last executing test programs: 8.758766665s ago: executing program 4 (id=138): r0 = msgget(0x2, 0x3a8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {0xffffffffffffffff, 0x10}], 0x3, 0xfd0f) read$hiddev(0xffffffffffffffff, &(0x7f0000001340)=""/139, 0x8b) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 8.4406749s ago: executing program 1 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r2 = epoll_create1(0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000001e3efccd6d98c6284a0bb50a275db0f14113355c8e3cf9c6a5feea1491e198d1d29dcf832e280173457fc9a9ad3a4c2a52b929aab6d5dcd62eb9a6084650d55c1ec2deb3ffc85f87bbb663c8aa40e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='rxrpc_tx_data\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x3) 8.289173033s ago: executing program 1 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340), 0xffff, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) get_mempolicy(&(0x7f00000002c0), &(0x7f0000000300), 0x2a, &(0x7f0000ff9000/0x4000)=nil, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 7.781223451s ago: executing program 4 (id=146): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2101, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "fdffffffffffffff"}) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xff) pipe(0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000)={0x0, 0xa5, "c0b767", 0xb, 0xe}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18010000010000000000000000030000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x25, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x19, 0x0, [{0x0, 0xc, "5e000000ff0000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x2}]}]}}}}}}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 7.730831912s ago: executing program 1 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000001000016000800200000004000"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00e2000000000000ba281ee53f015fb1009500"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100020, 0x0, 0x0, 0x6, 0x3, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x7c, 0x1, [@m_connmark={0x34, 0x0, 0x0, 0x0, {{0xd}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1001, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x3, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100000200000000000000002120207b1af8ff00000000bfa10000000300000000000000ffffffb7020000080000009e03000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='kfree\x00', r6}, 0x18) r7 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x1f0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 7.645353503s ago: executing program 2 (id=148): r0 = msgget(0x2, 0x3a8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {0xffffffffffffffff, 0x10}], 0x3, 0xfd0f) read$hiddev(0xffffffffffffffff, &(0x7f0000001340)=""/139, 0x8b) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 7.28350192s ago: executing program 0 (id=150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x3) 6.613441531s ago: executing program 2 (id=151): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@map, 0xffffffffffffffff, 0x2, 0x24, 0x0, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20142, 0x0) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) kcmp(r6, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000280)={0x78d7, 0x0, &(0x7f0000000080)=[r1, r1, r4, r0, r0, r5, r4, r3]}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2, 0xffffffff, 0x6, 0x6, 0x4, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000540)='net/fib_triestat\x00') lseek(r7, 0x10001, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000680)={[{@init_itable_val}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x439, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) socket(0x10, 0x3, 0x0) unlink(&(0x7f0000000180)='./file1\x00') futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000040), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000000400)=0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x1000, 0x400, 0x0) 6.612543421s ago: executing program 0 (id=161): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xb}) close_range(r4, 0xffffffffffffffff, 0x0) 6.476816523s ago: executing program 3 (id=153): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r2 = epoll_create1(0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000001e3efccd6d98c6284a0bb50a275db0f14113355c8e3cf9c6a5feea1491e198d1d29dcf832e280173457fc9a9ad3a4c2a52b929aab6d5dcd62eb9a6084650d55c1ec2deb3ffc85f87bbb663c8aa40e1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000640)='rxrpc_tx_data\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) epoll_pwait(r2, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x3) 6.371830885s ago: executing program 3 (id=154): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@i_version}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@inlinecrypt}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) epoll_create1(0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000003c0)={0x1, 0x0, 0xb}) 4.735480622s ago: executing program 2 (id=155): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b000000000000000000000000000400", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r6, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) 4.735253891s ago: executing program 3 (id=156): r0 = msgget(0x2, 0x3a8) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {r1, 0x10}], 0x3, 0xfd0f) read$hiddev(r1, &(0x7f0000001340)=""/139, 0x8b) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 4.730974151s ago: executing program 0 (id=166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x80000020, 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000400), &(0x7f0000000440)='system_u:object_r:semanage_exec_t:s0\x00', 0x25, 0x3) 4.725344142s ago: executing program 1 (id=157): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0xffff, 0x1}, {0x45, 0x2}, @const={0x62, {0x400, 0x5, 0x9, 0x101}}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="88", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0xa}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) 4.725051742s ago: executing program 4 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000340), 0xffff, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) get_mempolicy(&(0x7f00000002c0), &(0x7f0000000300), 0x2a, &(0x7f0000ff9000/0x4000)=nil, 0x7) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 4.575203304s ago: executing program 0 (id=159): r0 = msgget(0x2, 0x3a8) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {r1, 0x10}], 0x3, 0xfd0f) read$hiddev(r1, &(0x7f0000001340)=""/139, 0x8b) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.759627388s ago: executing program 2 (id=160): r0 = msgget(0x2, 0x3a8) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {r1, 0x10}], 0x3, 0xfd0f) read$hiddev(r1, &(0x7f0000001340)=""/139, 0x8b) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.705340948s ago: executing program 3 (id=162): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001100), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {r0, 0x10}], 0x3, 0xfd0f) read$hiddev(r0, &(0x7f0000001340)=""/139, 0x8b) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) msgctl$IPC_RMID(0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.60254454s ago: executing program 0 (id=163): r0 = msgget(0x2, 0x3a8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {0xffffffffffffffff, 0x10}], 0x3, 0xfd0f) read$hiddev(0xffffffffffffffff, &(0x7f0000001340)=""/139, 0x8b) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r1}, 0x10) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.295163585s ago: executing program 4 (id=164): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) r0 = epoll_create1(0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_pwait(r0, &(0x7f0000000080), 0x0, 0x80000020, 0x0, 0x0) 2.905090582s ago: executing program 2 (id=165): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xffffe087, 0xcb66, 0x3, 0x2000, r0, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0xf, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000938b6d2ae0262af20094fe33174e5e2d9a73c193437a51000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) ppoll(&(0x7f0000000280)=[{r3, 0x45}, {r4, 0x4}, {r5, 0x2000}, {r1, 0x1}], 0x4, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000900)={[0xac]}, 0x8) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240), 0x200080, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r8, &(0x7f0000000940)="ce58e91a127b817d4dd5f5cd05f516cf0d0cb6abec2601633526073a430d8e60a17cdf5ac29b263df65c10e6ba11bc6e30ea3dead6495e94f7dccca54542595eba2525af0a04d9be12e5a964baba46cfdfd3147b56939a0ab1430521cee93879f0a90cf6a3e84dc4964e3f8159f240737df3c548764c224f21af01dd812a9541b43eb5eb1e140d", &(0x7f0000000a00)=""/113, 0x4}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r9}, 0x10) unshare(0x24020400) r10 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) fgetxattr(r10, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r7, 0x3, r2, 0x3}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") 2.904750872s ago: executing program 4 (id=167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socket$inet6(0xa, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() keyctl$unlink(0x9, 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x20030400, 0x0, &(0x7f00000000c0), 0x0, {0x19}, &(0x7f0000000300)=""/238, 0xee, &(0x7f0000000480)=""/217, &(0x7f00000001c0)=[r1, r1, r1], 0x3}, 0x58) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040600) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nouid32}, {}]}, 0x1, 0x788, &(0x7f0000000800)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x80) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2.904266362s ago: executing program 1 (id=176): r0 = msgget(0x2, 0x3a8) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {r1, 0x10}], 0x3, 0xfd0f) read$hiddev(r1, &(0x7f0000001340)=""/139, 0x8b) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.676268076s ago: executing program 0 (id=168): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000396000/0x3000)=nil, 0x3000, 0x2000, 0x6, &(0x7f0000ffe000/0x2000)=nil) syz_clone(0x471a4000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) r1 = socket(0x11, 0x3, 0x0) r2 = epoll_create1(0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffd}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) get_mempolicy(0x0, 0x0, 0x80000000, &(0x7f0000001000/0x1000)=nil, 0x6) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r5, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r6 = dup3(r1, r5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f0000000300)={0x200f}) 2.209659563s ago: executing program 3 (id=169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000040), 0x9, 0x18200) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x72b80180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.746125271s ago: executing program 1 (id=170): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x1, 0x0, 0x30, 0xf}, {0x5, 0xd, 0x6, 0x1}, {0x82, 0x0, 0xff, 0x1}, {0xc5, 0x0, 0x7, 0xc}]}) socket(0x28, 0x5, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40080) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x54) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) mount(0x0, 0x0, 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0x208e24b) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x2000000, 0x5, 0x9, 0x18e, 0x0}) r4 = socket(0x27, 0x5, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x4, 0x3f3}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 719.434208ms ago: executing program 3 (id=171): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r1 = open(0x0, 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xe3}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0x85c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x848, 0x1, [@m_police={0x844, 0x1, 0x0, 0x0, {{0xb}, {0x818, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x3, 0x0, 0x4, 0x0, 0x0, 0x401, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x5381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8000, 0x40000000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x90000, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x2}}}}]}]}, 0x85c}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 5.19716ms ago: executing program 4 (id=172): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@grpid}, {@nodiscard}, {@quota}]}, 0x2, 0x442, &(0x7f0000000f40)="$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") connect$qrtr(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r4 = syz_open_pts(r3, 0x20800) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x44) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 0s ago: executing program 2 (id=173): r0 = msgget(0x2, 0x3a8) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x2000c040) poll(&(0x7f00000012c0)=[{0xffffffffffffffff, 0x14}, {0xffffffffffffffff, 0x94}, {r1, 0x10}], 0x3, 0xfd0f) read$hiddev(r1, &(0x7f0000001340)=""/139, 0x8b) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(r0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 21.570586][ T29] audit: type=1400 audit(1743203532.028:81): avc: denied { read } for pid=2985 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. [ 26.568113][ T29] audit: type=1400 audit(1743203537.018:82): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.569151][ T3291] cgroup: Unknown subsys name 'net' [ 26.590865][ T29] audit: type=1400 audit(1743203537.018:83): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.618261][ T29] audit: type=1400 audit(1743203537.048:84): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.730358][ T3291] cgroup: Unknown subsys name 'cpuset' [ 26.736535][ T3291] cgroup: Unknown subsys name 'rlimit' [ 26.847360][ T29] audit: type=1400 audit(1743203537.298:85): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.870698][ T29] audit: type=1400 audit(1743203537.298:86): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.891373][ T29] audit: type=1400 audit(1743203537.298:87): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.911907][ T29] audit: type=1400 audit(1743203537.298:88): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.919462][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.932201][ T29] audit: type=1400 audit(1743203537.298:89): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.965590][ T29] audit: type=1400 audit(1743203537.298:90): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.990196][ T29] audit: type=1400 audit(1743203537.398:91): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.017004][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.057511][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 28.145581][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.152757][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.160002][ T3302] bridge_slave_0: entered allmulticast mode [ 28.166542][ T3302] bridge_slave_0: entered promiscuous mode [ 28.173482][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.180580][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.187780][ T3302] bridge_slave_1: entered allmulticast mode [ 28.194230][ T3302] bridge_slave_1: entered promiscuous mode [ 28.213379][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.231617][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.267157][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.310221][ T3302] team0: Port device team_slave_0 added [ 28.327452][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 28.336566][ T3302] team0: Port device team_slave_1 added [ 28.378500][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.385530][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.411717][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.422803][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.429894][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.437016][ T3304] bridge_slave_0: entered allmulticast mode [ 28.443518][ T3304] bridge_slave_0: entered promiscuous mode [ 28.453027][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.461769][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.468833][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.476085][ T3304] bridge_slave_1: entered allmulticast mode [ 28.482605][ T3304] bridge_slave_1: entered promiscuous mode [ 28.495194][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.502228][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.528259][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.546597][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.561732][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.574141][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.648599][ T3304] team0: Port device team_slave_0 added [ 28.656686][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.663862][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.671066][ T3306] bridge_slave_0: entered allmulticast mode [ 28.677545][ T3306] bridge_slave_0: entered promiscuous mode [ 28.684312][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.691476][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.698633][ T3306] bridge_slave_1: entered allmulticast mode [ 28.705977][ T3306] bridge_slave_1: entered promiscuous mode [ 28.722455][ T3304] team0: Port device team_slave_1 added [ 28.748953][ T3302] hsr_slave_0: entered promiscuous mode [ 28.754988][ T3302] hsr_slave_1: entered promiscuous mode [ 28.765868][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.773090][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.780277][ T3301] bridge_slave_0: entered allmulticast mode [ 28.786841][ T3301] bridge_slave_0: entered promiscuous mode [ 28.799104][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.809370][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.828072][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.835615][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.843217][ T3301] bridge_slave_1: entered allmulticast mode [ 28.849791][ T3301] bridge_slave_1: entered promiscuous mode [ 28.865744][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.872862][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.880124][ T3308] bridge_slave_0: entered allmulticast mode [ 28.886548][ T3308] bridge_slave_0: entered promiscuous mode [ 28.897813][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.904815][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.930836][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.951170][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.958265][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.965884][ T3308] bridge_slave_1: entered allmulticast mode [ 28.972248][ T3308] bridge_slave_1: entered promiscuous mode [ 28.979181][ T3306] team0: Port device team_slave_0 added [ 28.985824][ T3306] team0: Port device team_slave_1 added [ 28.992071][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.999028][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.025214][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.037153][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.047580][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.092761][ T3301] team0: Port device team_slave_0 added [ 29.104913][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.114394][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.121444][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.147582][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.161718][ T3301] team0: Port device team_slave_1 added [ 29.170925][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.185807][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.192790][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.218717][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.256717][ T3304] hsr_slave_0: entered promiscuous mode [ 29.262808][ T3304] hsr_slave_1: entered promiscuous mode [ 29.268595][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.276287][ T3304] Cannot create hsr debugfs directory [ 29.287191][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.294186][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.320270][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.331785][ T3308] team0: Port device team_slave_0 added [ 29.338862][ T3308] team0: Port device team_slave_1 added [ 29.350141][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.357129][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.383650][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.434737][ T3306] hsr_slave_0: entered promiscuous mode [ 29.440771][ T3306] hsr_slave_1: entered promiscuous mode [ 29.446719][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.454355][ T3306] Cannot create hsr debugfs directory [ 29.466995][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.473991][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.499939][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.524757][ T3301] hsr_slave_0: entered promiscuous mode [ 29.530755][ T3301] hsr_slave_1: entered promiscuous mode [ 29.536467][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.544212][ T3301] Cannot create hsr debugfs directory [ 29.550123][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.557077][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.583030][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.650756][ T3308] hsr_slave_0: entered promiscuous mode [ 29.656804][ T3308] hsr_slave_1: entered promiscuous mode [ 29.662831][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.670458][ T3308] Cannot create hsr debugfs directory [ 29.717266][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.740739][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.767552][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.780766][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.835784][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.845263][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.855347][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.864268][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.894409][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.911384][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.920278][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.929428][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.954888][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.964799][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.980368][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.988993][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.018690][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.032372][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.048631][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.057462][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.075623][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.112535][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.124072][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.133117][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.149735][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.156922][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.171573][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.178671][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.192943][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.203006][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.214394][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.221593][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.231305][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.238422][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.250632][ T2324] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.257753][ T2324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.293915][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.301036][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.323784][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.349297][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.368690][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.381356][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.388469][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.412814][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.419948][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.438831][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.458005][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.474676][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.481806][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.494175][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.501292][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.511074][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.568826][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.596100][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.616673][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.673324][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.685356][ T3302] veth0_vlan: entered promiscuous mode [ 30.709387][ T3304] veth0_vlan: entered promiscuous mode [ 30.721785][ T3302] veth1_vlan: entered promiscuous mode [ 30.750191][ T3304] veth1_vlan: entered promiscuous mode [ 30.769216][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.782988][ T3302] veth0_macvtap: entered promiscuous mode [ 30.794956][ T3302] veth1_macvtap: entered promiscuous mode [ 30.824329][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.832569][ T3304] veth0_macvtap: entered promiscuous mode [ 30.855388][ T3304] veth1_macvtap: entered promiscuous mode [ 30.866050][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.873676][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.884216][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.894812][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.902629][ T3308] veth0_vlan: entered promiscuous mode [ 30.917543][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.926365][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.935253][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.944135][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.962042][ T3308] veth1_vlan: entered promiscuous mode [ 30.968961][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.979583][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.990622][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.014997][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.023798][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.032686][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.041672][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075253][ T3306] veth0_vlan: entered promiscuous mode [ 31.083056][ T3306] veth1_vlan: entered promiscuous mode [ 31.092228][ T3301] veth0_vlan: entered promiscuous mode [ 31.102285][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.106855][ T3301] veth1_vlan: entered promiscuous mode [ 31.124431][ T3308] veth0_macvtap: entered promiscuous mode [ 31.132928][ T3308] veth1_macvtap: entered promiscuous mode [ 31.157369][ T3301] veth0_macvtap: entered promiscuous mode [ 31.171541][ T3301] veth1_macvtap: entered promiscuous mode [ 31.195898][ T3306] veth0_macvtap: entered promiscuous mode [ 31.204941][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.215604][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.225612][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.236085][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.246848][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.258644][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.269434][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.279393][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.289929][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.299788][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.310408][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.323533][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.333698][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.344286][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.354197][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.364672][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.376289][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.387770][ T3301] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.396628][ T3301] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.405538][ T3301] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.414409][ T3301] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.426324][ T3306] veth1_macvtap: entered promiscuous mode [ 31.441134][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.451734][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.461858][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.472317][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.482228][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.492863][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.504617][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.523187][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.533865][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.543033][ T3454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 31.543743][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.562854][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.572714][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.583172][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.593089][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.603627][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.614428][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.623227][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.632205][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.640942][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.649745][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.676401][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.687006][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.697001][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.707471][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.717567][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.728096][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.736362][ T3459] loop2: detected capacity change from 0 to 512 [ 31.737925][ T3306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.754750][ T3306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.765551][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.778157][ T3459] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 31.787778][ T3459] EXT4-fs (loop2): orphan cleanup on readonly fs [ 31.788755][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.803777][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.812912][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.821711][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.832544][ T3459] __quota_error: 85 callbacks suppressed [ 31.832561][ T3459] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 31.852147][ T3459] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 31.870709][ T3459] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 31.879277][ T3459] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7: bg 0: block 40: padding at end of block bitmap is not set [ 31.895527][ T3459] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 31.907643][ T3459] EXT4-fs (loop2): 1 truncate cleaned up [ 31.915383][ T3459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.928953][ T29] audit: type=1400 audit(1743203542.388:177): avc: denied { mount } for pid=3458 comm="syz.2.7" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.964016][ T3459] netlink: 'syz.2.7': attribute type 13 has an invalid length. [ 32.013129][ T3468] netlink: 1288 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.025193][ T29] audit: type=1400 audit(1743203542.478:178): avc: denied { create } for pid=3467 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.060550][ T3459] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.067878][ T3459] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.080585][ T29] audit: type=1400 audit(1743203542.508:179): avc: denied { setopt } for pid=3467 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.100069][ T29] audit: type=1400 audit(1743203542.508:180): avc: denied { read } for pid=3467 comm="syz.4.5" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.120409][ T3471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.122467][ T29] audit: type=1400 audit(1743203542.508:181): avc: denied { open } for pid=3467 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.157044][ T29] audit: type=1400 audit(1743203542.508:182): avc: denied { ioctl } for pid=3467 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.181913][ T3471] loop4: detected capacity change from 0 to 512 [ 32.190380][ T29] audit: type=1400 audit(1743203542.558:183): avc: denied { create } for pid=3467 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.209751][ T29] audit: type=1400 audit(1743203542.618:184): avc: denied { write } for pid=3467 comm="syz.4.5" name="raw6" dev="proc" ino=4026532821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 32.232910][ T3471] ======================================================= [ 32.232910][ T3471] WARNING: The mand mount option has been deprecated and [ 32.232910][ T3471] and is ignored by this kernel. Remove the mand [ 32.232910][ T3471] option from the mount to silence this warning. [ 32.232910][ T3471] ======================================================= [ 32.286730][ T3474] loop3: detected capacity change from 0 to 512 [ 32.294312][ T3474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.345957][ T29] audit: type=1400 audit(1743203542.688:185): avc: denied { mounton } for pid=3467 comm="syz.4.5" path="/0/file0" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 32.381184][ T3474] EXT4-fs (loop3): 1 orphan inode deleted [ 32.387558][ T3474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.400607][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 32.412998][ T3474] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.465417][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.475859][ T3459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.507192][ T3471] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 32.516858][ T3471] System zones: 0-2, 18-18, 34-34 [ 32.537696][ T3459] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.546886][ T3459] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.556004][ T3459] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.565056][ T3459] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.579885][ T3471] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5: bg 0: block 248: padding at end of block bitmap is not set [ 32.596845][ T3471] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.5: Failed to acquire dquot type 1 [ 32.667602][ T3471] EXT4-fs (loop4): 1 truncate cleaned up [ 32.681883][ T3471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.919719][ T3471] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.965650][ T3471] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.976926][ T3459] syz.2.7 (3459) used greatest stack depth: 10856 bytes left [ 33.036375][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.064317][ T3491] loop0: detected capacity change from 0 to 256 [ 33.080864][ T3491] FAT-fs (loop0): bogus number of FAT sectors [ 33.087078][ T3491] FAT-fs (loop0): Can't find a valid FAT filesystem [ 33.094778][ T3489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.106673][ T3489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.229622][ T3471] syz.4.5 (3471) used greatest stack depth: 9216 bytes left [ 33.369263][ C0] hrtimer: interrupt took 36982 ns [ 33.969826][ T3499] loop2: detected capacity change from 0 to 512 [ 34.096456][ T3499] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.115724][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.126133][ T3499] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 34.140112][ T3499] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.11: invalid indirect mapped block 4294967295 (level 0) [ 34.155491][ T3499] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.11: invalid indirect mapped block 4294967295 (level 1) [ 34.170181][ T3499] EXT4-fs (loop2): 1 orphan inode deleted [ 34.172336][ T3504] loop4: detected capacity change from 0 to 128 [ 34.176098][ T3499] EXT4-fs (loop2): 1 truncate cleaned up [ 34.188397][ T3499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.224843][ T3504] EXT4-fs: Ignoring removed nobh option [ 34.249420][ T3506] loop3: detected capacity change from 0 to 764 [ 34.284566][ T3504] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.298573][ T3509] process 'syz.0.15' launched './file1' with NULL argv: empty string added [ 34.395167][ T3504] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.407284][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.456835][ T3522] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET) [ 34.572085][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18'. [ 34.582526][ T3528] IPVS: Error joining to the multicast group [ 34.595363][ T3528] Zero length message leads to an empty skb [ 34.690288][ T3532] netlink: 'syz.0.19': attribute type 3 has an invalid length. [ 35.360589][ T3544] loop2: detected capacity change from 0 to 2048 [ 35.405470][ T3544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.609977][ T3553] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 35.609977][ T3553] The task syz.3.24 (3553) triggered the difference, watch for misbehavior. [ 35.693433][ T3555] loop1: detected capacity change from 0 to 1024 [ 35.700296][ T3553] loop3: detected capacity change from 0 to 512 [ 35.718483][ T3555] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.745170][ T3555] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 35.756168][ T3553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.817706][ T3555] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 35.837353][ T3555] EXT4-fs (loop1): orphan cleanup on readonly fs [ 35.994532][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.071954][ T3555] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz.1.25: Freeing blocks not in datazone - block = 0, count = 4096 [ 36.107627][ T3555] EXT4-fs (loop1): Remounting filesystem read-only [ 36.136071][ T3555] EXT4-fs (loop1): 1 orphan inode deleted [ 36.142330][ T3555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.315269][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.432276][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 36.460751][ T3562] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.508486][ T3564] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.533051][ T3562] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.544611][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.592398][ T3562] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.611875][ T3568] tmpfs: Unknown parameter 'grpquota' [ 36.625329][ T3568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.647433][ T3567] loop0: detected capacity change from 0 to 8192 [ 36.654294][ T3562] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.671227][ T3568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.711455][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.751654][ T3562] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.764418][ T3562] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.777296][ T3562] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.789489][ T3562] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.846071][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 36.846086][ T29] audit: type=1400 audit(1743203547.298:436): avc: denied { create } for pid=3570 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.875172][ T29] audit: type=1326 audit(1743203547.328:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 36.898933][ T29] audit: type=1326 audit(1743203547.328:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 36.922323][ T29] audit: type=1326 audit(1743203547.328:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 36.949008][ T29] audit: type=1326 audit(1743203547.378:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 36.972354][ T29] audit: type=1326 audit(1743203547.378:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 36.995544][ T29] audit: type=1326 audit(1743203547.408:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 37.019475][ T29] audit: type=1326 audit(1743203547.408:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 37.043423][ T29] audit: type=1326 audit(1743203547.408:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e5c8bbad0 code=0x7ffc0000 [ 37.068241][ T29] audit: type=1326 audit(1743203547.408:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3570 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0e5c8be997 code=0x7ffc0000 [ 37.097353][ T3575] veth0_macvtap: left promiscuous mode [ 37.105364][ T3575] macvtap0: entered promiscuous mode [ 37.115350][ T3575] veth0_macvtap: entered promiscuous mode [ 37.134027][ T3575] team0: Device macvtap0 failed to register rx_handler [ 37.145541][ T3575] veth0_macvtap: left promiscuous mode [ 37.272727][ T3580] loop2: detected capacity change from 0 to 2048 [ 37.281221][ T3582] loop4: detected capacity change from 0 to 256 [ 37.287679][ T3584] loop1: detected capacity change from 0 to 2048 [ 37.310877][ T3582] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.347259][ T3580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.369888][ T3584] loop1: p1 < > p4 [ 37.391279][ T3584] loop1: p4 size 8388608 extends beyond EOD, truncated [ 37.438403][ T3003] loop1: p1 < > p4 [ 37.443754][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 37.454245][ T3589] Direct I/O collision with buffered writes! File: /file2 Comm: syz.2.34 [ 37.467745][ T3584] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 37.484663][ T3003] loop1: p4 size 8388608 extends beyond EOD, truncated [ 37.503957][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 37.559409][ T3594] loop4: detected capacity change from 0 to 512 [ 37.594217][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.608848][ T3594] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.621517][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.666071][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 37.672122][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 37.829023][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 37.829241][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 38.269008][ T3592] Set syz1 is full, maxelem 65536 reached [ 38.450189][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.537197][ T3618] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 38.564597][ T3618] loop4: detected capacity change from 0 to 512 [ 38.756044][ T3618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.779643][ T3618] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.292266][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.378648][ T3627] support for the xor transformation has been removed. [ 39.712964][ T3633] loop0: detected capacity change from 0 to 128 [ 39.894664][ T3640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 39.972833][ T3633] syz.0.49: attempt to access beyond end of device [ 39.972833][ T3633] loop0: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 40.020936][ T3633] syz.0.49: attempt to access beyond end of device [ 40.020936][ T3633] loop0: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 40.086045][ T3633] syz.0.49: attempt to access beyond end of device [ 40.086045][ T3633] loop0: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 40.100945][ T3640] loop2: detected capacity change from 0 to 512 [ 40.126499][ T3640] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.149883][ T3633] syz.0.49: attempt to access beyond end of device [ 40.149883][ T3633] loop0: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 40.179402][ T3640] EXT4-fs (loop2): 1 truncate cleaned up [ 40.210109][ T3640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.254478][ T3633] syz.0.49: attempt to access beyond end of device [ 40.254478][ T3633] loop0: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 40.297748][ T3650] loop1: detected capacity change from 0 to 512 [ 40.311767][ T3654] loop3: detected capacity change from 0 to 1024 [ 40.352225][ T3633] syz.0.49: attempt to access beyond end of device [ 40.352225][ T3633] loop0: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 40.366002][ T3654] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 40.369188][ T3640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.376950][ T3654] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 40.406044][ T3650] EXT4-fs (loop1): too many log groups per flexible block group [ 40.413975][ T3650] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 40.427290][ T3633] syz.0.49: attempt to access beyond end of device [ 40.427290][ T3633] loop0: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 40.430055][ T3654] JBD2: no valid journal superblock found [ 40.446670][ T3654] EXT4-fs (loop3): Could not load journal inode [ 40.459806][ T3633] syz.0.49: attempt to access beyond end of device [ 40.459806][ T3633] loop0: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 40.490640][ T3633] syz.0.49: attempt to access beyond end of device [ 40.490640][ T3633] loop0: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 40.529694][ T3650] EXT4-fs (loop1): mount failed [ 40.537086][ T3633] syz.0.49: attempt to access beyond end of device [ 40.537086][ T3633] loop0: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 40.689582][ T3654] loop3: detected capacity change from 0 to 8192 [ 40.726408][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.46'. [ 40.759068][ T3654] tap0: tun_chr_ioctl cmd 1074025677 [ 40.772165][ T3654] tap0: linktype set to 823 [ 40.790414][ T3654] tap0: tun_chr_ioctl cmd 35108 [ 40.802057][ T3641] loop4: detected capacity change from 0 to 128 [ 40.809463][ T3667] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3667 comm=syz.2.56 [ 40.815105][ T3654] tipc: Started in network mode [ 40.826892][ T3654] tipc: Node identity 7f000001, cluster identity 4711 [ 40.868249][ T3641] vfat: Bad value for 'dmask' [ 40.886171][ T3654] tipc: Enabled bearer , priority 10 [ 40.892874][ T3672] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 40.915628][ T3675] tipc: Enabled bearer , priority 0 [ 41.132783][ T3678] bond1: entered promiscuous mode [ 41.138071][ T3678] bond1: entered allmulticast mode [ 41.272811][ T3678] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.284276][ T3678] bond1 (unregistering): Released all slaves [ 41.327194][ T3684] netlink: 68 bytes leftover after parsing attributes in process `syz.0.60'. [ 41.605035][ T3684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 41.802207][ T3684] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 41.861652][ T29] kauditd_printk_skb: 3150 callbacks suppressed [ 41.861669][ T29] audit: type=1326 audit(1743203552.318:3590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3690 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 41.909217][ T29] audit: type=1326 audit(1743203552.318:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3690 comm="syz.4.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 41.999713][ T3384] tipc: Node number set to 2130706433 [ 42.038374][ T3698] loop3: detected capacity change from 0 to 1024 [ 42.046343][ T3698] EXT4-fs: test_dummy_encryption option not supported [ 42.119736][ T3703] loop4: detected capacity change from 0 to 512 [ 42.127752][ T3703] EXT4-fs: Ignoring removed oldalloc option [ 42.160917][ T3703] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.65: Parent and EA inode have the same ino 15 [ 42.239806][ T3703] EXT4-fs (loop4): Remounting filesystem read-only [ 42.246460][ T3703] EXT4-fs warning (device loop4): ext4_evict_inode:260: couldn't mark inode dirty (err -30) [ 42.269795][ T3703] EXT4-fs (loop4): 1 orphan inode deleted [ 42.293113][ T3703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.365421][ T3703] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.419639][ T29] audit: type=1326 audit(1743203552.868:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 42.443744][ T29] audit: type=1326 audit(1743203552.868:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 42.469572][ T29] audit: type=1326 audit(1743203552.868:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 42.494535][ T29] audit: type=1326 audit(1743203552.868:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 42.518681][ T29] audit: type=1326 audit(1743203552.868:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 42.518919][ T3720] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3720 comm=syz.1.64 [ 42.542373][ T29] audit: type=1326 audit(1743203552.868:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 42.562953][ T3719] loop4: detected capacity change from 0 to 8192 [ 42.579208][ T29] audit: type=1326 audit(1743203552.868:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 42.609424][ T29] audit: type=1326 audit(1743203552.868:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3718 comm="syz.4.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f465d20d1a3 code=0x7ffc0000 [ 42.838864][ T3728] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 42.838892][ T3728] FAT-fs (loop4): Filesystem has been set read-only [ 42.840647][ T3728] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 42.840958][ T3728] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 43.157776][ T3733] infiniband syz0: set active [ 43.162672][ T3733] infiniband syz0: added bond0 [ 43.196273][ T3734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'. [ 43.230359][ T3734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.239856][ T3734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.254352][ T3733] RDS/IB: syz0: added [ 43.258397][ T3733] smc: adding ib device syz0 with port count 1 [ 43.329875][ T3733] smc: ib device syz0 port 1 has pnetid [ 43.368838][ T3748] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3748 comm=syz.0.73 [ 43.838615][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 43.915498][ T3761] team0 (unregistering): Port device team_slave_0 removed [ 43.926499][ T3761] team0 (unregistering): Port device team_slave_1 removed [ 44.095843][ T3763] loop1: detected capacity change from 0 to 1024 [ 44.130104][ T3763] EXT4-fs: test_dummy_encryption option not supported [ 44.193215][ T3741] smc: removing ib device syz0 [ 45.101824][ T3779] bond1: entered promiscuous mode [ 45.107073][ T3779] bond1: entered allmulticast mode [ 45.188955][ T3779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.291088][ T3779] bond1 (unregistering): Released all slaves [ 45.349844][ T3790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3790 comm=syz.1.83 [ 45.421117][ T3774] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 46.008748][ T3796] bond1: entered promiscuous mode [ 46.022810][ T3796] bond1: entered allmulticast mode [ 46.084108][ T3803] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3803 comm=syz.0.87 [ 46.179404][ T3796] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.287308][ T3796] bond1 (unregistering): Released all slaves [ 46.944976][ T3813] loop0: detected capacity change from 0 to 512 [ 46.966203][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 46.966296][ T29] audit: type=1326 audit(1743203557.338:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8710babc1f code=0x7ffc0000 [ 46.996676][ T29] audit: type=1326 audit(1743203557.398:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8710bad1f7 code=0x7ffc0000 [ 47.022843][ T29] audit: type=1326 audit(1743203557.398:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8710babad0 code=0x7ffc0000 [ 47.048321][ T29] audit: type=1326 audit(1743203557.398:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8710bacd6b code=0x7ffc0000 [ 47.087393][ T29] audit: type=1326 audit(1743203557.428:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8710babdca code=0x7ffc0000 [ 47.113111][ T29] audit: type=1326 audit(1743203557.428:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8710babdca code=0x7ffc0000 [ 47.138686][ T29] audit: type=1326 audit(1743203557.438:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8710bab9d7 code=0x7ffc0000 [ 47.165615][ T29] audit: type=1326 audit(1743203557.458:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3812 comm="syz.0.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8710bae90a code=0x7ffc0000 [ 47.201414][ T3813] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 47.260216][ T29] audit: type=1326 audit(1743203557.568:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e1bc1d169 code=0x7ffc0000 [ 47.287428][ T29] audit: type=1326 audit(1743203557.568:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3819 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e1bc1d169 code=0x7ffc0000 [ 47.361489][ T3825] loop2: detected capacity change from 0 to 1024 [ 47.402976][ T3813] EXT4-fs (loop0): 1 truncate cleaned up [ 47.434665][ T3825] EXT4-fs: test_dummy_encryption option not supported [ 47.457922][ T3813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.859436][ T3832] loop3: detected capacity change from 0 to 512 [ 47.927108][ T3832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.007121][ T3832] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.057559][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.077362][ T3838] loop1: detected capacity change from 0 to 512 [ 48.108323][ T3832] tipc: Enabled bearer , priority 10 [ 48.136479][ T3838] EXT4-fs: Ignoring removed oldalloc option [ 48.191568][ T3847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 48.263490][ T3838] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.94: Parent and EA inode have the same ino 15 [ 48.296308][ T3832] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.95: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 48.316954][ T3838] EXT4-fs (loop1): Remounting filesystem read-only [ 48.323664][ T3838] EXT4-fs warning (device loop1): ext4_evict_inode:260: couldn't mark inode dirty (err -30) [ 48.373948][ T3847] infiniband syz0: set active [ 48.379141][ T3847] infiniband syz0: added bond0 [ 48.389099][ T3832] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 48.436900][ T3838] EXT4-fs (loop1): 1 orphan inode deleted [ 48.442909][ T3832] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.95: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 48.462577][ T3832] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 48.496693][ T3832] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.95: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 48.499831][ T3847] RDS/IB: syz0: added [ 48.520002][ T3832] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 48.531173][ T3852] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.95: bg 0: block 18: invalid block bitmap [ 48.537722][ T3853] bond1: entered promiscuous mode [ 48.548500][ T3853] bond1: entered allmulticast mode [ 48.554412][ T3838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.566834][ T3847] smc: adding ib device syz0 with port count 1 [ 48.573790][ T3847] smc: ib device syz0 port 1 has pnetid [ 48.585611][ T3838] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.599631][ T3832] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.95: Failed to acquire dquot type 1 [ 48.616707][ T3853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.646639][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.676320][ T3853] bond1 (unregistering): Released all slaves [ 48.777598][ T3864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3864 comm=syz.3.99 [ 49.218717][ T3873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 49.253697][ T3873] loop3: detected capacity change from 0 to 128 [ 49.273014][ T3873] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.290963][ T3873] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.388997][ T3873] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 49.436292][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.996954][ T3883] loop4: detected capacity change from 0 to 8192 [ 50.297326][ T3899] loop2: detected capacity change from 0 to 1024 [ 50.344791][ T3899] EXT4-fs: test_dummy_encryption option not supported [ 50.586536][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.109'. [ 50.599404][ T3906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.834261][ T3906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.953739][ T3906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.033170][ T3906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.133747][ T3906] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.147720][ T3906] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.161800][ T3906] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.174572][ T3906] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.206575][ T3911] loop0: detected capacity change from 0 to 1024 [ 51.227063][ T3911] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 51.238564][ T3911] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 51.260202][ T3911] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 51.278109][ T3914] loop2: detected capacity change from 0 to 512 [ 51.281629][ T3911] EXT4-fs (loop0): invalid journal inode [ 51.310667][ T3911] EXT4-fs (loop0): can't get journal size [ 51.342349][ T3911] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.112: blocks 2-2 from inode overlap system zone [ 51.374929][ T3920] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3920 comm=syz.3.113 [ 51.431393][ T3911] EXT4-fs (loop0): failed to initialize system zone (-117) [ 51.449291][ T3911] EXT4-fs (loop0): mount failed [ 51.468670][ T3914] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.601713][ T3914] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.624885][ T3926] loop1: detected capacity change from 0 to 512 [ 51.632825][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 51.676212][ T3926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.689390][ T3914] tipc: Started in network mode [ 51.694477][ T3914] tipc: Node identity fe80000000000000000000000000001e, cluster identity 4711 [ 51.703538][ T3914] tipc: Enabling of bearer rejected, failed to enable media [ 51.713256][ T3928] rdma_rxe: rxe_newlink: failed to add bond0 [ 51.725113][ T3926] EXT4-fs (loop1): 1 truncate cleaned up [ 51.747976][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.786579][ T3938] loop3: detected capacity change from 0 to 1024 [ 51.818880][ T3938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c02c, mo2=0003] [ 51.838057][ T3942] loop4: detected capacity change from 0 to 512 [ 51.845135][ T3942] EXT4-fs: test_dummy_encryption option not supported [ 51.860002][ T3938] System zones: 0-1, 3-36 [ 51.950381][ T3938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.034443][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 52.034463][ T29] audit: type=1400 audit(1743203562.488:4247): avc: denied { execute } for pid=3936 comm="syz.3.119" path="/21/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.166403][ T3943] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.110: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 52.241926][ T29] audit: type=1400 audit(1743203562.698:4248): avc: denied { read } for pid=3925 comm="syz.1.126" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.266228][ T29] audit: type=1400 audit(1743203562.698:4249): avc: denied { open } for pid=3925 comm="syz.1.126" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.291314][ T29] audit: type=1400 audit(1743203562.698:4250): avc: denied { ioctl } for pid=3925 comm="syz.1.126" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 52.339991][ T3947] loop0: detected capacity change from 0 to 2048 [ 52.350867][ T3947] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1125899906842627)! [ 52.362330][ T3947] EXT4-fs (loop0): group descriptors corrupted! [ 52.434498][ T3943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 52.461063][ T3943] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.110: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 52.538414][ T29] audit: type=1326 audit(1743203562.888:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 52.565454][ T29] audit: type=1326 audit(1743203562.888:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3940 comm="syz.4.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f465d20d169 code=0x7ffc0000 [ 52.585580][ T3943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 52.599792][ T3948] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.110: bg 0: block 18: invalid block bitmap [ 52.624299][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.696185][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.706190][ T29] audit: type=1400 audit(1743203563.148:4253): avc: denied { tracepoint } for pid=3951 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.727500][ T29] audit: type=1400 audit(1743203563.158:4254): avc: denied { read } for pid=3951 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.746661][ T3943] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.110: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 52.810119][ T29] audit: type=1326 audit(1743203563.258:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 52.833701][ T29] audit: type=1326 audit(1743203563.258:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.3.122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 52.884002][ T3942] netlink: 'syz.4.120': attribute type 1 has an invalid length. [ 52.891746][ T3942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.120'. [ 52.915975][ T3954] loop3: detected capacity change from 0 to 512 [ 52.923421][ T3954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.936030][ T3954] EXT4-fs (loop3): 1 truncate cleaned up [ 52.942184][ T3954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.981720][ T3942] netlink: 'syz.4.120': attribute type 2 has an invalid length. [ 53.003034][ T3943] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 53.060311][ T3943] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.110: Failed to acquire dquot type 1 [ 53.139319][ T3963] loop0: detected capacity change from 0 to 512 [ 53.179936][ T3963] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #15: comm syz.0.123: casefold flag without casefold feature [ 53.273637][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.294925][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.317665][ T3963] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.123: couldn't read orphan inode 15 (err -117) [ 53.372520][ T3963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.438482][ T3975] loop1: detected capacity change from 0 to 512 [ 53.454430][ T3975] EXT4-fs: Ignoring removed bh option [ 53.472290][ T3975] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 53.506923][ T3975] EXT4-fs (loop1): 1 truncate cleaned up [ 53.523774][ T3975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.551177][ T3971] loop2: detected capacity change from 0 to 8192 [ 53.562546][ T3977] infiniband syz!: set down [ 53.567121][ T3977] infiniband syz!: added team_slave_0 [ 53.624183][ T3982] loop3: detected capacity change from 0 to 512 [ 53.665030][ T3982] EXT4-fs (loop3): 1 orphan inode deleted [ 53.678362][ T3982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.691713][ T3399] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 1 [ 53.699856][ T3977] RDS/IB: syz!: added [ 53.707231][ T3982] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.709749][ T3977] smc: adding ib device syz! with port count 1 [ 53.809724][ T3977] smc: ib device syz! port 1 has pnetid [ 53.982797][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.330794][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.395864][ T3994] loop4: detected capacity change from 0 to 512 [ 54.412927][ T3994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.425567][ T3994] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.437974][ T3994] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.163250][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.402097][ T4006] loop3: detected capacity change from 0 to 1024 [ 55.414233][ T4006] EXT4-fs: test_dummy_encryption option not supported [ 56.260843][ T4004] 9pnet_fd: Insufficient options for proto=fd [ 56.945567][ T4039] bond1: entered promiscuous mode [ 56.950918][ T4039] bond1: entered allmulticast mode [ 56.969823][ T4039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.993059][ T4039] bond1 (unregistering): Released all slaves [ 57.636366][ T4055] loop1: detected capacity change from 0 to 1024 [ 57.841081][ T4055] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 57.852124][ T4055] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 57.861893][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 57.861909][ T29] audit: type=1326 audit(1743203568.308:4608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 57.893770][ T29] audit: type=1326 audit(1743203568.308:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 57.917422][ T29] audit: type=1326 audit(1743203568.318:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 57.945075][ T29] audit: type=1326 audit(1743203568.318:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 57.969325][ T29] audit: type=1326 audit(1743203568.318:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 57.989669][ T4055] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 57.993985][ T29] audit: type=1326 audit(1743203568.318:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 58.029887][ T29] audit: type=1326 audit(1743203568.318:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 58.053398][ T29] audit: type=1326 audit(1743203568.318:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 58.055107][ T4065] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4065 comm=syz.4.146 [ 58.078199][ T29] audit: type=1326 audit(1743203568.318:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 58.129726][ T29] audit: type=1326 audit(1743203568.578:4617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4059 comm="syz.0.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8710bad169 code=0x7ffc0000 [ 58.243602][ T4055] EXT4-fs (loop1): invalid journal inode [ 58.270950][ T4055] EXT4-fs (loop1): can't get journal size [ 58.324720][ T4055] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.147: blocks 2-2 from inode overlap system zone [ 58.352936][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.149'. [ 58.399859][ T4068] rdma_rxe: rxe_newlink: failed to add bond0 [ 58.434618][ T4055] EXT4-fs (loop1): failed to initialize system zone (-117) [ 58.482599][ T4070] loop0: detected capacity change from 0 to 1024 [ 58.494758][ T4070] EXT4-fs: test_dummy_encryption option not supported [ 58.537317][ T4055] EXT4-fs (loop1): mount failed [ 58.764451][ T4079] loop3: detected capacity change from 0 to 1024 [ 58.779316][ T4079] EXT4-fs: test_dummy_encryption option not supported [ 59.801255][ T4072] loop2: detected capacity change from 0 to 512 [ 59.842667][ T4072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.940409][ T4072] EXT4-fs (loop2): 1 truncate cleaned up [ 59.962070][ T4072] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.346596][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.431990][ T4091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.157'. [ 60.466607][ T4091] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.587318][ T4103] bond1: entered promiscuous mode [ 60.592603][ T4103] bond1: entered allmulticast mode [ 60.850463][ T4103] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.057379][ T4103] bond1 (unregistering): Released all slaves [ 61.310005][ T4091] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.386827][ T4091] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.491325][ T4091] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.616010][ T4091] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.648932][ T4091] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.683412][ T4091] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.702513][ T4091] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.355172][ T4142] loop2: detected capacity change from 0 to 512 [ 62.362167][ T4142] EXT4-fs: Ignoring removed oldalloc option [ 62.761429][ T4149] loop4: detected capacity change from 0 to 2048 [ 62.806567][ T4149] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 1125899906842627)! [ 62.818292][ T4149] EXT4-fs (loop4): group descriptors corrupted! [ 62.962347][ T4142] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.165: Parent and EA inode have the same ino 15 [ 63.269625][ T4142] EXT4-fs (loop2): Remounting filesystem read-only [ 63.276225][ T4142] EXT4-fs warning (device loop2): ext4_evict_inode:260: couldn't mark inode dirty (err -30) [ 63.379638][ T4142] EXT4-fs (loop2): 1 orphan inode deleted [ 64.371312][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 64.371328][ T29] audit: type=1326 audit(1743203574.818:4714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.1.170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f413325d169 code=0x0 [ 64.415381][ T4142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.487200][ T4164] loop1: detected capacity change from 0 to 512 [ 64.563362][ T29] audit: type=1326 audit(1743203574.928:4715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.563402][ T29] audit: type=1326 audit(1743203574.928:4716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.563432][ T29] audit: type=1326 audit(1743203574.928:4717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.563461][ T29] audit: type=1326 audit(1743203574.928:4718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.563545][ T29] audit: type=1326 audit(1743203574.928:4719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.563625][ T29] audit: type=1326 audit(1743203574.928:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.563656][ T29] audit: type=1326 audit(1743203574.928:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.563681][ T29] audit: type=1326 audit(1743203574.928:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.563763][ T29] audit: type=1326 audit(1743203574.928:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4161 comm="syz.3.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0e5c8bd169 code=0x7ffc0000 [ 64.760993][ T4142] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.785524][ T4164] EXT4-fs error (device loop1): ext4_orphan_get:1390: inode #15: comm syz.1.170: casefold flag without casefold feature [ 65.060080][ T4164] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.170: couldn't read orphan inode 15 (err -117) [ 65.086643][ T3003] ================================================================== [ 65.094884][ T3003] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 65.100386][ T4164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.102195][ T3003] [ 65.102204][ T3003] write to 0xffff88810657f030 of 8 bytes by task 3292 on cpu 0: [ 65.124724][ T3003] dentry_unlink_inode+0x65/0x260 [ 65.129888][ T3003] d_delete+0x164/0x180 [ 65.134122][ T3003] d_delete_notify+0x34/0x100 [ 65.138913][ T3003] vfs_unlink+0x320/0x430 [ 65.143360][ T3003] do_unlinkat+0x21b/0x4b0 [ 65.147858][ T3003] __x64_sys_unlink+0x2e/0x40 [ 65.152580][ T3003] x64_sys_call+0x2358/0x2e10 [ 65.157402][ T3003] do_syscall_64+0xc9/0x1c0 [ 65.162039][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.167978][ T3003] [ 65.170330][ T3003] read to 0xffff88810657f030 of 8 bytes by task 3003 on cpu 1: [ 65.177898][ T3003] step_into+0x11c/0x860 [ 65.182182][ T3003] walk_component+0x178/0x240 [ 65.186904][ T3003] path_lookupat+0x103/0x2a0 [ 65.191530][ T3003] filename_lookup+0x14b/0x340 [ 65.196326][ T3003] do_readlinkat+0x8b/0x210 [ 65.200867][ T3003] __x64_sys_readlink+0x47/0x60 [ 65.205748][ T3003] x64_sys_call+0x2a81/0x2e10 [ 65.210447][ T3003] do_syscall_64+0xc9/0x1c0 [ 65.215074][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.221098][ T3003] [ 65.223525][ T3003] value changed: 0xffff8881182e71e8 -> 0x0000000000000000 [ 65.230651][ T3003] [ 65.232996][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 65.239178][ T3003] CPU: 1 UID: 0 PID: 3003 Comm: udevd Not tainted 6.14.0-syzkaller-07486-g15cb9a2b66fc #0 PREEMPT(voluntary) [ 65.251515][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 65.261755][ T3003] ================================================================== [ 65.295270][ T4174] loop4: detected capacity change from 0 to 512 [ 65.335973][ T4174] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 65.383704][ T4174] EXT4-fs (loop4): 1 truncate cleaned up [ 65.394048][ T4174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.409038][ T4164] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 65.656861][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.069479][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.