last executing test programs: 3.263417686s ago: executing program 3 (id=121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x18, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r2 = open(0x0, 0x109042, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fallocate(r2, 0x0, 0x0, 0x7000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x14) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, 0xffffffffffffffff, 0x3, 0x1, 0x5}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000c, 0x11, r9, 0x8c256000) set_mempolicy(0x1, 0x0, 0x80) 2.96600439s ago: executing program 2 (id=128): syz_io_uring_setup(0x2122, &(0x7f0000000540)={0x0, 0xffffffff, 0x10100, 0xfffffffe, 0x312}, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000600)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x3}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x9, 0x3f00, 0x0, 0x12, 0xfffe, 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000640), 0x900, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x30}}, 0x4000000) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r7, &(0x7f0000000540)=""/178, 0xb2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000600)={[{@jqfmt_vfsv0}, {@debug}]}, 0x1, 0x439, &(0x7f0000000100)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_getaffinity(0x0, 0x8, &(0x7f0000000240)) ftruncate(r8, 0x2007ffc) sendfile(r8, r8, 0x0, 0x800000009) 2.419757407s ago: executing program 1 (id=133): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007800800050000000000080006000000"], 0x108}}, 0x0) 2.282492879s ago: executing program 1 (id=135): openat$tun(0xffffffffffffff9c, 0x0, 0x48582, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff4be6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r6}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8dc, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x3, 0x1, 0x6, 0x7, 0xffffffffffffffe0, 0xfffffffffffffffb}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x6, 0x14, &(0x7f0000000180)=""/20, 0x41100, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8000, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x5, 0x0, 0xc}, {0x0, 0x3, 0x0, 0xc}, {0x4, 0x4, 0x6, 0x1}], 0x10, 0x7e111c86, @void, @value}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0xd0, 0x2c, 0x4, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x7}, {}, {0xfff3, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xa4, 0x2, [@TCA_FW_ACT={0xa0, 0x4, [@m_vlan={0x9c, 0x1, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0xf21d1ed, 0x6, 0xff, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1, 0x0, 0x10000000, 0x6, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x225}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x80, 0x8001, 0x20000000, 0x2, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5c6}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) 2.16675212s ago: executing program 3 (id=137): openat$tun(0xffffffffffffff9c, 0x0, 0x48582, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'geneve1\x00', 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)='%pB \x00'}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffff4be6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xd, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r6}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8dc, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x1, 0x3, 0x1, 0x6, 0x7, 0xffffffffffffffe0, 0xfffffffffffffffb}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x6, 0x14, &(0x7f0000000180)=""/20, 0x41100, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8000, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[r3, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x5, 0x0, 0xc}, {0x0, 0x3, 0x0, 0xc}, {0x4, 0x4, 0x6, 0x1}], 0x10, 0x7e111c86, @void, @value}, 0x94) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtclass={0x2c, 0x28, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xc, 0x1}, {0x4, 0x4}, {0x5, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) 2.083689992s ago: executing program 2 (id=138): signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="000000000000000500000000000000950000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x47, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$eJzs3W1rZFcdAPD/vcmk2d3UTFVkLdgWW9ktujNJY9so0lYQfVVQ6/s1JpMQMsmEzKRuQtEsfgBBRAU/gG8EP4Ag+xFEWND3oqKI7upL3St35kbzMJMMySSzTn4/OJlz7sP5n3PJ3LkPh3sDuLJeioh3ImIsIl6NiOlielqk2OukfLnHjz5YzFMSWfbe35JIimn7deXl8Yi4Uaw2GRFf/0rEt5LjcZs7u2sL9XptqyhXW+ub1ebO7p3V9YWV2kptY25u9o35N+dfn5/JCufqZzki3vrSn370/Z99+a1ffebbv7/7l9vfyZv1hY912h0Ri+cK0EOn7lJ7W+zLt9HWRQQbkrw/pbFhtwIAgH7kx/gfjohPto//p2OsfTQHAAAAjJLs7an4VxKRAQAAACMrjYipSNJKMRZgKtK0UumM4f1oXE/rjWbr08uN7Y2lfF5EOUrp8mq9NlOMFS5HKcnLs8UY2/3ya0fKcxHxXET8cPpau1xZbNSXhn3xAwAAAK6IGy8ePv//53TazgMAAAAjptyzAAAAAIwKp/wAAAAw+pz/AwAAwEj76rvv5inbf4/30vs722uN9+8s1ZprlfXtxcpiY2uzstJorLSf2bd+Wn31RmPzs7Gxfa/aqjVb1ebO7t31xvZG6+7qoVdgAwAAAJfouRcf/C6JiL3PX2unKJ4DCHDIH4fdAGCQxobdAGBoxofdAGBoSqcuYQ8Boy45Zf7xwTuda4Xx64tpDwAAMHi3Pn78/v9EMe/0awPA/zNjfQDg6nF3D66u0llHAN4cdEuAYflQ5+OZXvN7Pryjj/v/nWsMWXamhgEAAAMz1U5JWimO06ciTSuViGfbrwUoJcur9dpMcX7w2+nSM3l5tr1mcuqYYQAAAAAAAAAAAAAAAAAAAAAAAACgI8uSyAAAAICRFpH+OWk/zT/i1vQrU4evDhx569dP3/vxvYVWa2s2YiL5+3Q+aSIiWj8ppr+WeSUAAAAAPAU65+nF5+ywWwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAqHn86IPF/XSZcf/6xYgod4s/HpPtz8koRcT1fyQxfmC9JCLGBhB/735E3OwWP4knWZaVi1Z0i3/tguOX25ume/w0Im4MID5cZQ/y/c873b5/abzU/uz+/Rsv0nn13v+l/93/jfXY/zx7pNzL8w9/Ue0Z/37E8+Pd9z/78ZNO/EMh8sLLffbxm9/Y3e0640CV3eIfjFVtrW9Wmzu7d1bXF1ZqK7WNubnZN+bfnH99fqa6vFqvFX+7hvnBJ3755KT+X+8Rv3y4/8e2/yt99T6Lfz+89+gjnUKpW/zbL3f//b3ZI35a/PZ9qsjn82/t5/c6+YNe+PlvXjip/0s9+j95Sv9v99X/+NyrX/veH7rOObY1AIDL0NzZXVuo12tbJ2Qm+1jmkjNvPx3NGGAmno5mDCuTfbfz/3i+es65+rFMdp7Vx2MAzZg49j0di7NWmETs5XX1+Q8JAACMmP8d9J90BwkAAAAAAAAAAAAAAAAAAAC4SGd8LNlkRPS98NGYe8PpKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAif4TAAD//4RX0Xo=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 2.010101993s ago: executing program 1 (id=139): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x103041, 0x1ae) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee3, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e300000000080045000030000000000001907800000000e00000010c00907804011a00453f000400640009022100037f000001e0000002"], 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2000018, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x80000, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$clear(0x3, 0xfffffffffffffffd) 1.830152835s ago: executing program 3 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x18) msgsnd(0x0, 0x0, 0x23, 0x0) 1.829557775s ago: executing program 3 (id=143): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000200)='./file2\x00', 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) r3 = gettid() syz_open_procfs(r3, &(0x7f0000000080)='attr/sockcreate\x00') close(0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) unlink(&(0x7f0000000180)='./file1\x00') 1.828869805s ago: executing program 1 (id=144): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) (fail_nth: 1) 1.822377485s ago: executing program 0 (id=145): ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x4805, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa041, 0x0, 0x20000, 0xfffffffffffffffd, 0x7, 0x2, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) io_setup(0xd, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) io_getevents(r1, 0xa, 0x2, &(0x7f0000000040)=[{}, {}], &(0x7f00000000c0)={r2, r3+60000000}) syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x661a, 0xa4f97e074d6309b4, 0x0, 0x40024c}, &(0x7f0000000340), 0x0) 1.46568723s ago: executing program 1 (id=146): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x393, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) 1.44990537s ago: executing program 1 (id=147): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket(0x23, 0x80805, 0x0) unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)=ANY=[], 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000040)={0x5, 0xfbff, 0x2, 0x5, 0x12, "2752b1e0b0f1fcaa"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x900) r5 = dup3(r4, r3, 0x0) read(r5, &(0x7f00000000c0)=""/226, 0xe2) getsockopt$inet6_int(r2, 0x29, 0x10, 0x0, &(0x7f00000001c0)) ioctl$EVIOCRMFF(r1, 0x41015500, &(0x7f0000000500)) close(r1) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) ioctl$TIOCGPTPEER(r6, 0x5441, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x393, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) lsm_set_self_attr(0x0, 0x0, 0x0, 0x0) 1.44667486s ago: executing program 0 (id=148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 1.41596238s ago: executing program 0 (id=149): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000043}, 0x4000) 1.386948301s ago: executing program 0 (id=151): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e24, 0x8, @remote, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x7d9e, &(0x7f00000008c0)={0x0, 0x92b2, 0x10100, 0xfffffffe, 0x21a}, &(0x7f0000000980)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x14a8}}) io_uring_enter(r1, 0x2ded, 0xf85a, 0x2d, 0x0, 0x0) 1.212463054s ago: executing program 4 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x29, 0x10, 0x5, 0x3, 0x2b, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x8000, 0x10000, 0x8}}) sendmsg$xdp(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="6ef5f6a2d1d2eb3a781df797b87b12ba80037af201fd5fdaba02905f7645b183f51d4bb5457b884a283a5ee46e4464559b05bb5332cfca0780347cc17e03384c667c50babdc3b94622ffb23d2223c68b908b6e49a5abf390a3d69639c8e3f48e8b570f", 0x63}, {&(0x7f00000001c0)="33c8cb03f73f858f90011382ec1cb2314464ab123256a6f8ba8a0fda2a9d06bb85c54a7fbe79325da6941c4598f0a0892874783c4266bbe8ab6cc4616005f8655cd7a0736eb09e1fe1d6861935e5e59e12bf525937", 0x55}, {&(0x7f0000000240)="baec19230deff66e4e608b8a5236c540a92353e4b0002904067ac821af016c134dc53b24670cd1be2a8b39c3d8f9d736dedad29395681bb757b13e5f350853a0028df09b5ef8fed19b50c97fba144f3841128ef6db8ce9294c996907909315b63fcc1ccad6fac4077eb8121d05ee32c9484c2b2ebe9c6df6f666d2469c0b1c9aefc4f7fb5613b7a4d453ffd9b5c63a537080d633d7b3f94283a585fd8ccf27b624c668b39a74e4f279c7acd6642b8958", 0xb0}, {&(0x7f0000000300)="9876ddc4e66bad8b3b649e0ab4e7f1c01b1acd2b43c05a35186c076cb559e2095ee4a13a8d7d249ed79d8f52361f55e164c0feedb95d08bd", 0x38}, {&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000440)="18c1afe150ae66a9e14900de53a124e1a27d3fa02aafdfa199568396cdd62c8143c423a296582a10942a0b872280dd7e106147fa795cb6606dd36f1448c5c228e9b7e6e09d9daeb8bc0fb159d8cd2ba52f3173d51e17ca87fdee0e092dcfae30a9de0d343c53cbd32010fa88928f413c0e7935b152591b97a9555e2526d3d2bbe4b071c76065a7c74400b86591514d22581262737cc371b909b3c3c3d9c5ecdc6bf1cf9b440f65136355c464a2f286070bd5", 0xb2}], 0x6, 0x0, 0x0, 0x4000000}, 0x40000) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file6\x00', 0x20081e, &(0x7f0000000b40)={[], [{@subj_user={'subj_user', 0x3d, 'GPL\x00'}}, {@obj_role}]}, 0x1, 0x4fb, &(0x7f0000000500)="$eJzs3U1vW1kZAODXzpeTyUwywywAIaYMAwVVdRJ3JhrNAoYVQqgSokuQ2pC4URQ7jmKnNKGL9j8gUYkVLPkBrLviJyDYsYEFEh8RqKnE4qJ7bbduajduk9hp/DzS1b3nnmu/5yS559hvEp8ARtaliLgfEZMRcSsi5lrnc60tPm9u6XWPD+6tHh7cW81Fktz4Vy6rT89Fx2NSb7WesxARP/5+xM9yL8at7+1vrlQq5Z1mcXqhUd1eqO/tX92orqyX18tbpdLy0vLip9c+KZ1aXz+oTjYPxtIGfvsXabNmW3Wd/ThNza5PPI2TGo+IH55FsCEYa/VnctgN4bXkI+K9iPgwu//nYiz7bgIAF1mSzEUy11kGAC66fJYDy+WLrVzAbOTzxWIzh/d+zOQrtXrjyu3a7tZaM1c2HxP52xuV8mIrVzgfE7m0vJQdPyuXjpSvRcS7EfHLqemsXFytVdaG+cIHAEbYW0fm//9ONed/AOCCKwy7AQDAwJn/AWD0mP8BYPSY/wFg9Jj/AWD0mP8BYPSY/wFgpPzo+vV0Sw5bn3+9dmdvd7N25+paub5ZrO6uFldrO9vF9VptPfvMnupxz1ep1baXPo7du/Pf2a43Fup7+zertd2txs3sc71vlicG0isA4GXe/eDRn3MRcf+z6WyLjrUczNVwseWH3QBgaMaG3QBgaKz2BaPrBO/xpQfgguiyRO9zChExffTqJEmSs20WcIYuf0n+H0ZVR/7fXwHDiJH/h9HVb/7/uPwA8OZJkly/a/5HvxcCAOebHD/Q4/39e63971q/HPjp2tErHp5lqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB8a6//W2ytBT4b+XyxGPF2RMzHRO72RqW8GBHvRMSfpiam0vLSkNsMAJxU/u+51vpfl+c+mj1aO5l7MpXtI+Lnv77xq7srjcbOH9Pz/356vvGwdb40jPYDAMdpz9PZvuON/OODe6vtbZDt+cf3IqLQjH94MBmHT+OPx3i2L8RERMz8J9cqN+U6chcncf9BRHyxW/9zMZvlQJornx6Nn8Z+e6Dx88/Fz2d1zX36tfjCK0dO5k6h+fBGe5SOP593u//ycSnbd7//C9kIdXKt8S99qtXDbAx8Fr89/o31GP8u9Rvj4z/8oHk0/WLdg4gvj0e0Yx92jD/t+Lke8T/qM/5fvvLVD3vVJb+JuBzd43fGWmhUtxfqe/tXN6or6+X18laptLy0vPjptU9KC1mOeqH3bPDPz66806su7f9Mj/iFY/r/jT77/9v/3frJ114S/1tf7xY/H++/JH46J36zz/grM78v9KpL46917X9b7/5f6TP+X/+2/8Ky4QDA8NT39jdXKpXyziAP2i8kBhrUwQU4SH9qzkEzuh58d1CxJuOVHpUkrxWr14hxGlk34Dxo3utJeScingy7MQAAAAAAAAAAAAAAQFeD+I+lYfcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAi+v/AQAA//+XC86k") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file6\x00', 0x200) syz_mount_image$iso9660(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000f80)=ANY=[], 0x3, 0x5a9, &(0x7f0000000540)="$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") r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="021800001c000000000000000000e60005000600000000000a00030000000000000000000000000000000000000000000000000000000000080012000000000000000000000000001200000000000000000000000000000002000001000000000000000000000000fe8000000000000000000000000000bb05000500000000000a00000000000000fc01000000000000000000000000000f00000000000000000800"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe8}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @multicast1}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}}}, 0x0) 1.117173075s ago: executing program 2 (id=153): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001900599c6d0eab070004000523"], 0xfe33) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="600000000206010100000000000000000100ffff14000780080012400000800008000b400000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x60}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) bind$unix(r12, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r12, 0x0) close_range(r4, r1, 0x2) r13 = socket$unix(0x1, 0x1, 0x0) connect$unix(r13, &(0x7f0000000080)=@file={0x1}, 0x6e) 1.040755116s ago: executing program 2 (id=154): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x18) socket(0x10, 0x803, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000580)="44c394f30591", 0x6, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001400)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e21, 0x2, @empty}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000280)="05374ebd1218590929076e916cc59fa8a38e2f6097936e8912410632ff8400479d41bd7bf3496428b2aa28780ae73ab64482ac", 0x33}, {&(0x7f0000000340)="2a9d3b928eadfcbe02212c3397aa52dea2b67c5daf01a37e0a123b476b5abc", 0x1f}, {&(0x7f00000005c0)="8eb7c1879fe2c84fb7898af26a34baed32afe12638db73b9665f780cbb452020aa944707f022185e020c9a0723e3ef3dbf83078b8945e0cee56818bb65d0f40c559b67a70ef1d81c52b9f16e2ab18afe9fd645e38813f631dd03d690557c833c7770c64f2741f3c1d1ad4d7f783feaac2d0d0c30142bcd34c7d750cdad89e2660beb6434a51bcba9c987386b9a90dbd1ffe8cf9e87d5ed27754a82ee4995c286b86ac902b479140a1756241814cc0de2bb506b96272f", 0xb6}, {&(0x7f0000000500)="c8296d25f25a12e57f", 0x9}, {&(0x7f0000000680)="230f66afe439b14f4d5ff06c00dce6ba3190e4bee7053b843584b632ae79a66ac0923219d9ef9989a74a7ab0b5c7867f573eb4418f2a897241fca620941805750eafdcb2290518643d4ce336b6bb331e01f7280160c864e7e19a3983b157e0626def85267b015b5d7d3e695a9a590b5495a3e3f2eb2756725580aa1a703d9cb5c78a0d19e39f4e44adcac874561f0d2b7e65fddf61c8b320d8b354e3bc7bf330c11c671fb4379c0d3faac9517b581d8f9a4b4e7412eca048e931f5d23b016d1b00bb7e4827441570b4d29a9ca4df063f2b340e448a07", 0xd6}, {&(0x7f0000000880)="bb7d1b77662a17bc0d92cfac097bb91663a257aa1bde7aea707a0de2d5e2252bd9eb066d03ed1d5feec644bd24167de84b4db888f357354bfb1e371dd4d79f55d867ec0e732dd3b5911254b4ad1bbf5644b871a0ef4ecd15758f593ffda35b09ce8f81c202cfcc2a8a44ec8f4d3ca1cc4b25ad8f2585ca15b6526be1899dacd3c65f243ce8bbb81f48946abfdcbbae4c0a4de3ac2a62c89d233408d2f2d67b871a7afbe94855ca56b6cf178a957935150cfd07c971e01ac0d9c655853d5c68ca64598035ddbef0f3ce1c86695432e7dac6e503c5e2b3cfa37b83c798c0f3e12d60555e99824940a7f94d5a0f1910843727", 0xf1}, {&(0x7f0000000a40)="c78bb3fbcea1e760e2aae664c12836034bedf8174886c836f932f754ef5b54615bef3e0eedea96a63d5ff83d53da131ef942206dac42275b614e2110d707f8139d1818ea93b59d958bd2a05f4e57391dbd997200f4c5a56f886e687b27d74fbbadfa02c1dd065cd7a3f7b182ddfc233aa3a4c8e11f8ce57d57127068ec8adfec5829fed662930c16fc722ffbdf30a5dfc0fba9da7b6537a493d9eb0bc3325f0123a3ec4803067b6ffb61f133033cfc5c5294235bd03d0df76c7b7dc502ca30c26fc8ac080bf75f421308ba32bb2c911fcfe6eeca9d8cef5a9d", 0xd9}, {&(0x7f0000000780)="ad9b0f3b69fbc0e71cd07d4ece3b1482144a975ba64521be29a1ffc8f41e702097baefb7a5d6dee38beb3981668b6505e14161b5767c523d09e78587ae2757b12c357e5611776c5d1527e890e9190baaa8d317d0548bb05a750d9fcd434a9ea206a4556c3b89dd6bbb205414fcaa385305aa42fa80b918d469dbdde1aafb8772faebfb1923fcc5a70f3850adb5525f24f9434fb5e6c4b71054acb366535c0d142534a73e191e8e395c2d6fba5f7c3d4a54f2f7e2", 0xb4}, {&(0x7f0000000b40)="ed9da751302c7a5b7a4998b99836f547a4f8b3820c7c322fc372b041d22ef6587e5b58bb288bbbb736eb74ddebab20aa98ea297c0b9bc8844c54838d32923cf3374df787ad7fb4d5065768bbb6a59afba51d086d78f84a756014d1d8f8f6211b087c86905a0a7c881fcff7f6c1bd6ee244f33174f19e70a68b9b92a3380d6f2d95b3a376cffa9ba0", 0x88}, {&(0x7f0000001240)="0bd296913d2c035e6dc3e316f1bc0aac6b5c15016b3b7a9b913cc3d0f4d190ac99f984232e2bdd3ca660c02578fef7653dd8b57b30d7b916306d2481e15f447e84098533b4e676503cc08c905f489a30ee47061c140d2dd76e49dfada74f7f4ea4aaa424d3a4fbea53f1c54b9a61ef3853a081398c3a7b8489d009818d14514d0595faf3601ba33a3cdc02ccd9a9d182b57632a9f63b6a9e230b7be5ae569ac26befcd31b83685b8305e1f3d3e94330eaf818f7301ca25cfa7d31d0b3170d63470e55b901355ca590d8420aeb0b436fc487bb24e74770b54ad0152e355399374d3fb9be36a1f0ff8", 0xe8}], 0xa}}], 0x2, 0x2044000) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)={'b', ' *:* ', 'w\x00'}, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) 777.640639ms ago: executing program 4 (id=155): openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/devices.allow\x00', 0x103041, 0x1ae) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee3, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00e300000000080045000030000000000001907800000000e00000010c00907804011a00453f000400640009022100037f000001e0000002"], 0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x2000018, &(0x7f0000000500)=ANY=[], 0xfe, 0x1c7, &(0x7f0000001100)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x80000, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$clear(0x3, 0xfffffffffffffffd) 729.88747ms ago: executing program 4 (id=156): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000b80)={[{@barrier_val}, {@barrier}, {@errors_remount}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@mblk_io_submit}, {@barrier}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") perf_event_open(&(0x7f0000000a80)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x80000, 0x8, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000001000000950000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000f7ffffffffffffff000000200000000000000000000000d0b1549f4c635583"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00C\x00'], 0x20}}, 0x20004000) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write$binfmt_aout(r3, 0x0, 0x7ab8) 649.700231ms ago: executing program 4 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1000000100}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r3, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) 648.229771ms ago: executing program 4 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x1000000100}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r3, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/100, 0x64}}, 0x10) (fail_nth: 3) 401.347774ms ago: executing program 4 (id=159): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$eJzs3U9rI2UcB/DfpMkkKpgcPInggB48Ldu9ekmRXRB7cslBPWhxtyBNEFoo+AdjT169ePDgKxAEX4gX34HgVfBmhcLITGaapI1pIk3rls/n0l+feb4zv5k+tNNDn370yujgSRb7J1/+Fp1OEo1+9OM0iV40ovZ1zOl/GwDAs+w0z+PPfGKdXBIRnc21BQBs0Io//188r36+kbYAgA16/N777+zs7j58N8s68Wj0zfGg+M2++Dg5vrMfn8Qwnsb96MZZRPmi0IrybaEoH+V5Pm5mhV68PhofD4rk6MNfqvPv/BFR5rejG71y6Pxto8y/vftwO5uYyY+LPp6vrt8v8g+iGy+dh+fyDxbkY5DGG6/N9H8vuvHrx/FpDONJ2cQ0/9V2lr2Vf/fXFx8U7RX5ZHw8aJfzpvKtG/7SAAAAAAAAAAAAAAAAAAAAAABwh92r9s5pR7l/TzFU7b+zdVZ80oqs1pvfn2eST+oTze4PlOf5OI8f6v117mdZllcTp/lmvNyM5u3cNQAAAAAAAAAAAAAAAAAAAPy/HH32+cHecPj08FqKejeAZkT8/Tjiv56nPzPyaiyf3K6uuTccNqpyfk5zdiS26jlJxNI2ipu4psdyVfHcpZ6r4sef1j1h5+o5rcXXus6iXl0He8niZ9iOeqRTLZLv04jpnDRWvFb6b4fyWGf5pQsPdde+9/SFshgvmRPJssbe/H3y5KqR5OJdpOVTXRhvVcVM/MLaWGk9R2cSv/y9IrFbBwAAAAAAAAAAAAAAAAAAbNT0r38XHDxZGm3k7Y21BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3avr//9coxlV4hclpHB41bvkeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuPv+CQAA///WoVye") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 400.921964ms ago: executing program 0 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) 372.831685ms ago: executing program 0 (id=161): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmsg$netlink(r0, 0x0, 0x0) 155.238138ms ago: executing program 2 (id=162): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000380)={0x0, 0x0, 0x103ff}) 154.762207ms ago: executing program 2 (id=163): signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="000000000000000500000000000000950000"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x47, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) 110.233758ms ago: executing program 3 (id=164): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c0007800800060000000000240007800800050000000000080006000000"], 0x108}}, 0x0) 0s ago: executing program 3 (id=165): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={0x0, r0}, 0x18) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x14, 0x453, 0x20, 0x70bd28, 0x25dfdbfc, "e6"}, 0x14}, 0x1, 0x0, 0x0, 0x8d5}, 0x0) getsockname(r2, &(0x7f0000000580)=@nfc_llcp, &(0x7f0000000340)=0x80) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000110200000013f40200626f5d6430000000000000fdffffff8e96000000"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="270e28bd70000700000000070200c096de3949bb5d49366b212cd4d09c9e81b3941fd5dc12f82d5e08a440870b85dc40cd6ed0899dee529664f908de30467a9f1bf970ee7ae68cd1329464b4d609a98cccfb3beffc043153b3e5394c8b89c80f51a1c390251ab1a3dac3943c643123b546da1e3507a70621f22bc9a2a3ae6e82d2c2518af54c4164d8a090ba347a91d733c482739444cfcc452f11b517879e2d9887329eae32"], 0x14}, 0x1, 0x40030000000000}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x3, &(0x7f0000000380)=[{0x4, 0x0, 0x9, 0xe}, {0x8, 0x6, 0x2, 0x1ff}, {0x4, 0x7, 0x7f, 0x4}]}) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r4 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0, 0x0, 0x400000}, 0x18) setitimer(0x0, 0x0, 0x0) tkill(r4, 0x12) syz_clone(0x2001000, 0x0, 0xfffffffffffffe30, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.221547][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.221566][ T29] audit: type=1400 audit(1746468616.607:76): avc: denied { transition } for pid=3183 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.226151][ T29] audit: type=1400 audit(1746468616.607:77): avc: denied { noatsecure } for pid=3183 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.229263][ T29] audit: type=1400 audit(1746468616.607:78): avc: denied { write } for pid=3183 comm="sh" path="pipe:[1017]" dev="pipefs" ino=1017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.233164][ T29] audit: type=1400 audit(1746468616.607:79): avc: denied { rlimitinh } for pid=3183 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.236090][ T29] audit: type=1400 audit(1746468616.607:80): avc: denied { siginh } for pid=3183 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.621056][ T29] audit: type=1400 audit(1746468619.017:81): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 28.338116][ T29] audit: type=1400 audit(1746468625.727:82): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.339153][ T3293] cgroup: Unknown subsys name 'net' [ 28.361002][ T29] audit: type=1400 audit(1746468625.727:83): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.388496][ T29] audit: type=1400 audit(1746468625.757:84): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.524600][ T3293] cgroup: Unknown subsys name 'cpuset' [ 28.530980][ T3293] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.702146][ T29] audit: type=1400 audit(1746468626.087:85): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.725753][ T29] audit: type=1400 audit(1746468626.087:86): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.746329][ T29] audit: type=1400 audit(1746468626.087:87): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.766807][ T29] audit: type=1400 audit(1746468626.097:88): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.774277][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.787159][ T29] audit: type=1400 audit(1746468626.097:89): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.820708][ T29] audit: type=1400 audit(1746468626.097:90): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.844370][ T29] audit: type=1400 audit(1746468626.187:91): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.871197][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.983663][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 30.011638][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 30.033932][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 30.096447][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.103536][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.110801][ T3304] bridge_slave_0: entered allmulticast mode [ 30.117272][ T3304] bridge_slave_0: entered promiscuous mode [ 30.124218][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.131296][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.138477][ T3304] bridge_slave_1: entered allmulticast mode [ 30.145010][ T3304] bridge_slave_1: entered promiscuous mode [ 30.188745][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 30.220544][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.237120][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.244294][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.251535][ T3307] bridge_slave_0: entered allmulticast mode [ 30.257861][ T3307] bridge_slave_0: entered promiscuous mode [ 30.274454][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.281598][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.288894][ T3303] bridge_slave_0: entered allmulticast mode [ 30.295623][ T3303] bridge_slave_0: entered promiscuous mode [ 30.302910][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.316821][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.331120][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.338291][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.346870][ T3307] bridge_slave_1: entered allmulticast mode [ 30.353249][ T3307] bridge_slave_1: entered promiscuous mode [ 30.362132][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.369276][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.376563][ T3303] bridge_slave_1: entered allmulticast mode [ 30.383277][ T3303] bridge_slave_1: entered promiscuous mode [ 30.395328][ T3304] team0: Port device team_slave_0 added [ 30.418898][ T3304] team0: Port device team_slave_1 added [ 30.446876][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.461808][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.478965][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.486057][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.512210][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.524311][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.539995][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.554190][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.561425][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.587671][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.612046][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.619252][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.626716][ T3305] bridge_slave_0: entered allmulticast mode [ 30.633439][ T3305] bridge_slave_0: entered promiscuous mode [ 30.659956][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.667216][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.674656][ T3305] bridge_slave_1: entered allmulticast mode [ 30.681051][ T3305] bridge_slave_1: entered promiscuous mode [ 30.692853][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.700025][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.707326][ T3313] bridge_slave_0: entered allmulticast mode [ 30.713803][ T3313] bridge_slave_0: entered promiscuous mode [ 30.722464][ T3304] hsr_slave_0: entered promiscuous mode [ 30.728612][ T3304] hsr_slave_1: entered promiscuous mode [ 30.735759][ T3307] team0: Port device team_slave_0 added [ 30.748041][ T3303] team0: Port device team_slave_0 added [ 30.754096][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.761303][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.768633][ T3313] bridge_slave_1: entered allmulticast mode [ 30.775165][ T3313] bridge_slave_1: entered promiscuous mode [ 30.792691][ T3307] team0: Port device team_slave_1 added [ 30.809477][ T3303] team0: Port device team_slave_1 added [ 30.835923][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.845543][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.852563][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.878558][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.894448][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.901474][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.927417][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.939429][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.952329][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.964004][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.970971][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.997346][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.011522][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.018785][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.045855][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.061394][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.095409][ T3305] team0: Port device team_slave_0 added [ 31.102201][ T3305] team0: Port device team_slave_1 added [ 31.140332][ T3313] team0: Port device team_slave_0 added [ 31.148494][ T3303] hsr_slave_0: entered promiscuous mode [ 31.154827][ T3303] hsr_slave_1: entered promiscuous mode [ 31.160975][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.168594][ T3303] Cannot create hsr debugfs directory [ 31.184565][ T3307] hsr_slave_0: entered promiscuous mode [ 31.190587][ T3307] hsr_slave_1: entered promiscuous mode [ 31.196513][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.204109][ T3307] Cannot create hsr debugfs directory [ 31.210186][ T3313] team0: Port device team_slave_1 added [ 31.224189][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.231176][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.257731][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.269088][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.276261][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.302384][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.337360][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.344474][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.370668][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.381861][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.388921][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.415981][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.478725][ T3305] hsr_slave_0: entered promiscuous mode [ 31.484963][ T3305] hsr_slave_1: entered promiscuous mode [ 31.491000][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.498696][ T3305] Cannot create hsr debugfs directory [ 31.530921][ T3313] hsr_slave_0: entered promiscuous mode [ 31.537203][ T3313] hsr_slave_1: entered promiscuous mode [ 31.543292][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.551032][ T3313] Cannot create hsr debugfs directory [ 31.626612][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.643695][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.657549][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.684194][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.730013][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.739372][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.749095][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.757704][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.792299][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.801349][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.810335][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.819264][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.871907][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.889345][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.898110][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.916507][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.924119][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.932864][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.970323][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.986148][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.996070][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.005829][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.015075][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.025547][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.032907][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.041015][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.051203][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.070586][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.077966][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.087266][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.094471][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.113920][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.121072][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.140690][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.170352][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.177624][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.186450][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.193506][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.237187][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.288436][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.307605][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.323412][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.337419][ T1710] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.344541][ T1710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.361141][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.368342][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.385688][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.397153][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.420715][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.428204][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.437836][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.445232][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.458848][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.469624][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.480087][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.566344][ T3304] veth0_vlan: entered promiscuous mode [ 32.594961][ T3304] veth1_vlan: entered promiscuous mode [ 32.633058][ T3304] veth0_macvtap: entered promiscuous mode [ 32.649995][ T3304] veth1_macvtap: entered promiscuous mode [ 32.661474][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.670971][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.689396][ T3307] veth0_vlan: entered promiscuous mode [ 32.698616][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.709009][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.718398][ T3307] veth1_vlan: entered promiscuous mode [ 32.731407][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.740405][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.749408][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.758552][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.811052][ T3307] veth0_macvtap: entered promiscuous mode [ 32.821221][ T3303] veth0_vlan: entered promiscuous mode [ 32.842098][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.847860][ T3307] veth1_macvtap: entered promiscuous mode [ 32.882184][ T3303] veth1_vlan: entered promiscuous mode [ 32.892314][ T3440] loop1: detected capacity change from 0 to 256 [ 32.902272][ T3313] veth0_vlan: entered promiscuous mode [ 32.924625][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.935381][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.947496][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.962659][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.973254][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.988341][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.000288][ T3305] veth0_vlan: entered promiscuous mode [ 33.012104][ T3303] veth0_macvtap: entered promiscuous mode [ 33.020329][ T3313] veth1_vlan: entered promiscuous mode [ 33.029360][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.038645][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.047590][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.056464][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.068879][ T3303] veth1_macvtap: entered promiscuous mode [ 33.082857][ T3305] veth1_vlan: entered promiscuous mode [ 33.105579][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.116378][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.126602][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.137339][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.148906][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.158636][ T3313] veth0_macvtap: entered promiscuous mode [ 33.166716][ T3313] veth1_macvtap: entered promiscuous mode [ 33.175965][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.186560][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.196539][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.207203][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.219400][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.240045][ T3305] veth0_macvtap: entered promiscuous mode [ 33.248514][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.257639][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.266407][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.275244][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290178][ T3305] veth1_macvtap: entered promiscuous mode [ 33.300338][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.310894][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.320772][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.331764][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.341964][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.345473][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 33.345492][ T29] audit: type=1400 audit(1746468630.737:128): avc: denied { allowed } for pid=3444 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.352617][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.360437][ T29] audit: type=1400 audit(1746468630.757:129): avc: denied { create } for pid=3444 comm="syz.3.4" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 33.378808][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.407013][ T29] audit: type=1400 audit(1746468630.787:130): avc: denied { bind } for pid=3444 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.411070][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.416527][ T29] audit: type=1400 audit(1746468630.787:131): avc: denied { setopt } for pid=3444 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.416555][ T29] audit: type=1400 audit(1746468630.787:132): avc: denied { create } for pid=3444 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.438757][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.438778][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.438792][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.438800][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.449647][ T29] audit: type=1400 audit(1746468630.787:133): avc: denied { write } for pid=3444 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 33.469965][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.471399][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.490388][ T29] audit: type=1400 audit(1746468630.787:134): avc: denied { map_create } for pid=3444 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.490419][ T29] audit: type=1400 audit(1746468630.787:135): avc: denied { read } for pid=3444 comm="syz.3.4" dev="nsfs" ino=4026532629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.544229][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.552312][ T29] audit: type=1400 audit(1746468630.787:136): avc: denied { open } for pid=3444 comm="syz.3.4" path="net:[4026532629]" dev="nsfs" ino=4026532629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 33.552340][ T29] audit: type=1400 audit(1746468630.787:137): avc: denied { create } for pid=3444 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.563137][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.675103][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.683823][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.701442][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.712124][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.722851][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.734118][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.744538][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.755443][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.765463][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.776249][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.788347][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.864625][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.875297][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.885395][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.896691][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.906659][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.917171][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.927463][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.937996][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.951552][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.013989][ T3453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.026816][ T3452] loop2: detected capacity change from 0 to 1024 [ 34.047001][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.049600][ T3455] loop3: detected capacity change from 0 to 2048 [ 34.056324][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.071961][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.075239][ T3452] ======================================================= [ 34.075239][ T3452] WARNING: The mand mount option has been deprecated and [ 34.075239][ T3452] and is ignored by this kernel. Remove the mand [ 34.075239][ T3452] option from the mount to silence this warning. [ 34.075239][ T3452] ======================================================= [ 34.080803][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.138023][ T3452] EXT4-fs: Ignoring removed bh option [ 34.177837][ T3452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.193039][ T3455] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.212758][ T3455] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7: bg 0: block 504: padding at end of block bitmap is not set [ 34.229796][ T3455] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 34.243050][ T3455] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.243050][ T3455] [ 34.253047][ T3455] EXT4-fs (loop3): Total free blocks count 0 [ 34.259092][ T3455] EXT4-fs (loop3): Free/Dirty block details [ 34.265105][ T3455] EXT4-fs (loop3): free_blocks=0 [ 34.270328][ T3455] EXT4-fs (loop3): dirty_blocks=16 [ 34.275597][ T3455] EXT4-fs (loop3): Block reservation details [ 34.281867][ T3455] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 34.290489][ T3464] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #12: comm syz.3.7: corrupted in-inode xattr: e_name out of bounds [ 34.318025][ T3455] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #12: comm syz.3.7: corrupted in-inode xattr: e_name out of bounds [ 34.369659][ T3313] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 16: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 34.383264][ T3455] syz.3.7 (3455) used greatest stack depth: 10024 bytes left [ 34.404576][ T3313] EXT4-fs (loop2): Remounting filesystem read-only [ 34.429424][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.437569][ T3469] loop0: detected capacity change from 0 to 1024 [ 34.452664][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.464392][ T3469] EXT4-fs: Ignoring removed orlov option [ 34.503013][ T3469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.535649][ T3479] loop3: detected capacity change from 0 to 256 [ 34.573051][ T3481] loop4: detected capacity change from 0 to 128 [ 34.721812][ T3496] loop4: detected capacity change from 0 to 256 [ 34.915587][ T3511] loop1: detected capacity change from 0 to 1024 [ 34.931543][ T3511] EXT4-fs: Ignoring removed orlov option [ 34.950995][ T3511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.472683][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.547875][ T3520] loop0: detected capacity change from 0 to 2048 [ 35.555708][ T3520] EXT4-fs: Ignoring removed bh option [ 35.589298][ T3522] loop2: detected capacity change from 0 to 512 [ 35.597955][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.611794][ T3522] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.640845][ T3522] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.641031][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.670016][ T3527] netlink: 156 bytes leftover after parsing attributes in process `syz.3.17'. [ 35.679127][ T3527] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 35.698979][ T3522] EXT4-fs (loop2): 1 truncate cleaned up [ 35.705313][ T3522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.831011][ T3532] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.2.18: corrupted xattr block 33: invalid header [ 35.855646][ T3533] loop3: detected capacity change from 0 to 512 [ 35.895078][ T3532] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.18: corrupted xattr block 33: invalid header [ 35.920288][ T3533] EXT4-fs (loop3): 1 orphan inode deleted [ 35.934646][ T3533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.936524][ T1710] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 35.947487][ T3532] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 35.969863][ T3533] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.008451][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.077360][ T3542] loop4: detected capacity change from 0 to 1024 [ 36.097546][ T3533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'. [ 36.106473][ T3533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'. [ 36.117419][ T3551] loop1: detected capacity change from 0 to 1024 [ 36.124577][ T3542] EXT4-fs: Ignoring removed orlov option [ 36.135686][ T3551] EXT4-fs: Ignoring removed orlov option [ 36.159218][ T3542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.173330][ T3533] dummy0: entered promiscuous mode [ 36.183297][ T3533] syz_tun: entered promiscuous mode [ 36.190095][ T3551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.532335][ T12] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.559304][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 36.571871][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 36.571871][ T12] [ 36.581578][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 36.587641][ T12] EXT4-fs (loop0): Free/Dirty block details [ 36.593562][ T12] EXT4-fs (loop0): free_blocks=2415919104 [ 36.599560][ T12] EXT4-fs (loop0): dirty_blocks=8224 [ 36.605555][ T12] EXT4-fs (loop0): Block reservation details [ 36.612284][ T12] EXT4-fs (loop0): i_reserved_data_blocks=514 [ 36.640449][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.660214][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 36.697973][ T3594] loop3: detected capacity change from 0 to 256 [ 37.119444][ T3610] loop0: detected capacity change from 0 to 1024 [ 37.131759][ T3610] EXT4-fs: Ignoring removed orlov option [ 37.158980][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.170185][ T3610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.186336][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.289830][ T3625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3625 comm=syz.1.25 [ 37.302331][ T3625] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3625 comm=syz.1.25 [ 37.728437][ T3660] loop3: detected capacity change from 0 to 512 [ 37.750148][ T3660] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.772166][ T3660] EXT4-fs (loop3): 1 truncate cleaned up [ 37.780188][ T3660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.000959][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.028068][ T3671] loop1: detected capacity change from 0 to 512 [ 38.056896][ T3671] EXT4-fs: test_dummy_encryption option not supported [ 38.147651][ T3683] loop1: detected capacity change from 0 to 512 [ 38.166897][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.172274][ T3683] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.195656][ T3683] EXT4-fs (loop1): 1 truncate cleaned up [ 38.225258][ T3683] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.329325][ T3696] loop4: detected capacity change from 0 to 1024 [ 38.357498][ T3696] EXT4-fs: Ignoring removed orlov option [ 38.396540][ T3696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.534391][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.577141][ C1] hrtimer: interrupt took 47153 ns [ 38.611409][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 38.611427][ T29] audit: type=1400 audit(1746468635.997:302): avc: denied { create } for pid=3712 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.675877][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.688664][ T3727] capability: warning: `syz.1.34' uses deprecated v2 capabilities in a way that may be insecure [ 38.903546][ T3732] loop1: detected capacity change from 0 to 2048 [ 38.950427][ T29] audit: type=1400 audit(1746468636.037:303): avc: denied { write } for pid=3712 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.970287][ T29] audit: type=1400 audit(1746468636.037:304): avc: denied { nlmsg_write } for pid=3712 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.990885][ T29] audit: type=1400 audit(1746468636.057:305): avc: denied { shutdown } for pid=3725 comm="syz.1.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.011186][ T29] audit: type=1400 audit(1746468636.057:306): avc: denied { name_connect } for pid=3725 comm="syz.1.34" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.033894][ T29] audit: type=1400 audit(1746468636.117:307): avc: denied { setopt } for pid=3725 comm="syz.1.34" lport=47118 faddr=::ffff:172.30.0.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.057492][ T29] audit: type=1326 audit(1746468636.327:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af4be969 code=0x7ffc0000 [ 39.081791][ T29] audit: type=1326 audit(1746468636.327:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f61af4be969 code=0x7ffc0000 [ 39.086272][ T3732] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.105244][ T29] audit: type=1326 audit(1746468636.327:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61af4be969 code=0x7ffc0000 [ 39.136353][ T29] audit: type=1326 audit(1746468636.327:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3733 comm="syz.2.35" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f61af4be969 code=0x7ffc0000 [ 39.189462][ T3734] loop2: detected capacity change from 0 to 1024 [ 39.232941][ T3734] EXT4-fs: Ignoring removed orlov option [ 39.241680][ T3732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.291483][ T3734] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.534501][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.610000][ T3745] loop1: detected capacity change from 0 to 1024 [ 39.618204][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.633569][ T3745] EXT4-fs: Ignoring removed orlov option [ 39.657518][ T3745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.840882][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.070603][ T3757] loop3: detected capacity change from 0 to 256 [ 40.466142][ T3764] loop2: detected capacity change from 0 to 1024 [ 40.505888][ T3764] EXT4-fs: Ignoring removed orlov option [ 40.529790][ T3764] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.604268][ T3769] netlink: 96 bytes leftover after parsing attributes in process `syz.4.45'. [ 40.613442][ T3769] netlink: 44 bytes leftover after parsing attributes in process `syz.4.45'. [ 40.731663][ T3772] loop4: detected capacity change from 0 to 164 [ 40.760108][ T3772] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 40.913873][ T3772] process 'syz.4.46' launched '/dev/fd/3' with NULL argv: empty string added [ 40.923537][ T3772] syz.4.46: attempt to access beyond end of device [ 40.923537][ T3772] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 40.942385][ T3772] syz.4.46: attempt to access beyond end of device [ 40.942385][ T3772] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 40.965263][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.106033][ T3775] loop4: detected capacity change from 0 to 512 [ 41.127549][ T3775] EXT4-fs: test_dummy_encryption option not supported [ 41.164930][ T3777] netlink: 96 bytes leftover after parsing attributes in process `syz.3.49'. [ 41.191664][ T3777] netlink: 44 bytes leftover after parsing attributes in process `syz.3.49'. [ 41.242006][ T3778] loop1: detected capacity change from 0 to 1024 [ 41.277653][ T3782] netlink: 96 bytes leftover after parsing attributes in process `syz.3.51'. [ 41.299011][ T3782] netlink: 44 bytes leftover after parsing attributes in process `syz.3.51'. [ 41.350586][ T3778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.401199][ T3778] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 41.481941][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.485031][ T3778] sch_tbf: burst 7710 is lower than device lo mtu (65550) ! [ 41.538256][ T3788] netlink: 156 bytes leftover after parsing attributes in process `syz.2.53'. [ 41.554650][ T3788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'. [ 41.580108][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.584224][ T3786] loop3: detected capacity change from 0 to 1024 [ 41.633593][ T3786] EXT4-fs: Ignoring removed orlov option [ 41.660080][ T3792] loop1: detected capacity change from 0 to 1024 [ 41.682921][ T3786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.709629][ T3795] FAULT_INJECTION: forcing a failure. [ 41.709629][ T3795] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.723461][ T3795] CPU: 1 UID: 0 PID: 3795 Comm: syz.2.56 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 41.723491][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 41.723504][ T3795] Call Trace: [ 41.723511][ T3795] [ 41.723518][ T3795] __dump_stack+0x1d/0x30 [ 41.723589][ T3795] dump_stack_lvl+0xe8/0x140 [ 41.723613][ T3795] dump_stack+0x15/0x1b [ 41.723634][ T3795] should_fail_ex+0x265/0x280 [ 41.723664][ T3795] should_fail+0xb/0x20 [ 41.723770][ T3795] should_fail_usercopy+0x1a/0x20 [ 41.723793][ T3795] strncpy_from_user+0x25/0x230 [ 41.723825][ T3795] ? kmem_cache_alloc_noprof+0x186/0x310 [ 41.723863][ T3795] ? getname_flags+0x80/0x3b0 [ 41.723973][ T3795] getname_flags+0xae/0x3b0 [ 41.724007][ T3795] do_sys_openat2+0x60/0x110 [ 41.724028][ T3795] __x64_sys_openat+0xf2/0x120 [ 41.724048][ T3795] x64_sys_call+0x1af/0x2fb0 [ 41.724140][ T3795] do_syscall_64+0xd0/0x1a0 [ 41.724163][ T3795] ? clear_bhb_loop+0x25/0x80 [ 41.724183][ T3795] ? clear_bhb_loop+0x25/0x80 [ 41.724205][ T3795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.724231][ T3795] RIP: 0033:0x7f61af4be969 [ 41.724250][ T3795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.724325][ T3795] RSP: 002b:00007f61adb27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 41.724343][ T3795] RAX: ffffffffffffffda RBX: 00007f61af6e5fa0 RCX: 00007f61af4be969 [ 41.724354][ T3795] RDX: 0000000000002c41 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 41.724366][ T3795] RBP: 00007f61adb27090 R08: 0000000000000000 R09: 0000000000000000 [ 41.724379][ T3795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.724414][ T3795] R13: 0000000000000000 R14: 00007f61af6e5fa0 R15: 00007ffdf762b948 [ 41.724437][ T3795] [ 41.886345][ T3792] EXT4-fs: Ignoring removed orlov option [ 41.948255][ T3792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.074893][ T3800] loop2: detected capacity change from 0 to 256 [ 42.234460][ T3807] loop4: detected capacity change from 0 to 128 [ 42.297399][ T3809] loop4: detected capacity change from 0 to 256 [ 42.367950][ T3674] syz.0.29 (3674) used greatest stack depth: 9736 bytes left [ 42.540505][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.793292][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.797187][ T3815] loop3: detected capacity change from 0 to 1024 [ 42.816539][ T3815] EXT4-fs: Ignoring removed orlov option [ 42.829939][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.930837][ T3818] loop1: detected capacity change from 0 to 1024 [ 42.947971][ T3818] EXT4-fs: Ignoring removed orlov option [ 42.973569][ T3675] syz.0.29 (3675) used greatest stack depth: 9560 bytes left [ 43.004725][ T3818] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.033251][ T3823] loop0: detected capacity change from 0 to 1024 [ 43.117136][ T3823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.358869][ T3823] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 43.442185][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.551587][ T3845] loop0: detected capacity change from 0 to 512 [ 43.567848][ T3846] loop2: detected capacity change from 0 to 512 [ 43.596584][ T3846] EXT4-fs (loop2): 1 orphan inode deleted [ 43.603240][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.617388][ T3846] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.617496][ T31] __quota_error: 258 callbacks suppressed [ 43.617512][ T31] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 43.639126][ T3845] EXT4-fs (loop0): 1 orphan inode deleted [ 43.644331][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 43.665580][ T31] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 43.672561][ T3845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.675870][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 1 [ 43.694708][ T3846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 43.708959][ T3846] netlink: 28 bytes leftover after parsing attributes in process `syz.2.69'. [ 43.721205][ T3845] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.722155][ T3846] team0: entered promiscuous mode [ 43.737168][ T3846] team_slave_0: entered promiscuous mode [ 43.743041][ T3846] team_slave_1: entered promiscuous mode [ 43.750982][ T3846] syz_tun: entered promiscuous mode [ 43.756842][ T3846] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 43.766034][ T3846] Cannot create hsr debugfs directory [ 43.775276][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.815952][ T3852] FAULT_INJECTION: forcing a failure. [ 43.815952][ T3852] name failslab, interval 1, probability 0, space 0, times 1 [ 43.828956][ T3852] CPU: 1 UID: 0 PID: 3852 Comm: syz.1.70 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 43.829040][ T3852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.829099][ T3852] Call Trace: [ 43.829108][ T3852] [ 43.829117][ T3852] __dump_stack+0x1d/0x30 [ 43.829158][ T3852] dump_stack_lvl+0xe8/0x140 [ 43.829180][ T3852] dump_stack+0x15/0x1b [ 43.829201][ T3852] should_fail_ex+0x265/0x280 [ 43.829249][ T3852] should_failslab+0x8c/0xb0 [ 43.829283][ T3852] __kmalloc_noprof+0xa5/0x3e0 [ 43.829349][ T3852] ? bpf_test_init+0xa9/0x160 [ 43.829441][ T3852] bpf_test_init+0xa9/0x160 [ 43.829476][ T3852] bpf_prog_test_run_xdp+0x274/0x8f0 [ 43.829510][ T3852] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 43.829643][ T3852] ? __rcu_read_unlock+0x4f/0x70 [ 43.829675][ T3852] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 43.829714][ T3852] bpf_prog_test_run+0x207/0x390 [ 43.829825][ T3852] __sys_bpf+0x3dc/0x790 [ 43.829870][ T3852] __x64_sys_bpf+0x41/0x50 [ 43.829903][ T3852] x64_sys_call+0x2478/0x2fb0 [ 43.829979][ T3852] do_syscall_64+0xd0/0x1a0 [ 43.830006][ T3852] ? clear_bhb_loop+0x25/0x80 [ 43.830034][ T3852] ? clear_bhb_loop+0x25/0x80 [ 43.830061][ T3852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.830086][ T3852] RIP: 0033:0x7fe1b9f0e969 [ 43.830166][ T3852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.830184][ T3852] RSP: 002b:00007fe1b8577038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 43.830205][ T3852] RAX: ffffffffffffffda RBX: 00007fe1ba135fa0 RCX: 00007fe1b9f0e969 [ 43.830277][ T3852] RDX: 000000000000001b RSI: 0000200000000180 RDI: 000000000000000a [ 43.830293][ T3852] RBP: 00007fe1b8577090 R08: 0000000000000000 R09: 0000000000000000 [ 43.830308][ T3852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.830323][ T3852] R13: 0000000000000000 R14: 00007fe1ba135fa0 R15: 00007ffeccf4ec88 [ 43.830375][ T3852] [ 43.832316][ T3845] team0: entered promiscuous mode [ 44.042303][ T3845] team_slave_0: entered promiscuous mode [ 44.048126][ T3845] team_slave_1: entered promiscuous mode [ 44.073261][ T3845] syz_tun: entered promiscuous mode [ 44.079019][ T3845] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 44.079297][ T3856] loop1: detected capacity change from 0 to 1024 [ 44.098179][ T3858] loop4: detected capacity change from 0 to 256 [ 44.105632][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.114908][ T3845] Cannot create hsr debugfs directory [ 44.144471][ T29] audit: type=1400 audit(1746468641.527:570): avc: denied { ioctl } for pid=3859 comm="syz.3.73" path="socket:[4523]" dev="sockfs" ino=4523 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.191776][ T3856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.226682][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.240010][ T3867] loop3: detected capacity change from 0 to 256 [ 44.262601][ T3869] loop1: detected capacity change from 0 to 128 [ 44.293042][ T29] audit: type=1400 audit(1746468641.667:571): avc: denied { create } for pid=3870 comm="syz.4.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 44.352651][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.372387][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.385891][ T29] audit: type=1326 audit(1746468641.767:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3870 comm="syz.4.78" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7c086e969 code=0x0 [ 44.466878][ T29] audit: type=1400 audit(1746468641.857:573): avc: denied { write } for pid=3880 comm="syz.4.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.489180][ T3885] loop1: detected capacity change from 0 to 1024 [ 44.497013][ T3885] EXT4-fs: Ignoring removed i_version option [ 44.503188][ T3885] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.543036][ T3889] FAULT_INJECTION: forcing a failure. [ 44.543036][ T3889] name failslab, interval 1, probability 0, space 0, times 0 [ 44.556129][ T3889] CPU: 1 UID: 0 PID: 3889 Comm: syz.0.80 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 44.556198][ T3889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 44.556214][ T3889] Call Trace: [ 44.556222][ T3889] [ 44.556232][ T3889] __dump_stack+0x1d/0x30 [ 44.556300][ T3889] dump_stack_lvl+0xe8/0x140 [ 44.556397][ T3889] dump_stack+0x15/0x1b [ 44.556415][ T3889] should_fail_ex+0x265/0x280 [ 44.556454][ T3889] should_failslab+0x8c/0xb0 [ 44.556490][ T3889] __kmalloc_noprof+0xa5/0x3e0 [ 44.556511][ T3889] ? io_cache_alloc_new+0x2a/0xb0 [ 44.556587][ T3889] io_cache_alloc_new+0x2a/0xb0 [ 44.556617][ T3889] io_sendmsg_prep+0x286/0x600 [ 44.556686][ T3889] io_submit_sqes+0x5cb/0x1000 [ 44.556768][ T3889] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 44.556884][ T3889] ? __rcu_read_unlock+0x4f/0x70 [ 44.556909][ T3889] ? get_pid_task+0x96/0xd0 [ 44.556928][ T3889] ? proc_fail_nth_write+0x12d/0x160 [ 44.557000][ T3889] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 44.557030][ T3889] ? vfs_write+0x75e/0x8d0 [ 44.557060][ T3889] ? __rcu_read_unlock+0x4f/0x70 [ 44.557082][ T3889] ? __fget_files+0x184/0x1c0 [ 44.557164][ T3889] ? fput+0x8f/0xc0 [ 44.557185][ T3889] __x64_sys_io_uring_enter+0x78/0x90 [ 44.557222][ T3889] x64_sys_call+0x28c8/0x2fb0 [ 44.557272][ T3889] do_syscall_64+0xd0/0x1a0 [ 44.557414][ T3889] ? clear_bhb_loop+0x25/0x80 [ 44.557469][ T3889] ? clear_bhb_loop+0x25/0x80 [ 44.557497][ T3889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.557524][ T3889] RIP: 0033:0x7f368285e969 [ 44.557543][ T3889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.557566][ T3889] RSP: 002b:00007f3680ea6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 44.557588][ T3889] RAX: ffffffffffffffda RBX: 00007f3682a86080 RCX: 00007f368285e969 [ 44.557639][ T3889] RDX: 0000000000004000 RSI: 0000000000002ded RDI: 0000000000000004 [ 44.557655][ T3889] RBP: 00007f3680ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 44.557670][ T3889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.557684][ T3889] R13: 0000000000000000 R14: 00007f3682a86080 R15: 00007fff4882c3d8 [ 44.557779][ T3889] [ 44.563310][ T29] audit: type=1400 audit(1746468641.947:574): avc: denied { create } for pid=3892 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.744769][ T3885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.785209][ T29] audit: type=1400 audit(1746468642.147:575): avc: denied { bind } for pid=3892 comm="syz.4.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 44.852405][ T29] audit: type=1400 audit(1746468642.177:576): avc: denied { ioctl } for pid=3892 comm="syz.4.85" path="socket:[5563]" dev="sockfs" ino=5563 ioctlcmd=0x8902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 44.901864][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.943857][ T29] audit: type=1400 audit(1746468642.267:577): avc: denied { append } for pid=2988 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=6 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 45.078130][ T3905] loop4: detected capacity change from 0 to 256 [ 45.743114][ T3912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.754271][ T3916] __nla_validate_parse: 6 callbacks suppressed [ 45.754332][ T3916] netlink: 16 bytes leftover after parsing attributes in process `syz.2.91'. [ 45.756035][ T3912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.783373][ T3917] FAULT_INJECTION: forcing a failure. [ 45.783373][ T3917] name failslab, interval 1, probability 0, space 0, times 0 [ 45.797284][ T3917] CPU: 1 UID: 0 PID: 3917 Comm: syz.3.92 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 45.797310][ T3917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 45.797324][ T3917] Call Trace: [ 45.797331][ T3917] [ 45.797340][ T3917] __dump_stack+0x1d/0x30 [ 45.797489][ T3917] dump_stack_lvl+0xe8/0x140 [ 45.797539][ T3917] dump_stack+0x15/0x1b [ 45.797560][ T3917] should_fail_ex+0x265/0x280 [ 45.797601][ T3917] should_failslab+0x8c/0xb0 [ 45.797645][ T3917] __kmalloc_cache_node_noprof+0x54/0x320 [ 45.797679][ T3917] ? __get_vm_area_node+0x106/0x1c0 [ 45.797709][ T3917] __get_vm_area_node+0x106/0x1c0 [ 45.797837][ T3917] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 45.797865][ T3917] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 45.797906][ T3917] ? avc_has_perm_noaudit+0x1b1/0x200 [ 45.797951][ T3917] ? selinux_capable+0x1f9/0x270 [ 45.797978][ T3917] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 45.798085][ T3917] __vmalloc_noprof+0x5f/0x70 [ 45.798108][ T3917] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 45.798135][ T3917] bpf_prog_alloc_no_stats+0x47/0x390 [ 45.798165][ T3917] ? bpf_prog_alloc+0x2a/0x150 [ 45.798239][ T3917] bpf_prog_alloc+0x3c/0x150 [ 45.798273][ T3917] bpf_prog_load+0x514/0x1070 [ 45.798419][ T3917] ? security_bpf+0x2b/0x90 [ 45.798459][ T3917] __sys_bpf+0x51d/0x790 [ 45.798570][ T3917] __x64_sys_bpf+0x41/0x50 [ 45.798677][ T3917] x64_sys_call+0x2478/0x2fb0 [ 45.798697][ T3917] do_syscall_64+0xd0/0x1a0 [ 45.798717][ T3917] ? clear_bhb_loop+0x25/0x80 [ 45.798743][ T3917] ? clear_bhb_loop+0x25/0x80 [ 45.798769][ T3917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.798844][ T3917] RIP: 0033:0x7f2ced30e969 [ 45.798859][ T3917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.798875][ T3917] RSP: 002b:00007f2ceb977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.798894][ T3917] RAX: ffffffffffffffda RBX: 00007f2ced535fa0 RCX: 00007f2ced30e969 [ 45.798910][ T3917] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 45.798957][ T3917] RBP: 00007f2ceb977090 R08: 0000000000000000 R09: 0000000000000000 [ 45.798968][ T3917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.799011][ T3917] R13: 0000000000000000 R14: 00007f2ced535fa0 R15: 00007fff592a98a8 [ 45.799097][ T3917] [ 45.799106][ T3917] syz.3.92: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 45.805416][ T3923] netlink: 156 bytes leftover after parsing attributes in process `syz.2.94'. [ 45.810455][ T3917] ,cpuset= [ 45.825916][ T3923] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'. [ 45.826421][ T3917] / [ 45.919552][ T3910] tmpfs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 45.922786][ T3917] ,mems_allowed=0 [ 46.081515][ T3932] loop0: detected capacity change from 0 to 512 [ 46.091676][ T3917] [ 46.094138][ T3917] CPU: 1 UID: 0 PID: 3917 Comm: syz.3.92 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 46.094167][ T3917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 46.094180][ T3917] Call Trace: [ 46.094186][ T3917] [ 46.094195][ T3917] __dump_stack+0x1d/0x30 [ 46.094215][ T3917] dump_stack_lvl+0xe8/0x140 [ 46.094313][ T3917] dump_stack+0x15/0x1b [ 46.094329][ T3917] warn_alloc+0x12b/0x1a0 [ 46.094351][ T3917] ? __get_vm_area_node+0x106/0x1c0 [ 46.094378][ T3917] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 46.094436][ T3917] ? avc_has_perm_noaudit+0x1b1/0x200 [ 46.094471][ T3917] ? selinux_capable+0x1f9/0x270 [ 46.094500][ T3917] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 46.094538][ T3917] __vmalloc_noprof+0x5f/0x70 [ 46.094560][ T3917] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 46.094588][ T3917] bpf_prog_alloc_no_stats+0x47/0x390 [ 46.094615][ T3917] ? bpf_prog_alloc+0x2a/0x150 [ 46.094650][ T3917] bpf_prog_alloc+0x3c/0x150 [ 46.094731][ T3917] bpf_prog_load+0x514/0x1070 [ 46.094771][ T3917] ? security_bpf+0x2b/0x90 [ 46.094907][ T3917] __sys_bpf+0x51d/0x790 [ 46.094943][ T3917] __x64_sys_bpf+0x41/0x50 [ 46.094968][ T3917] x64_sys_call+0x2478/0x2fb0 [ 46.095006][ T3917] do_syscall_64+0xd0/0x1a0 [ 46.095027][ T3917] ? clear_bhb_loop+0x25/0x80 [ 46.095048][ T3917] ? clear_bhb_loop+0x25/0x80 [ 46.095069][ T3917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.095104][ T3917] RIP: 0033:0x7f2ced30e969 [ 46.095119][ T3917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.095136][ T3917] RSP: 002b:00007f2ceb977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 46.095154][ T3917] RAX: ffffffffffffffda RBX: 00007f2ced535fa0 RCX: 00007f2ced30e969 [ 46.095167][ T3917] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 46.095178][ T3917] RBP: 00007f2ceb977090 R08: 0000000000000000 R09: 0000000000000000 [ 46.095237][ T3917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.095291][ T3917] R13: 0000000000000000 R14: 00007f2ced535fa0 R15: 00007fff592a98a8 [ 46.095310][ T3917] [ 46.095331][ T3917] Mem-Info: [ 46.126708][ T3932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.127100][ T3917] active_anon:6644 inactive_anon:0 isolated_anon:0 [ 46.127100][ T3917] active_file:6136 inactive_file:2039 isolated_file:0 [ 46.127100][ T3917] unevictable:29 dirty:292 writeback:0 [ 46.127100][ T3917] slab_reclaimable:2881 slab_unreclaimable:13534 [ 46.127100][ T3917] mapped:29794 shmem:2562 pagetables:1011 [ 46.127100][ T3917] sec_pagetables:0 bounce:0 [ 46.127100][ T3917] kernel_misc_reclaimable:0 [ 46.127100][ T3917] free:1901351 free_pcp:8119 free_cma:0 [ 46.143220][ T3932] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.146680][ T3917] Node 0 active_anon:26576kB inactive_anon:0kB active_file:24544kB inactive_file:8156kB unevictable:1160kB isolated(anon):0kB isolated(file):0kB mapped:119176kB dirty:1168kB writeback:0kB shmem:10248kB writeback_tmp:0kB kernel_stack:2832kB pagetables:4044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 46.261069][ T3938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.261987][ T3938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.269744][ T3917] Node 0 [ 46.351830][ T3939] netlink: 'syz.4.93': attribute type 32 has an invalid length. [ 46.374264][ T3917] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 46.374330][ T3917] lowmem_reserve[]: 0 2884 7863 7863 [ 46.475883][ T3917] Node 0 DMA32 free:2949936kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 46.506049][ T3917] lowmem_reserve[]: 0 0 4978 4978 [ 46.511149][ T3917] Node 0 Normal free:4611104kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:36784kB inactive_anon:0kB active_file:34752kB inactive_file:8156kB unevictable:8120kB writepending:1168kB present:5242880kB managed:5098244kB mlocked:8120kB bounce:0kB free_pcp:28644kB local_pcp:9864kB free_cma:0kB [ 46.543605][ T3917] lowmem_reserve[]: 0 0 0 0 [ 46.548433][ T3917] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 46.561410][ T3917] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949936kB [ 46.578200][ T3917] Node 0 Normal: 10*4kB (UE) 96*8kB (U) 68*16kB (UME) 54*32kB (U) 76*64kB (UE) 57*128kB (UE) 47*256kB (UME) 36*512kB (UE) 33*1024kB (UE) 23*2048kB (UME) 1092*4096kB (UM) = 4599976kB [ 46.596682][ T3917] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 46.606515][ T3917] 19013 total pagecache pages [ 46.611336][ T3917] 0 pages in swap cache [ 46.615723][ T3917] Free swap = 124996kB [ 46.619927][ T3917] Total swap = 124996kB [ 46.624320][ T3917] 2097051 pages RAM [ 46.628422][ T3917] 0 pages HighMem/MovableOnly [ 46.633340][ T3917] 80258 pages reserved [ 46.643949][ T3940] xt_limit: Overflow, try lower: 65536/2147483648 [ 46.667405][ T3940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.685916][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.695751][ T3940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.707055][ T3946] netlink: 36 bytes leftover after parsing attributes in process `syz.3.100'. [ 46.755590][ T3950] loop0: detected capacity change from 0 to 256 [ 46.764186][ T3948] loop4: detected capacity change from 0 to 256 [ 46.816003][ T3954] loop3: detected capacity change from 0 to 1024 [ 46.823637][ T3954] EXT4-fs: Ignoring removed bh option [ 46.830873][ T3954] EXT4-fs: inline encryption not supported [ 46.843100][ T3954] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.859023][ T3954] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 46.872974][ T3954] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.103: lblock 2 mapped to illegal pblock 2 (length 1) [ 46.887780][ T3954] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 48: comm syz.3.103: lblock 0 mapped to illegal pblock 48 (length 1) [ 46.902989][ T3954] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.103: Failed to acquire dquot type 0 [ 46.915266][ T3954] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 46.926095][ T3954] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.103: mark_inode_dirty error [ 46.949646][ T3954] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 46.978290][ T3954] EXT4-fs (loop3): 1 orphan inode deleted [ 46.989981][ T3959] loop4: detected capacity change from 0 to 1024 [ 46.996926][ T3647] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.016872][ T3954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.034197][ T3959] EXT4-fs: Ignoring removed bh option [ 47.038586][ T3647] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:7: Failed to release dquot type 0 [ 47.051739][ T3959] EXT4-fs: inline encryption not supported [ 47.071108][ T3959] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 47.088962][ T3954] netlink: 188 bytes leftover after parsing attributes in process `syz.3.103'. [ 47.103742][ T3959] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 47.118242][ T3959] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm syz.4.104: lblock 2 mapped to illegal pblock 2 (length 1) [ 47.152531][ T3959] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm syz.4.104: lblock 0 mapped to illegal pblock 48 (length 1) [ 47.173382][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.183231][ T3307] EXT4-fs error (device loop3): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 47.198790][ T3959] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.104: Failed to acquire dquot type 0 [ 47.211832][ T3307] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 47.224063][ T3959] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 47.255185][ T3307] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 47.308769][ T3959] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.104: mark_inode_dirty error [ 47.348262][ T3959] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 47.361399][ T3959] EXT4-fs (loop4): 1 orphan inode deleted [ 47.369842][ T3959] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.387551][ T159] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 47.403222][ T3971] netlink: 12 bytes leftover after parsing attributes in process `syz.3.108'. [ 47.417203][ T3963] loop2: detected capacity change from 0 to 512 [ 47.434176][ T3963] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 47.447724][ T159] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 0 [ 47.463906][ T3959] netlink: 188 bytes leftover after parsing attributes in process `syz.4.104'. [ 47.468803][ T3963] EXT4-fs (loop2): 1 truncate cleaned up [ 47.482299][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.548305][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.580468][ T3303] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 47.611993][ T3303] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 47.639896][ T3303] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 47.712945][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.749600][ T3992] loop4: detected capacity change from 0 to 512 [ 47.776714][ T4001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.118'. [ 47.785803][ T4001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.118'. [ 47.796510][ T3992] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.813074][ T3992] EXT4-fs (loop4): 1 truncate cleaned up [ 47.819513][ T3992] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.831558][ T4006] loop3: detected capacity change from 0 to 512 [ 47.833898][ T4001] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 47.882533][ T4010] 9pnet: Could not find request transport: 0xffffffffffffffff [ 47.920825][ T4006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.952507][ T4006] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.004427][ T4018] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.032903][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.145875][ T4026] loop2: detected capacity change from 0 to 512 [ 48.162064][ T4026] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.189450][ T4026] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 48.263324][ T4026] System zones: 1-12 [ 48.526704][ T4036] SELinux: policydb magic number 0xf985ff8c does not match expected magic number 0xf97cff8c [ 48.536973][ T4036] SELinux: failed to load policy [ 48.542076][ T4036] SELinux: policydb magic number 0xf985ff8c does not match expected magic number 0xf97cff8c [ 48.552406][ T4036] SELinux: failed to load policy [ 48.566182][ T4037] FAULT_INJECTION: forcing a failure. [ 48.566182][ T4037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.579534][ T4037] CPU: 0 UID: 0 PID: 4037 Comm: syz.0.130 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 48.579607][ T4037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.579654][ T4037] Call Trace: [ 48.579660][ T4037] [ 48.579668][ T4037] __dump_stack+0x1d/0x30 [ 48.579766][ T4037] dump_stack_lvl+0xe8/0x140 [ 48.579784][ T4037] dump_stack+0x15/0x1b [ 48.579799][ T4037] should_fail_ex+0x265/0x280 [ 48.579881][ T4037] should_fail+0xb/0x20 [ 48.579916][ T4037] should_fail_usercopy+0x1a/0x20 [ 48.579993][ T4037] _copy_from_user+0x1c/0xb0 [ 48.580019][ T4037] ___sys_sendmsg+0xc1/0x1d0 [ 48.580051][ T4037] __x64_sys_sendmsg+0xd4/0x160 [ 48.580154][ T4037] x64_sys_call+0x2999/0x2fb0 [ 48.580175][ T4037] do_syscall_64+0xd0/0x1a0 [ 48.580199][ T4037] ? clear_bhb_loop+0x25/0x80 [ 48.580221][ T4037] ? clear_bhb_loop+0x25/0x80 [ 48.580240][ T4037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.580316][ T4037] RIP: 0033:0x7f368285e969 [ 48.580330][ T4037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.580346][ T4037] RSP: 002b:00007f3680ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.580367][ T4037] RAX: ffffffffffffffda RBX: 00007f3682a85fa0 RCX: 00007f368285e969 [ 48.580383][ T4037] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000003 [ 48.580398][ T4037] RBP: 00007f3680ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.580471][ T4037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.580551][ T4037] R13: 0000000000000000 R14: 00007f3682a85fa0 R15: 00007fff4882c3d8 [ 48.580641][ T4037] [ 48.643939][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 48.643958][ T29] audit: type=1400 audit(1746468646.017:674): avc: denied { create } for pid=4033 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 48.658295][ T4040] netlink: 156 bytes leftover after parsing attributes in process `syz.1.133'. [ 48.658642][ T29] audit: type=1400 audit(1746468646.017:675): avc: denied { bind } for pid=4033 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 48.668555][ T4026] EXT4-fs (loop2): 1 truncate cleaned up [ 48.672463][ T29] audit: type=1400 audit(1746468646.017:676): avc: denied { listen } for pid=4033 comm="syz.4.131" path=2F33302FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 48.703139][ T4026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.760079][ T4042] loop0: detected capacity change from 0 to 512 [ 48.906749][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.908931][ T29] audit: type=1400 audit(1746468646.257:677): avc: denied { create } for pid=4043 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.938325][ T29] audit: type=1400 audit(1746468646.257:678): avc: denied { read write } for pid=4045 comm="syz.1.135" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.965146][ T29] audit: type=1400 audit(1746468646.257:679): avc: denied { open } for pid=4045 comm="syz.1.135" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.991838][ T29] audit: type=1400 audit(1746468646.317:680): avc: denied { write } for pid=4043 comm="syz.4.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.014396][ T4042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.020074][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.027115][ T4042] ext4 filesystem being mounted at /13/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.089926][ T4052] loop1: detected capacity change from 0 to 256 [ 49.108214][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.112513][ T29] audit: type=1400 audit(1746468646.497:681): avc: denied { getopt } for pid=4054 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.138233][ T29] audit: type=1400 audit(1746468646.537:682): avc: denied { connect } for pid=4054 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.158454][ T29] audit: type=1400 audit(1746468646.537:683): avc: denied { name_connect } for pid=4054 comm="syz.2.138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 49.213427][ T4063] loop2: detected capacity change from 0 to 512 [ 49.259541][ T4063] EXT4-fs (loop2): 1 orphan inode deleted [ 49.265692][ T4067] loop3: detected capacity change from 0 to 512 [ 49.273692][ T4067] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.283797][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 49.299970][ T4063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.313430][ T4063] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.313808][ T4067] EXT4-fs (loop3): 1 truncate cleaned up [ 49.330212][ T4067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.351445][ T4075] FAULT_INJECTION: forcing a failure. [ 49.351445][ T4075] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 49.365086][ T4075] CPU: 1 UID: 0 PID: 4075 Comm: syz.1.144 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 49.365119][ T4075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.365134][ T4075] Call Trace: [ 49.365142][ T4075] [ 49.365152][ T4075] __dump_stack+0x1d/0x30 [ 49.365172][ T4075] dump_stack_lvl+0xe8/0x140 [ 49.365197][ T4075] dump_stack+0x15/0x1b [ 49.365239][ T4075] should_fail_ex+0x265/0x280 [ 49.365337][ T4075] should_fail_alloc_page+0xf2/0x100 [ 49.365374][ T4075] __alloc_frozen_pages_noprof+0xff/0x360 [ 49.365404][ T4075] alloc_pages_mpol+0xb3/0x250 [ 49.365426][ T4075] vma_alloc_folio_noprof+0x1aa/0x300 [ 49.365453][ T4075] handle_mm_fault+0x1056/0x2ae0 [ 49.365546][ T4075] ? mas_walk+0xf2/0x120 [ 49.365569][ T4075] do_user_addr_fault+0x636/0x1090 [ 49.365611][ T4075] exc_page_fault+0x54/0xc0 [ 49.365652][ T4075] asm_exc_page_fault+0x26/0x30 [ 49.365742][ T4075] RIP: 0033:0x7fe1b9dda35b [ 49.365756][ T4075] Code: 00 00 00 48 8d 3d dd 2b 19 00 48 89 c1 31 c0 e8 db 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 2c 19 00 48 89 34 24 48 8b 14 24 48 8b [ 49.365777][ T4075] RSP: 002b:00007fe1b8554fb0 EFLAGS: 00010202 [ 49.365808][ T4075] RAX: 0000000000000000 RBX: 00007fe1ba136080 RCX: 0000000000000000 [ 49.365823][ T4075] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000003c0 [ 49.365838][ T4075] RBP: 00007fe1b8556090 R08: 0000000000000000 R09: 0000000000000000 [ 49.365853][ T4075] R10: 00002000000003c0 R11: 0000000000000000 R12: 0000000000000001 [ 49.365869][ T4075] R13: 0000000000000001 R14: 00007fe1ba136080 R15: 00007ffeccf4ec88 [ 49.365939][ T4075] [ 49.365950][ T4075] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 49.460985][ T4079] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.3.143: corrupted xattr block 33: invalid header [ 49.557844][ T4079] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.143: corrupted xattr block 33: invalid header [ 49.578491][ T4079] EXT4-fs warning (device loop3): ext4_evict_inode:279: xattr delete (err -117) [ 49.839542][ T4146] loop4: detected capacity change from 0 to 512 [ 49.846756][ T4146] ext3: Unknown parameter 'subj_user' [ 49.846988][ T4107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.862616][ T4146] loop4: detected capacity change from 0 to 164 [ 49.870305][ T4107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.963608][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.307587][ T4218] loop4: detected capacity change from 0 to 256 [ 50.359740][ T4220] loop4: detected capacity change from 0 to 2048 [ 50.366610][ T4220] EXT4-fs: quotafile must be on filesystem root [ 50.432977][ T4224] FAULT_INJECTION: forcing a failure. [ 50.432977][ T4224] name failslab, interval 1, probability 0, space 0, times 0 [ 50.446383][ T4224] CPU: 1 UID: 0 PID: 4224 Comm: syz.4.158 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 50.446489][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.446501][ T4224] Call Trace: [ 50.446509][ T4224] [ 50.446518][ T4224] __dump_stack+0x1d/0x30 [ 50.446543][ T4224] dump_stack_lvl+0xe8/0x140 [ 50.446634][ T4224] dump_stack+0x15/0x1b [ 50.446650][ T4224] should_fail_ex+0x265/0x280 [ 50.446680][ T4224] should_failslab+0x8c/0xb0 [ 50.446794][ T4224] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 50.446817][ T4224] ? bpf_insn_prepare_dump+0x61/0x490 [ 50.446838][ T4224] kmemdup_noprof+0x2b/0x70 [ 50.446855][ T4224] bpf_insn_prepare_dump+0x61/0x490 [ 50.446900][ T4224] bpf_obj_get_info_by_fd+0x100f/0x1ee0 [ 50.446955][ T4224] __sys_bpf+0x6bb/0x790 [ 50.447024][ T4224] __x64_sys_bpf+0x41/0x50 [ 50.447077][ T4224] x64_sys_call+0x2478/0x2fb0 [ 50.447125][ T4224] do_syscall_64+0xd0/0x1a0 [ 50.447152][ T4224] ? clear_bhb_loop+0x25/0x80 [ 50.447248][ T4224] ? clear_bhb_loop+0x25/0x80 [ 50.447268][ T4224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.447288][ T4224] RIP: 0033:0x7fc7c086e969 [ 50.447302][ T4224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.447340][ T4224] RSP: 002b:00007fc7beed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 50.447381][ T4224] RAX: ffffffffffffffda RBX: 00007fc7c0a95fa0 RCX: 00007fc7c086e969 [ 50.447396][ T4224] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 000000000000000f [ 50.447412][ T4224] RBP: 00007fc7beed7090 R08: 0000000000000000 R09: 0000000000000000 [ 50.447427][ T4224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.447442][ T4224] R13: 0000000000000000 R14: 00007fc7c0a95fa0 R15: 00007fffd4aaca58 [ 50.447463][ T4224] [ 50.659959][ T4226] loop4: detected capacity change from 0 to 256 [ 50.965644][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.979907][ T4237] loop2: detected capacity change from 0 to 512 [ 51.001652][ T4241] __nla_validate_parse: 1 callbacks suppressed [ 51.001671][ T4241] netlink: 156 bytes leftover after parsing attributes in process `syz.3.164'. [ 51.017887][ T4241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.164'. [ 51.028645][ T4237] EXT4-fs (loop2): 1 orphan inode deleted [ 51.035133][ T4237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.048266][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:2: Failed to release dquot type 1 [ 51.060945][ T4237] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.093365][ T4243] netlink: 32 bytes leftover after parsing attributes in process `syz.3.165'. [ 51.208263][ T4245] syz.3.165 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.238236][ T4244] loop3: detected capacity change from 0 to 512 [ 51.250900][ T4244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.265104][ T4244] EXT4-fs (loop3): 1 truncate cleaned up [ 51.271447][ T4244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.342289][ T4226] ================================================================== [ 51.350614][ T4226] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 51.359427][ T4226] [ 51.361942][ T4226] write to 0xffff8881162f0814 of 4 bytes by task 4231 on cpu 1: [ 51.371821][ T4226] xas_set_mark+0x12b/0x140 [ 51.376514][ T4226] __folio_start_writeback+0x1dd/0x430 [ 51.381998][ T4226] __block_write_full_folio+0x53a/0x8f0 [ 51.387661][ T4226] block_write_full_folio+0x29c/0x2c0 [ 51.393153][ T4226] __mpage_writepage+0x5f4/0x1150 [ 51.398299][ T4226] write_cache_pages+0x61/0x100 [ 51.403382][ T4226] mpage_writepages+0x72/0xf0 [ 51.408883][ T4226] fat_writepages+0x24/0x30 [ 51.414197][ T4226] do_writepages+0x1d2/0x480 [ 51.419112][ T4226] file_write_and_wait_range+0x156/0x2c0 [ 51.424812][ T4226] __generic_file_fsync+0x46/0x140 [ 51.430914][ T4226] fat_file_fsync+0x49/0x100 [ 51.436587][ T4226] vfs_fsync_range+0x10a/0x130 [ 51.441486][ T4226] generic_file_write_iter+0x1b8/0x2f0 [ 51.446998][ T4226] iter_file_splice_write+0x5ef/0x970 [ 51.452533][ T4226] direct_splice_actor+0x153/0x2a0 [ 51.458280][ T4226] splice_direct_to_actor+0x30f/0x680 [ 51.463772][ T4226] do_splice_direct+0xda/0x150 [ 51.468934][ T4226] do_sendfile+0x380/0x640 [ 51.473587][ T4226] __x64_sys_sendfile64+0x105/0x150 [ 51.479009][ T4226] x64_sys_call+0xb39/0x2fb0 [ 51.483619][ T4226] do_syscall_64+0xd0/0x1a0 [ 51.488151][ T4226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.494340][ T4226] [ 51.496682][ T4226] read to 0xffff8881162f0814 of 4 bytes by task 4226 on cpu 0: [ 51.505262][ T4226] __writeback_single_inode+0x1f9/0x7c0 [ 51.511101][ T4226] writeback_single_inode+0x167/0x3e0 [ 51.516669][ T4226] sync_inode_metadata+0x5b/0x90 [ 51.521634][ T4226] __generic_file_fsync+0xf8/0x140 [ 51.527471][ T4226] fat_file_fsync+0x49/0x100 [ 51.532168][ T4226] vfs_fsync_range+0x10a/0x130 [ 51.536962][ T4226] generic_file_write_iter+0x1b8/0x2f0 [ 51.542541][ T4226] iter_file_splice_write+0x5ef/0x970 [ 51.547932][ T4226] direct_splice_actor+0x153/0x2a0 [ 51.553164][ T4226] splice_direct_to_actor+0x30f/0x680 [ 51.558902][ T4226] do_splice_direct+0xda/0x150 [ 51.564439][ T4226] do_sendfile+0x380/0x640 [ 51.568900][ T4226] __x64_sys_sendfile64+0x105/0x150 [ 51.574267][ T4226] x64_sys_call+0xb39/0x2fb0 [ 51.579050][ T4226] do_syscall_64+0xd0/0x1a0 [ 51.583759][ T4226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.589696][ T4226] [ 51.592169][ T4226] value changed: 0x0a000021 -> 0x04000021 [ 51.598075][ T4226] [ 51.600402][ T4226] Reported by Kernel Concurrency Sanitizer on: [ 51.606907][ T4226] CPU: 0 UID: 0 PID: 4226 Comm: syz.4.159 Not tainted 6.15.0-rc5-syzkaller #0 PREEMPT(voluntary) [ 51.618079][ T4226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 51.628843][ T4226] ================================================================== [ 51.771482][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.944493][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.