last executing test programs: 5.937669622s ago: executing program 2 (id=208): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') chmod(&(0x7f0000000000)='./file0/file0\x00', 0x3ec) 5.755692313s ago: executing program 2 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) 5.755053533s ago: executing program 2 (id=210): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0x400007}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000080)={[{@map_acorn}, {@cruft}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000280)={0x3, 0x2, "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"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.429187005s ago: executing program 2 (id=220): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) times(&(0x7f0000002280)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000002030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) 4.67049505s ago: executing program 2 (id=231): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0x400007}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000080)={[{@map_acorn}, {@cruft}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000280)={0x3, 0x2, "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"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 4.375840002s ago: executing program 2 (id=238): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) times(&(0x7f0000002280)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) 2.98893021s ago: executing program 3 (id=260): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) r6 = open_tree(r5, &(0x7f0000000280)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 2.836235772s ago: executing program 3 (id=262): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) 2.805779952s ago: executing program 3 (id=263): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)}], 0x2}, 0x48800) close(r0) 2.789926552s ago: executing program 3 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) fchdir(r0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 2.601005493s ago: executing program 1 (id=266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)) close(r1) 2.579249173s ago: executing program 3 (id=267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0x400007}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000080)={[{@map_acorn}, {@cruft}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000280)={0x3, 0x2, "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"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.228586805s ago: executing program 1 (id=269): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400088d0}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r1) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01062abd7000ffdbdf25060000000600"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000019200), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) ppoll(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), r5) getsockname$inet6(r5, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) ioprio_set$pid(0x1, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) splice(r7, 0x0, r6, 0x0, 0x7ffff000, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000680)={'erspan0\x00', 0x0, 0x20, 0x8, 0x9, 0xf2d, {{0x2d, 0x4, 0x0, 0x6, 0xb4, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x37}, {[@end, @noop, @ra={0x94, 0x4}, @noop, @end, @end, @timestamp_addr={0x44, 0x14, 0xa6, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp={0x44, 0xc, 0x9, 0x0, 0x3, [0xfffffff9, 0x8]}, @cipso={0x86, 0x73, 0x3, [{0x7, 0xb, "a3ea39226ad1c269ed"}, {0x0, 0xd, "a20095d862393808f76724"}, {0x5, 0x9, "04f509e8017edc"}, {0x6, 0x10, "00f92e7d2f89addad07beb6880f3"}, {0x6, 0xf, "e80181fe5ef31cdbd1bd905563"}, {0x2, 0x6, "0747fa3c"}, {0x6, 0x12, "6351ba934372515f048cbf59f65eb241"}, {0x6, 0x12, "23a9640e235c59248cda416a25877be4"}, {0x2, 0x3, "b5"}]}, @noop]}}}}}) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/pm_wakeup_irq', 0x202, 0x48) read$eventfd(r9, &(0x7f0000000080), 0x8) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@delchain={0x88, 0x65, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x10, 0x10}, {}, {0x0, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x2}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff4, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xa, 0xfff1}}, @TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x10}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffffffa}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = socket$inet(0x2, 0x5, 0x6) connect$inet(r10, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) 2.127425636s ago: executing program 3 (id=270): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xb, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff088) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0xc84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @qdisc_kind_options=@q_tbf={{0x8}, {0xc44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x53, 0x1, 0x8, 0x8, 0xe, 0x1}, {0x40, 0x1, 0x16, 0x5, 0x400, 0x6}, 0x6, 0x1, 0x602}}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x2, 0x1, 0x9, 0xa, 0x7ff, 0xff, 0x8, 0x2, 0x9c, 0xe, 0x0, 0xff, 0x204, 0x4, 0x9, 0x871, 0x0, 0x2, 0x40, 0x3, 0x8e8, 0x3, 0xfffffff9, 0x2, 0xffffffff, 0xfff, 0xc, 0xa, 0x8fd, 0x8df, 0x9, 0x4, 0x5, 0x6, 0x2, 0x2, 0x9, 0x8, 0x3, 0x2, 0x5, 0x0, 0xf32, 0x1, 0x3a3, 0x3, 0x2, 0x6, 0x9, 0x39, 0x4, 0x8, 0x0, 0xb, 0x8, 0x5, 0x3, 0x9365, 0x1, 0x6, 0x25, 0x6, 0x7, 0x5, 0x3, 0x1000, 0x8, 0x611c, 0x4, 0x9, 0x40, 0x7, 0x2, 0x80000001, 0x5a, 0x10001, 0x0, 0xff, 0x3ff, 0xccc, 0x8000, 0x9, 0x7, 0x37, 0x1, 0x5, 0x6, 0x7fffffff, 0x1000, 0x1, 0x4, 0x1ff, 0x800, 0x0, 0x8, 0x463, 0x3, 0xf8e6, 0x5, 0xb, 0x2ae5, 0x800, 0xa, 0x9, 0x6, 0xfffffff7, 0x1, 0x236b, 0x9, 0x63, 0x8, 0x31, 0x5, 0x3, 0x7ff, 0x72e4, 0x5e, 0xdea3, 0xc9ec, 0x7ff, 0x9, 0xd8ce, 0x1, 0x401, 0x1, 0x6, 0xfffffffc, 0x100, 0x4, 0x4, 0xf, 0x4, 0xffffffff, 0x6, 0x66a92a1e, 0x7fffffff, 0x5, 0x8, 0x0, 0x1000, 0x4, 0x10, 0x4, 0x8, 0x0, 0xfffffff8, 0x58000000, 0x3, 0x100, 0xe73, 0x10000, 0x6, 0x0, 0x40, 0x0, 0x872, 0xffffffbe, 0x3, 0xd7a0, 0xf16, 0x7ff, 0x8, 0xa, 0x6, 0x1, 0x7f, 0x7, 0x9f4, 0xdb, 0x7, 0x80000001, 0x5, 0x4, 0xffffffff, 0xbab, 0x3, 0x9, 0x4b, 0x7ff, 0xe, 0x4, 0x8e1, 0x80, 0x4, 0xeb, 0x8a64, 0x8, 0x1ff, 0x2, 0x7, 0x7, 0x4, 0xab, 0x80000000, 0x8150, 0x3, 0xfffffffc, 0x8, 0xa9d1, 0x9a, 0xc, 0x9, 0x210, 0x81, 0xb4, 0x200, 0x0, 0x15, 0xffff7fff, 0x200, 0x7, 0x305, 0x70, 0x9, 0x40, 0x658, 0x8, 0x7, 0xfffffffe, 0x5, 0x5, 0x4, 0xe1, 0x80000001, 0x9, 0x9, 0x37100000, 0x200, 0x80, 0x5, 0x1, 0x40, 0x401, 0x2, 0x0, 0x4, 0xc, 0x6, 0x9, 0x9, 0xdf, 0x7, 0x8, 0x1, 0x2, 0xc, 0x9, 0x1, 0xfffffffd, 0x7ff, 0x401, 0x7, 0xfffffff9, 0xd11, 0x5]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x630c63f1fa829bf6}, @TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x22ec, 0x9, 0x7, 0x7fff, 0x2, 0x6, 0x2d5, 0x0, 0x3, 0x6, 0x1, 0x2, 0x0, 0x4, 0x1, 0x1, 0x7, 0x5, 0x3, 0x9, 0x0, 0x4, 0xff, 0xb, 0x9, 0x0, 0xffffffff, 0x7, 0x2, 0xc1f, 0x6, 0x3, 0x7, 0x16b, 0x8, 0x8, 0x5, 0x8, 0x8, 0x8, 0x5, 0x6, 0x6, 0x9, 0x5, 0x9, 0x0, 0x2, 0x3, 0x9, 0x0, 0xff, 0x5, 0x1ff, 0x0, 0x9, 0x5, 0x8, 0x5, 0x1, 0xc, 0x7, 0x1000, 0xb, 0x7, 0xf7, 0x7, 0x0, 0x9, 0x0, 0x2, 0xc0000, 0x4, 0xfffffffe, 0x5, 0x3, 0x30, 0xffff8000, 0x6, 0x1, 0x30000000, 0x40, 0x5, 0x0, 0x3, 0x2, 0x3ff, 0x8, 0x8000, 0x5, 0x56800, 0xa2c00000, 0x7fffffff, 0x100, 0x1, 0x51fc, 0xaf, 0x7, 0x9, 0x7, 0x80, 0x200, 0x5, 0x8, 0x7, 0x8, 0xd, 0xa01, 0xc, 0x34, 0x1e5b424a, 0x9d6d, 0x6, 0x400, 0x3, 0x6, 0x278f0d2e, 0x1, 0xffff435f, 0x6, 0x6, 0x3, 0x7fff, 0x1, 0x8001, 0x1, 0x9, 0x40, 0x3, 0x400, 0x4, 0x3, 0x4, 0xd3e, 0x1, 0x63, 0xd150, 0x4b34, 0xafb, 0x0, 0x4, 0x4, 0xe5, 0x0, 0x5, 0x0, 0x481, 0x4, 0x7, 0xb6e, 0x5, 0x5, 0xc, 0xb, 0x8, 0x3c93, 0xe13, 0x4, 0x4, 0x7fff, 0x8000, 0x7, 0x5, 0x9, 0x200, 0x9, 0x400, 0x4800, 0xe7bbe0b, 0x5, 0x10001, 0x1ff, 0x80000000, 0x1000, 0x8d, 0x1, 0x6aa, 0x45c, 0x9, 0xe, 0xd, 0xf, 0x7fffffff, 0x9, 0x1, 0x9, 0x2, 0x4, 0x200, 0x9, 0x80000000, 0x7, 0xea2, 0x6, 0x1, 0x6, 0x1, 0x6f25a5e7, 0x2, 0x400, 0x8000, 0x1, 0x48, 0x7fff, 0x0, 0x3738c870, 0x2, 0x80000001, 0x9, 0x264e, 0x0, 0x3, 0x6, 0x5, 0x6, 0x68, 0xb94, 0xfffffff7, 0xffff, 0x73, 0x1ff, 0x0, 0x39e, 0x1ff, 0x2, 0x1, 0x7fffffff, 0x4, 0xf17d, 0x400, 0x80000000, 0x7, 0x0, 0x4, 0x5, 0x8, 0x40, 0x9, 0x5, 0x8, 0xa, 0x5, 0x4, 0x8000, 0x4a9c, 0xc3, 0x3, 0xf, 0x9, 0xfffffff5, 0x8, 0x5, 0xa2dbae00, 0x0, 0xbb6e]}, @TCA_TBF_PTAB={0x404, 0x3, [0xa, 0x42, 0x5, 0x40, 0x7f, 0x6, 0x9, 0x7, 0x0, 0x5, 0x2, 0x7fff, 0x40, 0x8, 0x6, 0x9, 0x4, 0x42b, 0x4, 0x6, 0x4, 0x6, 0x10, 0xffffffff, 0x101, 0x2, 0x8, 0xe, 0x8000000, 0x8, 0x80000000, 0x6, 0x3, 0x9, 0x8, 0xb5c8, 0x3, 0x81, 0x2d, 0x7, 0xf32, 0x6, 0x200, 0x72d, 0x9, 0x1ff, 0xfffffffd, 0x3, 0x3, 0x20fd7853, 0x10001, 0xfffffffb, 0xd, 0xfffffff8, 0xa, 0x9, 0x80, 0x3, 0x1a00000, 0xd6, 0xffffffff, 0x4, 0xecf, 0xfffffff1, 0x7, 0x100, 0x9, 0x797, 0x74, 0x1, 0x3, 0x7a, 0xfff, 0x0, 0x6, 0x5, 0x8, 0xfb43, 0x0, 0x8000, 0xfffffff9, 0xfffff695, 0x9, 0x8001, 0x1, 0x6, 0x1, 0x400, 0x8, 0x9, 0x7, 0x1, 0x400000, 0x0, 0x2, 0x3, 0x2, 0x100, 0x4a81, 0x8, 0xd28, 0xc4, 0x6, 0x1, 0x9, 0xff, 0x2, 0x1000, 0x7, 0x356c00, 0x7, 0xff, 0x1, 0x2, 0x7, 0x2, 0x8, 0x6, 0x7fffffff, 0x3ff, 0x9, 0x8, 0xe, 0x5, 0x1, 0xfffffe00, 0x0, 0x8000, 0x5, 0x9, 0x9, 0x7, 0x7, 0x6c, 0xb8000000, 0x9, 0x81, 0xb4, 0x5, 0x5, 0x663, 0x3, 0x40, 0x0, 0x5, 0x1, 0x200, 0x8, 0x2, 0x2, 0x2, 0x1, 0x5, 0x7, 0x5, 0x100, 0x5, 0x0, 0x200, 0x767, 0x5, 0x7, 0x5, 0x100, 0x5, 0x5e, 0x5, 0x7ff, 0x6c, 0x80000001, 0xb, 0x9, 0x6, 0x8fc5, 0x7e0284b, 0x6, 0xbd84, 0x5, 0xc, 0x3, 0x3, 0x0, 0xb8, 0x9, 0x6, 0x3, 0x80000001, 0x9, 0x4, 0x4f, 0xffff0000, 0xc0, 0x94, 0x2b, 0x7, 0x18cb91ae, 0xc920, 0x3, 0x4, 0x3ff, 0x3ae8, 0x5, 0x8, 0x8, 0x8, 0x35e, 0x8, 0x400, 0x1, 0xbd, 0x9871, 0x6b, 0xe85, 0x20f, 0x101, 0x0, 0x9, 0x9, 0x9b9, 0x0, 0x1, 0x1000, 0xf26, 0x3b, 0x4, 0x1, 0x8, 0xffff, 0xd, 0x8, 0x40, 0x9, 0x7, 0x7, 0x0, 0x7, 0x8, 0x4, 0xdea, 0x10, 0x4, 0x1000, 0x5, 0x1, 0x80, 0x6, 0x3, 0x7037, 0x3, 0xc0000000, 0xb, 0x7, 0x2, 0x65c, 0x0, 0x6]}]}}]}, 0xc84}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x5, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, &(0x7f0000000200)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00007a9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 1.136583462s ago: executing program 1 (id=278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = socket(0x2, 0x80805, 0x0) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f0000000600), &(0x7f0000000b40)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x8004}}}}, @TCA_RATE={0x6, 0x5, {0xf, 0xeb}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x8, 0x0, 0x100, 0x9, 0xffffffff, 0x3, 0x0, 0x7fff, 0x8000, 0x3a, 0x7, 0x3, 0x8008, 0x11, 0x6, 0x2, 0x1, 0xfffffff9, 0x9, 0x3c96, 0x5, 0x1000008, 0x4, 0x7fff, 0x3, 0x3, 0x8, 0x1ff, 0x6, 0x0, 0x7, 0x74ba, 0x40, 0x35e, 0x6, 0xb2b, 0x6, 0x6, 0x5, 0x3, 0x3, 0x0, 0xc66, 0x7fff, 0xc5, 0xb, 0x1, 0x0, 0x0, 0x1, 0x4d, 0x29da, 0x2, 0xfc, 0x3, 0x3, 0x800, 0xc, 0x8, 0x3, 0xd, 0x5, 0x400, 0x8, 0x0, 0x4, 0x1, 0xfffffffb, 0x7, 0x2, 0xbce6, 0x2, 0x100004, 0x9, 0xfff, 0xfffff801, 0xc, 0x4, 0x10001, 0x9, 0xffff, 0x94, 0x80, 0xa, 0x5f72, 0x80000000, 0x5, 0x8, 0x4b1, 0xc, 0xfffffffd, 0xeac, 0xf85, 0x373, 0x0, 0x3, 0x7fff, 0x9, 0xfffffffa, 0x20009, 0x3, 0x6, 0x1ff, 0x400001ff, 0xc, 0x0, 0x8, 0x80000000, 0x6, 0x8, 0x39, 0xa, 0x0, 0x401, 0x14e, 0x9, 0x41, 0x80, 0x3, 0xd4, 0x800, 0x23, 0x4, 0x9, 0x3a9, 0xfc7, 0xd, 0x7, 0x97d, 0x9, 0x6, 0x2, 0xffffb6d4, 0x8, 0x100, 0xa, 0x3e0000, 0x0, 0x401, 0x7, 0x100, 0x80000000, 0x4, 0x8001, 0x3, 0xcf800, 0x2b9c, 0x1000, 0xfffffff8, 0x3, 0x1, 0x4, 0x10, 0x0, 0x0, 0x4, 0x402, 0xaf1, 0x3, 0x6ea, 0x4, 0x1, 0xc81, 0x9, 0x7, 0x5653, 0xffffffff, 0x6, 0x5, 0x7, 0x10000, 0x7, 0x95, 0x10001, 0x7, 0xa1, 0x6, 0xe08b, 0x5, 0x1, 0xca, 0x5, 0x0, 0x9, 0x1000, 0x4, 0x0, 0x3, 0x4, 0xc, 0x3fed, 0x5, 0x50ce, 0x3, 0x9, 0x6, 0x8, 0x5, 0xfffffff7, 0x2, 0x1ff, 0x4, 0x3, 0x8, 0x10, 0x6, 0xa4, 0x5, 0xffffffff, 0xd65e, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xb56, 0x5, 0x7, 0xe, 0x800d523, 0x80, 0x1, 0xfffffff7, 0x8, 0xfffffff6, 0x0, 0x2, 0x7fff, 0x9a, 0x1, 0x800, 0x0, 0x1, 0x5, 0xfffffffe, 0x5, 0xffffffc0, 0x5ea, 0x4, 0x6d6ae3f8, 0x80000000, 0xc, 0x1, 0x1000, 0x8, 0x3, 0x8020000, 0x5, 0x6, 0xfffffffe, 0x71, 0x1, 0x0, 0x1, 0xd2f3]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x1, 0x4, 0x4, 0xfffd, 0x1030}, {0xb, 0x2, 0x9, 0x9, 0x33e2, 0x7}, 0x7, 0x2ab5, 0x1a97}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x30) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r8, 0x402, 0x40000029) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) close(r9) unshare(0x22020600) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) 1.030508343s ago: executing program 1 (id=279): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 683.320755ms ago: executing program 4 (id=281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000000c0), &(0x7f0000000140)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) memfd_secret(0x80000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r8, @ANYBLOB="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"], 0x1c8}}, 0x0) 656.688736ms ago: executing program 0 (id=282): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x100}, 0xffffffffffffffb7}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 630.952306ms ago: executing program 4 (id=283): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) r6 = open_tree(r5, &(0x7f0000000280)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 591.794846ms ago: executing program 0 (id=284): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r3}, 0x10) msgrcv(r1, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r1, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) r6 = open_tree(r5, &(0x7f0000000280)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) sendmsg$GTP_CMD_ECHOREQ(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 515.229807ms ago: executing program 4 (id=285): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r1) 475.840807ms ago: executing program 0 (id=286): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0xff38}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x3, &(0x7f0000000b80)=ANY=[@ANYRES16=r3, @ANYRES16=r3, @ANYRES64=r0, @ANYRES16=r1, @ANYRESDEC=r0, @ANYRESHEX, @ANYRESDEC=r0], &(0x7f0000000440)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x48}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r5, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='ext4_fc_cleanup\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a010400000000000000000a0000040900010073797a310000000038000480100001800c0001006e6f747261636b00240001800b0001006578746864720000140002800800064000000005080007400000000b0900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r9, &(0x7f0000000040)={0x11, 0x1, r10, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x3c, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r10, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}, [{0x8, 0xb, 0x7}, {0x8}, {0x8, 0xb, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syncfs(0xffffffffffffffff) 461.860107ms ago: executing program 4 (id=287): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000800000009500"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='tran']) 444.398547ms ago: executing program 0 (id=288): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYRESOCT=r1], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x100}, 0xffffffffffffffb7}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 443.613157ms ago: executing program 4 (id=289): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) times(&(0x7f0000002280)) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x4}, 0x10) 334.247278ms ago: executing program 0 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) 266.050218ms ago: executing program 0 (id=291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000600)=0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x80000004, 0x0, 0x0, 0xc01}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) utime(&(0x7f0000000000)='.\x00', 0x0) timer_settime(r3, 0x1, &(0x7f0000000400)={{0x77359400}}, &(0x7f0000000580)={{0x0, 0x0}, {0x0}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000010080000000000000000000711237000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7978207f8220b0edfa48000000100005ff000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32], 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}}, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f00000005c0)) setsockopt$inet_opts(r9, 0x0, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38000e80"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) recvmsg$unix(r9, &(0x7f00000003c0)={&(0x7f0000000000), 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1, &(0x7f0000000240)=[@cred={{0x1c}}], 0x20}, 0x42) 136.326339ms ago: executing program 1 (id=292): unshare(0x8000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xfffffffffffffe86, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0100005c0000000000000082acf76b6de6a67748984e8bafc1c4ca94b4f579fdc0224409743b9199534e39969bb0fa6ee5338a83faeabd7b17695406f02778ac57cadc739462bc0b542bd5942f07e4f7219967ecc7ca349cca9096d01aba0a569659441a6a9fc6c9d6c2e0d343d154adf5af5af7472cafb99cbe2312c81a72ccd5934594afd611b0a2ada21f18ecb65df68d31", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feed0000000000000000000000000000000000000054c895aa94dd"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="40b0cb17e9510000000000000000", @ANYRES16=r5, @ANYBLOB="200028bd7000fcdbdf254c0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000c00a6000600000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8, 0x0, 0xf}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r7, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f00000003c0), 0xffffffffffffffff) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r9, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132fff000"}) write$sndseq(r9, &(0x7f00000000c0)=[{0x5, 0xc0, 0x0, 0x0, @time, {}, {0x0, 0x81}, @connect={{0x6, 0x3}, {0xf9, 0x8}}}], 0x1c) 121.230009ms ago: executing program 1 (id=293): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xb, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(0xffffffffffffffff, r1, 0x0, 0x7ffff088) unshare(0x22020400) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0xc84, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}, @qdisc_kind_options=@q_tbf={{0x8}, {0xc44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x53, 0x1, 0x8, 0x8, 0xe, 0x1}, {0x40, 0x1, 0x16, 0x5, 0x400, 0x6}, 0x6, 0x1, 0x602}}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0x2, 0x1, 0x9, 0xa, 0x7ff, 0xff, 0x8, 0x2, 0x9c, 0xe, 0x0, 0xff, 0x204, 0x4, 0x9, 0x871, 0x0, 0x2, 0x40, 0x3, 0x8e8, 0x3, 0xfffffff9, 0x2, 0xffffffff, 0xfff, 0xc, 0xa, 0x8fd, 0x8df, 0x9, 0x4, 0x5, 0x6, 0x2, 0x2, 0x9, 0x8, 0x3, 0x2, 0x5, 0x0, 0xf32, 0x1, 0x3a3, 0x3, 0x2, 0x6, 0x9, 0x39, 0x4, 0x8, 0x0, 0xb, 0x8, 0x5, 0x3, 0x9365, 0x1, 0x6, 0x25, 0x6, 0x7, 0x5, 0x3, 0x1000, 0x8, 0x611c, 0x4, 0x9, 0x40, 0x7, 0x2, 0x80000001, 0x5a, 0x10001, 0x0, 0xff, 0x3ff, 0xccc, 0x8000, 0x9, 0x7, 0x37, 0x1, 0x5, 0x6, 0x7fffffff, 0x1000, 0x1, 0x4, 0x1ff, 0x800, 0x0, 0x8, 0x463, 0x3, 0xf8e6, 0x5, 0xb, 0x2ae5, 0x800, 0xa, 0x9, 0x6, 0xfffffff7, 0x1, 0x236b, 0x9, 0x63, 0x8, 0x31, 0x5, 0x3, 0x7ff, 0x72e4, 0x5e, 0xdea3, 0xc9ec, 0x7ff, 0x9, 0xd8ce, 0x1, 0x401, 0x1, 0x6, 0xfffffffc, 0x100, 0x4, 0x4, 0xf, 0x4, 0xffffffff, 0x6, 0x66a92a1e, 0x7fffffff, 0x5, 0x8, 0x0, 0x1000, 0x4, 0x10, 0x4, 0x8, 0x0, 0xfffffff8, 0x58000000, 0x3, 0x100, 0xe73, 0x10000, 0x6, 0x0, 0x40, 0x0, 0x872, 0xffffffbe, 0x3, 0xd7a0, 0xf16, 0x7ff, 0x8, 0xa, 0x6, 0x1, 0x7f, 0x7, 0x9f4, 0xdb, 0x7, 0x80000001, 0x5, 0x4, 0xffffffff, 0xbab, 0x3, 0x9, 0x4b, 0x7ff, 0xe, 0x4, 0x8e1, 0x80, 0x4, 0xeb, 0x8a64, 0x8, 0x1ff, 0x2, 0x7, 0x7, 0x4, 0xab, 0x80000000, 0x8150, 0x3, 0xfffffffc, 0x8, 0xa9d1, 0x9a, 0xc, 0x9, 0x210, 0x81, 0xb4, 0x200, 0x0, 0x15, 0xffff7fff, 0x200, 0x7, 0x305, 0x70, 0x9, 0x40, 0x658, 0x8, 0x7, 0xfffffffe, 0x5, 0x5, 0x4, 0xe1, 0x80000001, 0x9, 0x9, 0x37100000, 0x200, 0x80, 0x5, 0x1, 0x40, 0x401, 0x2, 0x0, 0x4, 0xc, 0x6, 0x9, 0x9, 0xdf, 0x7, 0x8, 0x1, 0x2, 0xc, 0x9, 0x1, 0xfffffffd, 0x7ff, 0x401, 0x7, 0xfffffff9, 0xd11, 0x5]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x630c63f1fa829bf6}, @TCA_TBF_RTAB={0x404, 0x2, [0x3, 0x22ec, 0x9, 0x7, 0x7fff, 0x2, 0x6, 0x2d5, 0x0, 0x3, 0x6, 0x1, 0x2, 0x0, 0x4, 0x1, 0x1, 0x7, 0x5, 0x3, 0x9, 0x0, 0x4, 0xff, 0xb, 0x9, 0x0, 0xffffffff, 0x7, 0x2, 0xc1f, 0x6, 0x3, 0x7, 0x16b, 0x8, 0x8, 0x5, 0x8, 0x8, 0x8, 0x5, 0x6, 0x6, 0x9, 0x5, 0x9, 0x0, 0x2, 0x3, 0x9, 0x0, 0xff, 0x5, 0x1ff, 0x0, 0x9, 0x5, 0x8, 0x5, 0x1, 0xc, 0x7, 0x1000, 0xb, 0x7, 0xf7, 0x7, 0x0, 0x9, 0x0, 0x2, 0xc0000, 0x4, 0xfffffffe, 0x5, 0x3, 0x30, 0xffff8000, 0x6, 0x1, 0x30000000, 0x40, 0x5, 0x0, 0x3, 0x2, 0x3ff, 0x8, 0x8000, 0x5, 0x56800, 0xa2c00000, 0x7fffffff, 0x100, 0x1, 0x51fc, 0xaf, 0x7, 0x9, 0x7, 0x80, 0x200, 0x5, 0x8, 0x7, 0x8, 0xd, 0xa01, 0xc, 0x34, 0x1e5b424a, 0x9d6d, 0x6, 0x400, 0x3, 0x6, 0x278f0d2e, 0x1, 0xffff435f, 0x6, 0x6, 0x3, 0x7fff, 0x1, 0x8001, 0x1, 0x9, 0x40, 0x3, 0x400, 0x4, 0x3, 0x4, 0xd3e, 0x1, 0x63, 0xd150, 0x4b34, 0xafb, 0x0, 0x4, 0x4, 0xe5, 0x0, 0x5, 0x0, 0x481, 0x4, 0x7, 0xb6e, 0x5, 0x5, 0xc, 0xb, 0x8, 0x3c93, 0xe13, 0x4, 0x4, 0x7fff, 0x8000, 0x7, 0x5, 0x9, 0x200, 0x9, 0x400, 0x4800, 0xe7bbe0b, 0x5, 0x10001, 0x1ff, 0x80000000, 0x1000, 0x8d, 0x1, 0x6aa, 0x45c, 0x9, 0xe, 0xd, 0xf, 0x7fffffff, 0x9, 0x1, 0x9, 0x2, 0x4, 0x200, 0x9, 0x80000000, 0x7, 0xea2, 0x6, 0x1, 0x6, 0x1, 0x6f25a5e7, 0x2, 0x400, 0x8000, 0x1, 0x48, 0x7fff, 0x0, 0x3738c870, 0x2, 0x80000001, 0x9, 0x264e, 0x0, 0x3, 0x6, 0x5, 0x6, 0x68, 0xb94, 0xfffffff7, 0xffff, 0x73, 0x1ff, 0x0, 0x39e, 0x1ff, 0x2, 0x1, 0x7fffffff, 0x4, 0xf17d, 0x400, 0x80000000, 0x7, 0x0, 0x4, 0x5, 0x8, 0x40, 0x9, 0x5, 0x8, 0xa, 0x5, 0x4, 0x8000, 0x4a9c, 0xc3, 0x3, 0xf, 0x9, 0xfffffff5, 0x8, 0x5, 0xa2dbae00, 0x0, 0xbb6e]}, @TCA_TBF_PTAB={0x404, 0x3, [0xa, 0x42, 0x5, 0x40, 0x7f, 0x6, 0x9, 0x7, 0x0, 0x5, 0x2, 0x7fff, 0x40, 0x8, 0x6, 0x9, 0x4, 0x42b, 0x4, 0x6, 0x4, 0x6, 0x10, 0xffffffff, 0x101, 0x2, 0x8, 0xe, 0x8000000, 0x8, 0x80000000, 0x6, 0x3, 0x9, 0x8, 0xb5c8, 0x3, 0x81, 0x2d, 0x7, 0xf32, 0x6, 0x200, 0x72d, 0x9, 0x1ff, 0xfffffffd, 0x3, 0x3, 0x20fd7853, 0x10001, 0xfffffffb, 0xd, 0xfffffff8, 0xa, 0x9, 0x80, 0x3, 0x1a00000, 0xd6, 0xffffffff, 0x4, 0xecf, 0xfffffff1, 0x7, 0x100, 0x9, 0x797, 0x74, 0x1, 0x3, 0x7a, 0xfff, 0x0, 0x6, 0x5, 0x8, 0xfb43, 0x0, 0x8000, 0xfffffff9, 0xfffff695, 0x9, 0x8001, 0x1, 0x6, 0x1, 0x400, 0x8, 0x9, 0x7, 0x1, 0x400000, 0x0, 0x2, 0x3, 0x2, 0x100, 0x4a81, 0x8, 0xd28, 0xc4, 0x6, 0x1, 0x9, 0xff, 0x2, 0x1000, 0x7, 0x356c00, 0x7, 0xff, 0x1, 0x2, 0x7, 0x2, 0x8, 0x6, 0x7fffffff, 0x3ff, 0x9, 0x8, 0xe, 0x5, 0x1, 0xfffffe00, 0x0, 0x8000, 0x5, 0x9, 0x9, 0x7, 0x7, 0x6c, 0xb8000000, 0x9, 0x81, 0xb4, 0x5, 0x5, 0x663, 0x3, 0x40, 0x0, 0x5, 0x1, 0x200, 0x8, 0x2, 0x2, 0x2, 0x1, 0x5, 0x7, 0x5, 0x100, 0x5, 0x0, 0x200, 0x767, 0x5, 0x7, 0x5, 0x100, 0x5, 0x5e, 0x5, 0x7ff, 0x6c, 0x80000001, 0xb, 0x9, 0x6, 0x8fc5, 0x7e0284b, 0x6, 0xbd84, 0x5, 0xc, 0x3, 0x3, 0x0, 0xb8, 0x9, 0x6, 0x3, 0x80000001, 0x9, 0x4, 0x4f, 0xffff0000, 0xc0, 0x94, 0x2b, 0x7, 0x18cb91ae, 0xc920, 0x3, 0x4, 0x3ff, 0x3ae8, 0x5, 0x8, 0x8, 0x8, 0x35e, 0x8, 0x400, 0x1, 0xbd, 0x9871, 0x6b, 0xe85, 0x20f, 0x101, 0x0, 0x9, 0x9, 0x9b9, 0x0, 0x1, 0x1000, 0xf26, 0x3b, 0x4, 0x1, 0x8, 0xffff, 0xd, 0x8, 0x40, 0x9, 0x7, 0x7, 0x0, 0x7, 0x8, 0x4, 0xdea, 0x10, 0x4, 0x1000, 0x5, 0x1, 0x80, 0x6, 0x3, 0x7037, 0x3, 0xc0000000, 0xb, 0x7, 0x2, 0x65c, 0x0, 0x6]}]}}]}, 0xc84}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, &(0x7f0000000200)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00007a9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 0s ago: executing program 4 (id=294): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6, 0x0, 0x400007}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000080)={[{@map_acorn}, {@cruft}, {@check_strict}, {@hide}, {@mode={'mode', 0x3d, 0xa7c}}, {@utf8}, {@utf8}]}, 0x0, 0x567, &(0x7f0000000200)="$eJzs3V1v01gawPHHpYUqK6HV7gqhqsAB9qKVSnASCIq4AK9zkh5I7Mh2UHuFKpqiihRWlJW2vUHcsLvSzofgdj7EXM+XQfMRMvJL6GuSMiVNh/n/IvBJfHzOYyfy0xPFxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMRyq7ZdsKRhvPaKGsytBn4zLU6JUtnWe+v77S0eWAzpV8SK/8nsrFxNX7r6t73VV+L/bsl8+mxeZuPFrOz+6cqfH/51eqq//ZCAz8T2zu6rtW6383bSgYzRtUuD19W1Z0LfNJ26Vib0VaVctu8u10JVMw0dymykm8oNtBP5wYXsnS0pnV/121696jS0WnAXVaFSeXCnaNtl9STf0k4Q+t7dJ/nQXTaNhvHqSZ14dVznQfxBfGoiFWmnqdTGZrdTGrUDcaXCSSoVR1Uq2sVioVAsFsr3K/cf2Pb0kRfsQ+RIjcl/aDFZ3+jMDZzeVJb/pSFGPGnLiqhjH65UJRBfmgPWZxYfZYW7emi/+/N/P8tf3Vs9J0n+v54+uz4o/w+I5ewe27Iju/JK1qQrXenI24lHNN6HJQePeV20eGIk/PRYjDTFSV5R8Svii5KKlKUstjyXZalJKEpqYqQhWsLe++y9biafrkC0OBKJL4EoWRBXFkVJQSpSkZIo0ZKXVfGlLZ7UpSpO0sqGbCbHvTQk5i+VCgOr5Pqfu44Uh7RE/sfpfatTN3BqvX7+H+LimUUDAAAAAADGwUq+fY/H/zNyLSnVTEPbkw4LAAAAAAB8Q71eryfzYsXjfxG5JhbjfwAAAAAAvjdWco2dJSI5uZGWNsRKLpfiSwAAAAAAAL4TyZX/1+NFMgfKDbG+TJfC+B8AAAAAgO/EfwfPsT+bVWldsn76RYJgxvrQWvm7teXELzpb2YTuFw63GNXmrMtZI8miPJ09c/W8lc1+uTcJZtrL541Rc/1bWQBW+pXFXgCXTh6A/F9upnVurqfL9f6atJdczTR03vUbDwviOJenIr0S/ev15r8l2f3/ec3Llmxsdjv5F2+668nB+BC38mErm0DxyDyKQ2J5l8y3kFxzcewezyQXYmT95tJ+7f4b8Ficral086kT9/lIPsotEZneq5s7uP+zcZ+F/KC9z6IonHLPP8rttM7thdvp4pgoiqOiKO6P4quPxQmjKI2KovQVUVhyNAoAmJSNEVnIOpr4f8O5Nsnu0yfI7qf580I+ykJaZ2EuObFOzx1zRrdHndHtU2a3H4/cA2lQjo37/eFQVv0Ub/BpYL9ho2jFh/DCu61/ypXtnd07m1trLzsvO6+LxVLZvmfbPUvS3ZCZZDEkUgDAH9foe+yMrGHdGzGq/suXnxTk5YW8ka6sy1JytUHyi4NjW83t+xnCUjJqjYPN7tNyaNSaS9JkeoeXpSGjuovJVQ79dotD6x6MoTT+NwIAgDN0a0QePkn+Xxox7j6Yy4ePjnP77tYGAADGQwefrVz0HysITOt5oVIpONGyVoHvPlWBqda1Ml6kA3fZ8epatQI/8l2/EReemaoOVdhutfwgUjU/UC0/NCvKEktUuBpGuqlC3XS8yLhhq6GdUCvX9yLHjVTVhK5qtf/RMOGyDpKNw5Z2Tc24TmR8T4V+O3B1XqlQa7WVE0krmqr2IlMzcdFTrcA0nWBVPfMb7aZWVR26gWlFftpgvy/j1fygmTSbn/TBBgDgnNje2X211u123o6xMOl9BAAAB5GlAQAAAAAAAAAAAAAAAAAAAAA4/87i+j8KYy+s/NzrnYMwzknhopyLMH7fhZGnjvdncoICMDa/BgAA//+IFFJh") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0xfffffffffffffff2) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r7}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x10101, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000280)={0x3, 0x2, "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"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 22.893217][ T29] audit: type=1400 audit(1762658492.847:62): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.916143][ T29] audit: type=1400 audit(1762658492.867:63): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.916813][ T3300] cgroup: Unknown subsys name 'net' [ 22.943732][ T29] audit: type=1400 audit(1762658492.897:64): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.049005][ T3300] cgroup: Unknown subsys name 'cpuset' [ 23.055177][ T3300] cgroup: Unknown subsys name 'rlimit' [ 23.204059][ T29] audit: type=1400 audit(1762658493.157:65): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.227305][ T29] audit: type=1400 audit(1762658493.157:66): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.247402][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.247724][ T29] audit: type=1400 audit(1762658493.157:67): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.276565][ T29] audit: type=1400 audit(1762658493.157:68): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.296879][ T29] audit: type=1400 audit(1762658493.167:69): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.321648][ T29] audit: type=1400 audit(1762658493.167:70): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.344911][ T29] audit: type=1400 audit(1762658493.217:71): avc: denied { relabelto } for pid=3303 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.350077][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.255037][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.292809][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 25.328068][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.361748][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.402483][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.409554][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.416649][ T3313] bridge_slave_0: entered allmulticast mode [ 25.423086][ T3313] bridge_slave_0: entered promiscuous mode [ 25.433567][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.440632][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.447690][ T3315] bridge_slave_0: entered allmulticast mode [ 25.454091][ T3315] bridge_slave_0: entered promiscuous mode [ 25.469696][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.476727][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.483911][ T3313] bridge_slave_1: entered allmulticast mode [ 25.490213][ T3313] bridge_slave_1: entered promiscuous mode [ 25.500466][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.507497][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.514687][ T3315] bridge_slave_1: entered allmulticast mode [ 25.521056][ T3315] bridge_slave_1: entered promiscuous mode [ 25.531300][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 25.555862][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.582631][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.592630][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.620287][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.629477][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.636547][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.643786][ T3311] bridge_slave_0: entered allmulticast mode [ 25.650198][ T3311] bridge_slave_0: entered promiscuous mode [ 25.656439][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.663517][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.670646][ T3312] bridge_slave_0: entered allmulticast mode [ 25.676890][ T3312] bridge_slave_0: entered promiscuous mode [ 25.694734][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.701791][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.708910][ T3311] bridge_slave_1: entered allmulticast mode [ 25.715331][ T3311] bridge_slave_1: entered promiscuous mode [ 25.721441][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.728570][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.735681][ T3312] bridge_slave_1: entered allmulticast mode [ 25.742211][ T3312] bridge_slave_1: entered promiscuous mode [ 25.751071][ T3313] team0: Port device team_slave_0 added [ 25.772736][ T3313] team0: Port device team_slave_1 added [ 25.778952][ T3315] team0: Port device team_slave_0 added [ 25.790970][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.813474][ T3315] team0: Port device team_slave_1 added [ 25.820038][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.834152][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.853075][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.860218][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.867289][ T3323] bridge_slave_0: entered allmulticast mode [ 25.873655][ T3323] bridge_slave_0: entered promiscuous mode [ 25.890032][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.897013][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.922926][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.934580][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.948625][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.955556][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.981587][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.992334][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.999456][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.006526][ T3323] bridge_slave_1: entered allmulticast mode [ 26.012836][ T3323] bridge_slave_1: entered promiscuous mode [ 26.023868][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.030880][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.056796][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.072110][ T3312] team0: Port device team_slave_0 added [ 26.078017][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.084989][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.110888][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.126813][ T3311] team0: Port device team_slave_0 added [ 26.135105][ T3311] team0: Port device team_slave_1 added [ 26.141534][ T3312] team0: Port device team_slave_1 added [ 26.155517][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.185686][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.200269][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.207274][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.233227][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.244690][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.251633][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.277520][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.292696][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.299653][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.325546][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.357183][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.364139][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.390054][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.401107][ T3323] team0: Port device team_slave_0 added [ 26.413932][ T3313] hsr_slave_0: entered promiscuous mode [ 26.420162][ T3313] hsr_slave_1: entered promiscuous mode [ 26.427880][ T3315] hsr_slave_0: entered promiscuous mode [ 26.433806][ T3315] hsr_slave_1: entered promiscuous mode [ 26.439615][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 26.445318][ T3315] Cannot create hsr debugfs directory [ 26.453932][ T3323] team0: Port device team_slave_1 added [ 26.470727][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.477655][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.503642][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.525099][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.532112][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.558050][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.580649][ T3311] hsr_slave_0: entered promiscuous mode [ 26.586693][ T3311] hsr_slave_1: entered promiscuous mode [ 26.592494][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 26.598205][ T3311] Cannot create hsr debugfs directory [ 26.616901][ T3312] hsr_slave_0: entered promiscuous mode [ 26.622917][ T3312] hsr_slave_1: entered promiscuous mode [ 26.628704][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 26.634411][ T3312] Cannot create hsr debugfs directory [ 26.716575][ T3323] hsr_slave_0: entered promiscuous mode [ 26.722559][ T3323] hsr_slave_1: entered promiscuous mode [ 26.728571][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 26.734281][ T3323] Cannot create hsr debugfs directory [ 26.850668][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.859080][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.878772][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.889482][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.904741][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.913210][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.928671][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.938780][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.963182][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.972070][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.981194][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.999482][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.038132][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.046648][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.055556][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.064304][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.090920][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.102539][ T3323] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.111205][ T3323] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.119722][ T3323] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.133688][ T3323] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.152817][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.162986][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.173877][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.180923][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.206859][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.217251][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.230507][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.237634][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.259224][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.272897][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.280052][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.295989][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.324084][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.331140][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.343945][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.352895][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.363234][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.379903][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.392572][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.399628][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.408422][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.415475][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.431988][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.439064][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.452934][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.463342][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.475676][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.482773][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.510790][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.527306][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.562161][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.572585][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.586853][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.609029][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.616093][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.639311][ T1785] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.646384][ T1785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.670560][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.679869][ T3313] veth0_vlan: entered promiscuous mode [ 27.689873][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.697906][ T3313] veth1_vlan: entered promiscuous mode [ 27.710210][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.735138][ T3313] veth0_macvtap: entered promiscuous mode [ 27.756360][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.768764][ T3313] veth1_macvtap: entered promiscuous mode [ 27.789340][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.808279][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.840664][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.883904][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.892988][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.902111][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.913345][ T3312] veth0_vlan: entered promiscuous mode [ 27.933186][ T3312] veth1_vlan: entered promiscuous mode [ 27.942017][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.950668][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 27.950682][ T29] audit: type=1400 audit(1762658497.897:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.8FRTng/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.964235][ T3311] veth0_vlan: entered promiscuous mode [ 27.980956][ T29] audit: type=1400 audit(1762658497.907:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.989165][ T3312] veth0_macvtap: entered promiscuous mode [ 28.008188][ T29] audit: type=1400 audit(1762658497.907:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.8FRTng/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.024713][ T3311] veth1_vlan: entered promiscuous mode [ 28.038980][ T29] audit: type=1400 audit(1762658497.907:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.051869][ T3315] veth0_vlan: entered promiscuous mode [ 28.071712][ T29] audit: type=1400 audit(1762658497.997:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.8FRTng/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.098301][ T29] audit: type=1400 audit(1762658497.997:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.8FRTng/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.110856][ T3315] veth1_vlan: entered promiscuous mode [ 28.125683][ T29] audit: type=1400 audit(1762658497.997:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.157752][ T3311] veth0_macvtap: entered promiscuous mode [ 28.158405][ T29] audit: type=1400 audit(1762658498.097:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.166619][ T3312] veth1_macvtap: entered promiscuous mode [ 28.186185][ T29] audit: type=1400 audit(1762658498.097:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=4783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.197627][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.226649][ T3323] veth0_vlan: entered promiscuous mode [ 28.240350][ T3311] veth1_macvtap: entered promiscuous mode [ 28.240985][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.255994][ T3315] veth0_macvtap: entered promiscuous mode [ 28.267554][ T3323] veth1_vlan: entered promiscuous mode [ 28.283166][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.291305][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.298719][ T29] audit: type=1400 audit(1762658498.237:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.331528][ T3315] veth1_macvtap: entered promiscuous mode [ 28.338554][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.361364][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.371552][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.383907][ T3323] veth0_macvtap: entered promiscuous mode [ 28.397326][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.408044][ T3481] hub 1-0:1.0: USB hub found [ 28.412906][ T3481] hub 1-0:1.0: 8 ports detected [ 28.420126][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.431649][ T3323] veth1_macvtap: entered promiscuous mode [ 28.444581][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.468767][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.483403][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.494375][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.506731][ T3484] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2'. [ 28.514976][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.530611][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.545818][ T3484] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2'. [ 28.571175][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.589595][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.595286][ T3494] ======================================================= [ 28.595286][ T3494] WARNING: The mand mount option has been deprecated and [ 28.595286][ T3494] and is ignored by this kernel. Remove the mand [ 28.595286][ T3494] option from the mount to silence this warning. [ 28.595286][ T3494] ======================================================= [ 28.634456][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.660573][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.670710][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.696979][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.707399][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.784313][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.793601][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.802765][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.911669][ T3510] loop4: detected capacity change from 0 to 512 [ 28.927406][ T3511] loop0: detected capacity change from 0 to 512 [ 28.942086][ T3510] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 28.986691][ T3510] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 28.994939][ T3510] EXT4-fs (loop4): orphan cleanup on readonly fs [ 29.011181][ T3510] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 29.024502][ T3510] EXT4-fs (loop4): Remounting filesystem read-only [ 29.031133][ T3510] EXT4-fs (loop4): 1 truncate cleaned up [ 29.037070][ T1785] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 29.047594][ T1785] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 29.069712][ T3511] FAT-fs (loop0): IO charset utf not found [ 29.124526][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.132432][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.140311][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.148026][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.155921][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.163740][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.171580][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.179347][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.187084][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.194861][ T3407] hid-generic 0003:80000004:0000.0001: unknown main item tag 0x0 [ 29.220724][ T1785] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 29.261266][ T3519] netlink: 774 bytes leftover after parsing attributes in process `syz.2.3'. [ 29.277005][ T3510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.349778][ T3407] hid-generic 0003:80000004:0000.0001: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 29.702531][ T3530] netlink: 'syz.0.12': attribute type 12 has an invalid length. [ 29.710317][ T3530] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12'. [ 29.787637][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.803273][ T3532] bridge_slave_0: left allmulticast mode [ 29.808998][ T3532] bridge_slave_0: left promiscuous mode [ 29.814720][ T3532] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.830064][ T3532] bridge_slave_1: left allmulticast mode [ 29.835703][ T3532] bridge_slave_1: left promiscuous mode [ 29.841448][ T3532] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.848907][ T3535] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14'. [ 29.857817][ T3534] loop4: detected capacity change from 0 to 1024 [ 29.866423][ T3532] bond0: (slave bond_slave_0): Releasing backup interface [ 29.873988][ T3534] EXT4-fs: Ignoring removed orlov option [ 29.887429][ T3535] netlink: 'syz.3.14': attribute type 10 has an invalid length. [ 29.895137][ T3535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14'. [ 29.904272][ T3532] bond0: (slave bond_slave_1): Releasing backup interface [ 29.912282][ T3534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.949743][ T3532] team0: Port device team_slave_0 removed [ 29.965773][ T3538] loop3: detected capacity change from 0 to 1024 [ 29.975808][ T3532] team0: Port device team_slave_1 removed [ 30.012199][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.018678][ T3538] EXT4-fs: Ignoring removed orlov option [ 30.019686][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 30.032918][ T3541] netlink: 'syz.4.15': attribute type 21 has an invalid length. [ 30.084498][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.104735][ T3532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.112252][ T3532] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 30.137181][ T3546] loop1: detected capacity change from 0 to 1024 [ 30.148787][ T3546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.162513][ T3538] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.183431][ T3532] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 30.206716][ T3535] batman_adv: batadv0: Adding interface: veth1_vlan [ 30.213370][ T3535] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.239877][ T3546] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 30.248589][ T3535] batman_adv: batadv0: Interface activated: veth1_vlan [ 30.264823][ T3544] loop2: detected capacity change from 0 to 512 [ 30.275491][ T3544] EXT4-fs (loop2): orphan cleanup on readonly fs [ 30.282634][ T3544] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.16: EA inode hash validation failed [ 30.295260][ T3544] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.316324][ T3544] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.16: corrupted inode contents [ 30.344309][ T3544] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.16: mark_inode_dirty error [ 30.365784][ T3544] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.16: corrupted inode contents [ 30.377712][ T3544] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.16: mark_inode_dirty error [ 30.391526][ T3544] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.16: mark inode dirty (error -117) [ 30.427528][ T3544] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 30.448379][ T3544] EXT4-fs (loop2): 1 orphan inode deleted [ 30.455273][ T3544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 30.507125][ T3312] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /4/file1: bad entry in directory: inode out of bounds - offset=108, inode=131, rec_len=916, size=1024 fake=0 [ 30.538213][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.569952][ T3544] bridge0: entered promiscuous mode [ 30.571048][ T3559] loop3: detected capacity change from 0 to 1024 [ 30.575179][ T3544] macsec1: entered promiscuous mode [ 30.581872][ T3559] EXT4-fs: Ignoring removed orlov option [ 30.587843][ T3544] bridge0: port 3(macsec1) entered blocking state [ 30.598845][ T3544] bridge0: port 3(macsec1) entered disabled state [ 30.606283][ T3544] macsec1: entered allmulticast mode [ 30.611680][ T3544] bridge0: entered allmulticast mode [ 30.617681][ T3544] macsec1: left allmulticast mode [ 30.622787][ T3544] bridge0: left allmulticast mode [ 30.628523][ T3544] bridge0: left promiscuous mode [ 30.643706][ T3559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.692766][ T3562] bridge_slave_0: left allmulticast mode [ 30.698464][ T3562] bridge_slave_0: left promiscuous mode [ 30.704136][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.712379][ T3564] netlink: 56 bytes leftover after parsing attributes in process `syz.1.21'. [ 30.722312][ T3562] bridge_slave_1: left allmulticast mode [ 30.728295][ T3562] bridge_slave_1: left promiscuous mode [ 30.734050][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.761246][ T3562] bond0: (slave bond_slave_0): Releasing backup interface [ 30.779853][ T3559] netlink: 'syz.3.22': attribute type 21 has an invalid length. [ 30.799501][ T3566] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 30.807149][ T3566] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21'. [ 30.816195][ T3562] bond0: (slave bond_slave_1): Releasing backup interface [ 30.847791][ T3562] team0: Port device team_slave_0 removed [ 30.860833][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.883877][ T3564] loop1: detected capacity change from 0 to 1024 [ 30.910601][ T3562] team0: Port device team_slave_1 removed [ 30.913625][ T3564] EXT4-fs: Ignoring removed orlov option [ 30.926768][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 30.934247][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 30.942202][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.952558][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 30.960052][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.000602][ T3562] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 31.015721][ T3564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.044400][ T3564] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.055416][ T3566] batman_adv: batadv0: Adding interface: veth1_vlan [ 31.062057][ T3566] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.088568][ T3566] batman_adv: batadv0: Interface activated: veth1_vlan [ 31.174156][ T3565] syz.3.22 (3565) used greatest stack depth: 10672 bytes left [ 31.256641][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.310370][ T3592] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.313981][ T3594] netlink: 3 bytes leftover after parsing attributes in process `syz.3.28'. [ 31.331052][ T3594] 0ªX¹¦À: renamed from caif0 [ 31.339180][ T3594] 0ªX¹¦À: entered allmulticast mode [ 31.344395][ T3594] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 31.376831][ T3599] netlink: 164 bytes leftover after parsing attributes in process `syz.2.32'. [ 31.537466][ T3603] loop2: detected capacity change from 0 to 2048 [ 31.589652][ T3603] /dev/loop2: Can't open blockdev [ 31.724045][ T3608] hub 1-0:1.0: USB hub found [ 31.737075][ T3608] hub 1-0:1.0: 8 ports detected [ 31.850541][ T3612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.896761][ T3615] 0ªX¹¦À: renamed from caif0 [ 31.903364][ T3615] 0ªX¹¦À: entered allmulticast mode [ 31.908698][ T3615] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 31.988184][ T3612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.025994][ T3614] loop3: detected capacity change from 0 to 512 [ 32.037063][ T3614] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.043901][ T3614] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.36: EA inode hash validation failed [ 32.056721][ T3614] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.36: corrupted inode contents [ 32.068864][ T3614] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #15: comm syz.3.36: mark_inode_dirty error [ 32.080983][ T3614] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.36: corrupted inode contents [ 32.095190][ T3614] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2996: inode #15: comm syz.3.36: mark_inode_dirty error [ 32.109729][ T3612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.114312][ T3614] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.36: mark inode dirty (error -117) [ 32.138576][ T3614] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 32.158047][ T3614] EXT4-fs (loop3): 1 orphan inode deleted [ 32.167641][ T3614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 32.184850][ T3622] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.195357][ T3624] loop1: detected capacity change from 0 to 1024 [ 32.202108][ T3624] EXT4-fs: Ignoring removed orlov option [ 32.211538][ T3612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.216498][ T3624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.237137][ T3614] bridge0: entered promiscuous mode [ 32.247790][ T3614] macsec1: entered promiscuous mode [ 32.253251][ T3614] bridge0: port 1(macsec1) entered blocking state [ 32.259731][ T3614] bridge0: port 1(macsec1) entered disabled state [ 32.266307][ T3614] macsec1: entered allmulticast mode [ 32.271822][ T3614] bridge0: entered allmulticast mode [ 32.278143][ T3614] macsec1: left allmulticast mode [ 32.283250][ T3614] bridge0: left allmulticast mode [ 32.288970][ T3614] bridge0: left promiscuous mode [ 32.301850][ T3626] 0ªX¹¦À: renamed from caif0 [ 32.306988][ T3627] netlink: 'syz.1.39': attribute type 21 has an invalid length. [ 32.316293][ T3626] 0ªX¹¦À: entered allmulticast mode [ 32.321637][ T3626] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 32.340846][ T3622] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.368166][ T353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.379824][ T3440] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.393069][ T3622] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.409100][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.421880][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.468904][ T3622] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.505743][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.560772][ T353] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.572945][ T353] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.593035][ T353] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.609912][ T353] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.681110][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.858898][ T3651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.882047][ T3653] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.929431][ T3651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.946017][ T3656] 1ªX¹¦À: renamed from 60ªX¹¦À [ 32.953578][ T3656] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 32.972502][ T3653] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.988927][ T3498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 33.000550][ T3651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.025885][ T3653] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.077951][ T3651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.100091][ T3653] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.135909][ T3440] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.147542][ T3440] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.159320][ T353] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.171197][ T353] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.324988][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 33.325001][ T29] audit: type=1326 audit(1762658503.277:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.375643][ T29] audit: type=1326 audit(1762658503.317:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.400251][ T29] audit: type=1326 audit(1762658503.317:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.423735][ T29] audit: type=1326 audit(1762658503.317:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.446856][ T29] audit: type=1326 audit(1762658503.317:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.470381][ T29] audit: type=1326 audit(1762658503.317:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.493855][ T29] audit: type=1326 audit(1762658503.317:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.517016][ T29] audit: type=1326 audit(1762658503.317:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.540408][ T29] audit: type=1326 audit(1762658503.317:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.564119][ T29] audit: type=1326 audit(1762658503.317:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3661 comm="syz.1.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 33.627289][ T3668] loop3: detected capacity change from 0 to 2048 [ 33.649928][ T3668] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.662279][ T3668] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.701005][ T3675] __nla_validate_parse: 8 callbacks suppressed [ 33.701019][ T3675] netlink: 164 bytes leftover after parsing attributes in process `syz.0.57'. [ 33.724375][ T3675] netlink: 164 bytes leftover after parsing attributes in process `syz.0.57'. [ 33.737734][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.761981][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.59'. [ 33.779183][ T3679] loop4: detected capacity change from 0 to 1024 [ 33.800429][ T3679] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 33.810856][ T3679] System zones: 0-1, 3-8 [ 33.818737][ T3679] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.832398][ T3679] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.855580][ T3686] bridge_slave_0: left allmulticast mode [ 33.861306][ T3686] bridge_slave_0: left promiscuous mode [ 33.867100][ T3686] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.876956][ T3688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.60'. [ 33.888525][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.898361][ T3689] netlink: 156 bytes leftover after parsing attributes in process `syz.3.58'. [ 33.907682][ T3689] netlink: 156 bytes leftover after parsing attributes in process `syz.3.58'. [ 33.919105][ T3688] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 33.924678][ T3686] bridge_slave_1: left allmulticast mode [ 33.926819][ T3688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.60'. [ 33.932444][ T3686] bridge_slave_1: left promiscuous mode [ 33.946842][ T3686] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.972929][ T3686] bond0: (slave bond_slave_0): Releasing backup interface [ 33.988898][ T3686] bond0: (slave bond_slave_1): Releasing backup interface [ 34.018736][ T3686] team0: Port device team_slave_0 removed [ 34.034322][ T3694] loop0: detected capacity change from 0 to 1024 [ 34.056501][ T3686] team0: Port device team_slave_1 removed [ 34.065170][ T3694] EXT4-fs: Ignoring removed orlov option [ 34.072147][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.079635][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.089641][ T3694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.102933][ T3694] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.103802][ T3686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.119801][ T3686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.132623][ T3686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 34.149448][ T3688] batman_adv: batadv0: Adding interface: veth1_vlan [ 34.156060][ T3688] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.208848][ T3688] batman_adv: batadv0: Interface activated: veth1_vlan [ 34.257123][ T3705] loop3: detected capacity change from 0 to 512 [ 34.278497][ T3705] ------------[ cut here ]------------ [ 34.283965][ T3705] EA inode 11 i_nlink=2 [ 34.284449][ T3705] WARNING: CPU: 0 PID: 3705 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 34.298846][ T3705] Modules linked in: [ 34.302754][ T3705] CPU: 0 UID: 0 PID: 3705 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.312323][ T3705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.322443][ T3705] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 34.329228][ T3705] Code: 90 49 8d 7e 40 e8 c6 fc b8 ff 4d 8b 6e 40 4c 89 e7 e8 da f7 b8 ff 41 8b 56 48 48 c7 c7 83 d1 55 86 4c 89 ee e8 47 f8 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 c8 e5 b5 03 0f 1f 84 00 00 00 00 00 [ 34.349125][ T3705] RSP: 0018:ffffc900012e75a0 EFLAGS: 00010246 [ 34.355609][ T3705] RAX: e5c71494c007f500 RBX: ffff888119cb6d18 RCX: 0000000000080000 [ 34.363614][ T3705] RDX: ffffc90003f4a000 RSI: 000000000000406a RDI: 000000000000406b [ 34.371633][ T3705] RBP: 0000000000000002 R08: 0001c900012e7427 R09: 0000000000000000 [ 34.379624][ T3705] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888119cb6cc8 [ 34.387587][ T3705] R13: 000000000000000b R14: ffff888119cb6c80 R15: 0000000000000001 [ 34.395569][ T3705] FS: 00007f74242ff6c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 34.404524][ T3705] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.411133][ T3705] CR2: 00007f74258829e0 CR3: 000000011cc48000 CR4: 00000000003506f0 [ 34.419173][ T3705] Call Trace: [ 34.422453][ T3705] [ 34.425381][ T3705] ext4_xattr_set_entry+0x77f/0x1020 [ 34.431014][ T3705] ext4_xattr_ibody_set+0x184/0x3c0 [ 34.436229][ T3705] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 34.442250][ T3705] __ext4_expand_extra_isize+0x246/0x280 [ 34.447912][ T3705] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 34.453441][ T3705] ext4_evict_inode+0x80e/0xd90 [ 34.458313][ T3705] ? __pfx_ext4_evict_inode+0x10/0x10 [ 34.463790][ T3705] evict+0x2e3/0x550 [ 34.467735][ T3705] ? __dquot_initialize+0x146/0x7c0 [ 34.473029][ T3705] iput+0x4ed/0x650 [ 34.476858][ T3705] ext4_process_orphan+0x1a9/0x1c0 [ 34.482049][ T3705] ext4_orphan_cleanup+0x6a8/0xa00 [ 34.487175][ T3705] ext4_fill_super+0x3483/0x3810 [ 34.492176][ T3705] ? snprintf+0x86/0xb0 [ 34.496362][ T3705] ? set_blocksize+0x1a8/0x310 [ 34.501223][ T3705] ? sb_set_blocksize+0xe3/0x100 [ 34.506173][ T3705] ? setup_bdev_super+0x30e/0x370 [ 34.511337][ T3705] ? __pfx_ext4_fill_super+0x10/0x10 [ 34.516689][ T3705] get_tree_bdev_flags+0x291/0x300 [ 34.521912][ T3705] ? __pfx_ext4_fill_super+0x10/0x10 [ 34.527200][ T3705] get_tree_bdev+0x1f/0x30 [ 34.531726][ T3705] ext4_get_tree+0x1c/0x30 [ 34.536165][ T3705] vfs_get_tree+0x57/0x1d0 [ 34.540679][ T3705] do_new_mount+0x24d/0x660 [ 34.545222][ T3705] path_mount+0x4a5/0xb70 [ 34.549592][ T3705] ? user_path_at+0x109/0x130 [ 34.554415][ T3705] __se_sys_mount+0x28c/0x2e0 [ 34.559130][ T3705] __x64_sys_mount+0x67/0x80 [ 34.563727][ T3705] x64_sys_call+0x2b51/0x3000 [ 34.568413][ T3705] do_syscall_64+0xd2/0x200 [ 34.572988][ T3705] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.579111][ T3705] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.584924][ T3705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.590915][ T3705] RIP: 0033:0x7f74258a0e6a [ 34.595331][ T3705] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.615091][ T3705] RSP: 002b:00007f74242fee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 34.623639][ T3705] RAX: ffffffffffffffda RBX: 00007f74242feef0 RCX: 00007f74258a0e6a [ 34.631632][ T3705] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f74242feeb0 [ 34.639640][ T3705] RBP: 0000200000000180 R08: 00007f74242feef0 R09: 0000000001a08700 [ 34.647621][ T3705] R10: 0000000001a08700 R11: 0000000000000246 R12: 00002000000001c0 [ 34.655642][ T3705] R13: 00007f74242feeb0 R14: 0000000000000470 R15: 0000200000000700 [ 34.663648][ T3705] [ 34.666681][ T3705] ---[ end trace 0000000000000000 ]--- [ 34.675477][ T3705] EXT4-fs (loop3): 1 orphan inode deleted [ 34.681673][ T3705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.759602][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.824633][ T3714] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.860749][ T3718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 34.881554][ T3714] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.891982][ T3719] netlink: 3 bytes leftover after parsing attributes in process `syz.4.67'. [ 34.901975][ T3719] 1ªX¹¦À: renamed from 60ªX¹¦À [ 34.908965][ T3719] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 34.951279][ T3724] loop1: detected capacity change from 0 to 1024 [ 34.957983][ T3724] EXT4-fs: Ignoring removed orlov option [ 34.965799][ T3724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.975040][ T3714] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.050024][ T3726] netlink: 'syz.1.70': attribute type 21 has an invalid length. [ 35.058853][ T3714] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.157672][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.176835][ T353] Bluetooth: hci0: Frame reassembly failed (-84) [ 35.190065][ T3734] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.230979][ T3737] netlink: 3 bytes leftover after parsing attributes in process `syz.0.74'. [ 35.239859][ T3737] 0ªX¹¦À: renamed from caif0 [ 35.246637][ T3737] 0ªX¹¦À: entered allmulticast mode [ 35.251890][ T3737] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 35.275713][ T3734] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.330080][ T3734] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.390343][ T3734] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.454417][ T353] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.465852][ T353] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.477550][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.489030][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.687218][ T3750] loop0: detected capacity change from 0 to 1024 [ 35.694185][ T3750] EXT4-fs: Ignoring removed orlov option [ 35.702835][ T3750] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.733453][ T3755] Zero length message leads to an empty skb [ 35.750237][ T3755] loop3: detected capacity change from 0 to 1024 [ 35.756828][ T3755] EXT4-fs: Ignoring removed orlov option [ 35.764644][ T3755] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.772349][ T3757] netlink: 'syz.0.78': attribute type 21 has an invalid length. [ 35.777717][ T3755] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.930440][ T3757] syz.0.78 (3757) used greatest stack depth: 10632 bytes left [ 35.939158][ T3770] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.951579][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.019217][ T3770] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.091111][ T3770] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.142870][ T3770] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.353879][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.368467][ T3783] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 36.376327][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.385219][ T3783] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48400 sclass=netlink_route_socket pid=3783 comm=syz.3.91 [ 36.398144][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.412583][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.476747][ T353] Bluetooth: hci1: Frame reassembly failed (-84) [ 36.949547][ T1050] hid_parser_main: 8 callbacks suppressed [ 36.949559][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 36.963149][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 36.970932][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 36.978682][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 36.986403][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 36.994195][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 37.001960][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 37.009755][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 37.017559][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 37.025360][ T1050] hid-generic 0003:80000004:0000.0002: unknown main item tag 0x0 [ 37.034889][ T1050] hid-generic 0003:80000004:0000.0002: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 37.039168][ T353] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.055529][ T353] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.067054][ T353] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.078033][ T353] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.163185][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.174193][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.185036][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.195831][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.230378][ T3815] loop2: detected capacity change from 0 to 1024 [ 37.236921][ T3815] EXT4-fs: Ignoring removed orlov option [ 37.242574][ T3498] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 37.250891][ T3815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.319477][ T3823] netlink: 'syz.2.101': attribute type 21 has an invalid length. [ 37.483803][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.155357][ T3853] loop2: detected capacity change from 0 to 512 [ 38.256429][ T3855] loop4: detected capacity change from 0 to 1024 [ 38.271708][ T3855] EXT4-fs: Ignoring removed orlov option [ 38.389496][ T3853] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 38.397512][ T3853] EXT4-fs (loop2): orphan cleanup on readonly fs [ 38.404935][ T3853] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #16: comm +}[@: corrupted inode contents [ 38.416738][ T3853] EXT4-fs (loop2): Remounting filesystem read-only [ 38.419825][ T3855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.423355][ T3853] EXT4-fs (loop2): 1 truncate cleaned up [ 38.452262][ T353] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.462830][ T353] __quota_error: 301 callbacks suppressed [ 38.462848][ T353] Quota error (device loop2): write_blk: dquota write failed [ 38.475934][ T353] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 38.485923][ T353] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.496440][ T353] Quota error (device loop2): write_blk: dquota write failed [ 38.503884][ T353] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 38.514028][ T3788] Bluetooth: hci1: command 0x1003 tx timeout [ 38.515297][ T3859] netlink: 'syz.4.113': attribute type 21 has an invalid length. [ 38.520049][ T3573] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 38.520548][ T353] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 38.543977][ T353] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 38.552846][ T353] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 38.563180][ T3853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.751451][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.861197][ T29] audit: type=1326 audit(1762658508.817:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 38.884550][ T29] audit: type=1326 audit(1762658508.817:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 38.924097][ T29] audit: type=1326 audit(1762658508.867:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 38.947362][ T29] audit: type=1326 audit(1762658508.867:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3864 comm="syz.1.116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 38.947980][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.985841][ T3871] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.042874][ T3871] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.067826][ T3880] netlink: 3 bytes leftover after parsing attributes in process `syz.0.117'. [ 39.124687][ T3880] 1ªX¹¦À: renamed from 60ªX¹¦À [ 39.173308][ T3880] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 39.199897][ T3871] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.381569][ T3871] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.603516][ T3902] loop3: detected capacity change from 0 to 1024 [ 39.626171][ T3902] EXT4-fs: Ignoring removed orlov option [ 39.649825][ T3902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.733058][ T3911] netlink: 'syz.3.128': attribute type 21 has an invalid length. [ 40.178670][ T1785] Bluetooth: hci0: Frame reassembly failed (-84) [ 40.242976][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.288977][ T3934] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.328338][ T3935] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.360348][ T3935] netlink: 56 bytes leftover after parsing attributes in process `syz.3.147'. [ 40.370106][ T3935] netlink: 'syz.3.147': attribute type 10 has an invalid length. [ 40.378017][ T3935] netlink: 40 bytes leftover after parsing attributes in process `syz.3.147'. [ 40.387792][ T3934] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.407939][ T3935] loop3: detected capacity change from 0 to 1024 [ 40.414962][ T3935] EXT4-fs: Ignoring removed orlov option [ 40.422341][ T3935] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.435742][ T3935] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.446067][ T3934] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.489981][ T3934] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.951955][ T3965] loop2: detected capacity change from 0 to 1024 [ 40.959158][ T3965] EXT4-fs: Ignoring removed orlov option [ 40.968298][ T3965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.043652][ T3968] netlink: 'syz.2.149': attribute type 21 has an invalid length. [ 41.203378][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.224197][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.236341][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.247264][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.258191][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.574000][ T3979] loop3: detected capacity change from 0 to 1024 [ 41.580759][ T3979] EXT4-fs: Ignoring removed orlov option [ 41.588192][ T3979] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.656119][ T3981] netlink: 'syz.3.153': attribute type 21 has an invalid length. [ 41.704619][ T353] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.721001][ T353] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.733328][ T353] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.741663][ T353] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.841010][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.990371][ T3998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 42.007127][ T3998] loop3: detected capacity change from 0 to 1024 [ 42.019858][ T353] Bluetooth: hci1: Frame reassembly failed (-84) [ 42.029758][ T3998] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 42.037984][ T3998] System zones: 0-1, 3-8 [ 42.042707][ T3998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.055567][ T3998] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.110854][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.190852][ T3573] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 42.196991][ T3498] Bluetooth: hci0: command 0x1003 tx timeout [ 42.300769][ T4021] loop0: detected capacity change from 0 to 1024 [ 42.307366][ T4021] EXT4-fs: Ignoring removed orlov option [ 42.315010][ T4021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.380399][ T4025] loop3: detected capacity change from 0 to 512 [ 42.468983][ T4025] FAT-fs (loop3): IO charset utf not found [ 42.486630][ T4027] netlink: 'syz.0.168': attribute type 21 has an invalid length. [ 42.970133][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.290995][ T4041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.175'. [ 43.308158][ T4041] loop3: detected capacity change from 0 to 1024 [ 43.343472][ T4047] loop0: detected capacity change from 0 to 1024 [ 43.350137][ T4047] EXT4-fs: Ignoring removed orlov option [ 43.356330][ T4041] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 43.365978][ T4047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.378511][ T4041] System zones: 0-1, 3-8 [ 43.383320][ T4047] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.393199][ T4041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.409998][ T4041] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.457023][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.477128][ T4059] netlink: 156 bytes leftover after parsing attributes in process `syz.3.180'. [ 43.486316][ T4059] netlink: 156 bytes leftover after parsing attributes in process `syz.3.180'. [ 43.525177][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 43.525193][ T29] audit: type=1326 audit(1762658513.477:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 43.554636][ T29] audit: type=1326 audit(1762658513.477:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 43.577869][ T29] audit: type=1326 audit(1762658513.477:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 43.601249][ T29] audit: type=1326 audit(1762658513.477:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 43.601498][ T4064] loop3: detected capacity change from 0 to 512 [ 43.624462][ T29] audit: type=1326 audit(1762658513.477:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 43.633885][ T4064] EXT4-fs (loop3): 1 orphan inode deleted [ 43.653867][ T29] audit: type=1326 audit(1762658513.477:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 43.653897][ T29] audit: type=1326 audit(1762658513.477:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4060 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88264f6c9 code=0x7ffc0000 [ 43.706810][ T4064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.750584][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.956916][ T4069] loop2: detected capacity change from 0 to 512 [ 44.001618][ T4069] FAT-fs (loop2): IO charset utf not found [ 44.028486][ T3573] Bluetooth: hci1: command 0x1003 tx timeout [ 44.058587][ T3788] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 44.250722][ T29] audit: type=1326 audit(1762658514.207:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742589f6c9 code=0x7ffc0000 [ 44.273993][ T29] audit: type=1326 audit(1762658514.207:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f742589f6c9 code=0x7ffc0000 [ 44.297265][ T29] audit: type=1326 audit(1762658514.207:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4080 comm="syz.3.187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f742589f6c9 code=0x7ffc0000 [ 44.467020][ T4092] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 44.484814][ T4094] netlink: 156 bytes leftover after parsing attributes in process `syz.2.193'. [ 44.494303][ T4094] netlink: 156 bytes leftover after parsing attributes in process `syz.2.193'. [ 44.510762][ T4092] netlink: 56 bytes leftover after parsing attributes in process `syz.0.192'. [ 44.520264][ T4092] netlink: 'syz.0.192': attribute type 10 has an invalid length. [ 44.527996][ T4092] netlink: 40 bytes leftover after parsing attributes in process `syz.0.192'. [ 44.540752][ T4099] capability: warning: `syz.2.194' uses deprecated v2 capabilities in a way that may be insecure [ 44.567685][ T4092] loop0: detected capacity change from 0 to 1024 [ 44.574949][ T4092] EXT4-fs: Ignoring removed orlov option [ 44.615615][ T4101] loop2: detected capacity change from 0 to 1024 [ 44.622495][ T4101] EXT4-fs: Ignoring removed orlov option [ 44.631109][ T4092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.644032][ T4101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.657107][ T4092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.737409][ T4111] netlink: 'syz.2.195': attribute type 21 has an invalid length. [ 44.940726][ T4123] loop0: detected capacity change from 0 to 1024 [ 44.956563][ T4123] EXT4-fs: Ignoring removed orlov option [ 44.975271][ T4123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.045707][ T4125] netlink: 'syz.0.202': attribute type 21 has an invalid length. [ 45.162870][ T4129] netlink: 56 bytes leftover after parsing attributes in process `syz.3.203'. [ 45.169129][ T4127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.207325][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.216556][ T4129] loop3: detected capacity change from 0 to 1024 [ 45.223496][ T4129] EXT4-fs: Ignoring removed orlov option [ 45.256999][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.270299][ T4129] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.429596][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.429660][ T4137] loop3: detected capacity change from 0 to 1024 [ 45.429893][ T4137] EXT4-fs: Ignoring removed orlov option [ 45.458835][ T4137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.496970][ T4139] loop0: detected capacity change from 0 to 1024 [ 45.503833][ T4139] EXT4-fs: Ignoring removed orlov option [ 45.523629][ T4139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.530852][ T4148] loop2: detected capacity change from 0 to 1024 [ 45.536912][ T4139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.559025][ T4149] netlink: 'syz.3.206': attribute type 21 has an invalid length. [ 45.567218][ T4148] EXT4-fs: Ignoring removed orlov option [ 45.576988][ T4148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.646136][ T4154] netlink: 'syz.2.210': attribute type 21 has an invalid length. [ 45.767394][ T4156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 45.889765][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.901201][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 45.948301][ T4166] loop4: detected capacity change from 0 to 1024 [ 45.959749][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.963574][ T4172] loop3: detected capacity change from 0 to 1024 [ 45.976656][ T4172] EXT4-fs: Ignoring removed orlov option [ 45.984955][ T4172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.999782][ T4166] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 46.018717][ T4166] System zones: 0-1, 3-8 [ 46.029846][ T4166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.030173][ T4179] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.042512][ T4166] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.068297][ T4181] netlink: 'syz.3.218': attribute type 21 has an invalid length. [ 46.162530][ T4179] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.179708][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.184372][ T4183] netlink: 3 bytes leftover after parsing attributes in process `syz.2.220'. [ 46.199723][ T4183] 0ªX¹¦À: renamed from 61ªX¹¦À [ 46.216628][ T4183] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 46.277099][ T4179] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.320504][ T4197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.226'. [ 46.330399][ T4179] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.397672][ T42] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.417661][ T42] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.426921][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.763287][ T4210] loop2: detected capacity change from 0 to 1024 [ 46.776193][ T42] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.784507][ T42] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.793147][ T4210] EXT4-fs: Ignoring removed orlov option [ 46.806038][ T4210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.872256][ T4219] netlink: 'syz.2.231': attribute type 21 has an invalid length. [ 46.884301][ T4220] netlink: 156 bytes leftover after parsing attributes in process `syz.4.233'. [ 47.022632][ T3323] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.081170][ T4233] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.129948][ T4241] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.149917][ T4233] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.169419][ T4242] 1ªX¹¦À: renamed from 60ªX¹¦À [ 47.175948][ T4242] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 47.203653][ T4241] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.219595][ T4244] 0ªX¹¦À: renamed from caif0 [ 47.226745][ T4244] 0ªX¹¦À: entered allmulticast mode [ 47.231981][ T4244] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 47.250218][ T4233] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.290353][ T4241] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.339905][ T4233] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.359805][ T4241] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.456967][ T42] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.477871][ T42] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.491896][ T42] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.508896][ T42] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.798110][ T4264] loop1: detected capacity change from 0 to 1024 [ 47.849005][ T4264] EXT4-fs: Ignoring removed orlov option [ 47.955291][ T4264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.109996][ T4278] netlink: 'syz.1.249': attribute type 21 has an invalid length. [ 48.266442][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.331936][ T4287] loop3: detected capacity change from 0 to 1024 [ 48.340694][ T4287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.375822][ T4287] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 48.399975][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.824193][ T4316] loop4: detected capacity change from 0 to 512 [ 48.848941][ T4318] loop3: detected capacity change from 0 to 1024 [ 48.871892][ T4318] EXT4-fs: Ignoring removed orlov option [ 48.898702][ T4318] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.004424][ T4320] netlink: 'syz.3.267': attribute type 21 has an invalid length. [ 49.031568][ T4316] FAT-fs (loop4): IO charset utf not found [ 49.171904][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 49.171920][ T29] audit: type=1326 audit(1762658519.127:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.204821][ T29] audit: type=1326 audit(1762658519.167:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.228201][ T29] audit: type=1326 audit(1762658519.167:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.251528][ T29] audit: type=1326 audit(1762658519.167:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.274921][ T29] audit: type=1326 audit(1762658519.167:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.298317][ T29] audit: type=1326 audit(1762658519.167:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.321609][ T29] audit: type=1326 audit(1762658519.167:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.344924][ T29] audit: type=1326 audit(1762658519.167:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.368129][ T29] audit: type=1326 audit(1762658519.167:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.391475][ T29] audit: type=1326 audit(1762658519.167:1172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4324 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f215da5f6c9 code=0x7ffc0000 [ 49.429550][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.471413][ T4333] loop0: detected capacity change from 0 to 1024 [ 49.485044][ T4333] EXT4-fs: Ignoring removed orlov option [ 49.507180][ T4333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.579591][ T4342] netlink: 'syz.0.271': attribute type 21 has an invalid length. [ 49.787154][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.944483][ T4359] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.017695][ T4361] loop4: detected capacity change from 0 to 512 [ 50.171027][ T4363] __nla_validate_parse: 4 callbacks suppressed [ 50.171043][ T4363] netlink: 3 bytes leftover after parsing attributes in process `syz.0.277'. [ 50.201423][ T4361] FAT-fs (loop4): IO charset utf not found [ 50.315839][ T4359] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.326594][ T4363] 0ªX¹¦À: renamed from 61ªX¹¦À [ 50.333542][ T4363] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 50.360112][ T4359] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.443892][ T4359] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.521316][ T42] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.551099][ T42] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.559517][ T42] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.567740][ T42] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.955067][ T4394] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.999874][ T4394] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.014443][ T4396] netlink: 3 bytes leftover after parsing attributes in process `syz.4.289'. [ 51.023391][ T4396] 0ªX¹¦À: renamed from 61ªX¹¦À [ 51.029750][ T4396] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 51.070114][ T3416] hid_parser_main: 8 callbacks suppressed [ 51.070191][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.083784][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.091524][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.099308][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.107084][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.114815][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.122651][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.130458][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.138242][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.146213][ T3416] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 51.154498][ T3416] hid-generic 0003:80000004:0000.0003: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 51.155112][ T4394] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.209672][ T4394] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.272731][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 51.295122][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.305793][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.317640][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.329176][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.396120][ T4410] loop4: detected capacity change from 0 to 1024 [ 51.403042][ T4410] EXT4-fs: Ignoring removed orlov option [ 51.410580][ T4410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.478148][ T4412] netlink: 'syz.4.294': attribute type 21 has an invalid length. [ 51.548470][ T3788] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 51.563010][ T4410] ================================================================== [ 51.571081][ T4410] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 51.579067][ T4410] [ 51.581390][ T4410] write to 0xffff888119c5ca50 of 4 bytes by task 4412 on cpu 1: [ 51.589011][ T4410] writeback_single_inode+0x150/0x3f0 [ 51.594408][ T4410] sync_inode_metadata+0x5b/0x90 [ 51.599365][ T4410] generic_buffers_fsync_noflush+0xd9/0x120 [ 51.605273][ T4410] ext4_sync_file+0x1ab/0x690 [ 51.609954][ T4410] vfs_fsync_range+0x10d/0x130 [ 51.614715][ T4410] ext4_buffered_write_iter+0x34f/0x3c0 [ 51.620236][ T4410] ext4_file_write_iter+0x387/0xf60 [ 51.625411][ T4410] iter_file_splice_write+0x666/0xa60 [ 51.630763][ T4410] direct_splice_actor+0x156/0x2a0 [ 51.635853][ T4410] splice_direct_to_actor+0x312/0x680 [ 51.641204][ T4410] do_splice_direct+0xda/0x150 [ 51.645944][ T4410] do_sendfile+0x380/0x650 [ 51.650345][ T4410] __x64_sys_sendfile64+0x105/0x150 [ 51.655524][ T4410] x64_sys_call+0x2bb4/0x3000 [ 51.660179][ T4410] do_syscall_64+0xd2/0x200 [ 51.664658][ T4410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.670529][ T4410] [ 51.672841][ T4410] read to 0xffff888119c5ca50 of 4 bytes by task 4410 on cpu 0: [ 51.680358][ T4410] vfs_fsync_range+0x9b/0x130 [ 51.685016][ T4410] ext4_buffered_write_iter+0x34f/0x3c0 [ 51.690540][ T4410] ext4_file_write_iter+0x387/0xf60 [ 51.695711][ T4410] iter_file_splice_write+0x666/0xa60 [ 51.701062][ T4410] direct_splice_actor+0x156/0x2a0 [ 51.706154][ T4410] splice_direct_to_actor+0x312/0x680 [ 51.711501][ T4410] do_splice_direct+0xda/0x150 [ 51.716246][ T4410] do_sendfile+0x380/0x650 [ 51.720646][ T4410] __x64_sys_sendfile64+0x105/0x150 [ 51.725827][ T4410] x64_sys_call+0x2bb4/0x3000 [ 51.730482][ T4410] do_syscall_64+0xd2/0x200 [ 51.734965][ T4410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.740834][ T4410] [ 51.743132][ T4410] value changed: 0x00000070 -> 0x00000002 [ 51.748823][ T4410] [ 51.751129][ T4410] Reported by Kernel Concurrency Sanitizer on: [ 51.757696][ T4410] CPU: 0 UID: 0 PID: 4410 Comm: syz.4.294 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 51.768867][ T4410] Tainted: [W]=WARN [ 51.772644][ T4410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 51.782683][ T4410] ================================================================== [ 51.827420][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.222961][ T1785] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.233882][ T1785] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.244554][ T1785] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.255713][ T1785] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.308483][ T3498] Bluetooth: hci1: command 0x1003 tx timeout [ 53.308716][ T3573] Bluetooth: hci1: Opcode 0x1003 failed: -110