7A/LnwBF+4QAAAAAA/ETK1dt5y3HsUn+C6KNklyZiIuIGIvfG3M50PeHvfo97a31QRDqLot2baAmSp732ns76HZN+XqggSByghyFBcLNG3qo9C4qSElY5cqAJMD4YeuUTJUP6On9aAumlsiS+bWLHU71OrfbAqAVH/gito42vn0dbTsw7Io0R7J519kBvhy8GifYLNb7tndfp/F5xPgg+Npb4AAAAAJwgTb84AQAAAAAAAAAAAAAAAAAAAAAAAAAAAACAI9K4/9/wn/Tfy+Zhwb79rUXiPyK+c0u29ufEs+8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgGPocwAAAP//N1S2aA==") 0s ago: executing program 4 (id=517): r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f00000016c0)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095", @ANYRES8=r0, @ANYBLOB="d7d3e6153862c4fc8a81337b4be38b70fea3465e3cad06cc83da920a2f8b88b421d2e905fd90d7a4eddcb66493128aa7786a770f4dc2d1e62b33c2d3cbff160e3484a1527d2d1545c0039870853464a65f3ae61ff8f386e86829ef76399e88a40ad498898f8755f0ff8a5b", @ANYRES64=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="18090000000000000000002000000000850000006d00000018010020097b1af8ff00d031b11b5eb05e22b1baabcd057e2592d78dff912409ec9f554745475f33c09d9d6b02990f56a1e3b3518f0b1bbae5c685cfe27c9a7a3f10cbc388abd0bf9a1506d6eb24ae8a7e9b7efdd3e4259137e92cf7aca05f787e81ffab1d85e2c2b0ee70fcb6010a47c1f40297d03f34c138abc265011101ca49470d943b40c6a47cfca6bdb93e61ab88a643d7e5746ff04420525c45a7643482b6a59e94c410c0ec32a2f3832ea10ca9677c26967160700eb4b2b2e752e6ba861b86d6c4cbc222be796d463b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x4, &(0x7f0000000200)=[{0xfff6, 0x0, 0x0, 0x7ffc0002}, {0x8000, 0xa, 0x6, 0x10}, {0x9, 0x10, 0xc0, 0x6}, {0x1, 0x4, 0x9, 0xe}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00'}, 0x18) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000001500)={0x3, &(0x7f00000014c0)=[{0x6, 0x10, 0xd, 0xcf66}, {0x7, 0xf7, 0x2, 0x7}, {0x0, 0x3, 0x1, 0x1}]}, 0x10) getcwd(0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000080000040700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000000)=0x7fff, 0x4) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000001840)=r4, 0x4) getsockopt$inet6_buf(r5, 0x29, 0x6, &(0x7f0000001800)=""/31, &(0x7f0000000040)=0x1f) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="3c0000001000370400000000ffffffff00000000", @ANYRES32=r7, @ANYBLOB="0b1205000000a0597e028b2728c02321b943611e1799873bc3030100697036eca712af3f697837801526d208", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x13, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x2, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r9, 0x4004550c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 35.071476][ T29] audit: type=1400 audit(1763836560.020:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.094538][ T29] audit: type=1400 audit(1763836560.050:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.095567][ T3304] cgroup: Unknown subsys name 'net' [ 35.122370][ T29] audit: type=1400 audit(1763836560.070:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.269642][ T3304] cgroup: Unknown subsys name 'cpuset' [ 35.276066][ T3304] cgroup: Unknown subsys name 'rlimit' [ 35.378288][ T29] audit: type=1400 audit(1763836560.320:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.401739][ T29] audit: type=1400 audit(1763836560.330:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.422238][ T29] audit: type=1400 audit(1763836560.330:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.430492][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.442636][ T29] audit: type=1400 audit(1763836560.330:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.471532][ T29] audit: type=1400 audit(1763836560.340:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.496374][ T29] audit: type=1400 audit(1763836560.340:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.497310][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.519640][ T29] audit: type=1400 audit(1763836560.400:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.736992][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.817835][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.825082][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.832415][ T3314] bridge_slave_0: entered allmulticast mode [ 36.839195][ T3314] bridge_slave_0: entered promiscuous mode [ 36.846035][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.853230][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.860437][ T3314] bridge_slave_1: entered allmulticast mode [ 36.866833][ T3314] bridge_slave_1: entered promiscuous mode [ 36.885866][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.898539][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.916165][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 36.937388][ T3314] team0: Port device team_slave_0 added [ 36.966093][ T3314] team0: Port device team_slave_1 added [ 37.036104][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.043192][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.069215][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.082267][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.089244][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.115217][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.125927][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 37.142551][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.165889][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.173018][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.180145][ T3316] bridge_slave_0: entered allmulticast mode [ 37.186516][ T3316] bridge_slave_0: entered promiscuous mode [ 37.204559][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 37.215343][ T3314] hsr_slave_0: entered promiscuous mode [ 37.221266][ T3314] hsr_slave_1: entered promiscuous mode [ 37.231764][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.238895][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.246066][ T3316] bridge_slave_1: entered allmulticast mode [ 37.252547][ T3316] bridge_slave_1: entered promiscuous mode [ 37.287599][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.298203][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.341932][ T3316] team0: Port device team_slave_0 added [ 37.347799][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.354960][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.362220][ T3325] bridge_slave_0: entered allmulticast mode [ 37.368620][ T3325] bridge_slave_0: entered promiscuous mode [ 37.386132][ T3316] team0: Port device team_slave_1 added [ 37.392013][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.399099][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.406286][ T3325] bridge_slave_1: entered allmulticast mode [ 37.412646][ T3325] bridge_slave_1: entered promiscuous mode [ 37.455344][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.462490][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.469747][ T3315] bridge_slave_0: entered allmulticast mode [ 37.476024][ T3315] bridge_slave_0: entered promiscuous mode [ 37.487853][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.494957][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.520899][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.539106][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.546255][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.553648][ T3315] bridge_slave_1: entered allmulticast mode [ 37.559927][ T3315] bridge_slave_1: entered promiscuous mode [ 37.566050][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.573155][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.580407][ T3318] bridge_slave_0: entered allmulticast mode [ 37.586705][ T3318] bridge_slave_0: entered promiscuous mode [ 37.593527][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.600500][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.626672][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.638451][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.660257][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.667337][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.674635][ T3318] bridge_slave_1: entered allmulticast mode [ 37.681103][ T3318] bridge_slave_1: entered promiscuous mode [ 37.688414][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.730911][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.748663][ T3325] team0: Port device team_slave_0 added [ 37.760512][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.771740][ T3316] hsr_slave_0: entered promiscuous mode [ 37.777863][ T3316] hsr_slave_1: entered promiscuous mode [ 37.783820][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 37.789596][ T3316] Cannot create hsr debugfs directory [ 37.796300][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.815268][ T3325] team0: Port device team_slave_1 added [ 37.826787][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.855134][ T3315] team0: Port device team_slave_0 added [ 37.879653][ T3315] team0: Port device team_slave_1 added [ 37.892036][ T3318] team0: Port device team_slave_0 added [ 37.903158][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.910181][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.936100][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.952819][ T3318] team0: Port device team_slave_1 added [ 37.958939][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.965902][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.991895][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.003083][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.010122][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.036062][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.062843][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.069949][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.095891][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.106738][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.113717][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.139633][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.183484][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.190475][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.216474][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.259934][ T3315] hsr_slave_0: entered promiscuous mode [ 38.265954][ T3315] hsr_slave_1: entered promiscuous mode [ 38.271820][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 38.277540][ T3315] Cannot create hsr debugfs directory [ 38.285345][ T3325] hsr_slave_0: entered promiscuous mode [ 38.291662][ T3325] hsr_slave_1: entered promiscuous mode [ 38.297418][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 38.303202][ T3325] Cannot create hsr debugfs directory [ 38.334872][ T3318] hsr_slave_0: entered promiscuous mode [ 38.341068][ T3318] hsr_slave_1: entered promiscuous mode [ 38.347126][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 38.352888][ T3318] Cannot create hsr debugfs directory [ 38.358452][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.388380][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.397095][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.408213][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.501544][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.512711][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.522318][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.533675][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.575689][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.584456][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.593655][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.610611][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.639190][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.658594][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.682625][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.691815][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.717491][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.727197][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.734715][ T3318] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.747640][ T3318] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.756514][ T3318] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.765284][ T3318] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.787557][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.800638][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.809320][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.825991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.833108][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.842292][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.849423][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.861732][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.870878][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.877961][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.898384][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.908868][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.928735][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.935877][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.952695][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.959854][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.980402][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.990818][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.013009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.020107][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.068420][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.090459][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.100846][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.118664][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.138651][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.145823][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.155636][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.162789][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.181550][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.198674][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.231950][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.240327][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.253103][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.272159][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.279289][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.288549][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.295727][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.345202][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.379177][ T3314] veth0_vlan: entered promiscuous mode [ 39.397889][ T3314] veth1_vlan: entered promiscuous mode [ 39.452845][ T3314] veth0_macvtap: entered promiscuous mode [ 39.470016][ T3314] veth1_macvtap: entered promiscuous mode [ 39.477222][ T3315] veth0_vlan: entered promiscuous mode [ 39.484386][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.494713][ T3316] veth0_vlan: entered promiscuous mode [ 39.522492][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.530402][ T3316] veth1_vlan: entered promiscuous mode [ 39.539601][ T3315] veth1_vlan: entered promiscuous mode [ 39.558046][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.574639][ T3316] veth0_macvtap: entered promiscuous mode [ 39.588128][ T3315] veth0_macvtap: entered promiscuous mode [ 39.609726][ T3315] veth1_macvtap: entered promiscuous mode [ 39.616101][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.625246][ T3316] veth1_macvtap: entered promiscuous mode [ 39.637104][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.651247][ T3318] veth0_vlan: entered promiscuous mode [ 39.660109][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.675291][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.683505][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.690939][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.701225][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.714055][ T3318] veth1_vlan: entered promiscuous mode [ 39.722860][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.735106][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.747363][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.757399][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.774851][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.795956][ T3325] veth0_vlan: entered promiscuous mode [ 39.807670][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.818264][ T3325] veth1_vlan: entered promiscuous mode [ 39.835714][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.849499][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.852156][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.878006][ T3318] veth0_macvtap: entered promiscuous mode [ 39.889287][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.902881][ T3325] veth0_macvtap: entered promiscuous mode [ 39.923606][ T3318] veth1_macvtap: entered promiscuous mode [ 39.942495][ T3325] veth1_macvtap: entered promiscuous mode [ 39.988787][ T3489] loop0: detected capacity change from 0 to 512 [ 39.998540][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.015202][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.027967][ T3489] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 40.030637][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.047176][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.061196][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.076612][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.086436][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.095270][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.107215][ T3466] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.125989][ T3489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.141670][ T3466] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.159792][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 40.159808][ T29] audit: type=1400 audit(1763836565.110:105): avc: denied { mount } for pid=3488 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 40.177853][ T3489] process 'syz.0.1' launched '/dev/fd/8' with NULL argv: empty string added [ 40.206666][ T29] audit: type=1400 audit(1763836565.120:106): avc: denied { execute } for pid=3488 comm="syz.0.1" dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.227670][ T29] audit: type=1400 audit(1763836565.150:107): avc: denied { execute_no_trans } for pid=3488 comm="syz.0.1" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64E403347C6BAB2F14A72974C75945E2C8954858A9FF202864656C6574656429 dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 40.260091][ T29] audit: type=1326 audit(1763836565.210:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40ad9f749 code=0x7ffc0000 [ 40.283329][ T29] audit: type=1326 audit(1763836565.210:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40ad9f749 code=0x7ffc0000 [ 40.308441][ T29] audit: type=1326 audit(1763836565.250:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd40ad9f749 code=0x7ffc0000 [ 40.327494][ T3466] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.331573][ T29] audit: type=1400 audit(1763836565.250:111): avc: denied { tracepoint } for pid=3488 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.360298][ T3498] vhci_hcd: invalid port number 59 [ 40.365435][ T3498] vhci_hcd: default hub control req: 050f v0004 i003b l0 [ 40.371140][ T29] audit: type=1326 audit(1763836565.320:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40ad9f749 code=0x7ffc0000 [ 40.395570][ T29] audit: type=1326 audit(1763836565.320:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd40ad9f749 code=0x7ffc0000 [ 40.423527][ T3466] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.495656][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.562239][ T29] audit: type=1400 audit(1763836565.510:114): avc: denied { create } for pid=3510 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 40.725961][ T3518] loop3: detected capacity change from 0 to 512 [ 40.768320][ T3518] Zero length message leads to an empty skb [ 40.918298][ T3527] loop4: detected capacity change from 0 to 512 [ 40.948811][ C0] hrtimer: interrupt took 43666 ns [ 41.005598][ T3535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 41.034598][ T3535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 41.043458][ T3535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14'. [ 41.099138][ T3540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.111982][ T3540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.191480][ T3544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=616 sclass=netlink_route_socket pid=3544 comm=syz.4.18 [ 41.205268][ T3544] syz.4.18 (3544) used greatest stack depth: 10160 bytes left [ 41.274059][ T3552] loop4: detected capacity change from 0 to 512 [ 41.281327][ T3552] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.282836][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 41.322197][ T3559] loop0: detected capacity change from 0 to 512 [ 41.332435][ T3552] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.348397][ T3559] ======================================================= [ 41.348397][ T3559] WARNING: The mand mount option has been deprecated and [ 41.348397][ T3559] and is ignored by this kernel. Remove the mand [ 41.348397][ T3559] option from the mount to silence this warning. [ 41.348397][ T3559] ======================================================= [ 41.384181][ T3564] xt_hashlimit: max too large, truncated to 1048576 [ 41.393822][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 41.406161][ T3552] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.425990][ T3559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.439182][ T3559] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.451240][ T3559] EXT4-fs (loop0): 1 truncate cleaned up [ 41.457686][ T3559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.499829][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 41.509409][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 41.519782][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.828680][ T3588] netlink: 'syz.3.31': attribute type 12 has an invalid length. [ 41.840339][ T3588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.31'. [ 41.913910][ T3604] netlink: 'syz.4.36': attribute type 13 has an invalid length. [ 41.913996][ T3602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 41.998597][ T3611] tipc: Started in network mode [ 42.003647][ T3611] tipc: Node identity 662fe2b08079, cluster identity 4711 [ 42.010920][ T3611] tipc: Enabled bearer , priority 0 [ 42.019825][ T3611] syzkaller0: entered promiscuous mode [ 42.025424][ T3611] syzkaller0: entered allmulticast mode [ 42.035262][ T3611] tipc: Resetting bearer [ 42.041872][ T3610] tipc: Resetting bearer [ 42.056103][ T3610] tipc: Disabling bearer [ 42.180130][ T3621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 42.189304][ T3621] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 42.209232][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.553702][ T3643] loop4: detected capacity change from 0 to 512 [ 42.570526][ T3643] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.583137][ T3643] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.605511][ T3643] 9pnet_fd: Insufficient options for proto=fd [ 42.633976][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.079123][ T3675] loop4: detected capacity change from 0 to 128 [ 43.121246][ T3680] loop2: detected capacity change from 0 to 512 [ 43.133096][ T3680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.146104][ T3680] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.160319][ T3683] loop4: detected capacity change from 0 to 1024 [ 43.174306][ T3683] ext4: Unknown parameter 'nouser_xattr' [ 43.209477][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.536326][ T3690] loop2: detected capacity change from 0 to 1024 [ 43.543422][ T3690] EXT4-fs: inline encryption not supported [ 43.560701][ T3690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.595974][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.642470][ T3694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.652490][ T3694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.675530][ T3694] loop2: detected capacity change from 0 to 512 [ 43.695473][ T3694] EXT4-fs (loop2): 1 orphan inode deleted [ 43.709810][ T3694] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.727954][ T3466] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 43.746567][ T3694] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.936366][ T3711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.947168][ T3711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.958217][ T3711] bond0 (unregistering): Released all slaves [ 44.210076][ T3717] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.217346][ T3717] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.260492][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.270130][ T3717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.306226][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.326132][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.336607][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.336917][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.355909][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.815373][ T3741] loop2: detected capacity change from 0 to 128 [ 44.826067][ T3742] syz.2.81: attempt to access beyond end of device [ 44.826067][ T3742] loop2: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 44.840086][ T3742] syz.2.81: attempt to access beyond end of device [ 44.840086][ T3742] loop2: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 44.853905][ T3742] syz.2.81: attempt to access beyond end of device [ 44.853905][ T3742] loop2: rw=2049, sector=150, nr_sectors = 2 limit=128 [ 44.867304][ T3742] Buffer I/O error on dev loop2, logical block 75, lost async page write [ 44.876699][ T3742] syz.2.81: attempt to access beyond end of device [ 44.876699][ T3742] loop2: rw=2049, sector=152, nr_sectors = 2 limit=128 [ 44.890026][ T3742] Buffer I/O error on dev loop2, logical block 76, lost async page write [ 44.899812][ T3742] syz.2.81: attempt to access beyond end of device [ 44.899812][ T3742] loop2: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 44.914426][ T3742] syz.2.81: attempt to access beyond end of device [ 44.914426][ T3742] loop2: rw=2049, sector=174, nr_sectors = 2 limit=128 [ 44.927831][ T3742] Buffer I/O error on dev loop2, logical block 87, lost async page write [ 44.940090][ T3742] syz.2.81: attempt to access beyond end of device [ 44.940090][ T3742] loop2: rw=2049, sector=176, nr_sectors = 2 limit=128 [ 44.953675][ T3742] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 45.012231][ T3751] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge_slave_0 [ 45.020736][ T3751] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 45.030690][ T3751] netlink: 'syz.1.84': attribute type 4 has an invalid length. [ 45.058120][ T3751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3751 comm=syz.1.84 [ 45.096443][ T3755] loop1: detected capacity change from 0 to 512 [ 45.110874][ T3509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.119784][ T3755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.134594][ T3755] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.148258][ T3755] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #18: comm syz.1.85: corrupted inode contents [ 45.160542][ T3755] EXT4-fs (loop1): Remounting filesystem read-only [ 45.167060][ T3755] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 45.187821][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.217422][ T29] kauditd_printk_skb: 772 callbacks suppressed [ 45.217437][ T29] audit: type=1400 audit(1763836570.160:886): avc: denied { shutdown } for pid=3760 comm="syz.0.87" laddr=fe80::12 lport=43769 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.218728][ T3761] lo speed is unknown, defaulting to 1000 [ 45.252034][ T29] audit: type=1400 audit(1763836570.200:887): avc: denied { unmount } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 45.259636][ T3761] lo speed is unknown, defaulting to 1000 [ 45.283886][ T3761] lo speed is unknown, defaulting to 1000 [ 45.308974][ T29] audit: type=1326 audit(1763836570.250:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c978ff749 code=0x7ffc0000 [ 45.332303][ T29] audit: type=1326 audit(1763836570.250:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c978ff749 code=0x7ffc0000 [ 45.356347][ T29] audit: type=1326 audit(1763836570.250:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c978ff749 code=0x7ffc0000 [ 45.379759][ T29] audit: type=1326 audit(1763836570.250:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c978ff749 code=0x7ffc0000 [ 45.402911][ T29] audit: type=1326 audit(1763836570.250:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c978ff749 code=0x7ffc0000 [ 45.426096][ T29] audit: type=1326 audit(1763836570.250:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c978ff749 code=0x7ffc0000 [ 45.449421][ T29] audit: type=1326 audit(1763836570.250:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c978ff749 code=0x7ffc0000 [ 45.455136][ T3766] loop1: detected capacity change from 0 to 1024 [ 45.473060][ T29] audit: type=1326 audit(1763836570.250:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3763 comm="syz.2.88" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c978ff749 code=0x7ffc0000 [ 45.505330][ T3761] infiniband sz1: set active [ 45.508099][ T3766] loop1: detected capacity change from 0 to 512 [ 45.510266][ T3761] infiniband sz1: added lo [ 45.521273][ T3395] lo speed is unknown, defaulting to 1000 [ 45.529418][ T3766] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.541432][ T3761] RDS/IB: sz1: added [ 45.545448][ T3761] smc: adding ib device sz1 with port count 1 [ 45.552220][ T3761] smc: ib device sz1 port 1 has no pnetid [ 45.558462][ T36] lo speed is unknown, defaulting to 1000 [ 45.564490][ T3761] lo speed is unknown, defaulting to 1000 [ 45.583007][ T3766] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 45.597950][ T3766] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.86: bg 0: block 248: padding at end of block bitmap is not set [ 45.612891][ T3766] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.86: Failed to acquire dquot type 1 [ 45.625207][ T3766] EXT4-fs (loop1): 1 truncate cleaned up [ 45.630623][ T3761] lo speed is unknown, defaulting to 1000 [ 45.631963][ T3766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 45.670353][ T3766] SELinux: failed to load policy [ 45.674437][ T3761] lo speed is unknown, defaulting to 1000 [ 45.711837][ T3766] syz.1.86 (3766) used greatest stack depth: 9120 bytes left [ 45.728629][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 45.747349][ T3761] lo speed is unknown, defaulting to 1000 [ 45.788430][ T3761] lo speed is unknown, defaulting to 1000 [ 45.873045][ T3780] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.021791][ T3788] loop0: detected capacity change from 0 to 512 [ 46.038950][ T3788] EXT4-fs: Ignoring removed orlov option [ 46.044679][ T3788] EXT4-fs: Ignoring removed bh option [ 46.064313][ T3788] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 46.129472][ T3788] EXT4-fs (loop0): 1 truncate cleaned up [ 46.136082][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.162049][ T3794] loop4: detected capacity change from 0 to 512 [ 46.231900][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.502064][ T3806] loop0: detected capacity change from 0 to 1024 [ 46.516480][ T3806] EXT4-fs: Ignoring removed i_version option [ 46.553258][ T3806] EXT4-fs: Ignoring removed nobh option [ 46.561477][ T3808] IPv6: addrconf: prefix option has invalid lifetime [ 46.590334][ T3806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.647668][ T3817] lo speed is unknown, defaulting to 1000 [ 46.657576][ T3806] __nla_validate_parse: 4 callbacks suppressed [ 46.657661][ T3806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.99'. [ 46.717279][ T3818] netlink: 'syz.4.102': attribute type 17 has an invalid length. [ 46.725290][ T3818] netlink: 148 bytes leftover after parsing attributes in process `syz.4.102'. [ 46.727631][ T3790] syz.1.95 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 46.745237][ T3790] CPU: 0 UID: 0 PID: 3790 Comm: syz.1.95 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.745282][ T3790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.745297][ T3790] Call Trace: [ 46.745304][ T3790] [ 46.745312][ T3790] __dump_stack+0x1d/0x30 [ 46.745405][ T3790] dump_stack_lvl+0xe8/0x140 [ 46.745427][ T3790] dump_stack+0x15/0x1b [ 46.745443][ T3790] dump_header+0x81/0x220 [ 46.745463][ T3790] oom_kill_process+0x342/0x400 [ 46.745509][ T3790] out_of_memory+0x979/0xb80 [ 46.745540][ T3790] try_charge_memcg+0x610/0xa10 [ 46.745575][ T3790] charge_memcg+0x51/0xc0 [ 46.745605][ T3790] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 46.745750][ T3790] __read_swap_cache_async+0x17b/0x2d0 [ 46.745774][ T3790] swap_cluster_readahead+0x262/0x3c0 [ 46.745803][ T3790] swapin_readahead+0xde/0x800 [ 46.745865][ T3790] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 46.745929][ T3790] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 46.746044][ T3790] ? __rcu_read_unlock+0x4f/0x70 [ 46.746071][ T3790] ? swap_cache_get_folio+0x277/0x280 [ 46.746105][ T3790] do_swap_page+0x2ae/0x2370 [ 46.746153][ T3790] ? css_rstat_updated+0xb7/0x240 [ 46.746176][ T3790] ? __pfx_default_wake_function+0x10/0x10 [ 46.746210][ T3790] handle_mm_fault+0x9a5/0x2be0 [ 46.746327][ T3790] ? vma_start_read+0x141/0x1f0 [ 46.746371][ T3790] do_user_addr_fault+0x630/0x1080 [ 46.746400][ T3790] ? fpregs_restore_userregs+0xe2/0x1d0 [ 46.746438][ T3790] ? switch_fpu_return+0xe/0x20 [ 46.746465][ T3790] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 46.746526][ T3790] exc_page_fault+0x62/0xa0 [ 46.746566][ T3790] asm_exc_page_fault+0x26/0x30 [ 46.746669][ T3790] RIP: 0033:0x7f52508259ec [ 46.746689][ T3790] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 46.746761][ T3790] RSP: 002b:00007ffe8707c240 EFLAGS: 00010202 [ 46.746785][ T3790] RAX: 0000000000000000 RBX: 00007f5250ba5fa0 RCX: 0000000000000000 [ 46.746797][ T3790] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555575683808 [ 46.746808][ T3790] RBP: 00007f5250ba7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 46.746845][ T3790] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000b73d [ 46.746860][ T3790] R13: 00007ffe8707c330 R14: ffffffffffffffff R15: 00007ffe8707c350 [ 46.746880][ T3790] [ 46.746886][ T3790] memory: usage 307200kB, limit 307200kB, failcnt 572 [ 46.970308][ T3821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3821 comm=syz.4.102 [ 46.971322][ T3790] memory+swap: usage 172712kB, limit 9007199254740988kB, failcnt 0 [ 47.009342][ T3790] kmem: usage 148864kB, limit 9007199254740988kB, failcnt 0 [ 47.016702][ T3790] Memory cgroup stats for /syz1: [ 47.016793][ T3823] loop2: detected capacity change from 0 to 1024 [ 47.018993][ T3790] cache 135168 [ 47.029535][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.031796][ T3790] rss 0 [ 47.043541][ T3790] shmem 0 [ 47.046561][ T3790] mapped_file 135168 [ 47.049348][ T3823] EXT4-fs: inline encryption not supported [ 47.050522][ T3790] dirty 0 [ 47.059274][ T3790] writeback 0 [ 47.062569][ T3790] workingset_refault_anon 1 [ 47.067118][ T3790] workingset_refault_file 0 [ 47.071670][ T3790] swap 196608 [ 47.075026][ T3790] swapcached 0 [ 47.078399][ T3790] pgpgin 1081 [ 47.081717][ T3790] pgpgout 1048 [ 47.085151][ T3790] pgfault 1309 [ 47.088526][ T3790] pgmajfault 3 [ 47.091988][ T3790] inactive_anon 0 [ 47.095655][ T3790] active_anon 0 [ 47.099201][ T3790] inactive_file 135168 [ 47.103290][ T3790] active_file 0 [ 47.106820][ T3790] unevictable 0 [ 47.110356][ T3790] hierarchical_memory_limit 314572800 [ 47.115731][ T3790] hierarchical_memsw_limit 9223372036854771712 [ 47.121945][ T3790] total_cache 135168 [ 47.125847][ T3790] total_rss 0 [ 47.129160][ T3790] total_shmem 0 [ 47.132622][ T3790] total_mapped_file 135168 [ 47.137069][ T3790] total_dirty 0 [ 47.140561][ T3790] total_writeback 0 [ 47.144378][ T3790] total_workingset_refault_anon 1 [ 47.149428][ T3790] total_workingset_refault_file 0 [ 47.154460][ T3790] total_swap 196608 [ 47.158273][ T3790] total_swapcached 0 [ 47.162201][ T3790] total_pgpgin 1081 [ 47.166089][ T3790] total_pgpgout 1048 [ 47.169999][ T3790] total_pgfault 1309 [ 47.173920][ T3790] total_pgmajfault 3 [ 47.177872][ T3790] total_inactive_anon 0 [ 47.182057][ T3790] total_active_anon 0 [ 47.186058][ T3790] total_inactive_file 135168 [ 47.190790][ T3790] total_active_file 0 [ 47.194800][ T3790] total_unevictable 0 [ 47.198782][ T3790] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.95,pid=3790,uid=0 [ 47.213279][ T3790] Memory cgroup out of memory: Killed process 3790 (syz.1.95) total-vm:93836kB, anon-rss:1136kB, file-rss:22440kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 47.257792][ T3823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.293808][ T3823] SELinux: Context system_u:object_r:useradd_exec_t:s0 is not valid (left unmapped). [ 47.323882][ T3823] mmap: syz.2.103 (3823) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.447549][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.555532][ T3840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.577930][ T3840] netlink: 32 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.711564][ T3828] loop0: detected capacity change from 0 to 8192 [ 47.908140][ T3857] lo speed is unknown, defaulting to 1000 [ 47.946359][ T3866] xt_connbytes: Forcing CT accounting to be enabled [ 47.953821][ T3866] Cannot find set identified by id 0 to match [ 47.987556][ T3866] xt_policy: neither incoming nor outgoing policy selected [ 47.995177][ T3869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.116'. [ 48.046129][ T3872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.118'. [ 48.086476][ T3880] SELinux: Context @ is not valid (left unmapped). [ 48.102414][ T3877] lo speed is unknown, defaulting to 1000 [ 48.129438][ T3880] tc_dump_action: action bad kind [ 48.242017][ T3895] netlink: 'syz.1.123': attribute type 29 has an invalid length. [ 48.476588][ T3908] xt_hashlimit: max too large, truncated to 1048576 [ 49.119784][ T3923] loop1: detected capacity change from 0 to 1024 [ 49.211922][ T3923] infiniband syz!: set down [ 49.216517][ T3923] infiniband syz!: added team_slave_0 [ 49.315662][ T3938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.324615][ T3923] RDS/IB: syz!: added [ 49.332011][ T3923] smc: adding ib device syz! with port count 1 [ 49.338210][ T3923] smc: ib device syz! port 1 has no pnetid [ 49.425525][ T3938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.940019][ T3968] syz.4.141 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 50.060314][ T3978] loop0: detected capacity change from 0 to 1024 [ 50.070564][ T3978] EXT4-fs: inline encryption not supported [ 50.076689][ T3978] EXT4-fs: Ignoring removed bh option [ 50.091140][ T3973] loop4: detected capacity change from 0 to 512 [ 50.114699][ T3978] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.115748][ T3982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.136196][ T3982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.152636][ T3973] EXT4-fs (loop4): 1 orphan inode deleted [ 50.163258][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.169613][ T3973] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.195241][ T3973] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.218117][ T3986] Driver unsupported XDP return value 0 on prog (id 232) dev N/A, expect packet loss! [ 50.242363][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.274408][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 50.274426][ T29] audit: type=1400 audit(1763836575.220:1265): avc: denied { create } for pid=3991 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.307457][ T3995] loop0: detected capacity change from 0 to 512 [ 50.309836][ T29] audit: type=1400 audit(1763836575.250:1266): avc: denied { ioctl } for pid=3991 comm="syz.1.149" path="socket:[6833]" dev="sockfs" ino=6833 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.314624][ T3992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 50.348078][ T3995] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 50.359752][ T3992] team0: Port device team_slave_1 removed [ 50.375753][ T3995] EXT4-fs (loop0): 1 truncate cleaned up [ 50.388367][ T3995] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.418080][ T29] audit: type=1400 audit(1763836575.360:1267): avc: denied { create } for pid=4001 comm="syz.4.151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 50.456771][ T2967] IPVS: starting estimator thread 0... [ 50.510482][ T4002] lo speed is unknown, defaulting to 1000 [ 50.547629][ T29] audit: type=1326 audit(1763836575.390:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525094f749 code=0x7ffc0000 [ 50.571157][ T29] audit: type=1326 audit(1763836575.390:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f525094f749 code=0x7ffc0000 [ 50.594587][ T29] audit: type=1326 audit(1763836575.390:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525094f749 code=0x7ffc0000 [ 50.617975][ T29] audit: type=1326 audit(1763836575.390:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f525094f749 code=0x7ffc0000 [ 50.641327][ T29] audit: type=1326 audit(1763836575.390:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525094f749 code=0x7ffc0000 [ 50.664772][ T29] audit: type=1326 audit(1763836575.390:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f525094f749 code=0x7ffc0000 [ 50.688035][ T29] audit: type=1326 audit(1763836575.390:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3991 comm="syz.1.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525094f749 code=0x7ffc0000 [ 50.721366][ T3995] 9pnet_fd: Insufficient options for proto=fd [ 50.739984][ T4005] IPVS: using max 2352 ests per chain, 117600 per kthread [ 50.800483][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.009454][ T4022] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.036770][ T4022] loop0: detected capacity change from 0 to 512 [ 51.264503][ T4044] capability: warning: `syz.2.162' uses deprecated v2 capabilities in a way that may be insecure [ 51.299953][ T4040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.161'. [ 51.308954][ T4040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.161'. [ 51.318044][ T4044] syz.2.162 uses obsolete (PF_INET,SOCK_PACKET) [ 51.327746][ T4046] netlink: 96 bytes leftover after parsing attributes in process `syz.0.163'. [ 51.339804][ T4042] loop2: detected capacity change from 0 to 512 [ 51.428557][ T4053] vlan3: entered allmulticast mode [ 51.446867][ T4053] dummy0: entered allmulticast mode [ 51.512037][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.519794][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.539016][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.828960][ T36] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 51.877119][ T4085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.886081][ T4085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.907073][ T4076] loop2: detected capacity change from 0 to 2048 [ 51.922110][ T4076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.938404][ T4076] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.960940][ T4089] loop1: detected capacity change from 0 to 1024 [ 51.971500][ T4089] EXT4-fs: Ignoring removed orlov option [ 52.040528][ T4089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.084193][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.094729][ T4089] random: crng reseeded on system resumption [ 52.131865][ T4097] loop3: detected capacity change from 0 to 512 [ 52.144296][ T4100] __nla_validate_parse: 2 callbacks suppressed [ 52.144315][ T4100] netlink: 24 bytes leftover after parsing attributes in process `syz.2.178'. [ 52.165734][ T4097] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.176: bad orphan inode 13 [ 52.175970][ T4097] ext4_test_bit(bit=12, block=4) = 1 [ 52.181508][ T4097] is_bad_inode(inode)=0 [ 52.185673][ T4097] NEXT_ORPHAN(inode)=0 [ 52.189930][ T4097] max_ino=32 [ 52.193193][ T4097] i_nlink=1 [ 52.209006][ T3395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.221442][ T4097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.255952][ T4097] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 52.290794][ T4111] loop0: detected capacity change from 0 to 128 [ 52.328725][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.450010][ T3395] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 52.466558][ T4118] loop3: detected capacity change from 0 to 512 [ 52.482612][ T4118] EXT4-fs (loop3): 1 orphan inode deleted [ 52.499074][ T57] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 1 [ 52.522441][ T4118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.642881][ T4118] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.840233][ T4118] netlink: 'syz.3.182': attribute type 39 has an invalid length. [ 53.099955][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.171756][ T4152] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4152 comm=syz.3.191 [ 53.382689][ T4165] loop3: detected capacity change from 0 to 256 [ 53.419192][ T4165] msdos: Unknown parameter '18446744073709551615' [ 53.427000][ T4165] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 53.438330][ T4165] team0: Port device dummy0 added [ 53.445950][ T4165] netlink: 'syz.3.194': attribute type 10 has an invalid length. [ 53.457589][ T4165] team0: Port device dummy0 removed [ 53.471405][ T4165] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.533201][ T4167] loop2: detected capacity change from 0 to 7 [ 53.564835][ T4171] netlink: 68 bytes leftover after parsing attributes in process `syz.0.196'. [ 53.575437][ T4171] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 53.584295][ T4171] tipc: Started in network mode [ 53.589188][ T4171] tipc: Node identity -etpci0, cluster identity 4711 [ 53.625417][ T4173] loop0: detected capacity change from 0 to 1024 [ 53.634490][ T4173] EXT4-fs: inline encryption not supported [ 53.670944][ T4173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.683544][ T4173] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.752361][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.852602][ T4183] loop0: detected capacity change from 0 to 1024 [ 53.880094][ T4183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.893929][ T4183] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.910615][ T4183] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.200: bg 0: block 393: padding at end of block bitmap is not set [ 53.956507][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.035120][ T4192] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 54.092202][ T4196] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 54.103528][ T4196] netlink: 'syz.0.203': attribute type 12 has an invalid length. [ 54.115150][ T4196] loop0: detected capacity change from 0 to 512 [ 54.131667][ T4196] EXT4-fs: Ignoring removed i_version option [ 54.137730][ T4196] EXT4-fs: Ignoring removed bh option [ 54.181467][ T4196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.197807][ T4196] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.225294][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.302051][ T4204] lo speed is unknown, defaulting to 1000 [ 54.331325][ T4198] loop9: detected capacity change from 0 to 7 [ 54.338430][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.357463][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.365373][ T3307] loop9: unable to read partition table [ 54.372412][ T4198] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.398923][ T4198] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.406807][ T4198] loop9: unable to read partition table [ 54.442437][ T4198] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 54.442437][ T4198] ) failed (rc=-5) [ 54.443119][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.496637][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.513072][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.529209][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.547400][ T3307] Buffer I/O error on dev loop9, logical block 0, async page read [ 54.575265][ T4212] loop0: detected capacity change from 0 to 1024 [ 54.629063][ T4212] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 54.697299][ T4212] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.208: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.713614][ T4212] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.208: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.795668][ T4227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 54.815093][ T4212] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.208: Failed to acquire dquot type 0 [ 54.852059][ T4212] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 54.885771][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.912447][ T4229] bridge0: entered allmulticast mode [ 54.925938][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 54.963152][ T4212] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.208: mark_inode_dirty error [ 54.986477][ T4229] bridge_slave_1: left allmulticast mode [ 54.992329][ T4229] bridge_slave_1: left promiscuous mode [ 54.998047][ T4229] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.019702][ T4229] bridge_slave_0: left allmulticast mode [ 55.025599][ T4229] bridge_slave_0: left promiscuous mode [ 55.031328][ T4229] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.112730][ T4229] bridge0 (unregistering): left allmulticast mode [ 55.124056][ T4212] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 55.179529][ T4212] EXT4-fs (loop0): 1 orphan inode deleted [ 55.236307][ T57] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.239893][ T4212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.258978][ T57] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 55.460677][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 55.460697][ T29] audit: type=1400 audit(1763836580.390:1452): avc: denied { create } for pid=4211 comm="syz.0.208" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 55.508980][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 55.556279][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.569294][ T57] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.593663][ T57] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 55.602616][ T57] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 55.663138][ T3316] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 55.687502][ T4246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.696566][ T4246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.730807][ T3316] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 55.759067][ T3316] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 55.821734][ T29] audit: type=1400 audit(1763836580.750:1453): avc: denied { create } for pid=4256 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.841896][ T29] audit: type=1400 audit(1763836580.750:1454): avc: denied { setopt } for pid=4256 comm="syz.2.222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 55.961041][ T29] audit: type=1400 audit(1763836580.910:1455): avc: denied { read } for pid=4270 comm="syz.1.226" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.014570][ T29] audit: type=1400 audit(1763836580.950:1456): avc: denied { ioctl } for pid=4270 comm="syz.1.226" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.039642][ T29] audit: type=1400 audit(1763836580.950:1457): avc: denied { read } for pid=4270 comm="syz.1.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.059246][ T29] audit: type=1400 audit(1763836580.950:1458): avc: denied { execute } for pid=4270 comm="syz.1.226" path="/32/cpu.stat" dev="tmpfs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.161854][ T4267] loop3: detected capacity change from 0 to 4096 [ 56.199573][ T4269] smc: removing ib device sz1 [ 56.304823][ T4267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.328104][ T4283] netlink: 'syz.4.229': attribute type 13 has an invalid length. [ 56.348858][ T29] audit: type=1400 audit(1763836581.290:1459): avc: denied { remount } for pid=4264 comm="syz.3.224" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.522327][ T4284] loop4: detected capacity change from 0 to 1024 [ 56.526833][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.539998][ T4284] EXT4-fs: Ignoring removed orlov option [ 56.589200][ T4284] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.668659][ T4303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.230'. [ 56.677660][ T4303] netlink: 64 bytes leftover after parsing attributes in process `syz.0.230'. [ 56.703491][ T4283] netlink: 82908 bytes leftover after parsing attributes in process `syz.4.229'. [ 56.710714][ T4306] loop1: detected capacity change from 0 to 2048 [ 56.719685][ T4306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.728420][ T4306] EXT4-fs (loop1): fragment/cluster size (65536) != block size (4096) [ 56.738994][ T4283] netlink: zone id is out of range [ 56.744140][ T4283] netlink: zone id is out of range [ 56.749516][ T4303] netlink: 60 bytes leftover after parsing attributes in process `syz.0.230'. [ 56.758496][ T29] audit: type=1400 audit(1763836581.700:1460): avc: denied { read write } for pid=4305 comm="syz.1.235" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 56.766858][ T4283] netlink: zone id is out of range [ 56.787060][ T4283] netlink: zone id is out of range [ 56.792291][ T4283] netlink: zone id is out of range [ 56.792942][ T4308] netlink: 48 bytes leftover after parsing attributes in process `syz.2.236'. [ 56.797446][ T4283] netlink: zone id is out of range [ 56.811470][ T4283] netlink: zone id is out of range [ 56.816587][ T4283] netlink: zone id is out of range [ 56.825807][ T4308] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 56.831203][ T4283] netlink: zone id is out of range [ 56.832375][ T4308] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.845645][ T4308] vhci_hcd vhci_hcd.0: Device attached [ 56.849118][ T4284] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.878566][ T4283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.961329][ T4327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4327 comm=syz.1.241 [ 56.979937][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.989269][ T4327] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 57.008691][ T4327] bond1: (slave bridge1): making interface the new active one [ 57.016824][ T4327] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 57.036141][ T4334] pimreg: entered allmulticast mode [ 57.058509][ T4334] pimreg: left allmulticast mode [ 57.068470][ T4327] loop1: detected capacity change from 0 to 512 [ 57.078214][ T4327] ------------[ cut here ]------------ [ 57.083732][ T4327] EA inode 11 i_nlink=2 [ 57.084035][ T4327] WARNING: CPU: 1 PID: 4327 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 57.098546][ T4327] Modules linked in: [ 57.102555][ T4327] CPU: 1 UID: 0 PID: 4327 Comm: syz.1.241 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.112361][ T4327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 57.122445][ T4327] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 57.129177][ T4327] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 86 d6 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 57.148967][ T4327] RSP: 0018:ffffc900032db5a0 EFLAGS: 00010246 [ 57.155118][ T4327] RAX: b43952b2d6affb00 RBX: ffff888106f36d18 RCX: 0000000000080000 [ 57.163221][ T4327] RDX: ffffc90001c82000 RSI: 0000000000003d41 RDI: 0000000000003d42 [ 57.171250][ T4327] RBP: 0000000000000002 R08: 0001c900032db427 R09: 0000000000000000 [ 57.179271][ T4327] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888106f36cc8 [ 57.187263][ T4327] R13: 000000000000000b R14: ffff888106f36c80 R15: 0000000000000001 [ 57.195365][ T4327] FS: 00007f524f3af6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 57.204364][ T4327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.210995][ T4327] CR2: 00007f5250932a60 CR3: 00000001367a6000 CR4: 00000000003506f0 [ 57.219019][ T4327] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 57.227002][ T4327] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 57.235028][ T4327] Call Trace: [ 57.238335][ T4327] [ 57.241336][ T4327] ext4_xattr_set_entry+0x77f/0x1020 [ 57.246768][ T4327] ext4_xattr_ibody_set+0x184/0x3c0 [ 57.252099][ T4327] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 57.258024][ T4327] __ext4_expand_extra_isize+0x246/0x280 [ 57.263733][ T4327] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 57.269344][ T4327] ext4_evict_inode+0x80e/0xd90 [ 57.274303][ T4327] ? __pfx_ext4_evict_inode+0x10/0x10 [ 57.279743][ T4327] evict+0x2e3/0x550 [ 57.283790][ T4327] ? __dquot_initialize+0x146/0x7c0 [ 57.289088][ T4327] iput+0x4ed/0x650 [ 57.292932][ T4327] ext4_process_orphan+0x1a9/0x1c0 [ 57.298084][ T4327] ext4_orphan_cleanup+0x6a8/0xa00 [ 57.303252][ T4327] ext4_fill_super+0x3483/0x3810 [ 57.308230][ T4327] ? snprintf+0x86/0xb0 [ 57.312478][ T4327] ? set_blocksize+0x1a8/0x310 [ 57.317279][ T4327] ? sb_set_blocksize+0xe3/0x100 [ 57.322261][ T4327] ? setup_bdev_super+0x30e/0x370 [ 57.327332][ T4327] ? __pfx_ext4_fill_super+0x10/0x10 [ 57.332796][ T4327] get_tree_bdev_flags+0x291/0x300 [ 57.337941][ T4327] ? __pfx_ext4_fill_super+0x10/0x10 [ 57.343283][ T4327] get_tree_bdev+0x1f/0x30 [ 57.347801][ T4327] ext4_get_tree+0x1c/0x30 [ 57.352335][ T4327] vfs_get_tree+0x57/0x1d0 [ 57.356782][ T4327] do_new_mount+0x24d/0x660 [ 57.361412][ T4327] path_mount+0x4a5/0xb70 [ 57.365865][ T4327] ? user_path_at+0x109/0x130 [ 57.370579][ T4327] __se_sys_mount+0x28c/0x2e0 [ 57.375314][ T4327] __x64_sys_mount+0x67/0x80 [ 57.380053][ T4327] x64_sys_call+0x2b51/0x3000 [ 57.384839][ T4327] do_syscall_64+0xd2/0x200 [ 57.389395][ T4327] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.395489][ T4327] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 57.401329][ T4327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.407375][ T4327] RIP: 0033:0x7f5250950eea [ 57.411872][ T4327] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.431809][ T4327] RSP: 002b:00007f524f3aee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.440376][ T4327] RAX: ffffffffffffffda RBX: 00007f524f3aeef0 RCX: 00007f5250950eea [ 57.448559][ T4327] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f524f3aeeb0 [ 57.456622][ T4327] RBP: 0000200000000180 R08: 00007f524f3aeef0 R09: 0000000000800700 [ 57.464714][ T4327] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 57.472760][ T4327] R13: 00007f524f3aeeb0 R14: 000000000000046f R15: 000000000000002c [ 57.480820][ T4327] [ 57.481021][ T4310] vhci_hcd: connection closed [ 57.483902][ T4327] ---[ end trace 0000000000000000 ]--- [ 57.483979][ T3395] usb 6-1: SetAddress Request (2) to port 0 [ 57.502834][ T31] vhci_hcd: stop threads [ 57.502919][ T3395] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 57.507137][ T31] vhci_hcd: release socket [ 57.507152][ T31] vhci_hcd: disconnect device [ 57.515761][ T4327] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.241: iget: bad extra_isize 90 (inode size 256) [ 57.537497][ T3395] usb 6-1: enqueue for inactive port 0 [ 57.543069][ T3395] usb 6-1: enqueue for inactive port 0 [ 57.548590][ T4327] EXT4-fs (loop1): Remounting filesystem read-only [ 57.555400][ T3395] usb 6-1: enqueue for inactive port 0 [ 57.568946][ T4327] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 57.577955][ T4327] EXT4-fs (loop1): 1 orphan inode deleted [ 57.586002][ T4327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.614363][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.633350][ T4345] loop0: detected capacity change from 0 to 128 [ 57.640572][ T4345] EXT4-fs: Ignoring removed nobh option [ 57.647907][ T4345] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.660360][ T4345] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 57.678995][ T3395] usb 6-1: new SuperSpeed USB device number 2 using vhci_hcd [ 57.712069][ T3395] usb 6-1: enqueue for inactive port 0 [ 57.726094][ T3395] usb 6-1: enqueue for inactive port 0 [ 57.731732][ T3395] usb 6-1: enqueue for inactive port 0 [ 57.747051][ T36] kernel read not supported for file 109/task/109/oom_score (pid: 36 comm: kworker/1:1) [ 57.757561][ T4316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.768403][ T4354] __nla_validate_parse: 1 callbacks suppressed [ 57.768417][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 57.821225][ T4356] geneve2: entered promiscuous mode [ 57.919859][ T4358] loop3: detected capacity change from 0 to 512 [ 58.205211][ T4358] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.234376][ T4358] EXT4-fs (loop3): mount failed [ 58.302367][ T4366] netlink: 92 bytes leftover after parsing attributes in process `syz.2.249'. [ 58.306121][ T4365] debugfs: 'ttyS3' already exists in 'caif_serial' [ 58.414289][ T4366] loop2: detected capacity change from 0 to 128 [ 58.528129][ T3316] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.570903][ T4377] netlink: 68 bytes leftover after parsing attributes in process `syz.0.252'. [ 58.590947][ T4380] loop0: detected capacity change from 0 to 256 [ 58.611253][ T4377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 58.636673][ T4386] loop4: detected capacity change from 0 to 512 [ 58.643834][ T4386] /dev/loop4: Can't open blockdev [ 58.694089][ T4398] loop1: detected capacity change from 0 to 1024 [ 58.710699][ T4398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.724274][ T4396] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 58.732391][ T4396] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 58.742215][ T4398] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.839136][ T3395] usb usb6-port1: attempt power cycle [ 59.061700][ T4408] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.259: lblock 0 mapped to illegal pblock 0 (length 1) [ 59.076178][ T4408] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 59.088535][ T4408] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.088535][ T4408] [ 59.102883][ T4386] loop4: detected capacity change from 0 to 512 [ 59.138628][ T4419] loop0: detected capacity change from 0 to 512 [ 59.146058][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.170497][ T4419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.189145][ T4419] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.199687][ T4386] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.257017][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 59.259549][ T4442] loop2: detected capacity change from 0 to 128 [ 59.290243][ T4444] loop2: detected capacity change from 0 to 736 [ 59.304267][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.313926][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.486327][ T2967] IPVS: starting estimator thread 0... [ 59.488308][ T4468] hub 9-0:1.0: USB hub found [ 59.496929][ T4468] hub 9-0:1.0: 8 ports detected [ 59.609280][ T4477] IPVS: using max 2352 ests per chain, 117600 per kthread [ 59.647341][ T4485] bridge: RTM_NEWNEIGH with invalid ether address [ 59.664374][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 59.682555][ T4478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.713712][ T4468] bond1: option primary_reselect: invalid value (4) [ 59.722199][ T4468] bond1 (unregistering): Released all slaves [ 59.746169][ T4485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.764147][ T4478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.845176][ T4478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.903962][ T4478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.976593][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.989044][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.029132][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.045016][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.076906][ T4515] loop4: detected capacity change from 0 to 2048 [ 60.123488][ T4515] loop4: p2 p3 p7 [ 60.153186][ T4525] loop1: detected capacity change from 0 to 512 [ 60.160617][ T4525] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.177498][ T4524] loop3: detected capacity change from 0 to 512 [ 60.190203][ T4525] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 60.244983][ T4524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.260265][ T4525] EXT4-fs (loop1): 1 truncate cleaned up [ 60.268099][ T4524] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.280006][ T4525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.318196][ T4525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.326925][ T4524] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.290: corrupted inode contents [ 60.342920][ T4532] capability: warning: `syz.0.292' uses 32-bit capabilities (legacy support in use) [ 60.354347][ T4524] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.290: mark_inode_dirty error [ 60.373661][ T4524] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.290: corrupted inode contents [ 60.443608][ T4540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.291'. [ 60.459960][ T4524] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.290: corrupted inode contents [ 60.472385][ T4524] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.290: mark_inode_dirty error [ 60.489223][ T4524] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.290: corrupted inode contents [ 60.519300][ T4524] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.290: mark_inode_dirty error [ 60.537323][ T4524] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.290: corrupted inode contents [ 60.570147][ T4524] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.290: mark_inode_dirty error [ 60.588927][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 60.588946][ T29] audit: type=1326 audit(1763836585.530:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd40ad965e7 code=0x7ffc0000 [ 60.618768][ T29] audit: type=1326 audit(1763836585.530:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd40ad3b829 code=0x7ffc0000 [ 60.642101][ T29] audit: type=1326 audit(1763836585.530:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd40ad965e7 code=0x7ffc0000 [ 60.665385][ T29] audit: type=1326 audit(1763836585.530:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd40ad3b829 code=0x7ffc0000 [ 60.688676][ T29] audit: type=1326 audit(1763836585.530:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd40ad965e7 code=0x7ffc0000 [ 60.711964][ T29] audit: type=1326 audit(1763836585.530:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd40ad3b829 code=0x7ffc0000 [ 60.735455][ T29] audit: type=1326 audit(1763836585.530:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd40ad965e7 code=0x7ffc0000 [ 60.758721][ T29] audit: type=1326 audit(1763836585.530:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd40ad3b829 code=0x7ffc0000 [ 60.759052][ T4535] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.290: corrupted inode contents [ 60.782144][ T29] audit: type=1326 audit(1763836585.530:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd40ad965e7 code=0x7ffc0000 [ 60.817005][ T29] audit: type=1326 audit(1763836585.530:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4546 comm="syz.0.295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd40ad3b829 code=0x7ffc0000 [ 61.033931][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.049238][ T3395] usb usb6-port1: unable to enumerate USB device [ 61.090706][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.100895][ T4547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 61.186116][ T4547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.224591][ T4575] bridge0: entered promiscuous mode [ 61.230121][ T4575] macvtap1: entered allmulticast mode [ 61.235647][ T4575] bridge0: entered allmulticast mode [ 61.246904][ T4575] batman_adv: batadv0: Adding interface: macvtap1 [ 61.253410][ T4575] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.279004][ T4575] batman_adv: batadv0: Interface activated: macvtap1 [ 61.292970][ T4577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.301183][ T4577] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 61.311857][ T4583] loop3: detected capacity change from 0 to 512 [ 61.314579][ T4577] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 61.327352][ T4583] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.301: inode has both inline data and extents flags [ 61.340634][ T4583] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.301: couldn't read orphan inode 15 (err -117) [ 61.357422][ T4579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.302'. [ 61.367409][ T4579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.302'. [ 61.404130][ T4579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.302'. [ 61.413386][ T4583] lo: entered allmulticast mode [ 61.434979][ T4590] loop4: detected capacity change from 0 to 2048 [ 61.461988][ T4590] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.540174][ T4594] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.305: bg 0: block 345: padding at end of block bitmap is not set [ 61.610769][ T4594] EXT4-fs (loop4): Remounting filesystem read-only [ 61.640142][ T12] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 61.736625][ T4572] lo: left allmulticast mode [ 61.982079][ T4619] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.998580][ T4627] SELinux: policydb magic number 0x6d695f78 does not match expected magic number 0xf97cff8c [ 62.011975][ T4627] SELinux: failed to load policy [ 62.055082][ T4641] loop2: detected capacity change from 0 to 512 [ 62.197098][ T4641] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm gtp: bg 0: block 5: invalid block bitmap [ 62.211311][ T4641] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 62.220464][ T4641] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm gtp: invalid indirect mapped block 3 (level 2) [ 62.243347][ T4641] EXT4-fs (loop2): 2 truncates cleaned up [ 62.848534][ T4675] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.877184][ T4679] loop1: detected capacity change from 0 to 512 [ 62.883719][ T4679] ext4: Unknown parameter 'obj_user' [ 62.945308][ T4681] loop4: detected capacity change from 0 to 256 [ 62.973000][ T4675] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.014020][ T4697] netlink: 'syz.4.336': attribute type 1 has an invalid length. [ 63.021831][ T4697] __nla_validate_parse: 65 callbacks suppressed [ 63.021844][ T4697] netlink: 15150 bytes leftover after parsing attributes in process `syz.4.336'. [ 63.082100][ T4702] loop4: detected capacity change from 0 to 1024 [ 63.088890][ T4702] EXT4-fs: Ignoring removed orlov option [ 63.094744][ T4702] EXT4-fs (loop4): Invalid log block size: 27052 [ 63.108908][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 63.122297][ T4675] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.141685][ T4704] loop2: detected capacity change from 0 to 764 [ 63.162525][ T4675] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.173002][ T4704] Symlink component flag not implemented [ 63.178693][ T4704] Symlink component flag not implemented [ 63.184853][ T4704] Symlink component flag not implemented (129) [ 63.191041][ T4704] Symlink component flag not implemented (6) [ 63.199615][ T4704] rock: directory entry would overflow storage [ 63.205808][ T4704] rock: sig=0x4f50, size=4, remaining=3 [ 63.211532][ T4704] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 63.221974][ T4704] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.259371][ T4711] loop4: detected capacity change from 0 to 164 [ 63.266607][ T4711] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.285480][ T4711] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 63.302129][ T3466] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.305511][ T4711] Symlink component flag not implemented [ 63.316049][ T4711] Symlink component flag not implemented [ 63.322006][ T4711] Symlink component flag not implemented (7) [ 63.328084][ T4711] Symlink component flag not implemented (116) [ 63.330352][ T3466] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.357684][ T3466] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.371938][ T3466] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.404122][ T4723] loop2: detected capacity change from 0 to 512 [ 63.434351][ T4726] pim6reg: entered allmulticast mode [ 63.456350][ T4723] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.340: Parent and EA inode have the same ino 15 [ 63.469853][ T4723] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.340: Parent and EA inode have the same ino 15 [ 63.494007][ T4731] pim6reg: left allmulticast mode [ 63.495445][ T4723] EXT4-fs (loop2): 1 orphan inode deleted [ 63.617753][ T4733] lo speed is unknown, defaulting to 1000 [ 63.623578][ T4733] lo speed is unknown, defaulting to 1000 [ 63.629810][ T4733] lo speed is unknown, defaulting to 1000 [ 63.637795][ T4733] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 63.680013][ T4733] lo speed is unknown, defaulting to 1000 [ 63.686328][ T4733] lo speed is unknown, defaulting to 1000 [ 63.693049][ T4733] lo speed is unknown, defaulting to 1000 [ 63.699905][ T4733] lo speed is unknown, defaulting to 1000 [ 63.706576][ T4733] lo speed is unknown, defaulting to 1000 [ 63.907901][ T4735] random: crng reseeded on system resumption [ 63.919090][ T4735] Restarting kernel threads ... [ 63.924462][ T4735] Done restarting kernel threads. [ 63.931436][ T4735] netlink: 112 bytes leftover after parsing attributes in process `syz.1.347'. [ 64.339045][ T4744] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.370396][ T4746] loop3: detected capacity change from 0 to 1024 [ 64.441255][ T4744] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.491567][ T4756] loop3: detected capacity change from 0 to 1024 [ 64.498621][ T4756] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 64.506605][ T4757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.353'. [ 64.516302][ T4757] netlink: 60 bytes leftover after parsing attributes in process `syz.3.353'. [ 64.533145][ T4757] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 64.543962][ T4757] bond1 (unregistering): Released all slaves [ 64.556436][ T4744] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.640864][ T4744] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.797328][ T406] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.818085][ T406] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.841700][ T406] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.854343][ T406] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.892624][ T4772] loop2: detected capacity change from 0 to 2048 [ 65.291617][ T4772] Alternate GPT is invalid, using primary GPT. [ 65.298006][ T4772] loop2: p2 p3 p7 [ 65.350265][ T4780] geneve2: entered promiscuous mode [ 65.355620][ T4780] geneve2: entered allmulticast mode [ 65.405888][ T4787] loop3: detected capacity change from 0 to 128 [ 65.414840][ T4787] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #2: comm syz.3.362: corrupted xattr block 5: invalid header [ 65.428372][ T4787] SELinux: (dev loop3, type ext4) getxattr errno 117 [ 65.439396][ T4791] loop2: detected capacity change from 0 to 512 [ 65.446309][ T4791] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 65.456904][ T4791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e02c, mo2=0002] [ 65.465081][ T4791] System zones: 1-12 [ 65.469243][ T4791] EXT4-fs (loop2): orphan cleanup on readonly fs [ 65.475657][ T4791] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.363: Inode bitmap for bg 0 marked uninitialized [ 65.488458][ T4791] EXT4-fs (loop2): Remounting filesystem read-only [ 65.631059][ T4805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 65.643025][ T4793] IPv6: NLM_F_CREATE should be specified when creating new route [ 65.681563][ T4809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2065 sclass=netlink_route_socket pid=4809 comm=syz.2.369 [ 65.755808][ T29] kauditd_printk_skb: 1918 callbacks suppressed [ 65.755822][ T29] audit: type=1326 audit(1763836590.700:3542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.785762][ T29] audit: type=1326 audit(1763836590.700:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.809090][ T29] audit: type=1326 audit(1763836590.700:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.832458][ T29] audit: type=1326 audit(1763836590.700:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.855848][ T29] audit: type=1326 audit(1763836590.700:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.879208][ T29] audit: type=1326 audit(1763836590.700:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.902554][ T29] audit: type=1326 audit(1763836590.700:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.925890][ T29] audit: type=1326 audit(1763836590.700:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.949329][ T29] audit: type=1326 audit(1763836590.710:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 65.972755][ T29] audit: type=1326 audit(1763836590.710:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4813 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 66.065645][ T4826] loop3: detected capacity change from 0 to 128 [ 66.075845][ T4826] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 66.083800][ T4826] FAT-fs (loop3): Filesystem has been set read-only [ 66.090760][ T4826] syz.3.371: attempt to access beyond end of device [ 66.090760][ T4826] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 66.104476][ T4826] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 66.112362][ T4826] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 66.124741][ T4826] syz.3.371: attempt to access beyond end of device [ 66.124741][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.140841][ T4826] syz.3.371: attempt to access beyond end of device [ 66.140841][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.154379][ T4826] syz.3.371: attempt to access beyond end of device [ 66.154379][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.155764][ T4831] loop2: detected capacity change from 0 to 1024 [ 66.168035][ T4826] syz.3.371: attempt to access beyond end of device [ 66.168035][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.199317][ T4831] EXT4-fs: inline encryption not supported [ 66.206969][ T4826] syz.3.371: attempt to access beyond end of device [ 66.206969][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.222613][ T4826] syz.3.371: attempt to access beyond end of device [ 66.222613][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.236392][ T4826] syz.3.371: attempt to access beyond end of device [ 66.236392][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.270781][ T4826] syz.3.371: attempt to access beyond end of device [ 66.270781][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.291722][ T4831] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.375: Allocating blocks 497-513 which overlap fs metadata [ 66.298940][ T4826] syz.3.371: attempt to access beyond end of device [ 66.298940][ T4826] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 66.319297][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 66.328150][ T4839] netlink: 12 bytes leftover after parsing attributes in process `syz.2.375'. [ 66.398088][ T4844] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.378'. [ 66.553734][ T4852] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.598945][ T4852] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 66.686309][ T4868] 9pnet_fd: Insufficient options for proto=fd [ 67.183916][ T4890] loop3: detected capacity change from 0 to 1024 [ 67.191403][ T4890] EXT4-fs: Ignoring removed orlov option [ 67.215751][ T4890] netlink: 3 bytes leftover after parsing attributes in process `syz.3.391'. [ 67.225952][ T4890] 0ªX¹¦À: renamed from caif0 [ 67.236357][ T4890] 0ªX¹¦À: entered allmulticast mode [ 67.241664][ T4890] net_ratelimit: 182 callbacks suppressed [ 67.241681][ T4890] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 67.249509][ T4898] blktrace: Concurrent blktraces are not allowed on loop4 [ 67.266583][ T4896] loop0: detected capacity change from 0 to 128 [ 67.273702][ T4901] sit0: entered promiscuous mode [ 67.332161][ T4901] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 67.339941][ T4901] netlink: 1 bytes leftover after parsing attributes in process `syz.3.391'. [ 67.361595][ T4890] netlink: 'syz.3.391': attribute type 4 has an invalid length. [ 67.415688][ T4890] .`: renamed from bond0 (while UP) [ 67.440335][ T4923] netlink: 'syz.1.395': attribute type 10 has an invalid length. [ 67.561153][ T4927] loop2: detected capacity change from 0 to 512 [ 67.620659][ T4928] .`: (slave dummy0): Releasing backup interface [ 67.820243][ T4928] .`: (slave bond_slave_0): Releasing backup interface [ 67.925130][ T4928] .`: (slave bond_slave_1): Releasing backup interface [ 68.033359][ T4928] team0: Port device team_slave_0 removed [ 68.047166][ T4940] netlink: 'syz.1.402': attribute type 1 has an invalid length. [ 68.112395][ T4928] team0: Port device team_slave_1 removed [ 68.175108][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.182616][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.334696][ T4941] 9pnet: Could not find request transport: fd€ [ 68.355017][ T4928] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.362497][ T4928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.394255][ T4928] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.410271][ T2967] lo speed is unknown, defaulting to 1000 [ 68.440083][ T4944] loop0: detected capacity change from 0 to 1024 [ 68.447974][ T4931] team0: Port device team_slave_1 removed [ 68.578682][ T3495] IPVS: starting estimator thread 0... [ 68.668865][ T4949] IPVS: using max 2064 ests per chain, 103200 per kthread [ 68.690302][ T4944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.712823][ T4951] loop3: detected capacity change from 0 to 2048 [ 68.719422][ T4944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.838363][ T4956] __nla_validate_parse: 5 callbacks suppressed [ 68.838380][ T4956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 68.858034][ T4933] syz.2.401 (4933) used greatest stack depth: 6256 bytes left [ 68.942142][ T4965] loop4: detected capacity change from 0 to 512 [ 68.959412][ T4965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 68.977815][ T4962] netlink: 96 bytes leftover after parsing attributes in process `syz.1.408'. [ 68.996568][ T4965] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.410: bad orphan inode 131083 [ 69.014596][ T4970] wg2: entered promiscuous mode [ 69.019637][ T4970] wg2: entered allmulticast mode [ 69.104680][ T4975] netlink: 48 bytes leftover after parsing attributes in process `syz.4.413'. [ 69.128638][ T4975] loop4: detected capacity change from 0 to 1024 [ 69.145699][ T4975] EXT4-fs: Ignoring removed bh option [ 69.158398][ T4975] EXT4-fs: inline encryption not supported [ 69.164602][ T4960] loop3: detected capacity change from 0 to 2048 [ 69.172508][ T4978] hub 1-0:1.0: USB hub found [ 69.177630][ T4978] hub 1-0:1.0: 8 ports detected [ 69.191431][ T4985] loop2: detected capacity change from 0 to 256 [ 69.199682][ T4960] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.204157][ T4975] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 69.233998][ T4989] loop1: detected capacity change from 0 to 512 [ 69.246712][ T4985] FAT-fs (loop2): Directory bread(block 64) failed [ 69.253570][ T4975] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 69.259067][ T4985] FAT-fs (loop2): Directory bread(block 65) failed [ 69.266177][ T4975] EXT4-fs (loop4): This should not happen!! Data will be lost [ 69.266177][ T4975] [ 69.282368][ T4975] EXT4-fs (loop4): Total free blocks count 0 [ 69.288363][ T4975] EXT4-fs (loop4): Free/Dirty block details [ 69.294369][ T4975] EXT4-fs (loop4): free_blocks=20480 [ 69.299690][ T4975] EXT4-fs (loop4): dirty_blocks=16 [ 69.304814][ T4975] EXT4-fs (loop4): Block reservation details [ 69.310895][ T4975] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 69.326369][ T4985] FAT-fs (loop2): Directory bread(block 66) failed [ 69.336316][ T4985] FAT-fs (loop2): Directory bread(block 67) failed [ 69.359041][ T4985] FAT-fs (loop2): Directory bread(block 68) failed [ 69.366041][ T4985] FAT-fs (loop2): Directory bread(block 69) failed [ 69.401288][ T4985] FAT-fs (loop2): Directory bread(block 70) failed [ 69.407850][ T4985] FAT-fs (loop2): Directory bread(block 71) failed [ 69.416031][ T4985] FAT-fs (loop2): Directory bread(block 72) failed [ 69.431556][ T4985] FAT-fs (loop2): Directory bread(block 73) failed [ 69.442296][ T5001] loop1: detected capacity change from 0 to 1024 [ 69.489162][ T5001] EXT4-fs: inline encryption not supported [ 69.542281][ T5001] EXT4-fs (loop1): orphan cleanup on readonly fs [ 69.655906][ T5001] EXT4-fs (loop1): 1 truncate cleaned up [ 69.683596][ T5019] loop2: detected capacity change from 0 to 1024 [ 69.691495][ T5020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5020 comm=syz.4.422 [ 69.703916][ T5020] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5020 comm=syz.4.422 [ 69.717563][ T5019] EXT4-fs: Ignoring removed nomblk_io_submit option [ 69.845527][ T5030] loop1: detected capacity change from 0 to 512 [ 69.873599][ T5027] lo speed is unknown, defaulting to 1000 [ 69.897744][ T5030] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.427: bad orphan inode 11862016 [ 69.914651][ T5039] netlink: 68 bytes leftover after parsing attributes in process `syz.2.428'. [ 69.927600][ T5030] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.934452][ T5039] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 69.942057][ T5024] lo speed is unknown, defaulting to 1000 [ 69.945880][ T5039] netlink: 224 bytes leftover after parsing attributes in process `syz.2.428'. [ 69.996169][ T5027] EXT4-fs (loop1): shut down requested (2) [ 70.063009][ T5045] netlink: 'syz.4.431': attribute type 10 has an invalid length. [ 70.063409][ T5027] netlink: '+}[@': attribute type 13 has an invalid length. [ 70.071069][ T5045] netlink: 55 bytes leftover after parsing attributes in process `syz.4.431'. [ 70.104949][ T5050] netlink: 48 bytes leftover after parsing attributes in process `syz.2.433'. [ 70.257253][ T3314] EXT4-fs unmount: 33 callbacks suppressed [ 70.257283][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 70.263441][ T5066] loop2: detected capacity change from 0 to 1024 [ 70.279100][ T5057] netlink: 60 bytes leftover after parsing attributes in process `syz.4.431'. [ 70.297651][ T5062] netlink: 60 bytes leftover after parsing attributes in process `syz.4.431'. [ 70.311164][ T5068] loop3: detected capacity change from 0 to 512 [ 70.338240][ T5068] EXT4-fs: Ignoring removed nobh option [ 70.365173][ T5066] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 70.377621][ T5066] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.399123][ T5066] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.437: lblock 0 mapped to illegal pblock 0 (length 6) [ 70.418504][ T5076] loop4: detected capacity change from 0 to 256 [ 70.441014][ T5066] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 70.453390][ T5066] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.453390][ T5066] [ 70.454145][ T5073] lo speed is unknown, defaulting to 1000 [ 70.474076][ T5068] EXT4-fs (loop3): orphan cleanup on readonly fs [ 70.477259][ T5076] FAT-fs (loop4): Directory bread(block 64) failed [ 70.480692][ T5068] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.487010][ T5076] FAT-fs (loop4): Directory bread(block 65) failed [ 70.487050][ T5076] FAT-fs (loop4): Directory bread(block 66) failed [ 70.498553][ T5068] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 70.521841][ T5068] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.436: Corrupt directory, running e2fsck is recommended [ 70.525645][ T5081] tc_dump_action: action bad kind [ 70.536100][ T5068] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 70.541848][ T5066] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 7: comm syz.2.437: lblock 7 mapped to illegal pblock 7 (length 9) [ 70.563288][ T5076] FAT-fs (loop4): Directory bread(block 67) failed [ 70.575233][ T5076] FAT-fs (loop4): Directory bread(block 68) failed [ 70.581919][ T5076] FAT-fs (loop4): Directory bread(block 69) failed [ 70.599389][ T5076] FAT-fs (loop4): Directory bread(block 70) failed [ 70.609184][ T5076] FAT-fs (loop4): Directory bread(block 71) failed [ 70.611886][ T5068] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.436: corrupted in-inode xattr: invalid ea_ino [ 70.629199][ T5076] FAT-fs (loop4): Directory bread(block 72) failed [ 70.635743][ T5076] FAT-fs (loop4): Directory bread(block 73) failed [ 70.642619][ T5066] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 70.644806][ T5068] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.436: couldn't read orphan inode 15 (err -117) [ 70.655094][ T5066] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.655094][ T5066] [ 70.707501][ T5087] lo speed is unknown, defaulting to 1000 [ 70.718473][ T5068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.736102][ T5068] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.771237][ T406] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 3: invalid block bitmap [ 70.784038][ T406] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 70.797161][ T406] EXT4-fs (loop2): This should not happen!! Data will be lost [ 70.797161][ T406] [ 70.937699][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.002357][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 71.002375][ T29] audit: type=1400 audit(1763836595.950:3731): avc: denied { accept } for pid=5095 comm="syz.2.444" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.051218][ T5098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.447'. [ 71.062264][ T29] audit: type=1400 audit(1763836595.950:3732): avc: denied { write } for pid=5095 comm="syz.2.444" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.088689][ T5102] netlink: 'syz.4.449': attribute type 10 has an invalid length. [ 71.177645][ T5111] loop1: detected capacity change from 0 to 512 [ 71.208112][ T5113] macvlan2: entered allmulticast mode [ 71.213730][ T5113] veth1_vlan: entered allmulticast mode [ 71.222080][ T5111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.222835][ T5117] loop2: detected capacity change from 0 to 164 [ 71.243716][ T5111] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.272579][ T5111] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #18: comm syz.1.450: corrupted inode contents [ 71.286988][ T5117] ISOFS: unable to read i-node block [ 71.292857][ T5117] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 71.304933][ T5111] EXT4-fs (loop1): Remounting filesystem read-only [ 71.313103][ T5117] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 71.320948][ T5127] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 71.332571][ T5126] loop3: detected capacity change from 0 to 2048 [ 71.342731][ T5111] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 71.360900][ T5117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.379865][ T5127] bond2: (slave geneve2): making interface the new active one [ 71.388710][ T5127] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 71.417387][ T29] audit: type=1400 audit(1763836596.360:3733): avc: denied { read } for pid=5121 comm="syz.0.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.440740][ T5126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.453383][ T5126] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.475026][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.509536][ T29] audit: type=1400 audit(1763836596.460:3734): avc: denied { map } for pid=5124 comm="syz.3.457" path="/94/file0/memory.stat" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 71.529066][ T5137] loop0: detected capacity change from 0 to 512 [ 71.689563][ T5137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.712090][ T5137] EXT4-fs (loop0): 1 truncate cleaned up [ 71.720106][ T5140] netlink: 'syz.2.460': attribute type 4 has an invalid length. [ 71.742014][ T5140] netlink: 'syz.2.460': attribute type 4 has an invalid length. [ 72.013404][ T5150] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.083875][ T5141] lo speed is unknown, defaulting to 1000 [ 72.119912][ T5137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.210437][ T5150] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.291038][ T5150] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.346389][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.360616][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.380629][ T5150] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.406585][ T29] audit: type=1326 audit(1763836597.350:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.3.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 72.429951][ T29] audit: type=1326 audit(1763836597.350:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.3.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 72.453382][ T29] audit: type=1326 audit(1763836597.350:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.3.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 72.476811][ T29] audit: type=1326 audit(1763836597.350:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.3.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 72.500160][ T29] audit: type=1326 audit(1763836597.350:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.3.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 72.523521][ T29] audit: type=1326 audit(1763836597.350:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5156 comm="syz.3.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f845f73f749 code=0x7ffc0000 [ 72.775546][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.819642][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.852009][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.903054][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.906024][ T5183] loop3: detected capacity change from 0 to 1764 [ 72.924758][ T5186] netlink: 'syz.2.470': attribute type 30 has an invalid length. [ 72.934058][ T5183] grow_buffers: requested out-of-range block 18446744071681881834 for device loop3 [ 72.943450][ T5183] isofs_fill_super: bread failed, dev=loop3, iso_blknum=1133648757, block=-2027669782 [ 73.082610][ T5212] loop0: detected capacity change from 0 to 512 [ 73.109042][ T5216] tipc: Enabled bearer , priority 0 [ 73.114873][ T5203] vhci_hcd: default hub control req: 8017 v0006 i0003 l0 [ 73.213391][ T5226] bridge_slave_0: left allmulticast mode [ 73.219139][ T5226] bridge_slave_0: left promiscuous mode [ 73.224912][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.249920][ T5229] netlink: 'syz.1.482': attribute type 10 has an invalid length. [ 73.339699][ T5226] bridge_slave_1: left allmulticast mode [ 73.345396][ T5226] bridge_slave_1: left promiscuous mode [ 73.351195][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.364566][ T5226] bond0: (slave bond_slave_0): Releasing backup interface [ 73.374946][ T5226] bond0: (slave bond_slave_1): Releasing backup interface [ 73.386952][ T5226] team0: Port device team_slave_0 removed [ 73.396161][ T5226] team0: Port device team_slave_1 removed [ 73.403501][ T5226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.411010][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.419624][ T5226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.427070][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.436997][ T5226] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.453158][ T5225] bridge_slave_0: left allmulticast mode [ 73.458937][ T5225] bridge_slave_0: left promiscuous mode [ 73.464672][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.473076][ T5225] bridge_slave_1: left allmulticast mode [ 73.478779][ T5225] bridge_slave_1: left promiscuous mode [ 73.484547][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.494096][ T5225] bond0: (slave bond_slave_0): Releasing backup interface [ 73.502555][ T5225] bond0: (slave bond_slave_1): Releasing backup interface [ 73.511259][ T5225] team0: Port device team_slave_0 removed [ 73.517608][ T5225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.525332][ T5225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 73.541950][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.550486][ T5229] team0: Port device bond0 added [ 73.560044][ T5230] team0 (unregistering): Port device bond0 removed [ 73.573388][ T5204] tipc: Resetting bearer [ 73.590045][ T5204] tipc: Disabling bearer [ 73.599541][ T5231] vlan2: entered allmulticast mode [ 73.610549][ T5235] IPv6: sit1: Disabled Multicast RS [ 73.787418][ T5246] batman_adv: batadv0: Interface deactivated: macvtap1 [ 73.795495][ T5246] bridge0: left allmulticast mode [ 73.803285][ T31] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.815442][ T31] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.837876][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.849641][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.978733][ T5257] lo speed is unknown, defaulting to 1000 [ 73.991777][ T5259] Cannot find set identified by id 0 to match [ 74.006991][ T5259] xt_policy: neither incoming nor outgoing policy selected [ 74.077287][ T5264] loop2: detected capacity change from 0 to 128 [ 74.159061][ T5264] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 74.165745][ T5264] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 74.173455][ T5264] vhci_hcd vhci_hcd.0: Device attached [ 74.204508][ T5270] vhci_hcd: connection closed [ 74.204752][ T37] vhci_hcd: stop threads [ 74.213804][ T37] vhci_hcd: release socket [ 74.218268][ T37] vhci_hcd: disconnect device [ 74.279601][ T5276] loop1: detected capacity change from 0 to 128 [ 74.573820][ T5283] loop4: detected capacity change from 0 to 8192 [ 74.602787][ T5297] __nla_validate_parse: 8 callbacks suppressed [ 74.602804][ T5297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 74.618152][ T5297] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 74.629206][ T5283] loop4: p1 < > p2 < > p3 p4 < > [ 74.634282][ T5283] loop4: partition table partially beyond EOD, truncated [ 74.641404][ T5283] loop4: p1 start 67108864 is beyond EOD, truncated [ 74.652004][ T5283] loop4: p3 start 100859904 is beyond EOD, truncated [ 75.059165][ T5320] lo speed is unknown, defaulting to 1000 [ 75.382695][ T5304] loop0: detected capacity change from 0 to 512 [ 75.560711][ T5304] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.617264][ T5304] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.746986][ T5336] loop2: detected capacity change from 0 to 128 [ 75.833667][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.968433][ T5356] ================================================================== [ 75.976646][ T5356] BUG: KCSAN: data-race in avc_policy_seqno / avc_ss_reset [ 75.983869][ T5356] [ 75.986203][ T5356] write to 0xffffffff88eb5c28 of 4 bytes by task 5349 on cpu 0: [ 75.993835][ T5356] avc_ss_reset+0x20c/0x240 [ 75.998443][ T5356] security_set_bools+0x301/0x340 [ 76.003490][ T5356] sel_commit_bools_write+0x1ea/0x270 [ 76.008879][ T5356] vfs_writev+0x406/0x8b0 [ 76.013242][ T5356] do_writev+0xe7/0x210 [ 76.017446][ T5356] __x64_sys_writev+0x45/0x50 [ 76.022177][ T5356] x64_sys_call+0x1e9a/0x3000 [ 76.027049][ T5356] do_syscall_64+0xd2/0x200 [ 76.031563][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.037580][ T5356] [ 76.039919][ T5356] read to 0xffffffff88eb5c28 of 4 bytes by task 5356 on cpu 1: [ 76.047464][ T5356] avc_policy_seqno+0x15/0x30 [ 76.052154][ T5356] selinux_inode_permission+0x311/0x740 [ 76.057715][ T5356] security_inode_permission+0x6d/0xb0 [ 76.063193][ T5356] inode_permission+0x106/0x310 [ 76.068065][ T5356] link_path_walk+0x162/0x900 [ 76.072760][ T5356] path_lookupat+0x63/0x2a0 [ 76.077283][ T5356] filename_lookup+0x147/0x340 [ 76.082069][ T5356] user_path_at+0x3e/0x130 [ 76.086489][ T5356] __se_sys_chdir+0x45/0x1b0 [ 76.091096][ T5356] __x64_sys_chdir+0x1f/0x30 [ 76.095707][ T5356] x64_sys_call+0x2350/0x3000 [ 76.100391][ T5356] do_syscall_64+0xd2/0x200 [ 76.104912][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.110812][ T5356] [ 76.113139][ T5356] value changed: 0x00000001 -> 0x00000002 [ 76.118854][ T5356] [ 76.121182][ T5356] Reported by Kernel Concurrency Sanitizer on: [ 76.127336][ T5356] CPU: 1 UID: 0 PID: 5356 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 76.138983][ T5356] Tainted: [W]=WARN [ 76.142788][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 76.152851][ T5356] ================================================================== [ 76.180435][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 76.180449][ T29] audit: type=1400 audit(1763836601.130:4079): avc: denied { prog_load } for pid=5356 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.205994][ T29] audit: type=1400 audit(1763836601.130:4080): avc: denied { bpf } for pid=5356 comm="syz.4.517" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.226600][ T29] audit: type=1400 audit(1763836601.130:4081): avc: denied { perfmon } for pid=5356 comm="syz.4.517" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.248686][ T29] audit: type=1400 audit(1763836601.130:4082): avc: denied { bpf } for pid=5346 comm="syz.1.515" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.269492][ T29] audit: type=1400 audit(1763836601.130:4083): avc: denied { perfmon } for pid=5346 comm="syz.1.515" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 76.290446][ T29] audit: type=1400 audit(1763836601.130:4084): avc: denied { prog_run } for pid=5346 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 76.309466][ T29] audit: type=1400 audit(1763836601.130:4085): avc: denied { create } for pid=5346 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.330056][ T29] audit: type=1400 audit(1763836601.130:4086): avc: denied { write } for pid=5346 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.350534][ T29] audit: type=1400 audit(1763836601.200:4087): avc: denied { create } for pid=5346 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.373361][ T29] audit: type=1400 audit(1763836601.200:4088): avc: denied { write } for pid=5346 comm="syz.1.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.379318][ T5359] netlink: 28 bytes leftover after parsing attributes in process `GPL'.