last executing test programs: 2.36090218s ago: executing program 0 (id=104): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "333426dfeb130ae3a8345f91eec4357d4edc8f021f74eab168b9f014564b57bf2795be99e3ad0b0ae0c14c74ad8fe1ec1a6a37401ca692d8785f348b4b8a2e14", 0x24}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000c00), &(0x7f0000000c40)={'fscrypt:', @desc2}, &(0x7f0000000c80)={0x0, "d85926c4014cd62b4e890b3a986eec57aa8efb3d5555a5591b1b79fe3b7cbc36ea3c4e0b425846511f3211e5baec9775c7183d4d2a4986a3b433ceaaea19d6a3", 0x3e}, 0x48, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4}, 0x94) 2.322288931s ago: executing program 1 (id=106): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000100003050000000000000000000080006331c1d078105d07a529a25d6d610d6a69c1bed893f669f79e4b", @ANYRES32=0x0, @ANYBLOB="9b150100000000002c0012800e00010069703665727370616e0000001800028004001200080014000002000008000d0000010200"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffff9) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "333426dfeb130ae3a8345f91eec4357d4edc8f021f74eab168b9f014564b57bf2795be99e3ad0b0ae0c14c74ad8fe1ec1a6a37401ca692d8785f348b4b8a2e14", 0x24}, 0x48, 0xffffffffffffffff) 1.795207449s ago: executing program 2 (id=109): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)='GPL\x00'}, 0x30) socket$kcm(0x22, 0x2, 0x21) close_range(r1, 0xffffffffffffffff, 0x0) getpgid(0x0) msgget(0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x9046, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x80) 1.73509592s ago: executing program 2 (id=113): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x60ad, &(0x7f0000000600)={0x0, 0xb1b2, 0x1, 0xfffffffe, 0xa0}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 1.427160425s ago: executing program 0 (id=116): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000100003050000000000000000000080006331c1d078105d07a529a25d6d610d6a69c1bed893f669f79e4b", @ANYRES32=0x0, @ANYBLOB="9b150100000000002c0012800e00010069703665727370616e0000001800028004001200080014000002000008000d0000010200"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffff9) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "333426dfeb130ae3a8345f91eec4357d4edc8f021f74eab168b9f014564b57bf2795be99e3ad0b0ae0c14c74ad8fe1ec1a6a37401ca692d8785f348b4b8a2e14", 0x24}, 0x48, 0xffffffffffffffff) 1.406887696s ago: executing program 1 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085009248df302b5e54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x2000000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006000000d969ab1fcf01b1ecb94adf5ce70eaead54e3"], 0x44}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$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") socket$nl_route(0x10, 0x3, 0x0) 850.850605ms ago: executing program 2 (id=122): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, 0x0, 0x0) 781.132956ms ago: executing program 2 (id=123): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)='GPL\x00'}, 0x30) socket$kcm(0x22, 0x2, 0x21) close_range(r1, 0xffffffffffffffff, 0x0) getpgid(0x0) msgget(0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x9046, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) 751.077327ms ago: executing program 2 (id=125): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x17}}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) 750.016707ms ago: executing program 2 (id=126): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040080001600000004000000e4"], 0x48) r1 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1c, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x1, 0xf, 0xf, 0x800}, 0x10, 0x2b0d6, r1, 0x5, 0x0, &(0x7f0000000f80)=[{0x5, 0x5, 0xc, 0xb}, {0x5, 0x5, 0x4, 0x8}, {0x400005, 0x1, 0x4, 0xb}, {0x5, 0x2, 0x4, 0xb}, {0x0, 0x5, 0xc, 0x3}], 0x10, 0xffffffd9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x8f6, &(0x7f0000000180)={0x0, 0xecb7, 0x8, 0x0, 0x2ec}, &(0x7f0000000200), &(0x7f0000000280)) r5 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4d9, 0xa067, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='rtc_alarm_irq_enable\x00', r7}, 0x18) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r8, 0x7001) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2002b71ec95c63208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2312ce", 0xb8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x59b, &(0x7f0000002480)="$eJzs3T1sG2UfAPD/2fGbfuRt+krvK72gDhUgFamqk/QDClO7IipV6oDEUizHjaI4cRQ70EQZ0r1CdECAupQNBkYQAwNiQWJhZQExI1U0AqnpAEb+StvEDk6p6zT+/aSz77nn7P/z3Pl/9nO6kwMYWEdrD6mIZyLiYhIx+kDdUDQrjzbWW19byd9bW8knUa1e+jWJJCLurq3kW+snzeeDEbEaEf+PiG8yEcdTW+OWl5ZncsViYaFZHqvMzo+Vl5ZPTM/mpgpThblTL79y5uzpMxMnJzo3PrOzvl7/6ca7179/7daNTz87spp/P5fEuRhp1j3Yj8epsU0ycW7T8tO9CNZHSb8bwCNJN/O8lkr/i9FIN7O+neroE20a0GPV4YjqTiSrO1od2M2SneU/sGe0fgfUxr9th9Pp3v7+uH2+MQCpxV9vTo2aoca5idhXH5sc+C15aGRSG28e7m3TGACr1yJifGio9vlrTY2apPn5e3Tjj6OB9NTX5xs7auv+T20cf6LN8Wekde70H2od/9a3HP/ux093OP5d7DLGH2/+/FHH+Ncinm0bP9mIn7SJn4qIt7qMf/ONL892qqt+HHEs2sdvSbY/Pzx2ZbpYGG88to3x1bEjr27X/wMd4jfO2e6rf8202/7zXfb/i28/f251m/gvPr/9/m+3/fdHxHtdxv/P3U9e71R3+1pyp/YrYKf7v7bsVpfxXzp39McOVfu7fAsAAAAAAAAAAKCNVP1atiSV3ZhPpbLZxj28/40DqWKpXDl+pbQ4N9m45u1wZFKtK61GG+WkVp5oXo/bKp/cVD7Vuo44vb9ezuZLxck+9x0AAAAAAAAAAAAAAAAAAAB2i4Ob7v//PV2//3/z31UDe1Xnv/wG9jr5D4Pr4fxPIob71hTgCfP9DwOrKv9hcMl/GFzyHwaX/IfBJf9hcMl/GFzyHwAAAAAAAAAAAAAAAAAAAAAAAAAAeuLihQu1qXpvbSVfK08OLS3OlN4+MVkoz2RnF/PZfGlhPjtVKk0VC9l8afbv3q9YKs2Px9zi1bFKoVwZKy8tX54tLc5VLk/P5qYKlwuZJ9IrAAAAAAAAAAAAAAAAAAAAeLqM1KcklY2IVH0+lcpmI/4dEYcjk1yZLhbGI+JQRPyQzgzXyhP9bjQAAAAAAAAAAAAAAAAAAADsMeWl5ZlcsVhYGJCZoS1Lvuu8ckSsPt5m1N5xR68anskVM819tVu24dM2c2j7ddLR9xbuxpk+H5gAAAAAAAAAAAAAAAAAAGAA3b/pt9tX/NnbBgEAAAAAAAAAAAAAAAAAAMBASv2SRERtOjb6wsjm2n8l6+n6c0S8c/PSB1dzlcrCRG35nY3llQ+by0/2o/1At1p52spjAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4L7y0vJMrlgsLPRwpt99BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgUfwUAAP//H1DQ4Q==") r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r11}}) ioctl$TIOCVHANGUP(r10, 0x5437, 0x300) close(r9) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r4, 0x0, 0x0, 0x0, 0x80000}) 664.678888ms ago: executing program 4 (id=128): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@user_xattr}, {@norecovery}, {@errors_remount}]}, 0x1, 0x570, &(0x7f00000019c0)="$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") (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18) (async) r5 = socket(0x10, 0x80003, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) (async) sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000850700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYRES16=r0], 0x48}}, 0x0) (async) r8 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r8, 0x402, 0x5) (async) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x2f) (async) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x26) (async) fcntl$notify(r10, 0x402, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0, 0xffe0}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$nci(r11, &(0x7f0000000300)=@DATA={0x2, 0x1, 0x0, 0x0, 0x80, "e0a7badcbac25c484f8aadec9a89bf0e3ca2084f055ddec1a8964397752852060c97e98f07cb0ad4bdfd2e9a95a5783ac0aa044e4404ad8738e3115bcbff9c237bb184640f16a0b30c43ddd572d26d101bd572807b1bd2220ef9cc57779bb71fe13285bdeb03beadefbef59cfb7df87e56d99c3ec0373752e76f2e6e5ebeeca3e30bc094f490f3f35add87dceecbe69adab00dd2537c8b9f0d1f0c9599"}, 0xa0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x37cc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) 585.63262ms ago: executing program 4 (id=131): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000020c0)=@newtaction={0x894, 0x30, 0xffff, 0x4, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x8, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x22, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x27ffdbfc, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0xeeb, 0x7, 0x0, 0x0, 0x0, 0x0, 0x400, 0x8, 0x0, 0x0, 0x0, 0x81b, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffe, 0xfffffffd, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xf853, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x0, 0x0, 0x2, 0x0, 0x100, 0xfffffffc, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x55, 0xfff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffff9c, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100000]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80000001}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x7, 0xfffeffff, 0x100, 0x8, {0x4, 0x0, 0x400, 0x3200, 0x7fff, 0x7}, {0x7, 0x2, 0x5, 0x8, 0xd3, 0x766}, 0xfeea, 0x4, 0x2}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xc, 0x7ff, 0x9, 0x3, 0x80000000, 0x6, 0x3, 0x2, 0x1, 0x80000000, 0x0, 0x4, 0x80, 0x5, 0x3, 0x5, 0x9d, 0xfffffffe, 0x2, 0x8c, 0x80000001, 0x6, 0x7f, 0x2, 0x0, 0x5, 0x76, 0x3, 0x2, 0x7, 0x800, 0x0, 0x10000, 0xf0, 0x8, 0xb8, 0x151, 0xfff, 0x6, 0x9, 0x401, 0xfffffff8, 0x5, 0x8, 0xfffffffa, 0x4, 0x7, 0x8000, 0xf9, 0xfff, 0x7fff, 0x1, 0x0, 0xff, 0x5c0078f0, 0x7f, 0x0, 0x2, 0xfffffffa, 0x8, 0x7, 0x7, 0x7, 0x6, 0x80000000, 0x5, 0x4, 0x3, 0x6, 0xffffffff, 0x10000, 0x5, 0x6, 0x3, 0x2, 0x1, 0x8, 0x3, 0x74, 0x4, 0xfee, 0x401, 0x5, 0x5, 0xfff, 0x8f4, 0x3, 0x8000, 0x2, 0x6, 0x1, 0x1ff, 0x9, 0x1, 0x6, 0x9, 0xc, 0x0, 0x80, 0xe, 0xd, 0x6, 0x8, 0xfffffffe, 0xef, 0x2, 0x3, 0x1f, 0x7, 0x9, 0x1ec0, 0x2, 0xfffff001, 0x2, 0x0, 0x10001, 0xd5b, 0x5, 0x0, 0x1, 0x7, 0x3, 0x7, 0x8, 0x1, 0x4, 0x8, 0x101, 0x200, 0x6, 0x80000000, 0x5, 0x2, 0x2, 0x7fff, 0x7, 0x6, 0x3ff, 0x7, 0xffff935a, 0x8, 0xf64, 0x8, 0x4, 0x80000001, 0x3, 0xfe000000, 0x3, 0x2, 0x8, 0xba, 0x400000, 0x3, 0x8, 0x7, 0x5, 0x2, 0x400, 0x7, 0x1ff, 0x1, 0x746, 0x2, 0x6, 0x0, 0x1, 0x6, 0x53a, 0x5, 0x8, 0x6, 0x8, 0x3, 0x7ff, 0x6, 0xf, 0xa, 0x3, 0xfffff000, 0xdae4, 0x5, 0xa, 0x5, 0x7, 0x2, 0x1000, 0xe, 0x4, 0x0, 0x6, 0x1, 0x0, 0x9, 0x5, 0x10000, 0x3, 0x2, 0x7ff, 0x4, 0x5, 0x4, 0x4, 0x0, 0x80000000, 0x80, 0x5a78, 0xf96, 0x7, 0x6, 0x80, 0xc, 0xfffffff9, 0x7, 0x4, 0x5, 0x4, 0x9, 0x2, 0xffff4fba, 0x5, 0x3, 0x800, 0x93, 0x3, 0x3000000, 0x8, 0x80000001, 0x6, 0x6, 0xde4a, 0x9, 0xd, 0x10001, 0x4c, 0x8, 0xf0, 0x0, 0x5, 0x9, 0x4, 0x2, 0x8, 0x3, 0x2, 0x5, 0x9, 0x2, 0x4, 0x9, 0x7, 0x5, 0x10001, 0x8, 0x9]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x894}}, 0x0) 583.36486ms ago: executing program 4 (id=132): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x20008, &(0x7f0000000140)={[{@noacl}, {@quota}, {@dax}, {@dioread_lock}, {@jqfmt_vfsv0}, {@mblk_io_submit}, {@minixdf}, {@i_version}, {@nombcache}, {@i_version}], [{@audit}, {@context={'context', 0x3d, 'user_u'}}]}, 0x45, 0x7cf, &(0x7f0000001cc0)="$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") 558.07633ms ago: executing program 3 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x1, 0x7fe2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x60) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) 535.005211ms ago: executing program 1 (id=134): syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000880)='./file1\x00', 0xc80, &(0x7f0000000300)=ANY=[], 0x1, 0x286, &(0x7f00000010c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x0, 0x8000, 0x8000, 0x1, {{0x15, 0x4, 0x2, 0x4, 0x54, 0x64, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0x1b, 0xc4, [@dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010102, @remote, @local, @multicast2, @private=0xa010101]}, @timestamp={0x44, 0x1c, 0x64, 0x0, 0xc, [0xa22d, 0x8, 0x7fff, 0x81, 0x3, 0x2]}, @noop, @ra={0x94, 0x4, 0x1}, @noop]}}}}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x0, 0x0, r2, 0x1, '\x00', r4, r1, 0x0, 0x1, 0x1}, 0x50) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 530.73823ms ago: executing program 3 (id=135): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)='GPL\x00'}, 0x30) socket$kcm(0x22, 0x2, 0x21) close_range(r1, 0xffffffffffffffff, 0x0) getpgid(0x0) msgget(0x2, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x9046, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80) 457.712332ms ago: executing program 0 (id=136): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1, 0x0, 0x40}, 0x18) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 446.813542ms ago: executing program 4 (id=137): r0 = socket(0x2a, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007112bd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="e37400000000004e070000006c3dad000000000033d20b28d7c500cfff496de71df186e136f4d81234445e76f51bd4e9ffb5ff972162208e1d38b832354f8db85d11811b4f9a67ae0ad23c6f49fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000c81e6ddb7ebbc7700663507a000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) read(r2, 0x0, 0x0) r5 = accept4$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000440)=@req3={0x200, 0xf, 0x9, 0x0, 0x80000000, 0xff, 0xe}, 0x1c) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') getdents64(r6, 0x0, 0xffffffff00000018) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) r7 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r8, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) futimesat(r8, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{0x77359400}}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpgid(0x0) 446.162772ms ago: executing program 3 (id=138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)}, {&(0x7f0000000140)="baecff5f5f8f11", 0x7}, {0x0}], 0x3) 385.979953ms ago: executing program 3 (id=139): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r1) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x81ff, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x4817, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x826d, 0x68020}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 384.343993ms ago: executing program 1 (id=140): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000000c0)={0x1, 0x0, 0x15c3, 0xffffffffffffffee}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @mss={0x2, 0x8}, @window, @window={0x3, 0x3, 0x5}, @timestamp, @mss={0x2, 0x9}, @timestamp], 0x2000000000000135) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f00000004c0)="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", 0xfdef, 0x805, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 351.250674ms ago: executing program 3 (id=141): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x90042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x67a, 0x1, 0x81, 0x3, 0xd13e, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000780)="14afa849641d000000000000000000", 0xf, 0x4000000, &(0x7f00000000c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0xd, 0x0, 0x81, 0xfffffffb}) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x81, 0x8000003, 0x0, 0xfffffffc, 0x0, 0x5}) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 237.806795ms ago: executing program 1 (id=142): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x2000c10, &(0x7f0000000240)=ANY=[], 0x2, 0xa17, &(0x7f0000000280)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) connect$netlink(r3, &(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc) 237.330255ms ago: executing program 4 (id=143): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) 212.584376ms ago: executing program 0 (id=144): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 191.283986ms ago: executing program 1 (id=145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085009248df302b5e54"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x2000000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a69700005000400000000000900020073797a310000000005000500020000000500010006000000d969ab1fcf01b1ecb94adf5ce70eaead54e3"], 0x44}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80800}) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x2}}, 0x10, 0x0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@jqfmt_vfsv1}]}, 0x1, 0x604, &(0x7f0000000c00)="$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") socket$nl_route(0x10, 0x3, 0x0) 179.017307ms ago: executing program 3 (id=146): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000780)={r2, 0x2, r0, 0xfffffffd}) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000200)=0x32) close(r0) 178.347637ms ago: executing program 0 (id=147): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x58, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) getuid() syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x4}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000180)='./bus\x00', 0x0) renameat2(r3, &(0x7f0000000600)='./file0\x00', r3, &(0x7f0000000200)='./bus\x00', 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0, r1}, 0x18) 121.770858ms ago: executing program 4 (id=148): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, 0x0}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000100003050000000000000000000080006331c1d078105d07a529a25d6d610d6a69c1bed893f669f79e4b", @ANYRES32=0x0, @ANYBLOB="9b150100000000002c0012800e00010069703665727370616e0000001800028004001200080014000002000008000d0000010200"], 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) request_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffffffffffffff9) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f00000003c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "333426dfeb130ae3a8345f91eec4357d4edc8f021f74eab168b9f014564b57bf2795be99e3ad0b0ae0c14c74ad8fe1ec1a6a37401ca692d8785f348b4b8a2e14", 0x24}, 0x48, 0xffffffffffffffff) 0s ago: executing program 0 (id=149): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200001c00000008000100", @ANYRES32, @ANYBLOB="08000400"], 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0}]}, 0x28}}, 0x40) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)}], 0x1}, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4b7901da, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000053b3a4b000a000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e610061610061"], 0x0, 0x58, 0x0, 0x0, 0x80}, 0x28) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20300, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r7, 0x80083314, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 24.986209][ T29] audit: type=1400 audit(1751772148.495:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.987074][ T3293] cgroup: Unknown subsys name 'net' [ 25.008919][ T29] audit: type=1400 audit(1751772148.495:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.036299][ T29] audit: type=1400 audit(1751772148.525:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.168943][ T3293] cgroup: Unknown subsys name 'cpuset' [ 25.174941][ T3293] cgroup: Unknown subsys name 'rlimit' [ 25.324238][ T29] audit: type=1400 audit(1751772148.835:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.347535][ T29] audit: type=1400 audit(1751772148.835:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.368005][ T29] audit: type=1400 audit(1751772148.835:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.376822][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.388364][ T29] audit: type=1400 audit(1751772148.835:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.417170][ T29] audit: type=1400 audit(1751772148.865:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.441981][ T29] audit: type=1400 audit(1751772148.865:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.465207][ T29] audit: type=1400 audit(1751772148.905:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.470726][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.054002][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.073520][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 27.106504][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.114771][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.132720][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.183671][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.190809][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.197888][ T3304] bridge_slave_0: entered allmulticast mode [ 27.204414][ T3304] bridge_slave_0: entered promiscuous mode [ 27.210764][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.217897][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.225138][ T3305] bridge_slave_0: entered allmulticast mode [ 27.231472][ T3305] bridge_slave_0: entered promiscuous mode [ 27.244190][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.251306][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.258657][ T3304] bridge_slave_1: entered allmulticast mode [ 27.264977][ T3304] bridge_slave_1: entered promiscuous mode [ 27.271252][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.278375][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.285592][ T3305] bridge_slave_1: entered allmulticast mode [ 27.291874][ T3305] bridge_slave_1: entered promiscuous mode [ 27.344567][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.354739][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.364781][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.378630][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.385681][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.392789][ T3311] bridge_slave_0: entered allmulticast mode [ 27.399221][ T3311] bridge_slave_0: entered promiscuous mode [ 27.405646][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.412718][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.419872][ T3309] bridge_slave_0: entered allmulticast mode [ 27.426267][ T3309] bridge_slave_0: entered promiscuous mode [ 27.437904][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.450869][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.458063][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.465191][ T3311] bridge_slave_1: entered allmulticast mode [ 27.471542][ T3311] bridge_slave_1: entered promiscuous mode [ 27.477591][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.484678][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.491893][ T3309] bridge_slave_1: entered allmulticast mode [ 27.498296][ T3309] bridge_slave_1: entered promiscuous mode [ 27.504361][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.511440][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.518543][ T3303] bridge_slave_0: entered allmulticast mode [ 27.524807][ T3303] bridge_slave_0: entered promiscuous mode [ 27.553438][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.560533][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.567670][ T3303] bridge_slave_1: entered allmulticast mode [ 27.574863][ T3303] bridge_slave_1: entered promiscuous mode [ 27.585916][ T3304] team0: Port device team_slave_0 added [ 27.592715][ T3304] team0: Port device team_slave_1 added [ 27.603722][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.614398][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.628461][ T3305] team0: Port device team_slave_0 added [ 27.643598][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.653509][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.666722][ T3305] team0: Port device team_slave_1 added [ 27.680899][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.687855][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.713870][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.724885][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.731839][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.757770][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.773501][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.799778][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.814762][ T3311] team0: Port device team_slave_0 added [ 27.820819][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.827755][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.853787][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.865133][ T3309] team0: Port device team_slave_0 added [ 27.871504][ T3309] team0: Port device team_slave_1 added [ 27.885675][ T3311] team0: Port device team_slave_1 added [ 27.891632][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.898633][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.924614][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.945460][ T3304] hsr_slave_0: entered promiscuous mode [ 27.951512][ T3304] hsr_slave_1: entered promiscuous mode [ 27.974147][ T3303] team0: Port device team_slave_0 added [ 27.980619][ T3303] team0: Port device team_slave_1 added [ 27.991379][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.998410][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.024436][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.035352][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.042338][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.068307][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.079783][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.086816][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.112892][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.128565][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.135507][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.161572][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.172656][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.179636][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.205574][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.240024][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.247058][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.273013][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.294092][ T3305] hsr_slave_0: entered promiscuous mode [ 28.300180][ T3305] hsr_slave_1: entered promiscuous mode [ 28.305952][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.313538][ T3305] Cannot create hsr debugfs directory [ 28.359527][ T3303] hsr_slave_0: entered promiscuous mode [ 28.365558][ T3303] hsr_slave_1: entered promiscuous mode [ 28.371420][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.378965][ T3303] Cannot create hsr debugfs directory [ 28.386496][ T3311] hsr_slave_0: entered promiscuous mode [ 28.392604][ T3311] hsr_slave_1: entered promiscuous mode [ 28.398474][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.406003][ T3311] Cannot create hsr debugfs directory [ 28.416080][ T3309] hsr_slave_0: entered promiscuous mode [ 28.422158][ T3309] hsr_slave_1: entered promiscuous mode [ 28.428046][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.435635][ T3309] Cannot create hsr debugfs directory [ 28.603091][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.611467][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.622548][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.635445][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.657229][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.666367][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.677740][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.686626][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.716440][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.724803][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.733350][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.742095][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.770248][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.779660][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.795942][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.818097][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.832951][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.849777][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.864861][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.874777][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.883832][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.893381][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.902962][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.910225][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.921620][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.928765][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.962926][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.973334][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.984380][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.994860][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.015144][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.030949][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.038026][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.060224][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.067306][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.075677][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.093274][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.100413][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.121349][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.128422][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.141973][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.164482][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.197402][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.217709][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.227167][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.236000][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.243082][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.251704][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.258755][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.275266][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.317307][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.324510][ T3318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.333155][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.340254][ T3318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.374499][ T3304] veth0_vlan: entered promiscuous mode [ 29.402627][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.413466][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.433897][ T3304] veth1_vlan: entered promiscuous mode [ 29.460347][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.471243][ T3304] veth0_macvtap: entered promiscuous mode [ 29.477457][ T3305] veth0_vlan: entered promiscuous mode [ 29.491189][ T3304] veth1_macvtap: entered promiscuous mode [ 29.499817][ T3305] veth1_vlan: entered promiscuous mode [ 29.514690][ T3305] veth0_macvtap: entered promiscuous mode [ 29.531189][ T3305] veth1_macvtap: entered promiscuous mode [ 29.541196][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.552585][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.561343][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.576796][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.586692][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.608060][ T3304] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.616844][ T3304] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.625586][ T3304] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634312][ T3304] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.649643][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.658525][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.667214][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.676000][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.722375][ T3303] veth0_vlan: entered promiscuous mode [ 29.747800][ T3303] veth1_vlan: entered promiscuous mode [ 29.773515][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.783040][ T3311] veth0_vlan: entered promiscuous mode [ 29.807316][ T3303] veth0_macvtap: entered promiscuous mode [ 29.826437][ T3303] veth1_macvtap: entered promiscuous mode [ 29.840607][ T3311] veth1_vlan: entered promiscuous mode [ 29.852460][ T3309] veth0_vlan: entered promiscuous mode [ 29.865297][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.874554][ T3309] veth1_vlan: entered promiscuous mode [ 29.897728][ T3311] veth0_macvtap: entered promiscuous mode [ 29.906304][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.922977][ T3311] veth1_macvtap: entered promiscuous mode [ 29.929592][ T3478] loop3: detected capacity change from 0 to 512 [ 29.937221][ T3303] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.945976][ T3303] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.948917][ T3478] ======================================================= [ 29.948917][ T3478] WARNING: The mand mount option has been deprecated and [ 29.948917][ T3478] and is ignored by this kernel. Remove the mand [ 29.948917][ T3478] option from the mount to silence this warning. [ 29.948917][ T3478] ======================================================= [ 29.954724][ T3303] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.998315][ T3303] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.012048][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 30.012061][ T29] audit: type=1400 audit(1751772153.525:113): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.030440][ T3478] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6: invalid indirect mapped block 4294967295 (level 1) [ 30.061263][ T3478] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.6: invalid indirect mapped block 4294967295 (level 1) [ 30.075239][ T3488] FAULT_INJECTION: forcing a failure. [ 30.075239][ T3488] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.076149][ T3478] EXT4-fs (loop3): 2 truncates cleaned up [ 30.088335][ T3488] CPU: 1 UID: 0 PID: 3488 Comm: syz.0.8 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 30.088396][ T3488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.088411][ T3488] Call Trace: [ 30.088418][ T3488] [ 30.088424][ T3488] __dump_stack+0x1d/0x30 [ 30.088530][ T3488] dump_stack_lvl+0xe8/0x140 [ 30.088579][ T3488] dump_stack+0x15/0x1b [ 30.088595][ T3488] should_fail_ex+0x265/0x280 [ 30.088624][ T3488] should_fail+0xb/0x20 [ 30.088727][ T3488] should_fail_usercopy+0x1a/0x20 [ 30.088782][ T3488] _copy_from_user+0x1c/0xb0 [ 30.088879][ T3488] __sys_bpf+0x178/0x790 [ 30.088913][ T3488] __x64_sys_bpf+0x41/0x50 [ 30.088977][ T3488] x64_sys_call+0x2478/0x2fb0 [ 30.088998][ T3488] do_syscall_64+0xd2/0x200 [ 30.089016][ T3488] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 30.089041][ T3488] ? clear_bhb_loop+0x40/0x90 [ 30.089065][ T3488] ? clear_bhb_loop+0x40/0x90 [ 30.089184][ T3488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.089204][ T3488] RIP: 0033:0x7f239b09e929 [ 30.089222][ T3488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.089238][ T3488] RSP: 002b:00007f2399707038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 30.089260][ T3488] RAX: ffffffffffffffda RBX: 00007f239b2c5fa0 RCX: 00007f239b09e929 [ 30.089272][ T3488] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 0000000000000018 [ 30.089284][ T3488] RBP: 00007f2399707090 R08: 0000000000000000 R09: 0000000000000000 [ 30.089374][ T3488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.089385][ T3488] R13: 0000000000000000 R14: 00007f239b2c5fa0 R15: 00007fff231ded48 [ 30.089402][ T3488] [ 30.114540][ T3309] veth0_macvtap: entered promiscuous mode [ 30.168541][ T3478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.180090][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.242960][ T29] audit: type=1400 audit(1751772153.725:114): avc: denied { mount } for pid=3477 comm="syz.3.6" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.274958][ T3491] loop0: detected capacity change from 0 to 128 [ 30.289080][ T29] audit: type=1400 audit(1751772153.805:115): avc: denied { add_name } for pid=3477 comm="syz.3.6" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.298083][ T3491] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.315806][ T29] audit: type=1400 audit(1751772153.805:116): avc: denied { create } for pid=3477 comm="syz.3.6" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.326453][ T3491] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 30.345461][ T3309] veth1_macvtap: entered promiscuous mode [ 30.413639][ T29] audit: type=1400 audit(1751772153.925:117): avc: denied { remove_name } for pid=3477 comm="syz.3.6" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.436040][ T29] audit: type=1400 audit(1751772153.925:118): avc: denied { rename } for pid=3477 comm="syz.3.6" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.457916][ T29] audit: type=1400 audit(1751772153.925:119): avc: denied { rmdir } for pid=3477 comm="syz.3.6" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 30.470251][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.491756][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.497609][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.509537][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.518255][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.527009][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.546952][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.562305][ T3495] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.563058][ T29] audit: type=1400 audit(1751772154.075:120): avc: denied { create } for pid=3494 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.597968][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.603044][ T29] audit: type=1400 audit(1751772154.105:121): avc: denied { create } for pid=3496 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.629218][ T3309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.637940][ T3309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.638120][ T29] audit: type=1400 audit(1751772154.135:122): avc: denied { setopt } for pid=3494 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.646767][ T3309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.674753][ T3309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.742008][ T3505] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 30.750753][ T3503] loop4: detected capacity change from 0 to 512 [ 30.755102][ T3504] loop2: detected capacity change from 0 to 128 [ 30.765929][ T3503] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5: invalid indirect mapped block 4294967295 (level 1) [ 30.782331][ T3503] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.5: invalid indirect mapped block 4294967295 (level 1) [ 30.799518][ T3504] syz.2.3: attempt to access beyond end of device [ 30.799518][ T3504] loop2: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 30.813273][ T3503] EXT4-fs (loop4): 2 truncates cleaned up [ 30.823331][ T3504] syz.2.3: attempt to access beyond end of device [ 30.823331][ T3504] loop2: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 30.831193][ T3503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.839637][ T3504] syz.2.3: attempt to access beyond end of device [ 30.839637][ T3504] loop2: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 30.862270][ T3504] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 30.871532][ T3504] syz.2.3: attempt to access beyond end of device [ 30.871532][ T3504] loop2: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 30.884778][ T3504] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 30.894209][ T3504] syz.2.3: attempt to access beyond end of device [ 30.894209][ T3504] loop2: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 30.907424][ T3504] Buffer I/O error on dev loop2, logical block 144, lost async page write [ 30.914746][ T3510] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.916505][ T3504] syz.2.3: attempt to access beyond end of device [ 30.916505][ T3504] loop2: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 30.940712][ T3504] Buffer I/O error on dev loop2, logical block 145, lost async page write [ 30.949988][ T3504] syz.2.3: attempt to access beyond end of device [ 30.949988][ T3504] loop2: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 30.963335][ T3504] Buffer I/O error on dev loop2, logical block 146, lost async page write [ 30.969406][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 30.972701][ T3504] syz.2.3: attempt to access beyond end of device [ 30.972701][ T3504] loop2: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 30.993910][ T3504] Buffer I/O error on dev loop2, logical block 147, lost async page write [ 31.003033][ T3504] syz.2.3: attempt to access beyond end of device [ 31.003033][ T3504] loop2: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 31.016265][ T3504] Buffer I/O error on dev loop2, logical block 156, lost async page write [ 31.016680][ T3504] syz.2.3: attempt to access beyond end of device [ 31.016680][ T3504] loop2: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 31.016702][ T3504] Buffer I/O error on dev loop2, logical block 157, lost async page write [ 31.016958][ T3504] Buffer I/O error on dev loop2, logical block 160, lost async page write [ 31.016978][ T3504] Buffer I/O error on dev loop2, logical block 161, lost async page write [ 31.039497][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.113644][ T3305] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.137076][ T3521] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 31.174586][ T3521] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 31.217014][ T3523] loop0: detected capacity change from 0 to 1024 [ 31.246218][ T3523] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 31.274153][ T3523] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 31.294808][ T3523] EXT4-fs (loop0): invalid journal inode [ 31.309402][ T3523] EXT4-fs (loop0): can't get journal size [ 31.320110][ T3523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.437464][ T3538] netlink: 92 bytes leftover after parsing attributes in process `syz.4.19'. [ 31.482443][ T3540] loop3: detected capacity change from 0 to 1024 [ 31.502790][ T3542] ipvlan2: entered promiscuous mode [ 31.530875][ T3523] SELinux: failed to load policy [ 31.536490][ T3540] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 31.612684][ T3540] loop3: detected capacity change from 0 to 1024 [ 31.629847][ T3540] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 31.649931][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.729716][ T3545] loop4: detected capacity change from 0 to 512 [ 31.754946][ T3557] delete_channel: no stack [ 31.765172][ T3545] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 31.772349][ T3558] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 31.776846][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.788380][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.796327][ T3557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.803918][ T3557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.811477][ T3545] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.21: invalid indirect mapped block 2683928664 (level 1) [ 31.829292][ T3545] EXT4-fs (loop4): Remounting filesystem read-only [ 31.836128][ T3545] EXT4-fs (loop4): 1 truncate cleaned up [ 31.845561][ T3545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.850813][ T3561] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 31.883293][ T3558] team0: Port device dummy0 added [ 31.906947][ T3561] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 31.929477][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.954218][ T3565] loop4: detected capacity change from 0 to 128 [ 31.976417][ T3561] team0: Failed to send options change via netlink (err -105) [ 31.985537][ T3561] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 31.994855][ T3561] team0: Port device dummy0 removed [ 32.003753][ T3561] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 32.071868][ T3571] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 32.081109][ T3573] netlink: 92 bytes leftover after parsing attributes in process `syz.4.31'. [ 32.118790][ T3573] ipvlan3: entered promiscuous mode [ 32.182520][ T3583] 9pnet_virtio: no channels available for device 127.0.0.1 [ 32.192447][ T3583] Zero length message leads to an empty skb [ 32.494170][ T3609] loop4: detected capacity change from 0 to 128 [ 32.520088][ T3558] syz.0.23 (3558) used greatest stack depth: 10664 bytes left [ 32.553936][ T3611] loop4: detected capacity change from 0 to 128 [ 32.710277][ T3619] Falling back ldisc for ttyS3. [ 32.783443][ T3619] loop4: detected capacity change from 0 to 512 [ 32.922299][ T3626] netlink: 92 bytes leftover after parsing attributes in process `syz.4.45'. [ 32.934299][ T3600] syz.3.35 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 32.948478][ T3600] CPU: 0 UID: 0 PID: 3600 Comm: syz.3.35 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 32.948507][ T3600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 32.948519][ T3600] Call Trace: [ 32.948524][ T3600] [ 32.948530][ T3600] __dump_stack+0x1d/0x30 [ 32.948549][ T3600] dump_stack_lvl+0xe8/0x140 [ 32.948567][ T3600] dump_stack+0x15/0x1b [ 32.948601][ T3600] dump_header+0x81/0x220 [ 32.948628][ T3600] oom_kill_process+0x334/0x3f0 [ 32.948653][ T3600] out_of_memory+0x979/0xb80 [ 32.948710][ T3600] try_charge_memcg+0x5e6/0x9e0 [ 32.948796][ T3600] obj_cgroup_charge_pages+0xa6/0x150 [ 32.948894][ T3600] __memcg_kmem_charge_page+0x9f/0x170 [ 32.948919][ T3600] __alloc_frozen_pages_noprof+0x188/0x360 [ 32.949021][ T3600] alloc_pages_mpol+0xb3/0x250 [ 32.949051][ T3600] alloc_pages_noprof+0x90/0x130 [ 32.949076][ T3600] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 32.949175][ T3600] __kvmalloc_node_noprof+0x30f/0x4e0 [ 32.949201][ T3600] ? ip_set_alloc+0x1f/0x30 [ 32.949230][ T3600] ? ip_set_alloc+0x1f/0x30 [ 32.949339][ T3600] ip_set_alloc+0x1f/0x30 [ 32.949361][ T3600] hash_netiface_create+0x282/0x740 [ 32.949399][ T3600] ? __pfx_hash_netiface_create+0x10/0x10 [ 32.949428][ T3600] ip_set_create+0x3cc/0x960 [ 32.949466][ T3600] ? __nla_parse+0x40/0x60 [ 32.949559][ T3600] nfnetlink_rcv_msg+0x4c3/0x590 [ 32.949598][ T3600] ? selinux_capable+0x1f9/0x270 [ 32.949624][ T3600] netlink_rcv_skb+0x123/0x220 [ 32.949650][ T3600] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 32.949712][ T3600] nfnetlink_rcv+0x16b/0x1690 [ 32.949738][ T3600] ? __kfree_skb+0x109/0x150 [ 32.949821][ T3600] ? nlmon_xmit+0x4f/0x60 [ 32.949886][ T3600] ? consume_skb+0x49/0x150 [ 32.949910][ T3600] ? nlmon_xmit+0x4f/0x60 [ 32.949928][ T3600] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 32.949959][ T3600] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 32.949993][ T3600] ? __dev_queue_xmit+0x182/0x1fb0 [ 32.950021][ T3600] ? ref_tracker_free+0x37d/0x3e0 [ 32.950122][ T3600] ? __netlink_deliver_tap+0x4dc/0x500 [ 32.950153][ T3600] netlink_unicast+0x59e/0x670 [ 32.950181][ T3600] netlink_sendmsg+0x58b/0x6b0 [ 32.950198][ T3600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 32.950250][ T3600] __sock_sendmsg+0x142/0x180 [ 32.950277][ T3600] ____sys_sendmsg+0x31e/0x4e0 [ 32.950308][ T3600] ___sys_sendmsg+0x17b/0x1d0 [ 32.950338][ T3600] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 32.950443][ T3600] __x64_sys_sendmsg+0xd4/0x160 [ 32.950464][ T3600] x64_sys_call+0x2999/0x2fb0 [ 32.950484][ T3600] do_syscall_64+0xd2/0x200 [ 32.950560][ T3600] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 32.950586][ T3600] ? clear_bhb_loop+0x40/0x90 [ 32.950605][ T3600] ? clear_bhb_loop+0x40/0x90 [ 32.950625][ T3600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.950643][ T3600] RIP: 0033:0x7fab18afe929 [ 32.950658][ T3600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.950681][ T3600] RSP: 002b:00007fab17146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.950699][ T3600] RAX: ffffffffffffffda RBX: 00007fab18d26080 RCX: 00007fab18afe929 [ 32.950711][ T3600] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 32.950722][ T3600] RBP: 00007fab18b80b39 R08: 0000000000000000 R09: 0000000000000000 [ 32.950733][ T3600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.950744][ T3600] R13: 0000000000000000 R14: 00007fab18d26080 R15: 00007fff105ae768 [ 32.950830][ T3600] [ 32.950837][ T3600] memory: usage 307200kB, limit 307200kB, failcnt 176 [ 33.302989][ T3600] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 33.303014][ T3600] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 33.318198][ T3600] Memory cgroup stats for /syz3: [ 33.319077][ T3600] cache 4096 [ 33.327266][ T3600] rss 4096 [ 33.330313][ T3600] shmem 0 [ 33.333323][ T3600] mapped_file 4096 [ 33.337017][ T3600] dirty 0 [ 33.340121][ T3600] writeback 0 [ 33.343476][ T3600] workingset_refault_anon 13 [ 33.348044][ T3600] workingset_refault_file 1 [ 33.352576][ T3600] swap 192512 [ 33.355902][ T3600] swapcached 12288 [ 33.359702][ T3600] pgpgin 5505 [ 33.362982][ T3600] pgpgout 5500 [ 33.366341][ T3600] pgfault 7791 [ 33.369728][ T3600] pgmajfault 10 [ 33.373186][ T3600] inactive_anon 12288 [ 33.377146][ T3600] active_anon 0 [ 33.380641][ T3600] inactive_file 0 [ 33.384313][ T3600] active_file 8192 [ 33.388011][ T3600] unevictable 0 [ 33.391481][ T3600] hierarchical_memory_limit 314572800 [ 33.396878][ T3600] hierarchical_memsw_limit 9223372036854771712 [ 33.403050][ T3600] total_cache 4096 [ 33.406820][ T3600] total_rss 4096 [ 33.410376][ T3600] total_shmem 0 [ 33.413890][ T3600] total_mapped_file 4096 [ 33.418263][ T3600] total_dirty 0 [ 33.421709][ T3600] total_writeback 0 [ 33.425507][ T3600] total_workingset_refault_anon 13 [ 33.430639][ T3600] total_workingset_refault_file 1 [ 33.435650][ T3600] total_swap 192512 [ 33.439534][ T3600] total_swapcached 12288 [ 33.443763][ T3600] total_pgpgin 5505 [ 33.447545][ T3600] total_pgpgout 5500 [ 33.451515][ T3600] total_pgfault 7791 [ 33.455465][ T3600] total_pgmajfault 10 [ 33.459539][ T3600] total_inactive_anon 12288 [ 33.464032][ T3600] total_active_anon 0 [ 33.468028][ T3600] total_inactive_file 0 [ 33.472213][ T3600] total_active_file 8192 [ 33.476442][ T3600] total_unevictable 0 [ 33.480430][ T3600] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.35,pid=3585,uid=0 [ 33.494911][ T3600] Memory cgroup out of memory: Killed process 3585 (syz.3.35) total-vm:93888kB, anon-rss:940kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 33.512650][ T3604] syz.3.35 (3604) used greatest stack depth: 9464 bytes left [ 33.520436][ T3585] syz.3.35 (3585) used greatest stack depth: 8664 bytes left [ 33.523278][ T3626] ipvlan4: entered promiscuous mode [ 33.629684][ T3645] SELinux: Context system_u:object_r:restorecond_var_run_t:s0 is not valid (left unmapped). [ 33.693401][ T3600] syz.3.35 (3600) used greatest stack depth: 7160 bytes left [ 33.704733][ T3653] loop0: detected capacity change from 0 to 128 [ 33.782584][ T3657] lo speed is unknown, defaulting to 1000 [ 33.800882][ T3657] lo speed is unknown, defaulting to 1000 [ 33.809209][ T3657] lo speed is unknown, defaulting to 1000 [ 33.815515][ T3657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 33.828947][ T3659] delete_channel: no stack [ 33.829766][ T3657] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 33.853391][ T3657] lo speed is unknown, defaulting to 1000 [ 33.864175][ T3657] lo speed is unknown, defaulting to 1000 [ 33.870084][ T3662] loop3: detected capacity change from 0 to 512 [ 33.872387][ T3657] lo speed is unknown, defaulting to 1000 [ 33.882829][ T3657] lo speed is unknown, defaulting to 1000 [ 33.890145][ T3657] lo speed is unknown, defaulting to 1000 [ 33.895928][ T3662] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.57: invalid block [ 33.909977][ T3662] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.57: invalid indirect mapped block 4294967295 (level 1) [ 33.941165][ T3662] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.57: invalid indirect mapped block 4294967295 (level 1) [ 33.956445][ T3662] EXT4-fs (loop3): 2 truncates cleaned up [ 33.964339][ T3662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.994948][ T3670] netlink: 92 bytes leftover after parsing attributes in process `syz.0.59'. [ 34.026389][ T3670] ipvlan2: entered promiscuous mode [ 34.066985][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.186336][ T3683] lo speed is unknown, defaulting to 1000 [ 34.512593][ T3685] loop0: detected capacity change from 0 to 2048 [ 34.532353][ T3687] loop3: detected capacity change from 0 to 128 [ 34.551079][ T3691] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 34.559327][ T3691] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 34.575921][ T3685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.598399][ T3695] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 34.700581][ T3699] FAULT_INJECTION: forcing a failure. [ 34.700581][ T3699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 34.725709][ T3699] CPU: 1 UID: 0 PID: 3699 Comm: syz.3.70 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 34.725737][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 34.725750][ T3699] Call Trace: [ 34.725756][ T3699] [ 34.725792][ T3699] __dump_stack+0x1d/0x30 [ 34.725811][ T3699] dump_stack_lvl+0xe8/0x140 [ 34.725827][ T3699] dump_stack+0x15/0x1b [ 34.725843][ T3699] should_fail_ex+0x265/0x280 [ 34.725918][ T3699] should_fail+0xb/0x20 [ 34.725943][ T3699] should_fail_usercopy+0x1a/0x20 [ 34.725969][ T3699] _copy_from_user+0x1c/0xb0 [ 34.726032][ T3699] ___sys_sendmsg+0xc1/0x1d0 [ 34.726082][ T3699] __x64_sys_sendmsg+0xd4/0x160 [ 34.726100][ T3699] x64_sys_call+0x2999/0x2fb0 [ 34.726120][ T3699] do_syscall_64+0xd2/0x200 [ 34.726135][ T3699] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 34.726239][ T3699] ? clear_bhb_loop+0x40/0x90 [ 34.726261][ T3699] ? clear_bhb_loop+0x40/0x90 [ 34.726283][ T3699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.726336][ T3699] RIP: 0033:0x7fab18afe929 [ 34.726352][ T3699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.726369][ T3699] RSP: 002b:00007fab17167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.726438][ T3699] RAX: ffffffffffffffda RBX: 00007fab18d25fa0 RCX: 00007fab18afe929 [ 34.726451][ T3699] RDX: 0000000020040000 RSI: 0000200000000600 RDI: 0000000000000006 [ 34.726464][ T3699] RBP: 00007fab17167090 R08: 0000000000000000 R09: 0000000000000000 [ 34.726476][ T3699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.726489][ T3699] R13: 0000000000000000 R14: 00007fab18d25fa0 R15: 00007fff105ae768 [ 34.726507][ T3699] [ 34.914152][ T3703] loop4: detected capacity change from 0 to 512 [ 34.932884][ C1] hrtimer: interrupt took 47078 ns [ 35.013636][ T3703] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.71: invalid indirect mapped block 4294967295 (level 1) [ 35.029395][ T3703] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.71: invalid indirect mapped block 4294967295 (level 1) [ 35.048650][ T3706] netlink: 92 bytes leftover after parsing attributes in process `syz.3.72'. [ 35.086485][ T3703] EXT4-fs (loop4): 2 truncates cleaned up [ 35.110340][ T3703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.151480][ T3706] ipvlan2: entered promiscuous mode [ 35.193452][ T3721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.75'. [ 35.221883][ T29] kauditd_printk_skb: 699 callbacks suppressed [ 35.221897][ T29] audit: type=1400 audit(1751772158.735:822): avc: denied { create } for pid=3724 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.252246][ T29] audit: type=1400 audit(1751772158.735:823): avc: denied { read write } for pid=3717 comm="+}[@" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 35.275530][ T29] audit: type=1400 audit(1751772158.735:824): avc: denied { open } for pid=3717 comm="+}[@" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 35.298631][ T29] audit: type=1400 audit(1751772158.765:825): avc: denied { connect } for pid=3724 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.318053][ T29] audit: type=1400 audit(1751772158.765:826): avc: denied { connect } for pid=3724 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.351012][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.366673][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.433489][ T3733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.463969][ T3733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.486621][ T29] audit: type=1400 audit(1751772158.995:827): avc: denied { read } for pid=3732 comm="syz.4.80" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.509590][ T29] audit: type=1400 audit(1751772158.995:828): avc: denied { open } for pid=3732 comm="syz.4.80" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.544503][ T3743] loop4: detected capacity change from 0 to 1024 [ 35.561534][ T3742] loop1: detected capacity change from 0 to 512 [ 35.582691][ T3742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.590700][ T3742] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.603784][ T3742] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 35.613650][ T3742] EXT4-fs (loop1): #clusters per group too big: 401408 [ 35.621126][ T3743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.633941][ T3743] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.644619][ T29] audit: type=1400 audit(1751772159.145:829): avc: denied { create } for pid=3750 comm="syz.0.85" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.655637][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 35.688867][ T29] audit: type=1400 audit(1751772159.205:830): avc: denied { read write } for pid=3732 comm="syz.4.80" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.710644][ T3733] 9pnet_fd: Insufficient options for proto=fd [ 35.711341][ T29] audit: type=1400 audit(1751772159.205:831): avc: denied { open } for pid=3732 comm="syz.4.80" path="/19/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.837767][ T3760] delete_channel: no stack [ 35.851814][ T3762] x_tables: duplicate underflow at hook 2 [ 35.862765][ T3762] xt_hashlimit: size too large, truncated to 1048576 [ 36.021176][ T3765] loop1: detected capacity change from 0 to 512 [ 36.075026][ T3767] loop0: detected capacity change from 0 to 8192 [ 36.083701][ T3765] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.91: invalid indirect mapped block 4294967295 (level 1) [ 36.100387][ T3767] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.140815][ T3765] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.91: invalid indirect mapped block 4294967295 (level 1) [ 36.163200][ T3765] EXT4-fs (loop1): 2 truncates cleaned up [ 36.169423][ T3765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.205051][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.227598][ T3774] mmap: syz.2.93 (3774) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.245812][ T3776] loop1: detected capacity change from 0 to 128 [ 36.287859][ T3774] loop2: detected capacity change from 0 to 1024 [ 36.304317][ T3774] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.320246][ T3774] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.341650][ T3774] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 36.357469][ T3774] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 2: comm syz.2.93: lblock 2 mapped to illegal pblock 2 (length 1) [ 36.372930][ T3774] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 48: comm syz.2.93: lblock 0 mapped to illegal pblock 48 (length 1) [ 36.389416][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.407067][ T3784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.98'. [ 36.428429][ T3784] bridge0: entered promiscuous mode [ 36.435493][ T3774] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.93: Failed to acquire dquot type 0 [ 36.446683][ T3784] macvtap1: entered promiscuous mode [ 36.452247][ T3784] macvtap1: entered allmulticast mode [ 36.457674][ T3784] bridge0: entered allmulticast mode [ 36.464841][ T3774] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 36.475654][ T3774] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.93: mark_inode_dirty error [ 36.487706][ T3774] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 36.500406][ T3774] EXT4-fs (loop2): 1 orphan inode deleted [ 36.506657][ T3774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.519973][ T312] EXT4-fs error (device loop2): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 36.535089][ T312] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 36.550505][ T3774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.559820][ T3774] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.93: Invalid inode table block 1 in block_group 0 [ 36.572568][ T3774] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 36.582279][ T3774] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.93: mark_inode_dirty error [ 36.608655][ T3795] FAULT_INJECTION: forcing a failure. [ 36.608655][ T3795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.621774][ T3795] CPU: 0 UID: 0 PID: 3795 Comm: syz.0.103 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 36.621801][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 36.621882][ T3795] Call Trace: [ 36.621888][ T3795] [ 36.621895][ T3795] __dump_stack+0x1d/0x30 [ 36.621944][ T3795] dump_stack_lvl+0xe8/0x140 [ 36.621982][ T3795] dump_stack+0x15/0x1b [ 36.621997][ T3795] should_fail_ex+0x265/0x280 [ 36.622022][ T3795] should_fail+0xb/0x20 [ 36.622043][ T3795] should_fail_usercopy+0x1a/0x20 [ 36.622096][ T3795] _copy_from_user+0x1c/0xb0 [ 36.622117][ T3795] kstrtouint_from_user+0x69/0xf0 [ 36.622147][ T3795] ? 0xffffffff81000000 [ 36.622160][ T3795] ? selinux_file_permission+0x1e4/0x320 [ 36.622245][ T3795] proc_fail_nth_write+0x50/0x160 [ 36.622279][ T3795] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 36.622311][ T3795] vfs_write+0x269/0x8e0 [ 36.622389][ T3795] ? vfs_read+0x47f/0x6f0 [ 36.622411][ T3795] ? __rcu_read_unlock+0x4f/0x70 [ 36.622429][ T3795] ? __fget_files+0x184/0x1c0 [ 36.622496][ T3795] ksys_write+0xda/0x1a0 [ 36.622559][ T3795] __x64_sys_write+0x40/0x50 [ 36.622589][ T3795] x64_sys_call+0x2cdd/0x2fb0 [ 36.622612][ T3795] do_syscall_64+0xd2/0x200 [ 36.622636][ T3795] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 36.622661][ T3795] ? clear_bhb_loop+0x40/0x90 [ 36.622683][ T3795] ? clear_bhb_loop+0x40/0x90 [ 36.622704][ T3795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.622799][ T3795] RIP: 0033:0x7f239b09d3df [ 36.622812][ T3795] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 36.622826][ T3795] RSP: 002b:00007f2399707030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 36.622842][ T3795] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f239b09d3df [ 36.622854][ T3795] RDX: 0000000000000001 RSI: 00007f23997070a0 RDI: 0000000000000007 [ 36.622866][ T3795] RBP: 00007f2399707090 R08: 0000000000000000 R09: 0000000000000000 [ 36.622878][ T3795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 36.622891][ T3795] R13: 0000000000000000 R14: 00007f239b2c5fa0 R15: 00007fff231ded48 [ 36.622927][ T3795] [ 37.240628][ T3810] netlink: 44 bytes leftover after parsing attributes in process `syz.1.106'. [ 37.424253][ T3815] delete_channel: no stack [ 37.477913][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 37.565192][ T3828] netlink: 'syz.4.114': attribute type 10 has an invalid length. [ 37.574904][ T3828] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 37.631208][ T3831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 37.704927][ T3831] infiniband syz!: set active [ 37.709721][ T3831] infiniband syz!: added team_slave_0 [ 37.723266][ T3831] RDS/IB: syz!: added [ 37.727753][ T3831] smc: adding ib device syz! with port count 1 [ 37.748281][ T3831] smc: ib device syz! port 1 has pnetid [ 37.913596][ T3840] loop1: detected capacity change from 0 to 1024 [ 38.041945][ T3840] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.066374][ T3840] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.093518][ T3837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.116'. [ 38.105017][ T3840] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 38.137957][ T3847] netlink: 'syz.4.119': attribute type 2 has an invalid length. [ 38.149976][ T3840] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.117: lblock 2 mapped to illegal pblock 2 (length 1) [ 38.164620][ T3840] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.117: lblock 0 mapped to illegal pblock 48 (length 1) [ 38.193996][ T3840] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.117: Failed to acquire dquot type 0 [ 38.206870][ T3840] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 38.216927][ T3840] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.117: mark_inode_dirty error [ 38.218620][ T3849] autofs4:pid:3849:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 38.228953][ T3840] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 38.247818][ T3840] EXT4-fs (loop1): 1 orphan inode deleted [ 38.252299][ T3849] dummy0: entered promiscuous mode [ 38.253912][ T3840] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.263404][ T3849] dummy0: left promiscuous mode [ 38.271055][ T51] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 38.290149][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 38.302444][ T3840] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.312761][ T3840] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.117: Invalid inode table block 1 in block_group 0 [ 38.325573][ T3840] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 38.335840][ T3840] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.117: mark_inode_dirty error [ 38.421135][ T3856] delete_channel: no stack [ 38.515974][ T3864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.522659][ T3866] loop4: detected capacity change from 0 to 128 [ 38.525415][ T3864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.666136][ T3879] loop4: detected capacity change from 0 to 2048 [ 38.711815][ T3885] loop1: detected capacity change from 0 to 128 [ 38.712098][ T3864] loop2: detected capacity change from 0 to 1024 [ 38.719053][ T3884] delete_channel: no stack [ 38.756841][ T3885] bio_check_eod: 60 callbacks suppressed [ 38.756855][ T3885] syz.1.134: attempt to access beyond end of device [ 38.756855][ T3885] loop1: rw=0, sector=61, nr_sectors = 96 limit=128 [ 38.795252][ T3890] loop3: detected capacity change from 0 to 128 [ 38.835645][ T3864] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.855992][ T3864] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.899768][ T3864] 9pnet_fd: Insufficient options for proto=fd [ 38.904442][ T3902] capability: warning: `syz.3.141' uses deprecated v2 capabilities in a way that may be insecure [ 38.911819][ T3864] process 'syz.2.126' launched './file1' with NULL argv: empty string added [ 38.927928][ T3902] capability: warning: `syz.3.141' uses 32-bit capabilities (legacy support in use) [ 39.011307][ T3908] loop1: detected capacity change from 0 to 1764 [ 39.082645][ T3919] loop0: detected capacity change from 0 to 512 [ 39.096842][ T3919] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.147: invalid indirect mapped block 4294967295 (level 1) [ 39.116644][ T3919] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.147: invalid indirect mapped block 4294967295 (level 1) [ 39.137831][ T3923] loop1: detected capacity change from 0 to 1024 [ 39.144921][ T3923] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.154528][ T3923] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.166060][ T3919] EXT4-fs (loop0): 2 truncates cleaned up [ 39.174650][ T3923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 39.183439][ T3919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.192451][ T3923] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 2: comm syz.1.145: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.211056][ T3923] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 48: comm syz.1.145: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.225415][ T3923] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.145: Failed to acquire dquot type 0 [ 39.236824][ T3923] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 39.247197][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.248227][ T3923] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.145: mark_inode_dirty error [ 39.268516][ T3923] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 39.280492][ T3921] netlink: 44 bytes leftover after parsing attributes in process `syz.4.148'. [ 39.285601][ T3928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 39.290663][ T3923] EXT4-fs (loop1): 1 orphan inode deleted [ 39.304332][ T3923] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.316672][ T312] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.331318][ T312] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 39.343506][ T3923] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.352833][ T3923] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.145: Invalid inode table block 1 in block_group 0 [ 39.365677][ T3923] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 39.375633][ T3923] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.145: mark_inode_dirty error [ 39.377284][ T3928] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 39.400932][ T3294] ================================================================== [ 39.409030][ T3294] BUG: KCSAN: data-race in generic_fillattr / inode_set_ctime_to_ts [ 39.417018][ T3294] [ 39.419333][ T3294] write to 0xffff888119c85550 of 4 bytes by task 3527 on cpu 0: [ 39.426945][ T3294] inode_set_ctime_to_ts+0x84/0x170 [ 39.432138][ T3294] inode_set_ctime_current+0x1d6/0x770 [ 39.437609][ T3294] shmem_xattr_handler_set+0x1ac/0x220 [ 39.443060][ T3294] __vfs_setxattr+0x2e6/0x310 [ 39.447730][ T3294] __vfs_setxattr_noperm+0xe8/0x410 [ 39.452922][ T3294] __vfs_setxattr_locked+0x1af/0x1d0 [ 39.458201][ T3294] vfs_setxattr+0x132/0x270 [ 39.462699][ T3294] filename_setxattr+0x1ad/0x400 [ 39.467622][ T3294] path_setxattrat+0x2c9/0x310 [ 39.472374][ T3294] __x64_sys_lsetxattr+0x71/0x90 [ 39.477297][ T3294] x64_sys_call+0x1e36/0x2fb0 [ 39.481961][ T3294] do_syscall_64+0xd2/0x200 [ 39.486454][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.492337][ T3294] [ 39.494648][ T3294] read to 0xffff888119c85550 of 4 bytes by task 3294 on cpu 1: [ 39.502174][ T3294] generic_fillattr+0x1d1/0x340 [ 39.507012][ T3294] shmem_getattr+0x181/0x200 [ 39.511590][ T3294] vfs_getattr_nosec+0x146/0x1e0 [ 39.516513][ T3294] vfs_statx+0x113/0x390 [ 39.520745][ T3294] vfs_fstatat+0x115/0x170 [ 39.525152][ T3294] __se_sys_newfstatat+0x55/0x260 [ 39.530170][ T3294] __x64_sys_newfstatat+0x55/0x70 [ 39.535185][ T3294] x64_sys_call+0x2c22/0x2fb0 [ 39.539851][ T3294] do_syscall_64+0xd2/0x200 [ 39.544342][ T3294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.550222][ T3294] [ 39.552530][ T3294] value changed: 0x2cba2463 -> 0x368d321e [ 39.558229][ T3294] [ 39.560536][ T3294] Reported by Kernel Concurrency Sanitizer on: [ 39.566670][ T3294] CPU: 1 UID: 0 PID: 3294 Comm: udevd Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(voluntary) [ 39.578634][ T3294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.588676][ T3294] ================================================================== [ 39.707332][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.