last executing test programs: 2.087743179s ago: executing program 0 (id=194): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000500000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000251e6f5ed462840c62f7991069cb60c3f588"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000001740)={'gre0\x00', 0x0, 0xb2bbc2437eb8eb41, 0x26, 0x6, 0x3, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x64, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x86, 0x4, "9842"}, @timestamp_addr={0x44, 0x34, 0xe1, 0x1, 0xd, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x800}, {@empty, 0x7}, {@remote, 0x80000000}, {@multicast1, 0x9}, {@local, 0xacf}]}, @cipso={0x86, 0xe, 0x3, [{0x2, 0x4, "6d10"}, {0x6, 0x4, "d741"}]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) r3 = socket(0x28, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80c1) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unshare(0x2c020400) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r3, 0x5) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.83346529s ago: executing program 1 (id=201): r0 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000100)) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="d00000000002010400000000000000000a000000440001802c00018014000300fe80000000000000000000000000002014000400fe80000000000000000000000000002f0c000280e0fe01009800feff05000340000200003c0003800c00028005000100890000002c00018014000300fe80000000000000000000000000002a14000400fe8800000000000000000000000001013c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000020c000280050001"], 0xd0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x8}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x1ffffffffffffffd}, 0x18) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001500)={'vxcan0\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000001540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r8, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) write$selinux_access(r5, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6870647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x7}, 0x18) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000080)={r11, 0x3, r10, 0x5}) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001002bbd7000fb1fdf250a80"], 0x24}}, 0x20048800) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) r13 = dup2(r12, r12) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r13, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000004080102000000000000000002000005060002408808000005000300ff"], 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x4080) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000840)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) 1.808689241s ago: executing program 3 (id=203): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) execve(0x0, 0x0, 0x0) (fail_nth: 4) 1.324685103s ago: executing program 3 (id=206): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 1.259888465s ago: executing program 3 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) getresuid(&(0x7f0000001540), &(0x7f0000001580)=0x0, &(0x7f00000015c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001600)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private0, 0x4e23, 0xada5, 0x4e21, 0x9, 0xa, 0x120, 0x60, 0x89, 0x0, r2}, {0x663, 0xad, 0x3, 0x0, 0x0, 0x2, 0x1, 0x3}, {0x81, 0x7, 0x9, 0x2}, 0x7, 0x6e6bb5, 0x0, 0x68b8aa2db91be2a6, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d4, 0x32}, 0x2, @in6=@private1, 0x0, 0x1, 0x3, 0xa, 0x364, 0x9, 0x8}}, 0xe8) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r2, &(0x7f0000000040)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfae21000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/183, 0xb7}}, 0x10) io_setup(0x4, &(0x7f0000000140)) 1.15768249s ago: executing program 2 (id=210): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESHEX=r1], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchown(0xffffffffffffffff, 0x0, 0xee01) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x34, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000040) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000300)={[{@nodelalloc}, {@bh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@barrier}, {@noload}, {@nogrpid}]}, 0x1, 0x5ae, &(0x7f0000000780)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r4, 0x0, 0x0, 0x7) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000000)={0xfffffc64, 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d30101b080d29558f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000200)='GPL\x00', 0x10fff, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001040)=ANY=[@ANYBLOB="180000000000db78a5c5457deabbfc05add4d21d5ecd010000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x4, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1}, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.126034451s ago: executing program 0 (id=211): r0 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, r0, 0x42d, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 1.099698642s ago: executing program 0 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x14885, 0x10000, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x4000, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e030000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RREADDIR(r7, &(0x7f00000000c0)={0x49, 0x29, 0x1, {0xfff, [{{0x9}, 0xa6f, 0xff, 0x7, './file0'}, {{0x80, 0x3}, 0x9, 0x15, 0x7, './file0'}]}}, 0x49) 1.001874776s ago: executing program 0 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0xa}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x5}], 0x1, 0x10000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") socket$inet(0x2, 0x4000000000000001, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x9, 0x7fff0000}]}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448cb, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r5 = epoll_create1(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x8}) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 918.97475ms ago: executing program 2 (id=215): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/101, 0x65, 0x1, &(0x7f0000000500)=""/253, 0xfd}, &(0x7f0000000740)=0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x411, &(0x7f00000000c0), 0x1, 0x623, &(0x7f0000002f00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0) 785.921786ms ago: executing program 4 (id=216): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010029bd7000fcdbdf25210000000800", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x4}, 0xb3}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 689.45949ms ago: executing program 2 (id=217): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='./file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000540)) 621.863683ms ago: executing program 4 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) syz_io_uring_setup(0x544d, 0x0, 0x0, &(0x7f0000000000)) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) 544.469736ms ago: executing program 1 (id=219): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 543.800776ms ago: executing program 1 (id=220): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 543.287186ms ago: executing program 4 (id=221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25210000000800", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 528.354957ms ago: executing program 1 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000500000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000251e6f5ed462840c62f7991069cb60c3f588"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000001740)={'gre0\x00', 0x0, 0xb2bbc2437eb8eb41, 0x26, 0x6, 0x3, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x64, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x86, 0x4, "9842"}, @timestamp_addr={0x44, 0x34, 0xe1, 0x1, 0xd, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x800}, {@empty, 0x7}, {@remote, 0x80000000}, {@multicast1, 0x9}, {@local, 0xacf}]}, @cipso={0x86, 0xe, 0x3, [{0x2, 0x4, "6d10"}, {0x6, 0x4, "d741"}]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) r3 = socket(0x28, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80c1) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unshare(0x2c020400) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r3, 0x5) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 479.872609ms ago: executing program 4 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) (async) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) setsockopt(r4, 0x3, 0x4, &(0x7f0000000180)="b429a2c3df597cbd7851c0f731469bb8883835c05e53b558ec48a258a90d17e0d8250f92454c3a3329727179a2fb7dad13b942dcdd280f3f710004a5e5fc9e850d31687a62bd30bee6acdb672b0434314b7e90b9db4c67ef7959022c46d4ec14a347af41b75738febe94c4b791237edc408cbf892e14f50aa4ae7e645b3fc55043cbfc6248f6b0e755051e120f", 0x8d) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x603f) 460.12757ms ago: executing program 1 (id=224): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000001c0)={r1, 0x8000}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000040)='zonefs\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xee00, 0xee00, 0x0) r7 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000640)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000500)=@IORING_OP_MKDIRAT={0x25, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1f, 0x0, 0xf9b7a26b18f77d51}) io_uring_enter(r7, 0x627, 0x4c1, 0x43, 0x0, 0x0) 401.763943ms ago: executing program 4 (id=225): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) set_mempolicy(0x4005, 0x0, 0x9) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioperm(0x0, 0xd, 0x4000000000000020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x523, &(0x7f0000000c00)="$eJzs3c9vHFcdAPDvTLK2k7h1WnoABG1oCwFFWceb1qp6gHJCCFVC9AgiNfbGsrzrtbzrUptIuGeuSFTiBEf+AM49ceeC4MalHJD4YYFqJA5TzezY2di79qaJvZb385FG89688X7fizPvzbxd7wtgbN2IiJ2ImIiIdyNipjyelFu81d3y8z7ZfbC4t/tgMYkse+dfSVGeH4uen8ldK19zKiJ+8J2InyRH47a3tlcXGo36Rpmf7TTXZ9tb27dXmgvL9eX6Wq02Pzd/5427r9ceozVTx5a+1JwoU1/++I873/hZXq3p8khvO56mbtMrB3FylyPie6cRbAQule2ZGHVF+EzSiHg+Il4urv+ZuFT8NgGAiyzLZiKb6c0DABddWsyBJWm1nAuYjjStVrtzeC/E1bTRandu3W9tri1158quRyW9v9Ko3ynnCq9HJcnzc0X6Yb52KH83Ip6LiF9OXiny1cVWY2mUNz4AMMauHRr//zvZHf8BgAvu+I/NAAAXkfEfAMaP8R8Axo/xHwDGT3f8v/K4P5Zl2c9PozoAwBnw/A8A48f4DwBj5ftvv51v2V75/ddL721trrbeu71Ub69Wm5uL1cXWxnp1udVaLr6zp3nS6zVarfW512Lz/evfXG93Zttb2/earc21zr3ie73v1SvFWTtn0DIAYJDnXvroL0k+Ir95pdiiZy2HykhrBpy2dNQVAEbm0qgrAIyM1b5gfD18xn/sDwGYHoALos8SvY+Y6vcHQlmWZadXJeCU3fyC+X8YVz3z/z4FDGPmpPn/Ym1gbxLChWT+H8ZXliXDrvkfw54IAJxvx8zxXz/L+xBgdAa8//98uf9d+ebAj5YOn/HhadYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrf99X+r5TK/05Gm1WrEM8UCQJXk/kqjficino2IP09WJvP83IjrDAA8qfTvSbn+182ZV6cfKXrx2kFyIiJ++ut3fvX+Qqez8aeIieTfk/vHOx+Wx2snBps6jRYAAMfbH6eLfc+D/Ce7Dxb3t7Oszz++3b0ryOPu7U7E3kH8y3G52E9FJSKu/icp811Jz9zFk9j5ICI+36/9SUwXcyDdW5bD8fPYz5xp/PSR+Gm5QHNa/lt87inUBcbNR3n/81a/6y+NG8W+//U/VfRQT67s//KXWtwr+sCH8ff7v0sD+r8bw8Z47Q/f7aauHC37IOKLlyP2Y+/19D/78ZMB8V8dMv5fv/Tiy4PKst9E3Iz+8XtjzXaa67Ptre3bK82F5fpyfa1Wm5+bv/PG3ddrs8Uc9ezg0eCfb956dlBZ3v6rA+JPndD+rw7Z/t/+/90ffuWY+F9/pV/8NF44Jn4+Jn5tyPgLV38/8Lk7j790tP3JML//W0PG//hv20eWDQcARqe9tb260GjUNyTGNPHjOBfVGC6R/5c9B9Xom/jWWcWaiP5Fv3ile00fKsqyzxRrUI/xNGbdgPPg4KKPiP+NujIAAAAAAAAAAAAAAEBfZ/EXS6NuIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABfXpwEAAP//+E3TQw==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) r4 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) 381.602024ms ago: executing program 2 (id=226): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 316.166776ms ago: executing program 3 (id=227): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="7c010000", @ANYRES16=r3, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20008880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000002c0)=[{r5, 0x2}], 0x1, 0xfa) r6 = dup2(r4, r5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44080) r7 = io_uring_setup(0x42a5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r6) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90d880}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x58, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x404c081}, 0x1) r9 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) sendmsg$kcm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000240)="e1", 0x1}], 0x1}, 0x4000004) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r6) r10 = syz_io_uring_setup(0x10f, &(0x7f0000000580)={0x0, 0xd736, 0x1000, 0x1, 0x2bf}, &(0x7f00000001c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x1, 0x2007, @fd_index=0x1, 0x5, 0x0, 0x0, 0x4, 0x0, {0x1}}) io_uring_enter(r10, 0x1b96, 0x106a, 0x22, 0x0, 0x0) 228.32554ms ago: executing program 2 (id=228): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x12, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/101, 0x65, 0x1, &(0x7f0000000500)=""/253, 0xfd}, &(0x7f0000000740)=0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x411, &(0x7f00000000c0), 0x1, 0x623, &(0x7f0000002f00)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x1d, 0x3, @private=0xa010102, @local}}}}}}, 0x0) 199.768531ms ago: executing program 1 (id=229): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010029bd7000fcdbdf25210000000800", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000010000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x0, 'veth1_to_batadv\x00', {0x4}, 0xb3}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 146.051084ms ago: executing program 0 (id=230): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000140)="b9ff03076003008cd4aa9c18ed", 0x0, 0xfe5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 82.892926ms ago: executing program 4 (id=231): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r2 = socket$inet(0x2, 0x800, 0xfffffffa) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r2, &(0x7f0000000540)='v', 0x1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/4097, 0x1001}, 0x9}], 0x1, 0x40002180, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000250270a177b50000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000300)=@md0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00', 0x800005}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x80000}, 0x100}) close(r1) 72.797077ms ago: executing program 0 (id=232): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 5.80584ms ago: executing program 3 (id=233): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.74964ms ago: executing program 2 (id=234): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf25210000000800", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 0s ago: executing program 3 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000500000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000001ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000251e6f5ed462840c62f7991069cb60c3f588"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'erspan0\x00', &(0x7f0000001740)={'gre0\x00', 0x0, 0xb2bbc2437eb8eb41, 0x26, 0x6, 0x3, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x64, 0x0, 0xe, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@generic={0x86, 0x4, "9842"}, @timestamp_addr={0x44, 0x34, 0xe1, 0x1, 0xd, [{@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x800}, {@empty, 0x7}, {@remote, 0x80000000}, {@multicast1, 0x9}, {@local, 0xacf}]}, @cipso={0x86, 0xe, 0x3, [{0x2, 0x4, "6d10"}, {0x6, 0x4, "d741"}]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000017c0)=0xffffffffffffffff, 0x4) r3 = socket(0x28, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80c1) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) unshare(0x2c020400) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r3, 0x5) r5 = socket(0x28, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. [ 27.281010][ T29] audit: type=1400 audit(1764617676.297:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.304186][ T29] audit: type=1400 audit(1764617676.317:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.305102][ T3301] cgroup: Unknown subsys name 'net' [ 27.332043][ T29] audit: type=1400 audit(1764617676.347:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.434844][ T3301] cgroup: Unknown subsys name 'cpuset' [ 27.441191][ T3301] cgroup: Unknown subsys name 'rlimit' [ 27.553707][ T29] audit: type=1400 audit(1764617676.567:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.578391][ T29] audit: type=1400 audit(1764617676.577:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.599134][ T29] audit: type=1400 audit(1764617676.577:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.607752][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.619532][ T29] audit: type=1400 audit(1764617676.577:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.648486][ T29] audit: type=1400 audit(1764617676.577:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.661864][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.673768][ T29] audit: type=1400 audit(1764617676.577:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.705818][ T29] audit: type=1400 audit(1764617676.657:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.945079][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.042809][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 30.066731][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.073948][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.081207][ T3312] bridge_slave_0: entered allmulticast mode [ 30.087859][ T3312] bridge_slave_0: entered promiscuous mode [ 30.101871][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 30.116803][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.125642][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.132810][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.139991][ T3312] bridge_slave_1: entered allmulticast mode [ 30.146581][ T3312] bridge_slave_1: entered promiscuous mode [ 30.188159][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.206157][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 30.215959][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.283197][ T3312] team0: Port device team_slave_0 added [ 30.289996][ T3312] team0: Port device team_slave_1 added [ 30.295808][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.302869][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.310108][ T3317] bridge_slave_0: entered allmulticast mode [ 30.316568][ T3317] bridge_slave_0: entered promiscuous mode [ 30.345313][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.352497][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.359663][ T3317] bridge_slave_1: entered allmulticast mode [ 30.366132][ T3317] bridge_slave_1: entered promiscuous mode [ 30.377378][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.384545][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.391686][ T3319] bridge_slave_0: entered allmulticast mode [ 30.398304][ T3319] bridge_slave_0: entered promiscuous mode [ 30.412642][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.419735][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.445686][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.461818][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.469017][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.476236][ T3319] bridge_slave_1: entered allmulticast mode [ 30.482554][ T3319] bridge_slave_1: entered promiscuous mode [ 30.492040][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.499213][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.506399][ T3313] bridge_slave_0: entered allmulticast mode [ 30.512768][ T3313] bridge_slave_0: entered promiscuous mode [ 30.519395][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.526394][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.552409][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.567169][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.586478][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.593554][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.600788][ T3313] bridge_slave_1: entered allmulticast mode [ 30.607332][ T3313] bridge_slave_1: entered promiscuous mode [ 30.620886][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.639917][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.647094][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.654355][ T3321] bridge_slave_0: entered allmulticast mode [ 30.660681][ T3321] bridge_slave_0: entered promiscuous mode [ 30.678855][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.693810][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.700987][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.708185][ T3321] bridge_slave_1: entered allmulticast mode [ 30.714733][ T3321] bridge_slave_1: entered promiscuous mode [ 30.721994][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.741991][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.756970][ T3317] team0: Port device team_slave_0 added [ 30.763770][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.773614][ T3317] team0: Port device team_slave_1 added [ 30.791545][ T3312] hsr_slave_0: entered promiscuous mode [ 30.797577][ T3312] hsr_slave_1: entered promiscuous mode [ 30.825299][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.835647][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.845397][ T3319] team0: Port device team_slave_0 added [ 30.856442][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.863554][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.889474][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.900700][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.907701][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.933771][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.950014][ T3319] team0: Port device team_slave_1 added [ 30.956576][ T3313] team0: Port device team_slave_0 added [ 30.987037][ T3313] team0: Port device team_slave_1 added [ 30.993372][ T3321] team0: Port device team_slave_0 added [ 31.005453][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.012439][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.038370][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.060213][ T3321] team0: Port device team_slave_1 added [ 31.076744][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.083799][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.109739][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.137387][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.144415][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.170459][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.182127][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.189205][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.215298][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.228783][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.235839][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.261893][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.279961][ T3317] hsr_slave_0: entered promiscuous mode [ 31.286349][ T3317] hsr_slave_1: entered promiscuous mode [ 31.292341][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 31.298125][ T3317] Cannot create hsr debugfs directory [ 31.309678][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.316717][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.343050][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.366757][ T3319] hsr_slave_0: entered promiscuous mode [ 31.372795][ T3319] hsr_slave_1: entered promiscuous mode [ 31.378738][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 31.384504][ T3319] Cannot create hsr debugfs directory [ 31.463703][ T3321] hsr_slave_0: entered promiscuous mode [ 31.469793][ T3321] hsr_slave_1: entered promiscuous mode [ 31.475960][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 31.481703][ T3321] Cannot create hsr debugfs directory [ 31.495053][ T3313] hsr_slave_0: entered promiscuous mode [ 31.501096][ T3313] hsr_slave_1: entered promiscuous mode [ 31.507037][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 31.512788][ T3313] Cannot create hsr debugfs directory [ 31.645377][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.663606][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.681565][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.690422][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.714382][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.731040][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.744474][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.753281][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.780165][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.789461][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.799093][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.808437][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.848538][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.865859][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.874953][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.895312][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.909721][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.916735][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.938909][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.950636][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.965447][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.974826][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.981872][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.991313][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.005068][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.012151][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.025576][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.032746][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.050149][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.057279][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.087907][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.095045][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.131251][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.140231][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.153282][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.184421][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.200019][ T2076] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.207292][ T2076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.216527][ T2076] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.223678][ T2076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.257458][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.267625][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.283980][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.291128][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.309151][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.316279][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.333624][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.350667][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.361137][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.382176][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.389354][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.416891][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.424159][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.438581][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.465005][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.475711][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.486276][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.521500][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.552295][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.601728][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.682208][ T3312] veth0_vlan: entered promiscuous mode [ 32.705895][ T3317] veth0_vlan: entered promiscuous mode [ 32.722658][ T3319] veth0_vlan: entered promiscuous mode [ 32.731186][ T3312] veth1_vlan: entered promiscuous mode [ 32.747498][ T3317] veth1_vlan: entered promiscuous mode [ 32.759379][ T3319] veth1_vlan: entered promiscuous mode [ 32.786039][ T3313] veth0_vlan: entered promiscuous mode [ 32.795323][ T3312] veth0_macvtap: entered promiscuous mode [ 32.810039][ T3317] veth0_macvtap: entered promiscuous mode [ 32.822194][ T3319] veth0_macvtap: entered promiscuous mode [ 32.831433][ T3313] veth1_vlan: entered promiscuous mode [ 32.838931][ T3312] veth1_macvtap: entered promiscuous mode [ 32.846844][ T3317] veth1_macvtap: entered promiscuous mode [ 32.856109][ T3319] veth1_macvtap: entered promiscuous mode [ 32.867867][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.878570][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.887068][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.910715][ T3321] veth0_vlan: entered promiscuous mode [ 32.919796][ T784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.931185][ T3321] veth1_vlan: entered promiscuous mode [ 32.938919][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.947734][ T784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.957344][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.964799][ T784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.978838][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.992910][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.006659][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.019140][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.035718][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.047028][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.047041][ T29] audit: type=1400 audit(1764617682.067:81): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.ofCLw4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.079521][ T29] audit: type=1400 audit(1764617682.087:82): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.080315][ T3321] veth0_macvtap: entered promiscuous mode [ 33.101677][ T29] audit: type=1400 audit(1764617682.087:83): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.ofCLw4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.112458][ T3321] veth1_macvtap: entered promiscuous mode [ 33.132524][ T29] audit: type=1400 audit(1764617682.087:84): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.145101][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.160014][ T29] audit: type=1400 audit(1764617682.087:85): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.ofCLw4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.167607][ T3313] veth0_macvtap: entered promiscuous mode [ 33.194152][ T29] audit: type=1400 audit(1764617682.087:86): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/root/syzkaller.ofCLw4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.203028][ T3313] veth1_macvtap: entered promiscuous mode [ 33.227150][ T29] audit: type=1400 audit(1764617682.087:87): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.239541][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.261661][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.272053][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.280314][ T29] audit: type=1400 audit(1764617682.297:88): avc: denied { mounton } for pid=3312 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.298918][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.303545][ T29] audit: type=1400 audit(1764617682.297:89): avc: denied { mount } for pid=3312 comm="syz-executor" name="/" dev="gadgetfs" ino=4744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.336156][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.352466][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.377145][ T29] audit: type=1400 audit(1764617682.387:90): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.405472][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.434341][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.443425][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.460111][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.511643][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.537626][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.574233][ T3495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 33.599001][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.631884][ T3499] loop4: detected capacity change from 0 to 128 [ 33.662955][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.687192][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.705432][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.708579][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.881696][ T3501] netlink: 176 bytes leftover after parsing attributes in process `syz.4.7'. [ 33.918742][ T3505] loop3: detected capacity change from 0 to 512 [ 33.937055][ T3505] ======================================================= [ 33.937055][ T3505] WARNING: The mand mount option has been deprecated and [ 33.937055][ T3505] and is ignored by this kernel. Remove the mand [ 33.937055][ T3505] option from the mount to silence this warning. [ 33.937055][ T3505] ======================================================= [ 34.027443][ T3505] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.9: bg 0: block 5: invalid block bitmap [ 34.059856][ T3505] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 34.070019][ T3505] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.9: invalid indirect mapped block 3 (level 2) [ 34.105790][ T3505] EXT4-fs (loop3): 2 truncates cleaned up [ 34.119759][ T3505] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.206432][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.249725][ T3527] loop0: detected capacity change from 0 to 1024 [ 34.262047][ T3531] loop3: detected capacity change from 0 to 1024 [ 34.269513][ T3527] EXT4-fs: inline encryption not supported [ 34.294761][ T3531] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 34.304629][ T3531] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 34.316741][ T3531] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.320163][ T3527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.334849][ T3531] EXT4-fs (loop3): journal inode is deleted [ 34.397223][ T3531] syz_tun: entered allmulticast mode [ 34.403828][ T3530] syz_tun: left allmulticast mode [ 34.415251][ T3527] netlink: 104 bytes leftover after parsing attributes in process `syz.0.19'. [ 34.480638][ T3542] Zero length message leads to an empty skb [ 34.572480][ T3548] loop2: detected capacity change from 0 to 128 [ 34.640411][ T3554] loop3: detected capacity change from 0 to 512 [ 34.647743][ T3554] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.28: bg 0: block 5: invalid block bitmap [ 34.647998][ T3554] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 34.648282][ T3554] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.28: invalid indirect mapped block 3 (level 2) [ 34.648554][ T3554] EXT4-fs (loop3): 2 truncates cleaned up [ 34.656501][ T3554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.690738][ T3556] netlink: 176 bytes leftover after parsing attributes in process `syz.2.25'. [ 34.756584][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.798539][ T3560] loop4: detected capacity change from 0 to 512 [ 34.819169][ T3564] loop1: detected capacity change from 0 to 128 [ 34.824242][ T3560] EXT4-fs: Ignoring removed i_version option [ 34.826191][ T3564] EXT4-fs: Ignoring removed nobh option [ 34.831488][ T3560] EXT4-fs: Ignoring removed bh option [ 34.857008][ T3564] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.876252][ T3564] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.888902][ T3560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.911251][ T3571] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.913136][ T3560] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.008898][ T3004] udevd[3004]: worker [3507] terminated by signal 33 (Unknown signal 33) [ 35.018596][ T3004] udevd[3004]: worker [3507] failed while handling '/devices/virtual/block/loop2' [ 35.029412][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.061757][ T3589] loop3: detected capacity change from 0 to 512 [ 35.095180][ T3589] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.39: bg 0: block 5: invalid block bitmap [ 35.116604][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.116912][ T3589] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 35.142014][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.188117][ T3589] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.39: invalid indirect mapped block 3 (level 2) [ 35.205141][ T3589] EXT4-fs (loop3): 2 truncates cleaned up [ 35.211338][ T3589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.240413][ T3606] loop0: detected capacity change from 0 to 1024 [ 35.248180][ T3606] EXT4-fs: Ignoring removed orlov option [ 35.261107][ T3606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.277969][ T3614] loop2: detected capacity change from 0 to 512 [ 35.281579][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.285009][ T3614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.301178][ T3614] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.314470][ T3614] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.340262][ T3614] EXT4-fs (loop2): 1 truncate cleaned up [ 35.369506][ T3622] FAULT_INJECTION: forcing a failure. [ 35.369506][ T3622] name failslab, interval 1, probability 0, space 0, times 1 [ 35.382255][ T3622] CPU: 0 UID: 0 PID: 3622 Comm: syz.3.43 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.382288][ T3622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 35.382354][ T3622] Call Trace: [ 35.382363][ T3622] [ 35.382374][ T3622] __dump_stack+0x1d/0x30 [ 35.382401][ T3622] dump_stack_lvl+0xe8/0x140 [ 35.382422][ T3622] dump_stack+0x15/0x1b [ 35.382439][ T3622] should_fail_ex+0x265/0x280 [ 35.382457][ T3622] should_failslab+0x8c/0xb0 [ 35.382572][ T3622] kmem_cache_alloc_noprof+0x50/0x480 [ 35.382609][ T3622] ? radix_tree_node_alloc+0x8a/0x1f0 [ 35.382708][ T3622] radix_tree_node_alloc+0x8a/0x1f0 [ 35.382748][ T3622] ? multiq_tune+0x4c1/0x840 [ 35.382769][ T3622] ? multiq_init+0x17c/0x1a0 [ 35.382800][ T3622] idr_get_free+0x1fa/0x550 [ 35.382846][ T3622] idr_alloc_u32+0xca/0x180 [ 35.382876][ T3622] basic_change+0x273/0x840 [ 35.383012][ T3622] ? __pfx_basic_change+0x10/0x10 [ 35.383053][ T3622] tc_new_tfilter+0xde4/0x10a0 [ 35.383076][ T3622] ? __rcu_read_unlock+0x4f/0x70 [ 35.383117][ T3622] ? ns_capable+0x7d/0xb0 [ 35.383170][ T3622] ? __pfx_tc_new_tfilter+0x10/0x10 [ 35.383196][ T3622] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 35.383231][ T3622] netlink_rcv_skb+0x123/0x220 [ 35.383266][ T3622] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 35.383331][ T3622] rtnetlink_rcv+0x1c/0x30 [ 35.383358][ T3622] netlink_unicast+0x5c0/0x690 [ 35.383400][ T3622] netlink_sendmsg+0x58b/0x6b0 [ 35.383427][ T3622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.383446][ T3622] __sock_sendmsg+0x145/0x180 [ 35.383507][ T3622] ____sys_sendmsg+0x31e/0x4e0 [ 35.383541][ T3622] ___sys_sendmsg+0x17b/0x1d0 [ 35.383582][ T3622] __x64_sys_sendmsg+0xd4/0x160 [ 35.383639][ T3622] x64_sys_call+0x191e/0x3000 [ 35.383737][ T3622] do_syscall_64+0xd2/0x200 [ 35.383764][ T3622] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 35.383799][ T3622] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 35.383865][ T3622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.383892][ T3622] RIP: 0033:0x7f3c1cd0f749 [ 35.383947][ T3622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.384022][ T3622] RSP: 002b:00007f3c1b76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.384053][ T3622] RAX: ffffffffffffffda RBX: 00007f3c1cf65fa0 RCX: 00007f3c1cd0f749 [ 35.384067][ T3622] RDX: 0000000000000000 RSI: 0000200000006040 RDI: 0000000000000004 [ 35.384081][ T3622] RBP: 00007f3c1b76f090 R08: 0000000000000000 R09: 0000000000000000 [ 35.384096][ T3622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 35.384110][ T3622] R13: 00007f3c1cf66038 R14: 00007f3c1cf65fa0 R15: 00007ffe74085278 [ 35.384129][ T3622] [ 35.411233][ T3614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.483137][ T3614] EXT4-fs (loop2): shut down requested (1) [ 35.612115][ T3636] FAULT_INJECTION: forcing a failure. [ 35.612115][ T3636] name failslab, interval 1, probability 0, space 0, times 0 [ 35.635476][ C1] hrtimer: interrupt took 48052 ns [ 35.691077][ T3636] CPU: 0 UID: 0 PID: 3636 Comm: syz.1.45 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.691137][ T3636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 35.691153][ T3636] Call Trace: [ 35.691161][ T3636] [ 35.691169][ T3636] __dump_stack+0x1d/0x30 [ 35.691240][ T3636] dump_stack_lvl+0xe8/0x140 [ 35.691264][ T3636] dump_stack+0x15/0x1b [ 35.691313][ T3636] should_fail_ex+0x265/0x280 [ 35.691337][ T3636] ? audit_log_d_path+0x8d/0x150 [ 35.691365][ T3636] should_failslab+0x8c/0xb0 [ 35.691471][ T3636] __kmalloc_cache_noprof+0x4c/0x4a0 [ 35.691592][ T3636] audit_log_d_path+0x8d/0x150 [ 35.691619][ T3636] audit_log_d_path_exe+0x42/0x70 [ 35.691643][ T3636] audit_log_task+0x1e9/0x250 [ 35.691685][ T3636] ? kstrtouint+0x76/0xc0 [ 35.691779][ T3636] audit_seccomp+0x61/0x100 [ 35.691834][ T3636] ? __seccomp_filter+0x82d/0x1250 [ 35.691923][ T3636] __seccomp_filter+0x83e/0x1250 [ 35.691961][ T3636] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 35.692041][ T3636] ? vfs_write+0x7e8/0x960 [ 35.692071][ T3636] __secure_computing+0x82/0x150 [ 35.692106][ T3636] syscall_trace_enter+0xcf/0x1e0 [ 35.692195][ T3636] do_syscall_64+0xac/0x200 [ 35.692230][ T3636] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 35.692266][ T3636] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 35.692371][ T3636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.692432][ T3636] RIP: 0033:0x7f35866bf749 [ 35.692448][ T3636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.692498][ T3636] RSP: 002b:00007f358511f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000078 [ 35.692522][ T3636] RAX: ffffffffffffffda RBX: 00007f3586915fa0 RCX: 00007f35866bf749 [ 35.692537][ T3636] RDX: 00002000000003c0 RSI: 0000200000000380 RDI: 0000200000000080 [ 35.692553][ T3636] RBP: 00007f358511f090 R08: 0000000000000000 R09: 0000000000000000 [ 35.692568][ T3636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.692579][ T3636] R13: 00007f3586916038 R14: 00007f3586915fa0 R15: 00007ffe4b4ee2e8 [ 35.692610][ T3636] [ 35.696071][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.915543][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.936064][ T3655] loop0: detected capacity change from 0 to 128 [ 35.952173][ T3655] EXT4-fs: Ignoring removed nobh option [ 35.979153][ T3662] loop1: detected capacity change from 0 to 512 [ 35.994518][ T3662] EXT4-fs: Ignoring removed i_version option [ 36.000609][ T3662] EXT4-fs: Ignoring removed bh option [ 36.029888][ T3672] loop2: detected capacity change from 0 to 512 [ 36.036760][ T3672] EXT4-fs: Ignoring removed i_version option [ 36.042817][ T3672] EXT4-fs: Ignoring removed bh option [ 36.048647][ T3655] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.066149][ T3655] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.123170][ T3662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.139097][ T3687] loop4: detected capacity change from 0 to 128 [ 36.147128][ T3662] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.181034][ T3672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.221836][ T3672] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.264870][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.294097][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.325696][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.341599][ T3708] loop1: detected capacity change from 0 to 256 [ 36.392855][ T3706] loop0: detected capacity change from 0 to 512 [ 36.423488][ T3706] EXT4-fs: Ignoring removed i_version option [ 36.429703][ T3706] EXT4-fs: Ignoring removed bh option [ 36.480790][ T3706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.518863][ T3706] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.578462][ T3706] SELinux: failed to load policy [ 36.586779][ T3744] loop3: detected capacity change from 0 to 1024 [ 36.598323][ T3744] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 36.608310][ T3744] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 36.621243][ T3744] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 36.669710][ T3755] netlink: 40 bytes leftover after parsing attributes in process `syz.1.68'. [ 36.691631][ T3744] EXT4-fs (loop3): journal inode is deleted [ 36.710079][ T3744] syz_tun: entered allmulticast mode [ 36.716223][ T3743] syz_tun: left allmulticast mode [ 36.746413][ T3763] loop3: detected capacity change from 0 to 1024 [ 36.753401][ T3758] netlink: 48 bytes leftover after parsing attributes in process `syz.1.69'. [ 36.753926][ T3763] EXT4-fs (loop3): unsupported inode size: 143 [ 36.768677][ T3763] EXT4-fs (loop3): blocksize: 1024 [ 36.835082][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.875684][ T3777] loop0: detected capacity change from 0 to 512 [ 36.888030][ T3777] EXT4-fs: Ignoring removed i_version option [ 36.894300][ T3777] EXT4-fs: Ignoring removed bh option [ 36.926171][ T3777] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.939836][ T3777] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.990477][ T3791] loop1: detected capacity change from 0 to 128 [ 37.013131][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.092934][ T3802] loop3: detected capacity change from 0 to 512 [ 37.097619][ T3804] FAULT_INJECTION: forcing a failure. [ 37.097619][ T3804] name failslab, interval 1, probability 0, space 0, times 0 [ 37.111915][ T3804] CPU: 1 UID: 0 PID: 3804 Comm: syz.0.76 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.111963][ T3804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 37.111978][ T3804] Call Trace: [ 37.111985][ T3804] [ 37.111994][ T3804] __dump_stack+0x1d/0x30 [ 37.112015][ T3804] dump_stack_lvl+0xe8/0x140 [ 37.112035][ T3804] dump_stack+0x15/0x1b [ 37.112060][ T3804] should_fail_ex+0x265/0x280 [ 37.112085][ T3804] should_failslab+0x8c/0xb0 [ 37.112122][ T3804] kmem_cache_alloc_noprof+0x50/0x480 [ 37.112166][ T3804] ? audit_log_start+0x342/0x720 [ 37.112191][ T3804] audit_log_start+0x342/0x720 [ 37.112248][ T3804] audit_seccomp+0x48/0x100 [ 37.112278][ T3804] ? __seccomp_filter+0x82d/0x1250 [ 37.112321][ T3804] __seccomp_filter+0x83e/0x1250 [ 37.112363][ T3804] ? bpf_probe_read_user+0x6c/0x70 [ 37.112385][ T3804] ? should_fail_ex+0xdb/0x280 [ 37.112401][ T3804] ? cap_capable+0x6c/0x210 [ 37.112483][ T3804] __secure_computing+0x82/0x150 [ 37.112517][ T3804] syscall_trace_enter+0xcf/0x1e0 [ 37.112553][ T3804] do_syscall_64+0xac/0x200 [ 37.112626][ T3804] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 37.112660][ T3804] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 37.112713][ T3804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.112755][ T3804] RIP: 0033:0x7f188246e15c [ 37.112775][ T3804] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 37.112797][ T3804] RSP: 002b:00007f1880ed7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 37.112815][ T3804] RAX: ffffffffffffffda RBX: 00007f18826c5fa0 RCX: 00007f188246e15c [ 37.112829][ T3804] RDX: 000000000000000f RSI: 00007f1880ed70a0 RDI: 0000000000000003 [ 37.112844][ T3804] RBP: 00007f1880ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 37.112859][ T3804] R10: 0000200000001fc0 R11: 0000000000000246 R12: 0000000000000001 [ 37.112873][ T3804] R13: 00007f18826c6038 R14: 00007f18826c5fa0 R15: 00007ffd7701fb58 [ 37.112957][ T3804] [ 37.360675][ T3802] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.386192][ T3813] netlink: 40 bytes leftover after parsing attributes in process `syz.4.79'. [ 37.388579][ T3802] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.455181][ T3820] loop0: detected capacity change from 0 to 1024 [ 37.466218][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.502116][ T3820] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 37.502211][ T3820] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 37.502272][ T3820] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.502845][ T3820] EXT4-fs (loop0): journal inode is deleted [ 37.506959][ T3820] syz_tun: entered allmulticast mode [ 37.556983][ T3817] syz_tun: left allmulticast mode [ 37.601387][ T3846] loop2: detected capacity change from 0 to 512 [ 37.616568][ T3846] EXT4-fs: Ignoring removed i_version option [ 37.622649][ T3846] EXT4-fs: Ignoring removed bh option [ 37.649710][ T3851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.85'. [ 37.663268][ T3846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.686067][ T3846] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.734592][ T3865] sit0: entered promiscuous mode [ 37.741978][ T3846] SELinux: failed to load policy [ 37.765237][ T3865] netlink: 'syz.0.88': attribute type 1 has an invalid length. [ 37.772971][ T3865] netlink: 9 bytes leftover after parsing attributes in process `syz.0.88'. [ 37.863508][ T3881] process 'syz.4.92' launched './file0' with NULL argv: empty string added [ 37.865249][ T3865] 9pnet_fd: Insufficient options for proto=fd [ 37.881859][ T3865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 37.890920][ T3865] netlink: 'syz.0.88': attribute type 30 has an invalid length. [ 37.904315][ T2076] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.913744][ T2076] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.922615][ T2076] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.932775][ T2076] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.988957][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.115000][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 38.115019][ T29] audit: type=1400 audit(1764617687.137:468): avc: denied { create } for pid=3917 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.162489][ T3922] loop3: detected capacity change from 0 to 1024 [ 38.170181][ T29] audit: type=1400 audit(1764617687.167:469): avc: denied { bind } for pid=3917 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.189431][ T29] audit: type=1400 audit(1764617687.167:470): avc: denied { listen } for pid=3917 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.190990][ T3922] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 38.208950][ T29] audit: type=1400 audit(1764617687.167:471): avc: denied { connect } for pid=3917 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.218792][ T3922] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 38.248030][ T29] audit: type=1400 audit(1764617687.167:472): avc: denied { write } for pid=3917 comm="syz.0.95" path="socket:[6318]" dev="sockfs" ino=6318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.271077][ T29] audit: type=1400 audit(1764617687.167:473): avc: denied { accept } for pid=3917 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.290638][ T3922] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.301263][ T29] audit: type=1400 audit(1764617687.167:474): avc: denied { read } for pid=3917 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.320468][ T29] audit: type=1400 audit(1764617687.167:475): avc: denied { connect } for pid=3917 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.347827][ T29] audit: type=1326 audit(1764617687.297:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188246f749 code=0x7ffc0000 [ 38.359325][ T3922] EXT4-fs (loop3): journal inode is deleted [ 38.372213][ T29] audit: type=1326 audit(1764617687.297:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3932 comm="syz.0.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f188246f749 code=0x7ffc0000 [ 38.410971][ T3939] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 38.449687][ T3922] syz_tun: entered allmulticast mode [ 38.467293][ T3921] syz_tun: left allmulticast mode [ 38.500631][ T3949] loop3: detected capacity change from 0 to 128 [ 38.548565][ T3954] loop4: detected capacity change from 0 to 128 [ 38.622311][ T3959] capability: warning: `syz.1.104' uses deprecated v2 capabilities in a way that may be insecure [ 38.655755][ T3962] loop1: detected capacity change from 0 to 512 [ 38.663008][ T3962] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.674951][ T3962] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.105: invalid indirect mapped block 4294967295 (level 0) [ 38.689551][ T3962] EXT4-fs (loop1): Remounting filesystem read-only [ 38.696738][ T3962] EXT4-fs (loop1): 1 orphan inode deleted [ 38.702507][ T3962] EXT4-fs (loop1): 1 truncate cleaned up [ 38.709270][ T3962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.774902][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.889794][ T3992] loop1: detected capacity change from 0 to 1024 [ 38.898133][ T3992] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 38.908035][ T3992] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 38.921609][ T3992] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.943952][ T3992] EXT4-fs (loop1): journal inode is deleted [ 38.963863][ T3992] syz_tun: entered allmulticast mode [ 38.976990][ T3991] syz_tun: left allmulticast mode [ 39.007558][ T4001] loop3: detected capacity change from 0 to 128 [ 39.020613][ T4001] EXT4-fs: Ignoring removed nobh option [ 39.037878][ T4001] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.053067][ T4001] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.448431][ T4010] loop1: detected capacity change from 0 to 512 [ 39.477136][ T4010] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.518776][ T4012] sch_tbf: burst 0 is lower than device hsr0 mtu (1508) ! [ 39.735833][ T4010] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.114: invalid indirect mapped block 4294967295 (level 0) [ 39.793774][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.864068][ T4010] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.114: invalid indirect mapped block 4294967295 (level 1) [ 39.891147][ T4035] loop2: detected capacity change from 0 to 512 [ 39.905185][ T4035] EXT4-fs: Ignoring removed bh option [ 40.009405][ T4010] EXT4-fs (loop1): 1 orphan inode deleted [ 40.015332][ T4010] EXT4-fs (loop1): 1 truncate cleaned up [ 40.047805][ T4053] netlink: 'syz.3.119': attribute type 21 has an invalid length. [ 40.047905][ T4053] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 40.047937][ T4053] __nla_validate_parse: 3 callbacks suppressed [ 40.047949][ T4053] netlink: 144 bytes leftover after parsing attributes in process `syz.3.119'. [ 40.050039][ T4050] loop0: detected capacity change from 0 to 512 [ 40.066489][ T4035] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 40.095442][ T4050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.095650][ T4050] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.110071][ T4040] FAULT_INJECTION: forcing a failure. [ 40.110071][ T4040] name failslab, interval 1, probability 0, space 0, times 0 [ 40.180519][ T4040] CPU: 0 UID: 0 PID: 4040 Comm: syz.3.119 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.180641][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 40.180662][ T4040] Call Trace: [ 40.180671][ T4040] [ 40.180681][ T4040] __dump_stack+0x1d/0x30 [ 40.180708][ T4040] dump_stack_lvl+0xe8/0x140 [ 40.180795][ T4040] dump_stack+0x15/0x1b [ 40.180817][ T4040] should_fail_ex+0x265/0x280 [ 40.180841][ T4040] ? allocate_file_region_entries+0xd2/0x310 [ 40.180880][ T4040] should_failslab+0x8c/0xb0 [ 40.180936][ T4040] __kmalloc_cache_noprof+0x4c/0x4a0 [ 40.180989][ T4040] allocate_file_region_entries+0xd2/0x310 [ 40.181060][ T4040] region_chg+0x232/0x2d0 [ 40.181163][ T4040] alloc_hugetlb_folio+0x312/0x1070 [ 40.181197][ T4040] hugetlb_fault+0xd71/0x1b50 [ 40.181239][ T4040] handle_mm_fault+0x1861/0x2be0 [ 40.181266][ T4040] ? __rcu_read_unlock+0x4f/0x70 [ 40.181331][ T4040] ? mt_find+0x21b/0x330 [ 40.181365][ T4040] ? find_vma+0x6c/0xa0 [ 40.181387][ T4040] do_user_addr_fault+0x3fe/0x1080 [ 40.181415][ T4040] exc_page_fault+0x62/0xa0 [ 40.181462][ T4040] asm_exc_page_fault+0x26/0x30 [ 40.181486][ T4040] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 40.181523][ T4040] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f9 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 40.181565][ T4040] RSP: 0018:ffffc90002ad3b48 EFLAGS: 00050202 [ 40.181584][ T4040] RAX: ffff88811a08cca0 RBX: ffff88811e417f28 RCX: 00000000000000d8 [ 40.181599][ T4040] RDX: 0000000000000001 RSI: 00002000008f9f09 RDI: ffff88811e417f28 [ 40.181614][ T4040] RBP: 00002000008f9f09 R08: 000000000000071f R09: 0000000000000000 [ 40.181629][ T4040] R10: 000188811e417f28 R11: 000188811e417fff R12: 00002000008f9fe1 [ 40.181644][ T4040] R13: ffffc90002ad3cd0 R14: 00000000000000d8 R15: 00007ffffffff000 [ 40.181666][ T4040] _copy_from_iter+0x144/0xe80 [ 40.181689][ T4040] ? ___kmalloc_large_node+0x96/0x100 [ 40.181861][ T4040] ? should_fail_ex+0xdb/0x280 [ 40.181892][ T4040] copy_page_from_iter+0x178/0x2a0 [ 40.182060][ T4040] process_vm_rw+0x565/0x960 [ 40.182147][ T4040] __x64_sys_process_vm_writev+0x78/0x90 [ 40.182236][ T4040] x64_sys_call+0x2a80/0x3000 [ 40.182266][ T4040] do_syscall_64+0xd2/0x200 [ 40.182295][ T4040] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 40.182333][ T4040] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 40.182420][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.182523][ T4040] RIP: 0033:0x7f3c1cd0f749 [ 40.182546][ T4040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.182641][ T4040] RSP: 002b:00007f3c1b74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 40.182726][ T4040] RAX: ffffffffffffffda RBX: 00007f3c1cf66090 RCX: 00007f3c1cd0f749 [ 40.182744][ T4040] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000048 [ 40.182798][ T4040] RBP: 00007f3c1b74e090 R08: 000000000000023a R09: 0000000000000000 [ 40.182815][ T4040] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 40.182899][ T4040] R13: 00007f3c1cf66128 R14: 00007f3c1cf66090 R15: 00007ffe74085278 [ 40.182922][ T4040] [ 40.216754][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.227430][ T4069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.227451][ T4069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.227987][ T4069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.228031][ T4069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.273004][ T4010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.847745][ T4099] loop4: detected capacity change from 0 to 128 [ 40.997090][ T4113] loop3: detected capacity change from 0 to 128 [ 41.004918][ T4113] EXT4-fs: Ignoring removed nobh option [ 41.026496][ T4113] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.041524][ T4118] loop2: detected capacity change from 0 to 1024 [ 41.055701][ T4118] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 41.065881][ T4118] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 41.083608][ T4113] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.127419][ T4118] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.187739][ T4118] EXT4-fs (loop2): journal inode is deleted [ 41.201342][ T4128] sit0: entered promiscuous mode [ 41.209195][ T4128] netlink: 'syz.4.137': attribute type 1 has an invalid length. [ 41.216923][ T4128] netlink: 9 bytes leftover after parsing attributes in process `syz.4.137'. [ 41.233350][ T4118] syz_tun: entered allmulticast mode [ 41.248084][ T3312] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.265425][ T4117] syz_tun: left allmulticast mode [ 41.283536][ T4137] 9pnet_fd: Insufficient options for proto=fd [ 41.300635][ T4128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 41.309538][ T4128] netlink: 'syz.4.137': attribute type 30 has an invalid length. [ 41.327144][ T4142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 41.339076][ T784] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.357948][ T784] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.381133][ T784] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.402846][ T784] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.569506][ T4177] loop4: detected capacity change from 0 to 128 [ 41.583182][ T4177] EXT4-fs: Ignoring removed nobh option [ 41.600578][ T4177] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.619255][ T4177] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 41.649270][ T4186] loop3: detected capacity change from 0 to 1024 [ 41.662977][ T4186] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 41.672899][ T4186] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 41.706662][ T4186] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.717423][ T4177] sch_tbf: burst 0 is lower than device hsr0 mtu (1508) ! [ 41.725033][ T4186] EXT4-fs (loop3): journal inode is deleted [ 41.757899][ T4186] syz_tun: entered allmulticast mode [ 41.770538][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.781467][ T4184] syz_tun: left allmulticast mode [ 41.802454][ T4194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 41.846735][ T4199] FAULT_INJECTION: forcing a failure. [ 41.846735][ T4199] name failslab, interval 1, probability 0, space 0, times 0 [ 41.859458][ T4199] CPU: 0 UID: 0 PID: 4199 Comm: syz.3.153 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.859555][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 41.859569][ T4199] Call Trace: [ 41.859576][ T4199] [ 41.859585][ T4199] __dump_stack+0x1d/0x30 [ 41.859637][ T4199] dump_stack_lvl+0xe8/0x140 [ 41.859657][ T4199] dump_stack+0x15/0x1b [ 41.859707][ T4199] should_fail_ex+0x265/0x280 [ 41.859732][ T4199] should_failslab+0x8c/0xb0 [ 41.859768][ T4199] kmem_cache_alloc_noprof+0x50/0x480 [ 41.859805][ T4199] ? skb_clone+0x151/0x1f0 [ 41.859826][ T4199] skb_clone+0x151/0x1f0 [ 41.859902][ T4199] __netlink_deliver_tap+0x2c9/0x500 [ 41.859933][ T4199] netlink_unicast+0x66b/0x690 [ 41.860002][ T4199] netlink_sendmsg+0x58b/0x6b0 [ 41.860027][ T4199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 41.860052][ T4199] __sock_sendmsg+0x145/0x180 [ 41.860078][ T4199] ____sys_sendmsg+0x31e/0x4e0 [ 41.860120][ T4199] ___sys_sendmsg+0x17b/0x1d0 [ 41.860169][ T4199] __x64_sys_sendmsg+0xd4/0x160 [ 41.860240][ T4199] x64_sys_call+0x191e/0x3000 [ 41.860262][ T4199] do_syscall_64+0xd2/0x200 [ 41.860288][ T4199] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 41.860358][ T4199] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 41.860391][ T4199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.860456][ T4199] RIP: 0033:0x7f3c1cd0f749 [ 41.860474][ T4199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.860492][ T4199] RSP: 002b:00007f3c1b76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 41.860521][ T4199] RAX: ffffffffffffffda RBX: 00007f3c1cf65fa0 RCX: 00007f3c1cd0f749 [ 41.860536][ T4199] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 41.860551][ T4199] RBP: 00007f3c1b76f090 R08: 0000000000000000 R09: 0000000000000000 [ 41.860566][ T4199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.860581][ T4199] R13: 00007f3c1cf66038 R14: 00007f3c1cf65fa0 R15: 00007ffe74085278 [ 41.860664][ T4199] [ 42.100162][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.184290][ T4221] loop3: detected capacity change from 0 to 512 [ 42.193760][ T4221] EXT4-fs: Ignoring removed i_version option [ 42.199945][ T4221] EXT4-fs: Ignoring removed bh option [ 42.227386][ T4221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.243985][ T4221] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.440867][ T4259] loop2: detected capacity change from 0 to 512 [ 42.441947][ T4252] gretap0: entered promiscuous mode [ 42.462366][ T4259] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.469341][ T4267] loop1: detected capacity change from 0 to 1024 [ 42.476716][ T4255] loop0: detected capacity change from 0 to 2048 [ 42.488033][ T4259] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.509439][ T4267] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 42.519379][ T4267] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 42.531554][ T4252] vlan2: entered promiscuous mode [ 42.553813][ T4267] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 42.565165][ T3296] loop0: p1 < > p4 [ 42.575201][ T3296] loop0: p4 size 8388608 extends beyond EOD, truncated [ 42.601394][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.613692][ T4267] EXT4-fs (loop1): journal inode is deleted [ 42.628572][ T4255] loop0: p1 < > p4 [ 42.635014][ T4255] loop0: p4 size 8388608 extends beyond EOD, truncated [ 42.653438][ T3004] loop0: p1 < > p4 [ 42.675823][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated [ 42.683055][ T4294] loop3: detected capacity change from 0 to 128 [ 42.690763][ T4267] syz_tun: entered allmulticast mode [ 42.691316][ T4265] syz_tun: left allmulticast mode [ 42.737256][ T4304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.168'. [ 42.777725][ T3839] udevd[3839]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.847980][ T3839] udevd[3839]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 42.859935][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.933301][ T3839] udevd[3839]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 43.035780][ T4345] FAULT_INJECTION: forcing a failure. [ 43.035780][ T4345] name failslab, interval 1, probability 0, space 0, times 0 [ 43.048685][ T4345] CPU: 0 UID: 0 PID: 4345 Comm: syz.4.175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.048760][ T4345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.048775][ T4345] Call Trace: [ 43.048782][ T4345] [ 43.048791][ T4345] __dump_stack+0x1d/0x30 [ 43.048817][ T4345] dump_stack_lvl+0xe8/0x140 [ 43.048840][ T4345] dump_stack+0x15/0x1b [ 43.048996][ T4345] should_fail_ex+0x265/0x280 [ 43.049018][ T4345] should_failslab+0x8c/0xb0 [ 43.049051][ T4345] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 43.049216][ T4345] ? __alloc_skb+0x101/0x320 [ 43.049292][ T4345] __alloc_skb+0x101/0x320 [ 43.049326][ T4345] netlink_alloc_large_skb+0xbf/0xf0 [ 43.049483][ T4345] netlink_sendmsg+0x3cf/0x6b0 [ 43.049510][ T4345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.049535][ T4345] __sock_sendmsg+0x145/0x180 [ 43.049567][ T4345] ____sys_sendmsg+0x31e/0x4e0 [ 43.049677][ T4345] ___sys_sendmsg+0x17b/0x1d0 [ 43.049717][ T4345] __x64_sys_sendmsg+0xd4/0x160 [ 43.049746][ T4345] x64_sys_call+0x191e/0x3000 [ 43.049849][ T4345] do_syscall_64+0xd2/0x200 [ 43.049875][ T4345] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.049910][ T4345] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 43.049956][ T4345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.049989][ T4345] RIP: 0033:0x7f8dd937f749 [ 43.050006][ T4345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.050041][ T4345] RSP: 002b:00007f8dd7ddf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.050064][ T4345] RAX: ffffffffffffffda RBX: 00007f8dd95d5fa0 RCX: 00007f8dd937f749 [ 43.050078][ T4345] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 43.050168][ T4345] RBP: 00007f8dd7ddf090 R08: 0000000000000000 R09: 0000000000000000 [ 43.050191][ T4345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.050205][ T4345] R13: 00007f8dd95d6038 R14: 00007f8dd95d5fa0 R15: 00007fff4349dcc8 [ 43.050306][ T4345] [ 43.236762][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 43.236780][ T29] audit: type=1326 audit(1764617692.227:618): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35866bf749 code=0x7ffc0000 [ 43.293988][ T4347] loop3: detected capacity change from 0 to 512 [ 43.310351][ T4347] EXT4-fs: Ignoring removed i_version option [ 43.316437][ T4347] EXT4-fs: Ignoring removed bh option [ 43.338458][ T29] audit: type=1326 audit(1764617692.317:619): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4317 comm="syz.1.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35866bf749 code=0x7ffc0000 [ 43.384679][ T4354] FAULT_INJECTION: forcing a failure. [ 43.384679][ T4354] name failslab, interval 1, probability 0, space 0, times 0 [ 43.397560][ T4354] CPU: 0 UID: 0 PID: 4354 Comm: syz.1.177 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.397585][ T4354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 43.397659][ T4354] Call Trace: [ 43.397667][ T4354] [ 43.397677][ T4354] __dump_stack+0x1d/0x30 [ 43.397700][ T4354] dump_stack_lvl+0xe8/0x140 [ 43.397720][ T4354] dump_stack+0x15/0x1b [ 43.397765][ T4354] should_fail_ex+0x265/0x280 [ 43.397790][ T4354] should_failslab+0x8c/0xb0 [ 43.397826][ T4354] kmem_cache_alloc_noprof+0x50/0x480 [ 43.397867][ T4354] ? getname_flags+0x80/0x3b0 [ 43.397967][ T4354] getname_flags+0x80/0x3b0 [ 43.398008][ T4354] user_path_at+0x28/0x130 [ 43.398034][ T4354] __se_sys_mount+0x25b/0x2e0 [ 43.398062][ T4354] __x64_sys_mount+0x67/0x80 [ 43.398109][ T4354] x64_sys_call+0x2b51/0x3000 [ 43.398135][ T4354] do_syscall_64+0xd2/0x200 [ 43.398159][ T4354] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 43.398225][ T4354] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 43.398261][ T4354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.398390][ T4354] RIP: 0033:0x7f35866bf749 [ 43.398405][ T4354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.398422][ T4354] RSP: 002b:00007f358511f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.398443][ T4354] RAX: ffffffffffffffda RBX: 00007f3586915fa0 RCX: 00007f35866bf749 [ 43.398457][ T4354] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000100 [ 43.398468][ T4354] RBP: 00007f358511f090 R08: 0000200000000300 R09: 0000000000000000 [ 43.398480][ T4354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.398494][ T4354] R13: 00007f3586916038 R14: 00007f3586915fa0 R15: 00007ffe4b4ee2e8 [ 43.398529][ T4354] [ 43.400610][ T4347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.500235][ T4359] loop4: detected capacity change from 0 to 1024 [ 43.529756][ T4347] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.595260][ T4359] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 43.620161][ T4359] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 43.636815][ T4359] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 43.668521][ T4366] loop0: detected capacity change from 0 to 128 [ 43.675835][ T4359] EXT4-fs (loop4): journal inode is deleted [ 43.684786][ T4366] EXT4-fs: Ignoring removed nobh option [ 43.699542][ T4357] syz_tun: entered allmulticast mode [ 43.707301][ T4356] syz_tun: left allmulticast mode [ 43.712878][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.713032][ T4366] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.748106][ T4366] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 43.918970][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.932427][ T4390] loop2: detected capacity change from 0 to 128 [ 43.950218][ T4392] netlink: 36 bytes leftover after parsing attributes in process `syz.3.186'. [ 44.060191][ T4405] loop1: detected capacity change from 0 to 512 [ 44.061536][ T4405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 44.105230][ T4405] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.144165][ T4405] EXT4-fs (loop1): 1 truncate cleaned up [ 44.160620][ T4405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.193443][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.301807][ T4442] loop2: detected capacity change from 0 to 1024 [ 44.311687][ T4442] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 44.321596][ T4442] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 44.334291][ T4442] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.345254][ T4442] EXT4-fs (loop2): journal inode is deleted [ 44.356222][ T4442] syz_tun: entered allmulticast mode [ 44.373081][ T4440] syz_tun: left allmulticast mode [ 44.421658][ T4458] FAULT_INJECTION: forcing a failure. [ 44.421658][ T4458] name failslab, interval 1, probability 0, space 0, times 0 [ 44.424338][ T29] audit: type=1326 audit(1764617693.437:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c1cd0f749 code=0x7ffc0000 [ 44.434516][ T4458] CPU: 0 UID: 0 PID: 4458 Comm: syz.3.203 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.434552][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 44.434571][ T4458] Call Trace: [ 44.434579][ T4458] [ 44.434590][ T4458] __dump_stack+0x1d/0x30 [ 44.434668][ T4458] dump_stack_lvl+0xe8/0x140 [ 44.434696][ T4458] dump_stack+0x15/0x1b [ 44.434719][ T4458] should_fail_ex+0x265/0x280 [ 44.434767][ T4458] should_failslab+0x8c/0xb0 [ 44.434834][ T4458] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 44.434881][ T4458] ? sidtab_sid2str_get+0xa0/0x130 [ 44.434973][ T4458] kmemdup_noprof+0x2b/0x70 [ 44.435065][ T4458] sidtab_sid2str_get+0xa0/0x130 [ 44.435154][ T4458] security_sid_to_context_core+0x1eb/0x2e0 [ 44.435196][ T4458] security_sid_to_context+0x27/0x40 [ 44.435237][ T4458] selinux_lsmprop_to_secctx+0x67/0xf0 [ 44.435280][ T4458] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 44.435363][ T4458] audit_log_subj_ctx+0xa4/0x3e0 [ 44.435402][ T4458] ? skb_put+0xa9/0xf0 [ 44.435501][ T4458] audit_log_task_context+0x48/0x70 [ 44.435533][ T4458] audit_log_task+0xf4/0x250 [ 44.435578][ T4458] ? kstrtouint+0x76/0xc0 [ 44.435685][ T4458] audit_seccomp+0x61/0x100 [ 44.435728][ T4458] ? __seccomp_filter+0x82d/0x1250 [ 44.435765][ T4458] __seccomp_filter+0x83e/0x1250 [ 44.435874][ T4458] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 44.435997][ T4458] ? vfs_write+0x7e8/0x960 [ 44.436031][ T4458] ? __rcu_read_unlock+0x4f/0x70 [ 44.436067][ T4458] ? __fget_files+0x184/0x1c0 [ 44.436162][ T4458] __secure_computing+0x82/0x150 [ 44.436246][ T4458] syscall_trace_enter+0xcf/0x1e0 [ 44.436286][ T4458] do_syscall_64+0xac/0x200 [ 44.436350][ T4458] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 44.436396][ T4458] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 44.436442][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.436497][ T4458] RIP: 0033:0x7f3c1cd0f749 [ 44.436518][ T4458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.436541][ T4458] RSP: 002b:00007f3c1b76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 44.436566][ T4458] RAX: ffffffffffffffda RBX: 00007f3c1cf65fa0 RCX: 00007f3c1cd0f749 [ 44.436584][ T4458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 44.436630][ T4458] RBP: 00007f3c1b76f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.436646][ T4458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.436717][ T4458] R13: 00007f3c1cf66038 R14: 00007f3c1cf65fa0 R15: 00007ffe74085278 [ 44.436803][ T4458] [ 44.436814][ T4458] audit: error in audit_log_subj_ctx [ 44.457642][ T29] audit: type=1326 audit(1764617693.437:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3c1cd0df90 code=0x7ffc0000 [ 44.587319][ T4460] vhci_hcd: invalid port number 9 [ 44.587976][ T29] audit: type=1326 audit(1764617693.437:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3c1cd0e1ff code=0x7ffc0000 [ 44.593672][ T4460] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 44.654246][ T29] audit: type=1326 audit(1764617693.437:623): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=4452 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f3c1cd0f749 code=0x7ffc0000 [ 44.802809][ T29] audit: type=1326 audit(1764617693.537:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3c1cd0e15c code=0x7ffc0000 [ 44.826078][ T29] audit: type=1326 audit(1764617693.537:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3c1cd0e1ff code=0x7ffc0000 [ 44.849255][ T29] audit: type=1326 audit(1764617693.537:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4452 comm="syz.3.203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3c1cd0e3aa code=0x7ffc0000 [ 44.976135][ T4475] loop4: detected capacity change from 0 to 512 [ 44.984835][ T4475] EXT4-fs: Ignoring removed i_version option [ 44.990985][ T4475] EXT4-fs: Ignoring removed bh option [ 45.048572][ T4475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.071336][ T4479] loop2: detected capacity change from 0 to 128 [ 45.074301][ T4475] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.154905][ T4475] SELinux: failed to load policy [ 45.173228][ T4473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 45.193327][ T4473] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.249429][ T4473] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.282851][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.299975][ T4504] loop0: detected capacity change from 0 to 512 [ 45.322085][ T4509] loop2: detected capacity change from 0 to 1024 [ 45.332372][ T4473] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.349014][ T4509] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 45.358935][ T4509] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 45.394068][ T4509] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.413638][ T4509] EXT4-fs (loop2): journal inode is deleted [ 45.425593][ T4473] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.440529][ T4504] EXT4-fs (loop0): orphan cleanup on readonly fs [ 45.461936][ T4509] syz_tun: entered allmulticast mode [ 45.474593][ T4504] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.213: bad orphan inode 13 [ 45.500770][ T4508] syz_tun: left allmulticast mode [ 45.517004][ T2076] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.528901][ T4504] ext4_test_bit(bit=12, block=18) = 1 [ 45.534383][ T4504] is_bad_inode(inode)=0 [ 45.538553][ T4504] NEXT_ORPHAN(inode)=2130706432 [ 45.543424][ T4504] max_ino=32 [ 45.546665][ T4504] i_nlink=1 [ 45.555510][ T2076] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.563900][ T2076] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.572379][ T2076] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.581343][ T4504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.614571][ T4541] loop2: detected capacity change from 0 to 512 [ 45.651577][ T4541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.686957][ T4541] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.700848][ T4556] netlink: 'syz.4.221': attribute type 9 has an invalid length. [ 45.708725][ T4556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.221'. [ 45.726723][ T4541] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.217: corrupted inode contents [ 45.743209][ T4541] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.217: mark_inode_dirty error [ 45.763269][ T4541] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.217: corrupted inode contents [ 45.775822][ T4541] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.217: mark_inode_dirty error [ 45.795762][ T4573] loop4: detected capacity change from 0 to 512 [ 45.804462][ T4573] EXT4-fs: Ignoring removed i_version option [ 45.810494][ T4573] EXT4-fs: Ignoring removed bh option [ 45.831084][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.836041][ T4573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.915070][ T4573] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.983843][ T4573] SELinux: failed to load policy [ 46.010497][ T4588] loop2: detected capacity change from 0 to 1024 [ 46.031570][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.096522][ T4588] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 46.106473][ T4588] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 46.125908][ T4588] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 46.137807][ T4588] EXT4-fs (loop2): journal inode is deleted [ 46.153893][ T4588] syz_tun: entered allmulticast mode [ 46.160403][ T4587] syz_tun: left allmulticast mode [ 46.181365][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.227834][ T4615] netlink: 'syz.2.234': attribute type 9 has an invalid length. [ 46.235785][ T4615] netlink: 36 bytes leftover after parsing attributes in process `syz.2.234'. [ 46.247727][ T3839] ================================================================== [ 46.255871][ T3839] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 46.262865][ T3839] [ 46.265203][ T3839] write to 0xffff8881040886c4 of 4 bytes by task 3296 on cpu 1: [ 46.272844][ T3839] shmem_mknod+0x137/0x180 [ 46.277297][ T3839] shmem_create+0x34/0x50 [ 46.281657][ T3839] path_openat+0x1105/0x2170 [ 46.286262][ T3839] do_filp_open+0x109/0x230 [ 46.290779][ T3839] do_sys_openat2+0xa6/0x110 [ 46.295377][ T3839] __x64_sys_openat+0xf2/0x120 [ 46.300149][ T3839] x64_sys_call+0x2eab/0x3000 [ 46.304877][ T3839] do_syscall_64+0xd2/0x200 [ 46.309402][ T3839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.315325][ T3839] [ 46.317653][ T3839] read to 0xffff8881040886c4 of 4 bytes by task 3839 on cpu 0: [ 46.325198][ T3839] fill_mg_cmtime+0x5b/0x260 [ 46.330887][ T3839] generic_fillattr+0x24a/0x340 [ 46.335849][ T3839] shmem_getattr+0x181/0x200 [ 46.340557][ T3839] vfs_getattr_nosec+0x146/0x1e0 [ 46.345556][ T3839] vfs_statx+0x113/0x390 [ 46.349828][ T3839] vfs_fstatat+0x115/0x170 [ 46.354319][ T3839] __se_sys_newfstatat+0x55/0x260 [ 46.359484][ T3839] __x64_sys_newfstatat+0x55/0x70 [ 46.364532][ T3839] x64_sys_call+0x135a/0x3000 [ 46.369223][ T3839] do_syscall_64+0xd2/0x200 [ 46.373734][ T3839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.379636][ T3839] [ 46.381962][ T3839] value changed: 0x10820f37 -> 0x108923ad [ 46.387686][ T3839] [ 46.390025][ T3839] Reported by Kernel Concurrency Sanitizer on: [ 46.396191][ T3839] CPU: 0 UID: 0 PID: 3839 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.405509][ T3839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.415577][ T3839] ================================================================== [ 46.493009][ T4627] ALSA: seq fatal error: cannot create timer (-19)