last executing test programs: 5.976099611s ago: executing program 2 (id=206): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="04010000", @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20f"], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) pwrite64(r3, &(0x7f0000000000)="fd4e09b370ad518c46af1dc2b8e01940dc8f25e60e723d810be7083e416328bf84ecead4d163f65e705a625c6a5dbbc9875d3f05003650bab25f58ce8c508cdb", 0x40, 0x8000c61) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 5.898761342s ago: executing program 0 (id=207): socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) syz_io_uring_setup(0x2070c4, &(0x7f0000000280)={0x0, 0x86ec, 0x10000, 0x1, 0x220, 0x0, r0}, &(0x7f0000000340), &(0x7f0000000200)) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f0000000040), 0x2, 0x0) sendfile(r5, r7, 0x0, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r8 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x8, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x20080, &(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYRESHEX=r0, @ANYRESDEC=r7, @ANYRES8=r8]) 5.880805372s ago: executing program 4 (id=208): pivot_root(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 5.743517635s ago: executing program 1 (id=210): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) syz_io_uring_setup(0x277e, &(0x7f00000000c0)={0x0, 0x3d86, 0x2, 0x1, 0x198}, &(0x7f0000000000), &(0x7f0000000280)) r2 = socket$kcm(0x2, 0xf, 0x2) writev(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r2, 0xfffff000) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x918f, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) syz_open_dev$sg(&(0x7f0000000440), 0xce3, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 5.052547115s ago: executing program 1 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) 5.041078935s ago: executing program 2 (id=212): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x30}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r7 = socket$kcm(0x2, 0x3, 0x84) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) 5.010005545s ago: executing program 1 (id=213): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x7ff}, 0x94) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 4.790068259s ago: executing program 0 (id=214): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) syz_io_uring_setup(0x277e, &(0x7f00000000c0)={0x0, 0x3d86, 0x2, 0x1, 0x198}, &(0x7f0000000000), &(0x7f0000000280)) r6 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r6, 0xfffff000) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x918f, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e0002", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000000000000002000010000000000"], 0x44, 0x3) syz_open_dev$sg(&(0x7f0000000440), 0xce3, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 4.759701259s ago: executing program 2 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3.866020622s ago: executing program 2 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r9 = socket$kcm(0x2, 0x3, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r8, 0x4, r3, r0) r12 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r12, 0x0) shmat(r12, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 3.627538286s ago: executing program 1 (id=218): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r10 = socket$kcm(0x2, 0x3, 0x84) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) sendmsg$inet(r10, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r9, 0x4, r3, r0) r13 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r13, 0x0) shmat(r13, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 3.580767666s ago: executing program 2 (id=219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000002030102000000000000000000000000080003"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r9}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r11 = socket$kcm(0x2, 0x3, 0x84) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10) sendmsg$inet(r11, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r10, 0x4, r3, r0) r14 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r14, 0x0) shmat(r14, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 3.562747467s ago: executing program 4 (id=220): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000600600000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r9 = socket$kcm(0x2, 0x3, 0x84) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) sendmsg$inet(r9, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r8, 0x4, r3, r0) r12 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r12, 0x0) shmat(r12, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 3.457905198s ago: executing program 0 (id=221): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 3.388822429s ago: executing program 4 (id=222): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) syz_io_uring_setup(0x277e, &(0x7f00000000c0)={0x0, 0x3d86, 0x2, 0x1, 0x198}, &(0x7f0000000000), &(0x7f0000000280)) r6 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80", 0x6}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r6, 0xfffff000) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x918f, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100000000000000040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e0002", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000000000000002000010000000000"], 0x44, 0x3) syz_open_dev$sg(&(0x7f0000000440), 0xce3, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 3.005659085s ago: executing program 3 (id=223): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="04010000", @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20f"], 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r4) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8080c61) pwrite64(r3, &(0x7f0000000000)="fd4e09b370ad518c46af1dc2b8e01940dc8f25e60e723d810be7083e416328bf84ecead4d163f65e705a625c6a5dbbc9875d3f05003650bab25f58ce8c508cdb", 0x40, 0x8000c61) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 2.777225088s ago: executing program 1 (id=224): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) 2.68140926s ago: executing program 1 (id=225): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000480)={0x6, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty}}}, 0x108) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) 2.63720795s ago: executing program 2 (id=226): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 2.060232079s ago: executing program 3 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 2.01021548s ago: executing program 0 (id=228): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@errors_continue}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xb0, 0x1403, 0x300, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r9}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 1.97767166s ago: executing program 3 (id=229): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1.96004736s ago: executing program 4 (id=230): pivot_root(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 1.753940074s ago: executing program 3 (id=231): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESHEX=r0], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r5, 0x0) syz_io_uring_setup(0x277e, &(0x7f00000000c0)={0x0, 0x3d86, 0x2, 0x1, 0x198}, &(0x7f0000000000), &(0x7f0000000280)) r6 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r4, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e8000", 0x7}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00006d1000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, r6, 0xfffff000) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x918f, 0x1000, 0x0, 0x4000000}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x201080, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x0, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$security_ima(&(0x7f00000008c0)='./cgroup/../file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e0002", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000000000000002000010000000000"], 0x44, 0x3) syz_open_dev$sg(&(0x7f0000000440), 0xce3, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a5c000000060a0b040000000000000000020000004b0004802c0001800b0001006e756d67656e00001c00028008000240000056af080003400000000008000140000000110900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ac5b8b76cf4aae63cdaca69f8a69b562435fe"], 0x84}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 1.217418371s ago: executing program 3 (id=232): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001140)={[{@errors_continue}, {@data_err_abort}, {@init_itable}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f00000004c0)="$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") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xb0, 0x1403, 0x300, 0x70bd27, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6tnl0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8010}, 0x20000040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8000c62) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r7, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r9}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 971.952235ms ago: executing program 4 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000003"], &(0x7f0000000040)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r4 = getpgrp(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x1f, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85000000430000009574711c344eb77d0fc6a834a0bad55e40f81b9e4d84d2f107797be72f37a6c266d27ef0b6d486eca22ea0567b02b78387b57358fe0c587adc6d78fd2c83cdd7a294aea66c875d6ba0e6e904f5a47bc9e4a8fad6776846c23901564f0030a9aad095c867f94ee0404b31274d84426e9552d75ce5faf82a8710f3e750b9eec90239ff35f3d63913eaeb00"/217], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) syz_clone3(&(0x7f00000007c0)={0x40120000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="50000000020301"], 0x50}, 0x1, 0x0, 0x0, 0x400c08c}, 0xb0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x39, 0x1ff, 0xfffffffb, 0x22c5, 0xb04, 0xffffffffffffffff}) r10 = socket$kcm(0x2, 0x3, 0x84) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) sendmsg$inet(r10, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="d40a000040000000180000000000000000000000743039fe95"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0x94) kcmp(r4, r9, 0x4, r3, r0) r13 = shmget(0x0, 0x1000, 0x100, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r13, 0x0) shmat(r13, &(0x7f0000ffc000/0x3000)=nil, 0x6000) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe40c, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x800000, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 814.344347ms ago: executing program 4 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @local, @empty}}}}) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012921"], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 318.059525ms ago: executing program 0 (id=235): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)={0x28c, 0x0, 0x4, 0x70bd2b, 0x25dfdbbd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x88, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a8fc97ea957758d6"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "557f15eb44e90c46"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x13115a88}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xfffffffc}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cea30718273ce2af2447c25f6c38becd7ceb41a5d83be9b6"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="662d8aa286c5f5ff6ea381172134ffc8ed01048969876ea76f5d5ef3a85ba755"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "518c479109bc0dd8"}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f2dffb34ba8e17f2"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="7053dba89b4d4875715346c952de81ae"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fc569f2264c7c1af"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9fd853fa8963fdde"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "2f53e3f0ec8eafca"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ba1965e0946fc2a53e87fe3e86674d08db4dd5f9173caec7"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="42f1ddb943a8c4557d041a62acd0b0bea38e192cbab52e2bf51ba37087293f04"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "71ffdea169c92d07"}]}, @NL80211_ATTR_REKEY_DATA={0xa0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="69d813e54c4a1fdeca4cf54f8dace4ea058ef253b0cb56cb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="6d2a3fe063ac33a95b9d77d86382eaf9525d78797627cc53"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7b41de390ea4bf1dcb3def39d62629e6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="b611edf06994dcd02aa8dcef45c7a95da274f4862240740c2ea600bc71398da9"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5366d55c6de4f0ce423b7b406d242e27"}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "61b1243d312aa455"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ca579a4f42c66a456cc92bec1a3643a2b49cd4c613cd36e7"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3a2540cf620e729f0d20586881a0f9d0e65e2c3386055c441eeec091ba1af278"}]}, @NL80211_ATTR_REKEY_DATA={0x5c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a12f08759e197c58c1bfd9b6f10e9f1b4fdf0c8cd9f2e44a935611f473591bf2"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="031cfcecc153f796150fc0b22a64339269443f0741512f8d"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x41, 0x0) 316.659355ms ago: executing program 3 (id=236): pivot_root(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/ip_tables_targets\x00') socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 0s ago: executing program 0 (id=237): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @loopback, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @local, @empty}}}}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x8c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x81, 0x101}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 24.152004][ T29] audit: type=1400 audit(1751524847.319:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.152848][ T3292] cgroup: Unknown subsys name 'net' [ 24.174698][ T29] audit: type=1400 audit(1751524847.319:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.202037][ T29] audit: type=1400 audit(1751524847.359:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.338672][ T3292] cgroup: Unknown subsys name 'cpuset' [ 24.344624][ T3292] cgroup: Unknown subsys name 'rlimit' [ 24.493671][ T29] audit: type=1400 audit(1751524847.659:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.518931][ T29] audit: type=1400 audit(1751524847.659:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.539410][ T29] audit: type=1400 audit(1751524847.659:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.545840][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.559727][ T29] audit: type=1400 audit(1751524847.659:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.588529][ T29] audit: type=1400 audit(1751524847.669:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.613340][ T29] audit: type=1400 audit(1751524847.669:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.636696][ T29] audit: type=1400 audit(1751524847.739:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.665222][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.812423][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 25.834163][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 25.892340][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 25.932979][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.940173][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.947257][ T3302] bridge_slave_0: entered allmulticast mode [ 25.954228][ T3302] bridge_slave_0: entered promiscuous mode [ 25.968185][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 25.976794][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.983861][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.991056][ T3302] bridge_slave_1: entered allmulticast mode [ 25.997651][ T3302] bridge_slave_1: entered promiscuous mode [ 26.014215][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.021310][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.028481][ T3303] bridge_slave_0: entered allmulticast mode [ 26.034812][ T3303] bridge_slave_0: entered promiscuous mode [ 26.046137][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.060796][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.067832][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.074936][ T3303] bridge_slave_1: entered allmulticast mode [ 26.081389][ T3303] bridge_slave_1: entered promiscuous mode [ 26.102232][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.126138][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.138653][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.147810][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.154889][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.162682][ T3312] bridge_slave_0: entered allmulticast mode [ 26.169126][ T3312] bridge_slave_0: entered promiscuous mode [ 26.178871][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.198292][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.205317][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.212637][ T3312] bridge_slave_1: entered allmulticast mode [ 26.218844][ T3312] bridge_slave_1: entered promiscuous mode [ 26.254873][ T3302] team0: Port device team_slave_0 added [ 26.261555][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.279582][ T3303] team0: Port device team_slave_0 added [ 26.290389][ T3302] team0: Port device team_slave_1 added [ 26.296791][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.310175][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.317304][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.324508][ T3311] bridge_slave_0: entered allmulticast mode [ 26.330835][ T3311] bridge_slave_0: entered promiscuous mode [ 26.337710][ T3303] team0: Port device team_slave_1 added [ 26.343627][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.350749][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.357850][ T3309] bridge_slave_0: entered allmulticast mode [ 26.364197][ T3309] bridge_slave_0: entered promiscuous mode [ 26.383814][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.390904][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.398197][ T3311] bridge_slave_1: entered allmulticast mode [ 26.404484][ T3311] bridge_slave_1: entered promiscuous mode [ 26.415006][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.422181][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.429362][ T3309] bridge_slave_1: entered allmulticast mode [ 26.435652][ T3309] bridge_slave_1: entered promiscuous mode [ 26.445994][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.452972][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.478922][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.489968][ T3312] team0: Port device team_slave_0 added [ 26.507551][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.514518][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.540458][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.551556][ T3312] team0: Port device team_slave_1 added [ 26.565070][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.574284][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.581315][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.607219][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.619117][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.629671][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.648173][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.657573][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.664673][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.690568][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.711292][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.718249][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.744164][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.755187][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.762153][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.788066][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.824170][ T3302] hsr_slave_0: entered promiscuous mode [ 26.830134][ T3302] hsr_slave_1: entered promiscuous mode [ 26.836589][ T3309] team0: Port device team_slave_0 added [ 26.843593][ T3311] team0: Port device team_slave_0 added [ 26.855058][ T3303] hsr_slave_0: entered promiscuous mode [ 26.861239][ T3303] hsr_slave_1: entered promiscuous mode [ 26.866906][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.874512][ T3303] Cannot create hsr debugfs directory [ 26.880586][ T3309] team0: Port device team_slave_1 added [ 26.887501][ T3311] team0: Port device team_slave_1 added [ 26.932549][ T3312] hsr_slave_0: entered promiscuous mode [ 26.939913][ T3312] hsr_slave_1: entered promiscuous mode [ 26.945650][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.953270][ T3312] Cannot create hsr debugfs directory [ 26.963577][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.970546][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.996521][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.011132][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.018087][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.044025][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.055070][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.062141][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.088035][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.103591][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.110578][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.136484][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.193844][ T3311] hsr_slave_0: entered promiscuous mode [ 27.199711][ T3311] hsr_slave_1: entered promiscuous mode [ 27.205534][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.213271][ T3311] Cannot create hsr debugfs directory [ 27.235301][ T3309] hsr_slave_0: entered promiscuous mode [ 27.241282][ T3309] hsr_slave_1: entered promiscuous mode [ 27.247080][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.254772][ T3309] Cannot create hsr debugfs directory [ 27.375560][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.383747][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.401223][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.415700][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.436945][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.445851][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.454332][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.465712][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.486697][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.502269][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.517199][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.525836][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.553608][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.562162][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.570913][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.579939][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.599887][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.619608][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.638841][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.647128][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.656646][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.663756][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.675464][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.684517][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.693433][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.700587][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.721050][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.744743][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.759029][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.771064][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.784536][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.791629][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.799995][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.807110][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.820828][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.827866][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.842827][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.852352][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.859422][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.873508][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.883965][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.933210][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.943660][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.961814][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.979651][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.986715][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.999015][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.006120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.015540][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.026463][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.050017][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.072181][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.084104][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.092534][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.103409][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.122827][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.129955][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.144451][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.151535][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.171577][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.181997][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.242119][ T3302] veth0_vlan: entered promiscuous mode [ 28.260648][ T3302] veth1_vlan: entered promiscuous mode [ 28.282948][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.314924][ T3302] veth0_macvtap: entered promiscuous mode [ 28.330125][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.338848][ T3302] veth1_macvtap: entered promiscuous mode [ 28.362001][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.372985][ T3303] veth0_vlan: entered promiscuous mode [ 28.381903][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.398104][ T3303] veth1_vlan: entered promiscuous mode [ 28.408831][ T3312] veth0_vlan: entered promiscuous mode [ 28.420791][ T3302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.429623][ T3302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.438395][ T3302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.447117][ T3302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.465535][ T3312] veth1_vlan: entered promiscuous mode [ 28.483036][ T3311] veth0_vlan: entered promiscuous mode [ 28.497482][ T3311] veth1_vlan: entered promiscuous mode [ 28.510548][ T3303] veth0_macvtap: entered promiscuous mode [ 28.517803][ T3303] veth1_macvtap: entered promiscuous mode [ 28.525751][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.539575][ T3309] veth0_vlan: entered promiscuous mode [ 28.559312][ T3312] veth0_macvtap: entered promiscuous mode [ 28.566630][ T3312] veth1_macvtap: entered promiscuous mode [ 28.577601][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.586468][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.596129][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.604836][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.613546][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.622275][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.641590][ T3309] veth1_vlan: entered promiscuous mode [ 28.653234][ T3309] veth0_macvtap: entered promiscuous mode [ 28.660483][ T3309] veth1_macvtap: entered promiscuous mode [ 28.670320][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.688177][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.696923][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.714326][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.722430][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.731246][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.739955][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.748726][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.782062][ T3311] veth0_macvtap: entered promiscuous mode [ 28.790665][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.799414][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.808121][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.816793][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.972229][ T3311] veth1_macvtap: entered promiscuous mode [ 29.020835][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.056905][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.104820][ T3311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.113638][ T3311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.122353][ T3311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.131103][ T3311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.165817][ T3484] loop2: detected capacity change from 0 to 1024 [ 29.181043][ T3484] ======================================================= [ 29.181043][ T3484] WARNING: The mand mount option has been deprecated and [ 29.181043][ T3484] and is ignored by this kernel. Remove the mand [ 29.181043][ T3484] option from the mount to silence this warning. [ 29.181043][ T3484] ======================================================= [ 29.228413][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 29.228470][ T29] audit: type=1400 audit(1751524852.399:101): avc: denied { open } for pid=3485 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.253572][ T29] audit: type=1400 audit(1751524852.399:102): avc: denied { kernel } for pid=3485 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.273040][ T3484] EXT4-fs: Ignoring removed nobh option [ 29.283189][ T29] audit: type=1400 audit(1751524852.399:103): avc: denied { tracepoint } for pid=3485 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.326884][ T29] audit: type=1326 audit(1751524852.479:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 29.350024][ T29] audit: type=1326 audit(1751524852.479:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 29.373158][ T29] audit: type=1326 audit(1751524852.479:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 29.396273][ T29] audit: type=1326 audit(1751524852.479:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 29.419532][ T29] audit: type=1326 audit(1751524852.479:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 29.425753][ T3495] hub 6-0:1.0: USB hub found [ 29.442579][ T29] audit: type=1326 audit(1751524852.479:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 29.448370][ T3484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.470131][ T29] audit: type=1326 audit(1751524852.479:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3485 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 29.473291][ T3480] syzkaller0: entered promiscuous mode [ 29.511315][ T3480] syzkaller0: entered allmulticast mode [ 29.518860][ T3495] hub 6-0:1.0: 8 ports detected [ 29.531929][ T3489] loop4: detected capacity change from 0 to 1024 [ 29.588130][ T3498] loop0: detected capacity change from 0 to 128 [ 29.620934][ T3498] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 29.628792][ T3498] FAT-fs (loop0): Filesystem has been set read-only [ 29.648758][ T3498] syz.0.6: attempt to access beyond end of device [ 29.648758][ T3498] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 29.668690][ T3498] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 29.676528][ T3498] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 29.679983][ T3484] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3: Allocating blocks 385-513 which overlap fs metadata [ 29.693291][ T3498] syz.0.6: attempt to access beyond end of device [ 29.693291][ T3498] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.713658][ T3498] syz.0.6: attempt to access beyond end of device [ 29.713658][ T3498] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.728655][ T3498] syz.0.6: attempt to access beyond end of device [ 29.728655][ T3498] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.748991][ T3498] syz.0.6: attempt to access beyond end of device [ 29.748991][ T3498] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.773476][ T3514] EXT4-fs (loop2): pa ffff888106a71000: logic 16, phys. 129, len 24 [ 29.774089][ T3498] syz.0.6: attempt to access beyond end of device [ 29.774089][ T3498] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.781556][ T3514] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 29.808115][ T3498] syz.0.6: attempt to access beyond end of device [ 29.808115][ T3498] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.821417][ T3515] syz.0.6: attempt to access beyond end of device [ 29.821417][ T3515] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.843953][ T3515] syz.0.6: attempt to access beyond end of device [ 29.843953][ T3515] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.878312][ T3498] syz.0.6: attempt to access beyond end of device [ 29.878312][ T3498] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 29.994500][ T3514] syz.2.3 (3514) used greatest stack depth: 10104 bytes left [ 30.544561][ T3573] loop0: detected capacity change from 0 to 128 [ 30.567427][ T3573] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 30.575395][ T3573] FAT-fs (loop0): Filesystem has been set read-only [ 30.602361][ T3573] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 30.610239][ T3573] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 31.327898][ T3638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.336464][ T3638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.372255][ T3638] loop4: detected capacity change from 0 to 512 [ 31.379529][ T3638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.389213][ T3638] EXT4-fs (loop4): orphan cleanup on readonly fs [ 31.402748][ T3638] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10: bg 0: block 248: padding at end of block bitmap is not set [ 31.428872][ T3638] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.10: Failed to acquire dquot type 1 [ 31.449348][ T3638] EXT4-fs (loop4): 1 truncate cleaned up [ 31.455627][ T3638] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.548243][ C1] hrtimer: interrupt took 27759 ns [ 31.572407][ T3656] loop3: detected capacity change from 0 to 512 [ 31.585139][ T3656] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.608563][ T3656] EXT4-fs (loop3): orphan cleanup on readonly fs [ 31.615420][ T3656] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.12: bg 0: block 248: padding at end of block bitmap is not set [ 31.630642][ T3656] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.12: Failed to acquire dquot type 1 [ 31.642200][ T3656] EXT4-fs (loop3): 1 truncate cleaned up [ 31.649697][ T3656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.678620][ T3670] wg2: entered promiscuous mode [ 31.683488][ T3670] wg2: entered allmulticast mode [ 31.686991][ T3656] syz.3.12 (3656) used greatest stack depth: 9304 bytes left [ 31.699702][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.806384][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.816687][ T3683] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 31.976654][ T3689] wg2: entered promiscuous mode [ 31.984007][ T3689] wg2: entered allmulticast mode [ 32.332006][ T3692] loop3: detected capacity change from 0 to 1024 [ 32.420878][ T3695] loop1: detected capacity change from 0 to 1024 [ 32.672776][ T3702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.698880][ T3703] loop3: detected capacity change from 0 to 1024 [ 32.699533][ T3702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.705530][ T3703] EXT4-fs: Ignoring removed bh option [ 32.718521][ T3703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.742274][ T3703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.806599][ T3707] loop1: detected capacity change from 0 to 128 [ 32.816776][ T3703] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.20: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 32.836706][ T3707] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.844595][ T3707] FAT-fs (loop1): Filesystem has been set read-only [ 32.859491][ T3707] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.867344][ T3707] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 33.861878][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.315081][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.496604][ T3729] loop4: detected capacity change from 0 to 512 [ 34.508925][ T3729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.561743][ T3729] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.568757][ T3729] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.27: bg 0: block 248: padding at end of block bitmap is not set [ 34.584078][ T3729] __quota_error: 211 callbacks suppressed [ 34.584091][ T3729] Quota error (device loop4): write_blk: dquota write failed [ 34.597258][ T3729] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 34.607212][ T3729] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.27: Failed to acquire dquot type 1 [ 34.619934][ T3729] EXT4-fs (loop4): 1 truncate cleaned up [ 34.626231][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.672093][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.002844][ T3741] loop1: detected capacity change from 0 to 512 [ 35.029941][ T3742] loop0: detected capacity change from 0 to 256 [ 35.068462][ T3741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.124544][ T29] audit: type=1326 audit(1751524858.289:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a68fe929 code=0x7ffc0000 [ 35.135507][ T3741] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.158010][ T29] audit: type=1326 audit(1751524858.289:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a68fe929 code=0x7ffc0000 [ 35.181153][ T29] audit: type=1326 audit(1751524858.299:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd7a68fe929 code=0x7ffc0000 [ 35.204196][ T29] audit: type=1326 audit(1751524858.299:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a68fe929 code=0x7ffc0000 [ 35.227376][ T29] audit: type=1326 audit(1751524858.299:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a68fe929 code=0x7ffc0000 [ 35.250500][ T29] audit: type=1326 audit(1751524858.299:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd7a68fe929 code=0x7ffc0000 [ 35.273648][ T29] audit: type=1326 audit(1751524858.299:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a68fe929 code=0x7ffc0000 [ 35.296869][ T29] audit: type=1326 audit(1751524858.299:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.2.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a68fe929 code=0x7ffc0000 [ 35.436936][ T3742] FAT-fs (loop0): codepage cp1255 not found [ 35.969076][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.177592][ T3763] loop3: detected capacity change from 0 to 1024 [ 36.193828][ T3762] loop1: detected capacity change from 0 to 128 [ 36.194408][ T3763] EXT4-fs: Ignoring removed bh option [ 36.205531][ T3763] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.226641][ T3762] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 36.234500][ T3762] FAT-fs (loop1): Filesystem has been set read-only [ 36.243468][ T3763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.285329][ T3762] bio_check_eod: 37858 callbacks suppressed [ 36.285342][ T3762] syz.1.32: attempt to access beyond end of device [ 36.285342][ T3762] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 36.305054][ T3762] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 36.312888][ T3762] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 36.320873][ T3762] syz.1.32: attempt to access beyond end of device [ 36.320873][ T3762] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.330586][ T3763] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.33: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 36.334067][ T3762] syz.1.32: attempt to access beyond end of device [ 36.334067][ T3762] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.363437][ T3762] syz.1.32: attempt to access beyond end of device [ 36.363437][ T3762] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.376565][ T3766] syz.1.32: attempt to access beyond end of device [ 36.376565][ T3766] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.389714][ T3762] syz.1.32: attempt to access beyond end of device [ 36.389714][ T3762] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.404007][ T3766] syz.1.32: attempt to access beyond end of device [ 36.404007][ T3766] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.421336][ T3762] syz.1.32: attempt to access beyond end of device [ 36.421336][ T3762] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.434526][ T3766] syz.1.32: attempt to access beyond end of device [ 36.434526][ T3766] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.456443][ T3762] syz.1.32: attempt to access beyond end of device [ 36.456443][ T3762] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 36.479146][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.568183][ T3770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.614269][ T3772] loop2: detected capacity change from 0 to 1024 [ 36.629560][ T3770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.658350][ T3772] EXT4-fs: Ignoring removed bh option [ 36.663743][ T3772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.678371][ T3772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.714133][ T3772] EXT4-fs error (device loop2): ext4_iget_extra_inode:5035: inode #15: comm syz.2.36: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 37.308082][ T3784] loop3: detected capacity change from 0 to 512 [ 37.340517][ T3784] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.369286][ T3784] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.385004][ T3784] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.39: bg 0: block 248: padding at end of block bitmap is not set [ 37.403365][ T3784] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.39: Failed to acquire dquot type 1 [ 37.530907][ T3784] EXT4-fs (loop3): 1 truncate cleaned up [ 37.557978][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.592353][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.620070][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.650358][ T3789] loop4: detected capacity change from 0 to 512 [ 37.693307][ T3789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.707110][ T3794] loop3: detected capacity change from 0 to 1024 [ 37.712306][ T3796] netlink: 60 bytes leftover after parsing attributes in process `syz.2.40'. [ 37.728161][ T3789] EXT4-fs (loop4): orphan cleanup on readonly fs [ 37.733618][ T3794] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.758682][ T3789] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.41: bg 0: block 248: padding at end of block bitmap is not set [ 37.780738][ T3794] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #3: block 1: comm syz.3.42: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.798206][ T3794] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.42: Failed to acquire dquot type 0 [ 37.809557][ T3794] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.42: Freeing blocks not in datazone - block = 0, count = 4096 [ 37.817987][ T3789] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.41: Failed to acquire dquot type 1 [ 37.823128][ T3794] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.42: Invalid inode bitmap blk 0 in block_group 0 [ 37.848485][ T31] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 37.856648][ T3794] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 37.871375][ T3794] EXT4-fs (loop3): 1 orphan inode deleted [ 37.877542][ T3794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.892156][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 37.914496][ T3789] EXT4-fs (loop4): 1 truncate cleaned up [ 37.930043][ T3794] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.42: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 37.959364][ T3789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.964856][ T3803] netlink: 60 bytes leftover after parsing attributes in process `syz.2.43'. [ 38.020461][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.051984][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.112605][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 38.156726][ T3807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 38.167920][ T3811] loop4: detected capacity change from 0 to 128 [ 38.183183][ T3811] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 38.189914][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.191088][ T3811] FAT-fs (loop4): Filesystem has been set read-only [ 38.242155][ T3807] bridge_slave_1 (unregistering): left allmulticast mode [ 38.249242][ T3807] bridge_slave_1 (unregistering): left promiscuous mode [ 38.256199][ T3807] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.273940][ T3811] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 38.281802][ T3811] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 38.988840][ T3821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.48'. [ 39.142019][ T3834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.52'. [ 39.166173][ T3832] loop0: detected capacity change from 0 to 1024 [ 39.190223][ T3832] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.208753][ T3834] netlink: 40 bytes leftover after parsing attributes in process `syz.3.52'. [ 39.272676][ T3843] netlink: 60 bytes leftover after parsing attributes in process `syz.4.53'. [ 39.289932][ T3840] loop1: detected capacity change from 0 to 1024 [ 39.312328][ T3840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.327204][ T3846] netlink: 60 bytes leftover after parsing attributes in process `syz.3.54'. [ 39.361205][ T3849] bridge_slave_0: left allmulticast mode [ 39.366863][ T3849] bridge_slave_0: left promiscuous mode [ 39.372638][ T3849] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.381329][ T3849] bridge_slave_1: left allmulticast mode [ 39.387013][ T3849] bridge_slave_1: left promiscuous mode [ 39.392693][ T3849] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.401946][ T3849] bond0: (slave bond_slave_0): Releasing backup interface [ 39.411256][ T3849] bond0: (slave bond_slave_1): Releasing backup interface [ 39.422453][ T3849] team0: Port device team_slave_0 removed [ 39.430528][ T3849] team0: Port device team_slave_1 removed [ 39.437147][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.444564][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.453742][ T3849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.461164][ T3849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.552961][ T3854] loop2: detected capacity change from 0 to 1024 [ 39.574779][ T3854] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.598221][ T3856] loop4: detected capacity change from 0 to 1024 [ 39.614647][ T3857] loop3: detected capacity change from 0 to 1024 [ 39.641149][ T3857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.646622][ T3854] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #3: block 1: comm syz.2.57: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.676018][ T3854] __quota_error: 116 callbacks suppressed [ 39.676032][ T3854] Quota error (device loop2): write_blk: dquota write failed [ 39.687154][ T3857] EXT4-fs (loop3): shut down requested (2) [ 39.689307][ T3854] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 39.695212][ T29] audit: type=1400 audit(1751524862.859:435): avc: denied { ioctl } for pid=3855 comm="syz.3.58" path="/18/file1/file1" dev="loop3" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 39.711842][ T3857] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 39.729959][ T3854] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.57: Failed to acquire dquot type 0 [ 39.738462][ T3857] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 39.771910][ T29] audit: type=1400 audit(1751524862.939:436): avc: denied { read } for pid=2976 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.793847][ T29] audit: type=1400 audit(1751524862.939:437): avc: denied { search } for pid=2976 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.815324][ T29] audit: type=1400 audit(1751524862.939:438): avc: denied { search } for pid=2976 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.815390][ T29] audit: type=1400 audit(1751524862.939:439): avc: denied { add_name } for pid=2976 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.815408][ T29] audit: type=1400 audit(1751524862.939:440): avc: denied { create } for pid=2976 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.815424][ T29] audit: type=1400 audit(1751524862.939:441): avc: denied { append open } for pid=2976 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.815446][ T29] audit: type=1400 audit(1751524862.939:442): avc: denied { getattr } for pid=2976 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.843710][ T3854] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.57: Freeing blocks not in datazone - block = 0, count = 4096 [ 39.983219][ T3854] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.57: Invalid inode bitmap blk 0 in block_group 0 [ 39.996804][ T12] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.012992][ T3854] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 40.021510][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 40.033263][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.043457][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.053675][ T3854] EXT4-fs (loop2): 1 orphan inode deleted [ 40.059942][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.082719][ T3854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.160601][ T3863] bridge_slave_0: left allmulticast mode [ 40.166249][ T3863] bridge_slave_0: left promiscuous mode [ 40.171972][ T3863] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.196758][ T3852] Set syz1 is full, maxelem 65536 reached [ 40.209939][ T3863] bond0: (slave bond_slave_0): Releasing backup interface [ 40.228042][ T3854] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #2: block 16: comm syz.2.57: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 40.228169][ T3863] bond0: (slave bond_slave_1): Releasing backup interface [ 40.256961][ T3867] netlink: 60 bytes leftover after parsing attributes in process `syz.0.60'. [ 40.294909][ T3863] team0: Port device team_slave_0 removed [ 40.315147][ T3870] loop4: detected capacity change from 0 to 128 [ 40.322977][ T3863] team0: Port device team_slave_1 removed [ 40.331054][ T3863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.332782][ T3870] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 40.338498][ T3863] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.346222][ T3870] FAT-fs (loop4): Filesystem has been set read-only [ 40.360254][ T3870] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 40.368103][ T3870] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 40.389319][ T3863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.396701][ T3863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.448635][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.505177][ T3875] hub 6-0:1.0: USB hub found [ 40.512052][ T3875] hub 6-0:1.0: 8 ports detected [ 40.667401][ T3896] hub 6-0:1.0: USB hub found [ 40.677475][ T3896] hub 6-0:1.0: 8 ports detected [ 41.144746][ T3943] loop3: detected capacity change from 0 to 1024 [ 41.290788][ T3870] bio_check_eod: 34582 callbacks suppressed [ 41.290802][ T3870] syz.4.62: attempt to access beyond end of device [ 41.290802][ T3870] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.615573][ T3984] syz.3.72 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 41.773782][ T4006] loop3: detected capacity change from 0 to 1024 [ 42.187589][ T3996] Set syz1 is full, maxelem 65536 reached [ 42.554050][ T4038] loop4: detected capacity change from 0 to 1024 [ 42.579965][ T4038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.596862][ T4038] EXT4-fs (loop4): shut down requested (2) [ 42.603334][ T4038] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 42.612146][ T4038] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 42.630683][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.661945][ T4045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4045 comm=syz.4.77 [ 42.758160][ T4051] __nla_validate_parse: 2 callbacks suppressed [ 42.758174][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 42.776236][ T4049] loop2: detected capacity change from 0 to 128 [ 42.788319][ T4049] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.796152][ T4049] FAT-fs (loop2): Filesystem has been set read-only [ 42.805649][ T4049] syz.2.78: attempt to access beyond end of device [ 42.805649][ T4049] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 42.810323][ T4051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.79'. [ 42.828195][ T4049] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.836023][ T4049] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 42.845559][ T4051] hsr_slave_1 (unregistering): left promiscuous mode [ 42.845570][ T4049] syz.2.78: attempt to access beyond end of device [ 42.845570][ T4049] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.867189][ T4054] syz.2.78: attempt to access beyond end of device [ 42.867189][ T4054] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.880471][ T4049] syz.2.78: attempt to access beyond end of device [ 42.880471][ T4049] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.893703][ T4054] syz.2.78: attempt to access beyond end of device [ 42.893703][ T4054] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.907082][ T4049] syz.2.78: attempt to access beyond end of device [ 42.907082][ T4049] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.921471][ T4054] syz.2.78: attempt to access beyond end of device [ 42.921471][ T4054] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.934961][ T4049] syz.2.78: attempt to access beyond end of device [ 42.934961][ T4049] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.953323][ T4054] syz.2.78: attempt to access beyond end of device [ 42.953323][ T4054] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.985761][ T4059] program syz.1.81 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.311059][ T4062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4062 comm=syz.1.82 [ 43.421584][ T4064] hub 6-0:1.0: USB hub found [ 43.438419][ T4064] hub 6-0:1.0: 8 ports detected [ 43.762775][ T4091] loop1: detected capacity change from 0 to 512 [ 43.784282][ T4091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.816188][ T4091] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.824068][ T4091] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.86: bg 0: block 248: padding at end of block bitmap is not set [ 43.843890][ T4102] loop3: detected capacity change from 0 to 256 [ 43.850340][ T4091] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.86: Failed to acquire dquot type 1 [ 43.870030][ T4091] EXT4-fs (loop1): 1 truncate cleaned up [ 43.877682][ T4091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.902177][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.931077][ T4102] FAT-fs (loop3): codepage cp1255 not found [ 43.976936][ T4118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4118 comm=syz.2.90 [ 44.396709][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 44.423518][ T4156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.93'. [ 44.767841][ T4176] loop2: detected capacity change from 0 to 128 [ 44.776448][ T4176] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 44.784324][ T4176] FAT-fs (loop2): Filesystem has been set read-only [ 44.793927][ T4176] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 44.801776][ T4176] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 44.814107][ T4178] loop3: detected capacity change from 0 to 1024 [ 44.835813][ T4178] EXT4-fs: Ignoring removed bh option [ 44.841245][ T4178] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.060383][ T4178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.096289][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 45.096300][ T29] audit: type=1400 audit(1751524868.259:621): avc: denied { read open } for pid=4177 comm="syz.3.96" path="/27/file0/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.196193][ T4178] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.96: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 45.259527][ T4208] netlink: 60 bytes leftover after parsing attributes in process `syz.1.97'. [ 45.295765][ T29] audit: type=1400 audit(1751524868.459:622): avc: denied { write } for pid=4177 comm="syz.3.96" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.326901][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.389053][ T29] audit: type=1400 audit(1751524868.549:623): avc: denied { append } for pid=4215 comm="syz.3.98" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.419014][ T4220] program syz.3.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.462629][ T4220] loop3: detected capacity change from 0 to 1024 [ 45.469454][ T4230] netlink: 60 bytes leftover after parsing attributes in process `syz.4.99'. [ 45.491774][ T4233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.100'. [ 45.511837][ T4220] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.581199][ T4220] EXT4-fs (loop3): shut down requested (2) [ 45.587336][ T4220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 45.596138][ T4220] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 45.653291][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.657968][ T29] audit: type=1400 audit(1751524868.729:624): avc: denied { read write } for pid=4238 comm="syz.1.101" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.685546][ T29] audit: type=1400 audit(1751524868.729:625): avc: denied { open } for pid=4238 comm="syz.1.101" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 45.769268][ T4248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.103'. [ 45.778488][ T4246] loop3: detected capacity change from 0 to 1024 [ 45.796108][ T4246] EXT4-fs: Ignoring removed nobh option [ 45.851914][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 45.872431][ T4246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.899211][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 45.956144][ T29] audit: type=1400 audit(1751524869.119:626): avc: denied { read } for pid=4245 comm="syz.3.102" dev="nsfs" ino=4026532766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 45.959039][ T4246] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.102: Allocating blocks 385-513 which overlap fs metadata [ 45.995966][ T4263] hub 6-0:1.0: USB hub found [ 46.001996][ T29] audit: type=1400 audit(1751524869.119:627): avc: denied { open } for pid=4245 comm="syz.3.102" path="net:[4026532766]" dev="nsfs" ino=4026532766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.007189][ T4263] hub 6-0:1.0: 8 ports detected [ 46.153899][ T4273] program syz.4.107 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.174542][ T29] audit: type=1400 audit(1751524869.339:628): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 46.262120][ T4276] EXT4-fs (loop3): pa ffff888106a71070: logic 16, phys. 129, len 24 [ 46.270208][ T4276] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 46.467072][ T29] audit: type=1400 audit(1751524869.629:629): avc: denied { create } for pid=4295 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.511513][ T4300] program syz.0.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.544012][ T29] audit: type=1400 audit(1751524869.629:630): avc: denied { setopt } for pid=4295 comm="syz.0.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.553483][ T4300] loop0: detected capacity change from 0 to 1024 [ 46.620082][ T4300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.654786][ T4300] EXT4-fs (loop0): shut down requested (2) [ 46.664221][ T4300] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.682733][ T4300] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 46.717125][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.756101][ T4294] syzkaller0: entered promiscuous mode [ 46.761591][ T4294] syzkaller0: entered allmulticast mode [ 46.812975][ T4323] loop0: detected capacity change from 0 to 128 [ 46.828454][ T4323] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.836294][ T4323] FAT-fs (loop0): Filesystem has been set read-only [ 46.844095][ T4323] bio_check_eod: 43221 callbacks suppressed [ 46.844108][ T4323] syz.0.111: attempt to access beyond end of device [ 46.844108][ T4323] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 46.865331][ T4323] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.873214][ T4323] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 46.895435][ T4323] syz.0.111: attempt to access beyond end of device [ 46.895435][ T4323] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.909627][ T4323] syz.0.111: attempt to access beyond end of device [ 46.909627][ T4323] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.929689][ T4330] syz.0.111: attempt to access beyond end of device [ 46.929689][ T4330] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.953143][ T4323] syz.0.111: attempt to access beyond end of device [ 46.953143][ T4323] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.969313][ T4330] syz.0.111: attempt to access beyond end of device [ 46.969313][ T4330] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.982778][ T4323] syz.0.111: attempt to access beyond end of device [ 46.982778][ T4323] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.002187][ T4330] syz.0.111: attempt to access beyond end of device [ 47.002187][ T4330] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.002408][ T4344] hub 6-0:1.0: USB hub found [ 47.038201][ T4344] hub 6-0:1.0: 8 ports detected [ 47.040048][ T4330] syz.0.111: attempt to access beyond end of device [ 47.040048][ T4330] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.097766][ T4323] syz.0.111: attempt to access beyond end of device [ 47.097766][ T4323] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.466205][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.503611][ T4413] loop3: detected capacity change from 0 to 1024 [ 47.540073][ T4413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.554132][ T4413] EXT4-fs (loop3): shut down requested (2) [ 47.561728][ T4413] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 47.570612][ T4413] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 47.598796][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.802390][ T4428] loop3: detected capacity change from 0 to 512 [ 47.810732][ T4428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.828485][ T4428] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.835426][ T4428] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.119: bg 0: block 248: padding at end of block bitmap is not set [ 47.836185][ T4424] __nla_validate_parse: 1 callbacks suppressed [ 47.836197][ T4424] netlink: 60 bytes leftover after parsing attributes in process `syz.0.118'. [ 47.852031][ T4428] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.119: Failed to acquire dquot type 1 [ 47.877122][ T4428] EXT4-fs (loop3): 1 truncate cleaned up [ 47.883430][ T4428] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.919217][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.920680][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 47.955366][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 48.002604][ T4437] loop2: detected capacity change from 0 to 512 [ 48.003947][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 48.033785][ T4437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.046784][ T4437] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.129521][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.122'. [ 48.169403][ T4450] netlink: 60 bytes leftover after parsing attributes in process `syz.1.126'. [ 48.187701][ T4451] loop4: detected capacity change from 0 to 1024 [ 48.323221][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 48.333081][ T4461] netlink: 60 bytes leftover after parsing attributes in process `syz.3.128'. [ 48.343619][ T4463] loop1: detected capacity change from 0 to 256 [ 48.360985][ T4463] msdos: Unknown parameter 'dLts' [ 48.517787][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'. [ 48.573525][ T4469] loop1: detected capacity change from 0 to 128 [ 48.580133][ T4469] EXT4-fs: test_dummy_encryption option not supported [ 49.035324][ T4471] loop0: detected capacity change from 0 to 512 [ 49.079703][ T4471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.171764][ T4471] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.209164][ T4473] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4473 comm=syz.3.132 [ 49.234691][ T4471] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.131: bg 0: block 248: padding at end of block bitmap is not set [ 49.276033][ T4471] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.131: Failed to acquire dquot type 1 [ 49.308549][ T4471] EXT4-fs (loop0): 1 truncate cleaned up [ 49.330024][ T4471] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.387678][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.557612][ T4478] bridge_slave_0: left allmulticast mode [ 49.563358][ T4478] bridge_slave_0: left promiscuous mode [ 49.569070][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.611108][ T4482] loop3: detected capacity change from 0 to 512 [ 49.620501][ T4478] bridge_slave_1: left allmulticast mode [ 49.626155][ T4478] bridge_slave_1: left promiscuous mode [ 49.631870][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.683292][ T4482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.718123][ T4478] bond0: (slave bond_slave_0): Releasing backup interface [ 49.740188][ T4486] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4486 comm=syz.4.136 [ 49.753453][ T4482] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.765708][ T4478] bond0: (slave bond_slave_1): Releasing backup interface [ 49.775547][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.791452][ T4478] team0: Port device team_slave_0 removed [ 49.975207][ T4478] team0: Port device team_slave_1 removed [ 50.027374][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.034823][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.043698][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.055042][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.062527][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.213371][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 50.213385][ T29] audit: type=1400 audit(1751524873.379:635): avc: denied { sys_module } for pid=4491 comm="syz.2.137" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 50.225736][ T4509] netlink: 60 bytes leftover after parsing attributes in process `syz.3.138'. [ 50.253172][ T4496] loop2: detected capacity change from 0 to 512 [ 50.265202][ T4496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.278555][ T4496] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.285604][ T4496] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.137: bg 0: block 248: padding at end of block bitmap is not set [ 50.301492][ T4496] Quota error (device loop2): write_blk: dquota write failed [ 50.308982][ T4496] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 50.318954][ T4496] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.137: Failed to acquire dquot type 1 [ 50.331939][ T4496] EXT4-fs (loop2): 1 truncate cleaned up [ 50.338208][ T4496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.351732][ T4496] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz.2.137: deleted inode referenced: 12 [ 50.400802][ T29] audit: type=1400 audit(1751524873.569:636): avc: denied { setopt } for pid=4517 comm="syz.1.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 50.483242][ T29] audit: type=1326 audit(1751524873.639:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 50.539704][ T29] audit: type=1326 audit(1751524873.669:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 50.563017][ T29] audit: type=1326 audit(1751524873.669:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 50.586291][ T29] audit: type=1326 audit(1751524873.669:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 50.608039][ T4532] loop1: detected capacity change from 0 to 512 [ 50.609558][ T29] audit: type=1326 audit(1751524873.669:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 50.638942][ T29] audit: type=1326 audit(1751524873.669:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4513 comm="syz.4.141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 50.685966][ T4532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.713306][ T4543] loop4: detected capacity change from 0 to 4096 [ 50.732254][ T4532] EXT4-fs (loop1): orphan cleanup on readonly fs [ 50.733660][ T4543] loop4: detected capacity change from 0 to 1024 [ 50.746131][ T4543] ext4: Unknown parameter 'dont_appraise' [ 50.760598][ T4532] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.143: bg 0: block 248: padding at end of block bitmap is not set [ 50.815896][ T4532] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.143: Failed to acquire dquot type 1 [ 50.882723][ T4532] EXT4-fs (loop1): 1 truncate cleaned up [ 50.904864][ T4532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.926856][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.962316][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.079700][ T4571] loop1: detected capacity change from 0 to 1024 [ 51.400041][ T4595] loop1: detected capacity change from 0 to 512 [ 51.409292][ T4595] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.429864][ T4595] EXT4-fs (loop1): orphan cleanup on readonly fs [ 51.436720][ T4595] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.148: bg 0: block 248: padding at end of block bitmap is not set [ 51.453285][ T4595] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.148: Failed to acquire dquot type 1 [ 51.464969][ T4595] EXT4-fs (loop1): 1 truncate cleaned up [ 51.472044][ T4595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.507294][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.694523][ T4610] loop3: detected capacity change from 0 to 256 [ 51.705279][ T4613] loop2: detected capacity change from 0 to 128 [ 51.712917][ T4613] EXT4-fs: test_dummy_encryption option not supported [ 51.739892][ T4610] msdos: Unknown parameter 'dLts' [ 51.953574][ T4631] loop3: detected capacity change from 0 to 128 [ 51.960322][ T4631] EXT4-fs: test_dummy_encryption option not supported [ 52.044303][ T4634] loop2: detected capacity change from 0 to 512 [ 52.062018][ T4634] EXT4-fs: Ignoring removed oldalloc option [ 52.166345][ T4634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 52.249855][ T4634] EXT4-fs (loop2): orphan cleanup on readonly fs [ 52.310301][ T4634] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.152: Failed to acquire dquot type 1 [ 52.555242][ T4634] EXT4-fs (loop2): 1 truncate cleaned up [ 52.592189][ T4634] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.852044][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.972011][ T4664] loop2: detected capacity change from 0 to 128 [ 53.009317][ T4664] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.017209][ T4664] FAT-fs (loop2): Filesystem has been set read-only [ 53.072775][ T4664] bio_check_eod: 21413 callbacks suppressed [ 53.072789][ T4664] syz.2.154: attempt to access beyond end of device [ 53.072789][ T4664] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.150800][ T4664] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.158689][ T4664] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.219141][ T4672] syz.2.154: attempt to access beyond end of device [ 53.219141][ T4672] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.232582][ T4664] syz.2.154: attempt to access beyond end of device [ 53.232582][ T4664] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.247189][ T4672] syz.2.154: attempt to access beyond end of device [ 53.247189][ T4672] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.276268][ T4679] loop0: detected capacity change from 0 to 512 [ 53.284372][ T4664] syz.2.154: attempt to access beyond end of device [ 53.284372][ T4664] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.338688][ T4679] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.361547][ T4679] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.378017][ T4664] syz.2.154: attempt to access beyond end of device [ 53.378017][ T4664] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.398390][ T4679] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.155: bg 0: block 248: padding at end of block bitmap is not set [ 53.442949][ T4679] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.155: Failed to acquire dquot type 1 [ 53.468306][ T4672] syz.2.154: attempt to access beyond end of device [ 53.468306][ T4672] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.483045][ T4664] syz.2.154: attempt to access beyond end of device [ 53.483045][ T4664] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.497415][ T4664] syz.2.154: attempt to access beyond end of device [ 53.497415][ T4664] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.512757][ T4664] syz.2.154: attempt to access beyond end of device [ 53.512757][ T4664] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.528344][ T4679] EXT4-fs (loop0): 1 truncate cleaned up [ 53.546759][ T4679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.635554][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.702101][ T4685] loop0: detected capacity change from 0 to 4096 [ 54.085362][ T4694] loop1: detected capacity change from 0 to 1024 [ 54.100040][ T4694] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.134887][ T4692] netlink: 60 bytes leftover after parsing attributes in process `syz.4.160'. [ 54.159413][ T4700] loop2: detected capacity change from 0 to 256 [ 54.162267][ T4694] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #3: block 1: comm syz.1.159: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.187840][ T4700] FAT-fs (loop2): codepage cp1255 not found [ 54.198181][ T4694] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.159: Failed to acquire dquot type 0 [ 54.209194][ T4685] syzkaller0: entered promiscuous mode [ 54.210688][ T4694] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.159: Freeing blocks not in datazone - block = 0, count = 4096 [ 54.214873][ T4685] syzkaller0: entered allmulticast mode [ 54.229928][ T4694] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.159: Invalid inode bitmap blk 0 in block_group 0 [ 54.266889][ T41] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.273544][ T4694] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 54.292796][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 54.293407][ T4694] EXT4-fs (loop1): 1 orphan inode deleted [ 54.312831][ T4694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.462714][ T4694] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.159: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 54.541451][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.586636][ T4709] loop0: detected capacity change from 0 to 1024 [ 54.930678][ T4722] netlink: 60 bytes leftover after parsing attributes in process `syz.4.166'. [ 55.090088][ T4725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.167'. [ 55.104321][ T4725] netlink: 40 bytes leftover after parsing attributes in process `syz.4.167'. [ 55.146316][ T4728] loop4: detected capacity change from 0 to 1024 [ 55.221160][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 55.221173][ T29] audit: type=1326 audit(1751524878.389:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f22ff69e9b7 code=0x7ffc0000 [ 55.223824][ T4732] loop4: detected capacity change from 0 to 1024 [ 55.233514][ T29] audit: type=1326 audit(1751524878.389:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22ff69d290 code=0x7ffc0000 [ 55.280025][ T29] audit: type=1326 audit(1751524878.389:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22ff69e52b code=0x7ffc0000 [ 55.309663][ T29] audit: type=1326 audit(1751524878.469:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22ff69d58a code=0x7ffc0000 [ 55.332736][ T29] audit: type=1326 audit(1751524878.469:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22ff69d58a code=0x7ffc0000 [ 55.356193][ T29] audit: type=1326 audit(1751524878.469:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f22ff69d197 code=0x7ffc0000 [ 55.379405][ T29] audit: type=1326 audit(1751524878.469:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f22ff6a00ca code=0x7ffc0000 [ 55.402640][ T29] audit: type=1326 audit(1751524878.479:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f22ff69d290 code=0x7ffc0000 [ 55.425957][ T29] audit: type=1326 audit(1751524878.479:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f22ff69e52b code=0x7ffc0000 [ 55.438162][ T4735] loop0: detected capacity change from 0 to 1024 [ 55.449071][ T29] audit: type=1326 audit(1751524878.479:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f22ff69d58a code=0x7ffc0000 [ 55.526516][ T4735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.542973][ T4735] EXT4-fs (loop0): shut down requested (2) [ 55.551474][ T4735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 55.568644][ T4735] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 55.587696][ T4743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.172'. [ 55.676738][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.720601][ T4748] loop4: detected capacity change from 0 to 4096 [ 55.834250][ T4756] loop0: detected capacity change from 0 to 512 [ 55.937247][ T4756] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.988841][ T4756] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.995719][ T4756] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.175: bg 0: block 248: padding at end of block bitmap is not set [ 56.010833][ T4756] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.175: Failed to acquire dquot type 1 [ 56.023594][ T4756] EXT4-fs (loop0): 1 truncate cleaned up [ 56.156745][ T4760] wg2: entered promiscuous mode [ 56.161736][ T4760] wg2: entered allmulticast mode [ 56.447209][ T4761] syzkaller0: entered promiscuous mode [ 56.452719][ T4761] syzkaller0: entered allmulticast mode [ 56.731315][ T4756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.820097][ T4767] loop3: detected capacity change from 0 to 256 [ 56.982744][ T4768] netlink: 60 bytes leftover after parsing attributes in process `syz.4.178'. [ 57.018233][ T4767] FAT-fs (loop3): codepage cp1255 not found [ 57.109808][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.209420][ T4777] loop4: detected capacity change from 0 to 1024 [ 57.220388][ T4778] loop0: detected capacity change from 0 to 512 [ 57.228992][ T4777] EXT4-fs: Ignoring removed nobh option [ 57.250951][ T4778] EXT4-fs: Ignoring removed oldalloc option [ 57.262729][ T4778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.276904][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.302373][ T4778] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.324319][ T4777] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.180: Allocating blocks 385-513 which overlap fs metadata [ 57.340772][ T4778] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.179: Failed to acquire dquot type 1 [ 57.358984][ T4777] EXT4-fs (loop4): pa ffff8881007d50e0: logic 16, phys. 129, len 24 [ 57.366990][ T4777] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 57.377503][ T4778] EXT4-fs (loop0): 1 truncate cleaned up [ 57.410112][ T4778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.579081][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.615057][ T4786] loop2: detected capacity change from 0 to 1024 [ 57.645305][ T4789] loop4: detected capacity change from 0 to 1024 [ 57.964747][ T4800] loop4: detected capacity change from 0 to 512 [ 57.975906][ T4800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.986348][ T4800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.993413][ T4800] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.185: bg 0: block 248: padding at end of block bitmap is not set [ 58.013297][ T4800] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.185: Failed to acquire dquot type 1 [ 58.026449][ T4800] EXT4-fs (loop4): 1 truncate cleaned up [ 58.033050][ T4800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.046585][ T4800] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.185: deleted inode referenced: 12 [ 58.092544][ T4803] loop2: detected capacity change from 0 to 1024 [ 58.120538][ T4803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.135748][ T4803] EXT4-fs (loop2): shut down requested (2) [ 58.142993][ T4803] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.151929][ T4803] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 58.170799][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.282693][ T4810] loop2: detected capacity change from 0 to 512 [ 58.302866][ T4810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.312274][ T4810] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.333556][ T4810] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.187: bg 0: block 248: padding at end of block bitmap is not set [ 58.364260][ T4810] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.187: Failed to acquire dquot type 1 [ 58.394401][ T4810] EXT4-fs (loop2): 1 truncate cleaned up [ 58.731231][ T4819] loop1: detected capacity change from 0 to 512 [ 58.740377][ T4819] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.861981][ T4819] EXT4-fs (loop1): orphan cleanup on readonly fs [ 58.869526][ T4819] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.190: bg 0: block 248: padding at end of block bitmap is not set [ 58.889562][ T4819] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.190: Failed to acquire dquot type 1 [ 58.901993][ T4819] EXT4-fs (loop1): 1 truncate cleaned up [ 59.257805][ T4824] netlink: 60 bytes leftover after parsing attributes in process `syz.3.191'. [ 59.396635][ T4827] netlink: 76 bytes leftover after parsing attributes in process `syz.3.192'. [ 59.489428][ T4827] bridge_slave_0: left allmulticast mode [ 59.495172][ T4827] bridge_slave_0: left promiscuous mode [ 59.500829][ T4827] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.521100][ T4827] bridge_slave_1: left allmulticast mode [ 59.526763][ T4827] bridge_slave_1: left promiscuous mode [ 59.532526][ T4827] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.553229][ T4827] bond0: (slave bond_slave_0): Releasing backup interface [ 59.567644][ T4827] bond0: (slave bond_slave_1): Releasing backup interface [ 59.584484][ T4827] team0: Port device team_slave_0 removed [ 59.597242][ T4827] team0: Port device team_slave_1 removed [ 59.628935][ T4827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.636334][ T4827] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.660809][ T4827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.668268][ T4827] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.677704][ T4834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.686202][ T4834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.698664][ T4834] loop2: detected capacity change from 0 to 512 [ 59.706497][ T4834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.721053][ T4834] EXT4-fs (loop2): orphan cleanup on readonly fs [ 59.727834][ T4834] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.193: bg 0: block 248: padding at end of block bitmap is not set [ 59.743112][ T4834] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.193: Failed to acquire dquot type 1 [ 59.755100][ T4834] EXT4-fs (loop2): 1 truncate cleaned up [ 59.769749][ T4837] loop0: detected capacity change from 0 to 256 [ 59.783405][ T4837] msdos: Unknown parameter 'dLts' [ 60.044466][ T4841] loop0: detected capacity change from 0 to 128 [ 60.051326][ T4841] EXT4-fs: test_dummy_encryption option not supported [ 60.236833][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 60.236860][ T29] audit: type=1326 audit(1751524883.399:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcea0ae929 code=0x7ffc0000 [ 60.347786][ T4840] loop3: detected capacity change from 0 to 1024 [ 60.357814][ T29] audit: type=1326 audit(1751524883.439:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcea0ae929 code=0x7ffc0000 [ 60.381219][ T29] audit: type=1326 audit(1751524883.439:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efcea0ae929 code=0x7ffc0000 [ 60.404490][ T29] audit: type=1326 audit(1751524883.439:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcea0ae929 code=0x7ffc0000 [ 60.427820][ T29] audit: type=1326 audit(1751524883.439:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efcea0ae929 code=0x7ffc0000 [ 60.450975][ T29] audit: type=1326 audit(1751524883.439:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcea0ae929 code=0x7ffc0000 [ 60.474586][ T29] audit: type=1326 audit(1751524883.439:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efcea0ae929 code=0x7ffc0000 [ 60.498145][ T29] audit: type=1400 audit(1751524883.439:1016): avc: denied { read } for pid=4842 comm="syz.4.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.517256][ T29] audit: type=1326 audit(1751524883.449:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efcea0ae963 code=0x7ffc0000 [ 60.540445][ T29] audit: type=1326 audit(1751524883.449:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4839 comm="syz.3.196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efcea0ae963 code=0x7ffc0000 [ 60.828062][ T4846] loop4: detected capacity change from 0 to 256 [ 60.835736][ T4846] msdos: Unknown parameter 'dLts' [ 60.839093][ T4848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.197'. [ 61.384542][ T4852] loop4: detected capacity change from 0 to 128 [ 61.391214][ T4852] EXT4-fs: test_dummy_encryption option not supported [ 61.611869][ T4856] loop1: detected capacity change from 0 to 512 [ 61.619177][ T4856] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.646423][ T4856] EXT4-fs (loop1): orphan cleanup on readonly fs [ 61.654736][ T4856] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.200: bg 0: block 248: padding at end of block bitmap is not set [ 61.695043][ T4856] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.200: Failed to acquire dquot type 1 [ 61.706720][ T4856] EXT4-fs (loop1): 1 truncate cleaned up [ 61.926106][ T4866] loop3: detected capacity change from 0 to 512 [ 61.933380][ T4866] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.942763][ T4866] EXT4-fs (loop3): orphan cleanup on readonly fs [ 61.949987][ T4866] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.204: bg 0: block 248: padding at end of block bitmap is not set [ 61.966665][ T4866] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.204: Failed to acquire dquot type 1 [ 61.982469][ T4866] EXT4-fs (loop3): 1 truncate cleaned up [ 61.989609][ T4866] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.204: deleted inode referenced: 12 [ 62.602923][ T4872] loop1: detected capacity change from 0 to 1024 [ 62.609771][ T4872] EXT4-fs: Ignoring removed nobh option [ 62.654250][ T4872] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.202: Allocating blocks 385-513 which overlap fs metadata [ 62.700920][ T4872] EXT4-fs (loop1): pa ffff8881007d5150: logic 16, phys. 129, len 24 [ 62.708979][ T4872] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 62.732749][ T4880] loop0: detected capacity change from 0 to 128 [ 62.741145][ T4880] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 62.749107][ T4880] FAT-fs (loop0): Filesystem has been set read-only [ 62.763868][ T4880] bio_check_eod: 5738 callbacks suppressed [ 62.763881][ T4880] syz.0.207: attempt to access beyond end of device [ 62.763881][ T4880] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 62.789640][ T4880] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 62.797477][ T4880] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 62.808524][ T4885] syz.0.207: attempt to access beyond end of device [ 62.808524][ T4885] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.823059][ T4880] syz.0.207: attempt to access beyond end of device [ 62.823059][ T4880] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.845654][ T4880] syz.0.207: attempt to access beyond end of device [ 62.845654][ T4880] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.895414][ T4887] loop1: detected capacity change from 0 to 1024 [ 62.895763][ T4885] syz.0.207: attempt to access beyond end of device [ 62.895763][ T4885] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.938554][ T4880] syz.0.207: attempt to access beyond end of device [ 62.938554][ T4880] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 62.978896][ T4885] syz.0.207: attempt to access beyond end of device [ 62.978896][ T4885] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.018872][ T4880] syz.0.207: attempt to access beyond end of device [ 63.018872][ T4880] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.043525][ T4885] syz.0.207: attempt to access beyond end of device [ 63.043525][ T4885] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.057879][ T4880] syz.0.207: attempt to access beyond end of device [ 63.057879][ T4880] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.606579][ T4902] netlink: 60 bytes leftover after parsing attributes in process `syz.2.212'. [ 63.830306][ T4905] wg2: entered promiscuous mode [ 63.835495][ T4905] wg2: entered allmulticast mode [ 63.879669][ T4912] loop3: detected capacity change from 0 to 256 [ 63.900671][ T4912] msdos: Unknown parameter 'dLts' [ 63.909461][ T4914] loop2: detected capacity change from 0 to 512 [ 63.917076][ T4914] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.971136][ T4908] loop0: detected capacity change from 0 to 1024 [ 64.004751][ T4914] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.011808][ T4914] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.215: bg 0: block 248: padding at end of block bitmap is not set [ 64.026511][ T4914] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.215: Failed to acquire dquot type 1 [ 64.039167][ T4914] EXT4-fs (loop2): 1 truncate cleaned up [ 64.115930][ T4917] loop3: detected capacity change from 0 to 128 [ 64.122639][ T4917] EXT4-fs: test_dummy_encryption option not supported [ 64.969572][ T4928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.219'. [ 65.014393][ T4929] netlink: 60 bytes leftover after parsing attributes in process `syz.1.218'. [ 65.067291][ T4932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.219'. [ 65.099845][ T4934] netlink: 60 bytes leftover after parsing attributes in process `syz.4.220'. [ 65.437473][ T4943] loop0: detected capacity change from 0 to 512 [ 65.447979][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 65.447991][ T29] audit: type=1326 audit(1751524888.609:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 65.477428][ T29] audit: type=1326 audit(1751524888.609:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22ff69e963 code=0x7ffc0000 [ 65.500545][ T29] audit: type=1326 audit(1751524888.609:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22ff69e963 code=0x7ffc0000 [ 65.523726][ T29] audit: type=1326 audit(1751524888.609:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 65.598282][ T4943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.647353][ T4941] loop4: detected capacity change from 0 to 1024 [ 65.666568][ T4943] EXT4-fs (loop0): orphan cleanup on readonly fs [ 65.674693][ T4943] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.221: bg 0: block 248: padding at end of block bitmap is not set [ 65.731750][ T4943] Quota error (device loop0): write_blk: dquota write failed [ 65.739166][ T4943] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 65.749079][ T4943] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.221: Failed to acquire dquot type 1 [ 65.775652][ T4943] EXT4-fs (loop0): 1 truncate cleaned up [ 65.953045][ T4953] hub 6-0:1.0: USB hub found [ 65.974597][ T4953] hub 6-0:1.0: 8 ports detected [ 66.066368][ T29] audit: type=1326 audit(1751524888.739:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 66.089733][ T29] audit: type=1326 audit(1751524888.749:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 66.113029][ T29] audit: type=1326 audit(1751524888.749:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 66.136390][ T29] audit: type=1326 audit(1751524888.749:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4940 comm="syz.4.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22ff69e929 code=0x7ffc0000 [ 66.163489][ T4943] EXT4-fs mount: 16 callbacks suppressed [ 66.163502][ T4943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.555063][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.629637][ T4977] loop0: detected capacity change from 0 to 1024 [ 66.637168][ T4974] loop3: detected capacity change from 0 to 512 [ 66.644654][ T4977] EXT4-fs: Ignoring removed nobh option [ 66.652082][ T4974] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.662145][ T4974] EXT4-fs (loop3): orphan cleanup on readonly fs [ 66.671320][ T4977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.689812][ T4974] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.229: bg 0: block 248: padding at end of block bitmap is not set [ 66.724816][ T4977] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.228: Allocating blocks 385-513 which overlap fs metadata [ 66.743511][ T4974] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.229: Failed to acquire dquot type 1 [ 66.756424][ T4974] EXT4-fs (loop3): 1 truncate cleaned up [ 66.767442][ T4974] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.810929][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.841014][ T4993] EXT4-fs (loop0): pa ffff888106a71690: logic 16, phys. 129, len 24 [ 66.849050][ T4993] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 66.924823][ T4996] loop3: detected capacity change from 0 to 1024 [ 67.381690][ T5028] loop3: detected capacity change from 0 to 1024 [ 67.405794][ T5028] EXT4-fs: Ignoring removed nobh option [ 67.439446][ T5028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.474811][ T5028] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.232: Allocating blocks 385-513 which overlap fs metadata [ 67.571193][ T5042] EXT4-fs (loop3): pa ffff8881007d51c0: logic 16, phys. 129, len 24 [ 67.579270][ T5042] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 67.871790][ T5085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.910555][ T5085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.942753][ T5085] loop4: detected capacity change from 0 to 512 [ 67.987980][ T5085] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.028317][ T5085] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.039750][ T5085] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.234: bg 0: block 248: padding at end of block bitmap is not set [ 68.064254][ T5085] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.234: Failed to acquire dquot type 1 [ 68.086047][ T5085] EXT4-fs (loop4): 1 truncate cleaned up [ 68.113428][ T5085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.223651][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.235109][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.647200][ T5126] loop0: detected capacity change from 0 to 512 [ 68.654278][ T2994] ================================================================== [ 68.662356][ T2994] BUG: KCSAN: data-race in set_nlink / set_nlink [ 68.668673][ T2994] [ 68.670993][ T2994] read to 0xffff8881069cdd28 of 4 bytes by task 3826 on cpu 0: [ 68.678528][ T2994] set_nlink+0x29/0xb0 [ 68.682586][ T2994] kernfs_iop_permission+0x1e2/0x220 [ 68.687867][ T2994] inode_permission+0x1ca/0x310 [ 68.692720][ T2994] link_path_walk+0x162/0x900 [ 68.697396][ T2994] path_openat+0x1de/0x2170 [ 68.701897][ T2994] do_filp_open+0x109/0x230 [ 68.706404][ T2994] do_sys_openat2+0xa6/0x110 [ 68.710992][ T2994] __x64_sys_openat+0xf2/0x120 [ 68.715754][ T2994] x64_sys_call+0x1af/0x2fb0 [ 68.720348][ T2994] do_syscall_64+0xd2/0x200 [ 68.724847][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.730736][ T2994] [ 68.733055][ T2994] write to 0xffff8881069cdd28 of 4 bytes by task 2994 on cpu 1: [ 68.740668][ T2994] set_nlink+0x99/0xb0 [ 68.744734][ T2994] kernfs_iop_permission+0x1e2/0x220 [ 68.750019][ T2994] inode_permission+0x1ca/0x310 [ 68.754866][ T2994] link_path_walk+0x162/0x900 [ 68.759533][ T2994] path_lookupat+0x63/0x2a0 [ 68.764027][ T2994] filename_lookup+0x147/0x340 [ 68.768780][ T2994] vfs_statx+0x9d/0x390 [ 68.772921][ T2994] vfs_fstatat+0x115/0x170 [ 68.777324][ T2994] __se_sys_newfstatat+0x55/0x260 [ 68.782336][ T2994] __x64_sys_newfstatat+0x55/0x70 [ 68.787349][ T2994] x64_sys_call+0x2c22/0x2fb0 [ 68.792017][ T2994] do_syscall_64+0xd2/0x200 [ 68.796506][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.802386][ T2994] [ 68.804694][ T2994] value changed: 0x00000008 -> 0x00000009 [ 68.810393][ T2994] [ 68.812697][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 68.818844][ T2994] CPU: 1 UID: 0 PID: 2994 Comm: udevd Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(voluntary) [ 68.830804][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.840844][ T2994] ================================================================== [ 68.853587][ T5126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 68.871505][ T5126] EXT4-fs (loop0): orphan cleanup on readonly fs [ 68.883904][ T5126] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.237: bg 0: block 248: padding at end of block bitmap is not set [ 68.906040][ T5126] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.237: Failed to acquire dquot type 1 [ 69.068622][ T5126] EXT4-fs (loop0): 1 truncate cleaned up [ 69.170602][ T5126] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 69.216353][ T5126] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz.0.237: deleted inode referenced: 12 [ 69.438549][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.654609][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.