last executing test programs: 46.518561957s ago: executing program 3 (id=59): r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r1, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0xc, 0x11, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}]}], {0x14, 0x10}}, 0x90}}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xae, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000001500)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r11 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000003ac0)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16=r10, @ANYRES8=r6, @ANYRESHEX, @ANYRES32=r8], 0xff, 0x2b1, &(0x7f0000000100)="$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") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r12 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r13 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) r16 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@rand_addr=0x64010102, @in=@empty, 0x4e22, 0x1, 0x4e20, 0x0, 0x2, 0x20, 0x20, 0x16, r15, r16}, {0x6, 0x5, 0x5, 0x7, 0x6000, 0x9, 0x6, 0x40}, {0xffff, 0x98, 0x5, 0xfff}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x0, 0x1}, {{@in=@loopback, 0x4d3, 0x6c}, 0xa, @in6=@mcast1, 0x3502, 0x3, 0x2, 0x3, 0x0, 0x3, 0xf}}, 0xe8) r17 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, 0x0) setregid(0xffffffffffffffff, r18) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000b80)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)=[{&(0x7f0000002700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00$\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x1360}], 0x1, &(0x7f0000000f40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r13, r6, r11, r7, r7]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r0, r9, r5, r13, r9]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r12, r6, r9, r11, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, r18}}}], 0x118, 0x20000001}, 0x82) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0xa4, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r14, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x5}}, [@TCA_STAB={0x80, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x400, 0xa, 0x2, 0x4, 0xc1, 0x2}}, {0x8, 0x2, [0x40, 0x4]}}, {{0x1c, 0x1, {0x7, 0x7, 0x1, 0x3ff, 0x1, 0x4, 0x7fffffff, 0x2}}, {0x8, 0x2, [0x4, 0x401]}}, {{0x1c, 0x1, {0x9, 0x0, 0x1ff, 0x8, 0x2, 0x3, 0x776, 0x9}}, {0x16, 0x2, [0x1, 0x3, 0x6b2, 0x8, 0x7, 0x1, 0x2, 0xb, 0xaa79]}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @alu={0x37b8e3f960da88fb, 0x0, 0x2, 0x3, 0xc, 0x20}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}]}, &(0x7f0000000800)='GPL\x00', 0x81, 0x8d, &(0x7f0000000840)=""/141, 0x41100, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x5, 0x7, 0x0, 0x1}, 0x10, 0x1003c, r7, 0x0, &(0x7f0000000940)=[0xffffffffffffffff, r3]}, 0x94) sendfile(r13, r13, 0x0, 0x800000009) 46.263316622s ago: executing program 3 (id=61): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {{0x8100, 0x88a4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000000)=""/116, 0x74}], 0x2, &(0x7f0000000200)=""/122, 0x7a}, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0x4000, 0x0, 0x0, 0x40f00}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000480)={0x1}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000004c0), 0x133003, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r5) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x34, r8, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000804) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r9}}], 0x20, 0x2400e044}, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, 0x0, &(0x7f0000000540)) 43.223566512s ago: executing program 3 (id=143): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) pivot_root(0x0, &(0x7f0000000280)='./file0\x00') 43.198312683s ago: executing program 3 (id=145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8d}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 43.169710213s ago: executing program 3 (id=148): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) (fail_nth: 7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x60, 0x1403, 0x800, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x28000}, 0x40400c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 42.792970291s ago: executing program 3 (id=155): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000540)={0x0, 0x66bd, 0x0, [0x7, 0x9dd7, 0x2, 0xc, 0x80000000], [0x4, 0x9241, 0x0, 0xe1a, 0x260, 0xcd64, 0x3, 0x5, 0x2, 0x8000000000000000, 0x7ff, 0x3, 0x6, 0x7, 0x5, 0x0, 0x200, 0x9fc2, 0x4, 0x1a3, 0x6, 0x100, 0x3, 0x800, 0x4a67, 0x4, 0x1, 0x2, 0x7ff, 0x8, 0x3, 0x8, 0xffffffffffffff81, 0x8000, 0x6, 0x3, 0x1, 0x7, 0x5, 0x5, 0x4, 0x5, 0x400, 0x5, 0xfffffffffffffbff, 0xffffffff, 0x7, 0x9, 0x3, 0x2, 0x1a, 0xfffffffffffff000, 0x6, 0x7, 0x1, 0x401, 0x9, 0x8, 0x4, 0x8380, 0x9e, 0x2f1, 0xd48, 0x2, 0x0, 0xe, 0x8, 0x9, 0x7, 0x7, 0xc4, 0x0, 0x7fffffffffffffff, 0x80000001, 0x0, 0x9, 0x2, 0x729, 0x1, 0x6, 0x3, 0x6, 0x4, 0x7, 0x1, 0xce, 0x2, 0x205, 0x24c0000, 0x8001, 0x0, 0x9, 0x30730000000000, 0x1, 0x6, 0x1, 0x40, 0x2f, 0x200, 0x2, 0x8, 0x7, 0xca, 0x3, 0x3, 0x5, 0xe, 0x32a003a9, 0xc3, 0x8, 0x400, 0x68e, 0x200, 0x3, 0x6, 0x4, 0xfffffffffffffffb, 0x9, 0x3fffffffc00000, 0x4, 0xffffffff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x840) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r11 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) mknodat$loop(r12, &(0x7f0000000400)='./file0\x00', 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) 27.797892999s ago: executing program 32 (id=155): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000540)={0x0, 0x66bd, 0x0, [0x7, 0x9dd7, 0x2, 0xc, 0x80000000], [0x4, 0x9241, 0x0, 0xe1a, 0x260, 0xcd64, 0x3, 0x5, 0x2, 0x8000000000000000, 0x7ff, 0x3, 0x6, 0x7, 0x5, 0x0, 0x200, 0x9fc2, 0x4, 0x1a3, 0x6, 0x100, 0x3, 0x800, 0x4a67, 0x4, 0x1, 0x2, 0x7ff, 0x8, 0x3, 0x8, 0xffffffffffffff81, 0x8000, 0x6, 0x3, 0x1, 0x7, 0x5, 0x5, 0x4, 0x5, 0x400, 0x5, 0xfffffffffffffbff, 0xffffffff, 0x7, 0x9, 0x3, 0x2, 0x1a, 0xfffffffffffff000, 0x6, 0x7, 0x1, 0x401, 0x9, 0x8, 0x4, 0x8380, 0x9e, 0x2f1, 0xd48, 0x2, 0x0, 0xe, 0x8, 0x9, 0x7, 0x7, 0xc4, 0x0, 0x7fffffffffffffff, 0x80000001, 0x0, 0x9, 0x2, 0x729, 0x1, 0x6, 0x3, 0x6, 0x4, 0x7, 0x1, 0xce, 0x2, 0x205, 0x24c0000, 0x8001, 0x0, 0x9, 0x30730000000000, 0x1, 0x6, 0x1, 0x40, 0x2f, 0x200, 0x2, 0x8, 0x7, 0xca, 0x3, 0x3, 0x5, 0xe, 0x32a003a9, 0xc3, 0x8, 0x400, 0x68e, 0x200, 0x3, 0x6, 0x4, 0xfffffffffffffffb, 0x9, 0x3fffffffc00000, 0x4, 0xffffffff]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x840) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r10 = socket(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r11 = fsopen(&(0x7f0000000300)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x0) mknodat$loop(r12, &(0x7f0000000400)='./file0\x00', 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) 2.456738511s ago: executing program 0 (id=1627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setresuid(0xee00, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = socket(0x10, 0x803, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 2.456416871s ago: executing program 0 (id=1628): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 2.349131053s ago: executing program 0 (id=1633): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8d}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r5 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 2.281998465s ago: executing program 0 (id=1636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) socket(0x10, 0x803, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xa8}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d9740501000000000800024000", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 2.243364036s ago: executing program 0 (id=1640): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000800)='ext4_fc_replay\x00'}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) cachestat(r2, &(0x7f0000000240)={0x3, 0x2}, &(0x7f000009de80), 0x0) 2.217393636s ago: executing program 0 (id=1641): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x23, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff}, 0x80) r3 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000340)="eee8d8791d702dd9d30672e3cb2d1630e7c2937d377dd0b4083f41f08494cdb4ac47ca08a341b98de19d1c8bf89a2e7a0abb5a5af41f3322ba019a1af1cef76739ec6ea379e6c43795c997f7f001341531cbb81ef2ad3ea89bb7c8446855af6fdea8ea5ba6e63e7aa4f473abdd8e3e", 0x6f, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r2, 0xdc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000093d11fc1ce5000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc140000001100010000000000000000000100000a"], 0x64}}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bb", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'wlc\x00', 0x1, 0x0, 0x4}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.242202355s ago: executing program 1 (id=1676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000440)=0x3) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x420e, r2, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x0, 0x17}) ioctl$VT_DISALLOCATE(r3, 0x5608) dup(r3) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0xfffffd28, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 966.488131ms ago: executing program 1 (id=1681): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000"], &(0x7f0000001b80)='syzkaller\x00', 0xf70, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) ioctl$GIO_CMAP(0xffffffffffffffff, 0x4b70, &(0x7f0000000100)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xcb, &(0x7f00000019c0)=0x7, 0x4) syz_usb_connect$cdc_ncm(0x6, 0xf3, &(0x7f0000000540)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x41015500, &(0x7f0000000500)) syz_open_procfs$pagemap(r0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='rpm_return_int\x00', r6, 0x0, 0xfffffffffffff001}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x600) syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0xea80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 609.510288ms ago: executing program 4 (id=1690): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 591.021518ms ago: executing program 4 (id=1691): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setresuid(0xee00, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = socket(0x10, 0x803, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xa8}, 0x18) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 583.370098ms ago: executing program 5 (id=1692): r0 = syz_open_dev$evdev(&(0x7f0000000280), 0x2, 0x40000) ioctl$EVIOCGVERSION(r0, 0x80044501, 0x0) 566.120599ms ago: executing program 5 (id=1693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x44, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 565.161279ms ago: executing program 4 (id=1694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r1, 0x0, 0x1034}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=0x0, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRESHEX=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000000500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000f90000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)="9d43", &(0x7f00000002c0), 0x1003, r8}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r8, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) accept4$llc(r10, 0x0, &(0x7f0000000340), 0x80000) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @multicast1}, 0xa, 0x0, 0xfffd}}, 0x26) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r9, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c", 0x17}], 0x1}}], 0x1, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x4}, 0x94) 538.631169ms ago: executing program 5 (id=1695): r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 516.830689ms ago: executing program 2 (id=1696): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000800)='ext4_fc_replay\x00'}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) cachestat(r2, &(0x7f0000000240)={0x3, 0x2}, &(0x7f000009de80), 0x0) 516.4028ms ago: executing program 4 (id=1697): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 504.00828ms ago: executing program 5 (id=1698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000"], 0x48) bind$xdp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 491.78891ms ago: executing program 4 (id=1699): r0 = socket$key(0xf, 0x3, 0x2) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5fa) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'batadv0\x00', 0x7d}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000310"], 0x80}, 0x1, 0x7}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e23, 0x0, @mcast1, 0x408558}}, 0x0, 0x0, 0x48, 0x0, "39bcf5aba71652ddcdc8da1b2b41a983ef92a3a5d4ef67a4e5a42e5f0300000000000000405c6451382175a1c2948d4f4803c4ebf5564c50ffffa3987d30f351751fa9f1180000000000000000000020"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRESDEC=r0, @ANYRES64=r2, @ANYBLOB="6c717927d334d6e81050dca86d2cd8906717b56735fca162b6c6813f8ecdb385a12f3b76f4e021"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x176, &(0x7f0000000240)="$eJzs27GL01AcB/BfbNRTl5vFIeDiVNTJUZET1ICidNBJ4XS5yoG3RKfgX+LqHyfITTcIT2q0tSVFrU0j189n6Q++7eP3hteXF5IXV94c7B8evT58fBw7WRb57SjiJIvdOBODaNQBAJwmJynFl5RSOl/HhY+RUuq7IwCga/Z/ANg+v93/b/XUGADQGed/ANg+T589f3inLPeeFMVOxOe6GlWj5rPJ790v964X3+3OfnVcVaPBNL/R5MV8fjYu/shvtubn4trVJp9kdx+VC/ml2J9v1WOIAAAAsKJhMdV6vh8Ol+VN9cv9gYXzex6X841NAwD4C0fv3h+8HI9fvV1Dkcd6xlG0FVH/wZcnF239t7qZIvtZfE0prTDOh0/NEhg/+C+ms94ii4h/G6fvfyaga7NF33cnAAAAAAAAAAAAAADAMt2+jTToe3oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ6lsAAAD//1UCS4E=") socket$inet6(0xa, 0x80002, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="8b332abd70000000478d15000000080099"], 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x5000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="22857cd090bfa50900000000000000f620000000", @ANYRES16=r8, @ANYBLOB="00012bbd7000fddbdf255a0000000c009900010000006a000000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20044080) fchown(r6, 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000980)={&(0x7f0000000640)=ANY=[@ANYBLOB="02030003100000002cbd7000fcdbdf2502000900080000001c0000000000000005000600000000000a0000000000000000000000000000000000000000000001090000000000000002000100000000000000070c0000000005000500000000000a000800ffffffff00000000000000000000000000000001070000000000000051df85ad584b59340a23d9fd6c7423c3ac220a6be67445217c4ca3f85c9633a89053744d4353ca910dcc1d835924ab84dee16ccec6fec69c940dbe2306a4c01c312769f2581f1e848ad4f011cd3f33a6347f0e5d46ce680e1848efed827cbfe78a503ff9f1efa7faf876c107c00dd6b26117c47249bd354ead81e8dbd57d655aa30230c72f299b52d9b84adee4489cfc9d9915a8de9b9de795ba4c21d54ff1c1619863ff6fee21c98b6b730ccbd2bd750cf3bdf381ae50a48e45612e367c268069d7a6"], 0x80}, 0x1, 0x7}, 0x0) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r5, 0x4002f516, &(0x7f0000000000)={0x8, 0x8}) 481.98158ms ago: executing program 2 (id=1700): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1b8ef90c89c9e5aa, 0x100010, 0xffffffffffffffff, 0x156d0000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000c500001800"/20, @ANYRES8, @ANYBLOB="0000000000000000b7020000140000fbb703af84364db97eb136f8d4c3c7000000e31f008500000055090100000000009500b702000000000002850000008500"/75], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="03000000000000000020000000000000001bc259ff00000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x8004587d, &(0x7f0000000080)={0x0, r3}) openat(r3, &(0x7f0000000080)='./file1\x00', 0x402041, 0x180) 112.152578ms ago: executing program 1 (id=1701): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) pivot_root(0x0, &(0x7f0000000280)='./file0\x00') 111.947058ms ago: executing program 2 (id=1702): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 111.689878ms ago: executing program 4 (id=1703): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xa}, 0x18) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xf07d, 0x400, 0x2, 0x105}, &(0x7f0000000400)=0x0, &(0x7f0000000240)) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB]) r5 = io_uring_setup(0xf08, &(0x7f00000002c0)={0x0, 0xe9ce, 0x2000, 0x20004, 0x212}) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x200000000000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r9 = socket(0x1e, 0x4, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r11, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r7, 0xffffffffffffffff, 0x0) 84.527728ms ago: executing program 2 (id=1704): ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, 0x0) 82.441499ms ago: executing program 5 (id=1705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) setresuid(0xee00, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = socket(0x10, 0x803, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x1e, 0x4, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xa8}, 0x18) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 68.457359ms ago: executing program 1 (id=1706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x44, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 52.350139ms ago: executing program 2 (id=1707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, 0x0, 0x0, 0x0, 0x0) 51.679739ms ago: executing program 5 (id=1708): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 28.732999ms ago: executing program 1 (id=1709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$sock(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="40d2eca6c455", 0x6}, {0x0}], 0x2}, 0x400c0) 24.491149ms ago: executing program 2 (id=1710): pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket(0x2c, 0x4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xfff2, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc9f8}}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @rand_addr=0x64010101}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) getpeername$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000007c0)=0x14) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000800)={0x0, @local, @multicast1}, &(0x7f0000000840)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl0\x00', 0x0, 0x2f, 0x2, 0xa, 0x401, 0x21, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x25}, 0x80, 0x80, 0x7ff, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000940)) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r3, 0x0, 0x4ffe6, 0x0) 0s ago: executing program 1 (id=1711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000440)=0x3) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x420e, r2, 0x0, 0xfffffffffffffffe) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000000)={0x0, 0x17}) ioctl$VT_DISALLOCATE(r3, 0x5608) dup(r3) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) kernel console output (not intermixed with test programs): 081 - 0 [ 43.410685][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.445193][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.478477][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.478530][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.492896][ T3736] loop0: detected capacity change from 0 to 764 [ 43.571926][ T3754] SELinux: policydb version 0 does not match my version range 15-35 [ 43.591073][ T3754] SELinux: failed to load policy [ 43.602607][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.613274][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.668728][ T3760] SELinux: policydb version 295490586 does not match my version range 15-35 [ 43.678443][ T3760] SELinux: failed to load policy [ 43.706686][ T3756] loop4: detected capacity change from 0 to 1024 [ 43.721082][ T3763] loop1: detected capacity change from 0 to 128 [ 43.733373][ T3756] EXT4-fs: Ignoring removed orlov option [ 43.746482][ T3756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.953092][ T3777] loop1: detected capacity change from 0 to 1024 [ 43.970442][ T3777] EXT4-fs: Ignoring removed orlov option [ 44.032098][ T3781] loop2: detected capacity change from 0 to 1024 [ 44.038987][ T3781] EXT4-fs: Ignoring removed orlov option [ 44.045726][ T3777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.113919][ T3781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.164255][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.196732][ T3794] loop0: detected capacity change from 0 to 2048 [ 44.237719][ T3794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.280501][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.360408][ T3805] program syz.0.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.376768][ T3805] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 44.442591][ T3802] loop3: detected capacity change from 0 to 128 [ 44.504086][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.616603][ T3812] loop1: detected capacity change from 0 to 1024 [ 44.656828][ T3812] EXT4-fs: Ignoring removed orlov option [ 44.681171][ T3812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.700169][ T3821] loop4: detected capacity change from 0 to 1024 [ 44.741969][ T3821] EXT4-fs: Ignoring removed orlov option [ 44.751195][ T3830] loop9: detected capacity change from 0 to 7 [ 44.762144][ T3821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.784173][ T3830] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.786185][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.793387][ T3830] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.809342][ T3830] loop9: unable to read partition table [ 44.815517][ T3830] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 44.815517][ T3830] ) failed (rc=-5) [ 44.844360][ T3764] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.857477][ T3764] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.867249][ T3764] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.875346][ T3764] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.884206][ T3764] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.900270][ T29] kauditd_printk_skb: 521 callbacks suppressed [ 44.900284][ T29] audit: type=1400 audit(1759099757.007:625): avc: denied { allowed } for pid=3828 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.935571][ T3830] geneve2: entered promiscuous mode [ 44.942930][ T3814] syzkaller1: entered promiscuous mode [ 44.948784][ T3814] syzkaller1: entered allmulticast mode [ 44.971176][ T3814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 44.977894][ T3814] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 44.985598][ T3814] audit: backlog limit exceeded [ 45.009960][ T3814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 45.016635][ T3814] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 45.021127][ T29] audit: type=1400 audit(1759099757.037:626): avc: denied { create } for pid=3828 comm="syz.0.64" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.024288][ T3814] audit: backlog limit exceeded [ 45.050659][ T29] audit: type=1400 audit(1759099757.037:627): avc: denied { map } for pid=3828 comm="syz.0.64" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.075036][ T29] audit: type=1400 audit(1759099757.037:628): avc: denied { read write } for pid=3828 comm="syz.0.64" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5669 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 45.106866][ T3840] loop2: detected capacity change from 0 to 1024 [ 45.113881][ T3840] EXT4-fs: Ignoring removed orlov option [ 45.123899][ T3840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.146914][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.180616][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.197427][ T3848] netlink: 'syz.4.66': attribute type 10 has an invalid length. [ 45.208216][ T3848] team0: Device hsr_slave_0 failed to register rx_handler [ 45.322347][ T3850] loop1: detected capacity change from 0 to 1024 [ 45.337531][ T3854] loop4: detected capacity change from 0 to 1024 [ 45.348130][ T3850] EXT4-fs: Ignoring removed orlov option [ 45.349458][ T3854] EXT4-fs: Ignoring removed orlov option [ 45.357219][ T3850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.362757][ T3854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.641887][ T3859] loop0: detected capacity change from 0 to 764 [ 45.689754][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.707407][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.736636][ T3870] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.761102][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.787210][ T3876] netlink: 'syz.4.73': attribute type 11 has an invalid length. [ 45.804483][ T3870] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.888468][ T3870] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.957857][ T3870] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.006293][ T3886] tipc: Started in network mode [ 46.011209][ T3886] tipc: Node identity 4, cluster identity 4711 [ 46.017431][ T3886] tipc: Node number set to 4 [ 46.033888][ T3872] loop2: detected capacity change from 0 to 764 [ 46.051323][ T318] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.063722][ T318] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.076104][ T318] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.086871][ T318] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.164503][ T3892] loop4: detected capacity change from 0 to 512 [ 46.173259][ T3892] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.80: iget: bad i_size value: 38620345925642 [ 46.186443][ T3892] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.80: couldn't read orphan inode 15 (err -117) [ 46.200209][ T3892] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.231545][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.374317][ T3901] binfmt_misc: register: failed to install interpreter file ./file2 [ 46.476151][ T3912] loop0: detected capacity change from 0 to 2048 [ 46.511106][ T3914] SELinux: policydb version 0 does not match my version range 15-35 [ 46.519339][ T3914] SELinux: failed to load policy [ 46.623610][ T3924] team0: Port device team_slave_0 removed [ 46.662007][ T3926] loop0: detected capacity change from 0 to 128 [ 46.685525][ T3926] __nla_validate_parse: 12 callbacks suppressed [ 46.685545][ T3926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 46.728853][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.737711][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.747858][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.768724][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.777705][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.788106][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.833991][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.842952][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.853910][ T3932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.926430][ T3941] binfmt_misc: register: failed to install interpreter file ./file2 [ 46.940307][ T3953] loop0: detected capacity change from 0 to 2048 [ 46.963969][ T3953] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.023504][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.051176][ T3966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.060142][ T3966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.073546][ T3966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.087908][ T3974] loop0: detected capacity change from 0 to 1024 [ 47.088612][ T3966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.102566][ T3974] EXT4-fs: Ignoring removed orlov option [ 47.136154][ T3974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.181425][ T3985] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 47.366905][ T4009] IPv6: NLM_F_CREATE should be specified when creating new route [ 47.375338][ T4009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.382567][ T4009] IPv6: NLM_F_CREATE should be set when creating new route [ 47.411545][ T4012] loop4: detected capacity change from 0 to 512 [ 47.418285][ T4012] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 47.484193][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.570017][ T4036] process 'syz.0.141' launched '/dev/fd/6' with NULL argv: empty string added [ 47.600226][ T4036] netem: change failed [ 47.661212][ T4053] FAULT_INJECTION: forcing a failure. [ 47.661212][ T4053] name failslab, interval 1, probability 0, space 0, times 1 [ 47.674167][ T4053] CPU: 0 UID: 0 PID: 4053 Comm: syz.3.148 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.674264][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.674280][ T4053] Call Trace: [ 47.674289][ T4053] [ 47.674299][ T4053] __dump_stack+0x1d/0x30 [ 47.674326][ T4053] dump_stack_lvl+0xe8/0x140 [ 47.674349][ T4053] dump_stack+0x15/0x1b [ 47.674365][ T4053] should_fail_ex+0x265/0x280 [ 47.674474][ T4053] should_failslab+0x8c/0xb0 [ 47.674502][ T4053] kmem_cache_alloc_noprof+0x50/0x310 [ 47.674539][ T4053] ? security_inode_alloc+0x37/0x100 [ 47.674583][ T4053] security_inode_alloc+0x37/0x100 [ 47.674662][ T4053] inode_init_always_gfp+0x4b7/0x500 [ 47.674766][ T4053] alloc_inode+0x58/0x170 [ 47.674788][ T4053] new_inode+0x1d/0xe0 [ 47.674842][ T4053] ramfs_get_inode+0x24/0x1b0 [ 47.674867][ T4053] ramfs_tmpfile+0x36/0x100 [ 47.674891][ T4053] vfs_tmpfile+0x223/0x4d0 [ 47.674914][ T4053] do_tmpfile+0xa8/0x190 [ 47.674945][ T4053] path_openat+0x1dd7/0x2170 [ 47.675008][ T4053] ? _parse_integer_limit+0x170/0x190 [ 47.675040][ T4053] ? _parse_integer+0x27/0x40 [ 47.675069][ T4053] ? kstrtoull+0x111/0x140 [ 47.675100][ T4053] ? kstrtouint+0x76/0xc0 [ 47.675152][ T4053] do_filp_open+0x109/0x230 [ 47.675222][ T4053] do_sys_openat2+0xa6/0x110 [ 47.675268][ T4053] __x64_sys_open+0xe6/0x110 [ 47.675314][ T4053] x64_sys_call+0x1457/0x2ff0 [ 47.675422][ T4053] do_syscall_64+0xd2/0x200 [ 47.675454][ T4053] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 47.675490][ T4053] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.675525][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.675614][ T4053] RIP: 0033:0x7fbb9047eec9 [ 47.675632][ T4053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.675654][ T4053] RSP: 002b:00007fbb8eedf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 47.675739][ T4053] RAX: ffffffffffffffda RBX: 00007fbb906d5fa0 RCX: 00007fbb9047eec9 [ 47.675756][ T4053] RDX: 78e22799f4a46e8e RSI: 0000000000518282 RDI: 0000200000000080 [ 47.675773][ T4053] RBP: 00007fbb8eedf090 R08: 0000000000000000 R09: 0000000000000000 [ 47.675790][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.675807][ T4053] R13: 00007fbb906d6038 R14: 00007fbb906d5fa0 R15: 00007fff2a976648 [ 47.675829][ T4053] [ 47.933109][ T4059] team0: Port device team_slave_0 removed [ 47.992664][ T4068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 48.006258][ T4068] bond1: (slave bond2): Enslaving as an active interface with an up link [ 48.017599][ T4070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.031583][ T4079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 48.088620][ T4082] Zero length message leads to an empty skb [ 48.148300][ T4091] loop1: detected capacity change from 0 to 1024 [ 48.161872][ T4091] ext4: Unknown parameter 'obj_type' [ 48.329283][ T4091] FAULT_INJECTION: forcing a failure. [ 48.329283][ T4091] name failslab, interval 1, probability 0, space 0, times 0 [ 48.342435][ T4091] CPU: 0 UID: 0 PID: 4091 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 48.342471][ T4091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 48.342486][ T4091] Call Trace: [ 48.342493][ T4091] [ 48.342501][ T4091] __dump_stack+0x1d/0x30 [ 48.342522][ T4091] dump_stack_lvl+0xe8/0x140 [ 48.342592][ T4091] dump_stack+0x15/0x1b [ 48.342614][ T4091] should_fail_ex+0x265/0x280 [ 48.342647][ T4091] should_failslab+0x8c/0xb0 [ 48.342719][ T4091] kmem_cache_alloc_node_noprof+0x57/0x320 [ 48.342780][ T4091] ? __alloc_skb+0x101/0x320 [ 48.342861][ T4091] __alloc_skb+0x101/0x320 [ 48.342883][ T4091] ? audit_log_start+0x365/0x6c0 [ 48.342975][ T4091] audit_log_start+0x380/0x6c0 [ 48.343018][ T4091] audit_seccomp+0x48/0x100 [ 48.343116][ T4091] ? __seccomp_filter+0x68c/0x10d0 [ 48.343193][ T4091] __seccomp_filter+0x69d/0x10d0 [ 48.343222][ T4091] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 48.343258][ T4091] ? vfs_write+0x7e8/0x960 [ 48.343309][ T4091] __secure_computing+0x82/0x150 [ 48.343348][ T4091] syscall_trace_enter+0xcf/0x1e0 [ 48.343380][ T4091] do_syscall_64+0xac/0x200 [ 48.343428][ T4091] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 48.343459][ T4091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 48.343562][ T4091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.343644][ T4091] RIP: 0033:0x7f22f4b2eec9 [ 48.343663][ T4091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.343686][ T4091] RSP: 002b:00007f22f3597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 48.343710][ T4091] RAX: ffffffffffffffda RBX: 00007f22f4d85fa0 RCX: 00007f22f4b2eec9 [ 48.343726][ T4091] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 0000000000000009 [ 48.343741][ T4091] RBP: 00007f22f3597090 R08: 0000000000000000 R09: 0000000000000000 [ 48.343757][ T4091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.343793][ T4091] R13: 00007f22f4d86038 R14: 00007f22f4d85fa0 R15: 00007ffd75544458 [ 48.343820][ T4091] [ 48.551675][ T4101] loop1: detected capacity change from 0 to 512 [ 48.574711][ T4101] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.594752][ T4105] loop0: detected capacity change from 0 to 128 [ 48.662508][ T4110] loop4: detected capacity change from 0 to 1024 [ 48.684196][ T4110] EXT4-fs: Ignoring removed orlov option [ 48.692001][ T4110] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.821575][ T4122] loop0: detected capacity change from 0 to 512 [ 48.828830][ T4122] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.840657][ T4122] EXT4-fs (loop0): 1 truncate cleaned up [ 48.862122][ T4122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.926852][ T4132] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 49.002277][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.448153][ T4184] IPv6: NLM_F_CREATE should be specified when creating new route [ 49.456020][ T4184] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 49.463299][ T4184] IPv6: NLM_F_CREATE should be set when creating new route [ 49.537909][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.700413][ T4210] loop0: detected capacity change from 0 to 512 [ 49.707772][ T4210] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.717831][ T4211] loop1: detected capacity change from 0 to 2048 [ 49.720891][ T4210] EXT4-fs (loop0): 1 truncate cleaned up [ 49.730816][ T4210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.758951][ T4211] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.794812][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.908488][ T29] kauditd_printk_skb: 798 callbacks suppressed [ 49.908508][ T29] audit: type=1326 audit(1759099762.017:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4b8495db2a code=0x7ffc0000 [ 49.952549][ T29] audit: type=1326 audit(1759099762.017:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4227 comm="syz.4.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4b84991785 code=0x7ffc0000 [ 49.977344][ T29] audit: type=1326 audit(1759099762.067:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 50.000866][ T29] audit: type=1326 audit(1759099762.067:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 50.024302][ T29] audit: type=1326 audit(1759099762.067:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 50.047778][ T29] audit: type=1326 audit(1759099762.067:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 50.071447][ T29] audit: type=1326 audit(1759099762.067:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 50.094982][ T29] audit: type=1326 audit(1759099762.067:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 50.118536][ T29] audit: type=1326 audit(1759099762.067:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 50.142567][ T29] audit: type=1326 audit(1759099762.067:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4240 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 50.214023][ T4253] loop2: detected capacity change from 0 to 2048 [ 50.225730][ T4255] SELinux: policydb version 0 does not match my version range 15-35 [ 50.233908][ T4255] SELinux: failed to load policy [ 50.241071][ T4253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.277436][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.286824][ T4260] loop1: detected capacity change from 0 to 2048 [ 50.310748][ T4260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.337962][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.418576][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.465297][ T4277] loop0: detected capacity change from 0 to 128 [ 50.479658][ T4283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.533164][ T4291] loop1: detected capacity change from 0 to 512 [ 50.535123][ T4289] loop0: detected capacity change from 0 to 2048 [ 50.556809][ T4289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.557416][ T4291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.583431][ T4291] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.598626][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.605563][ T4291] EXT4-fs (loop1): shut down requested (0) [ 50.632402][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.641684][ T4297] loop0: detected capacity change from 0 to 2048 [ 50.656518][ T4297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.686065][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.762544][ T4312] SELinux: policydb version 0 does not match my version range 15-35 [ 50.779484][ T4312] SELinux: failed to load policy [ 50.797608][ T4316] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 50.844337][ T4324] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 50.850913][ T4322] loop1: detected capacity change from 0 to 2048 [ 50.867836][ T4322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.896549][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.096428][ T4359] IPv6: NLM_F_CREATE should be specified when creating new route [ 51.105124][ T4359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.112472][ T4359] IPv6: NLM_F_CREATE should be set when creating new route [ 51.203401][ T4367] loop1: detected capacity change from 0 to 128 [ 51.273652][ T4385] loop1: detected capacity change from 0 to 128 [ 51.274201][ T4383] loop0: detected capacity change from 0 to 2048 [ 51.306752][ T4383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.324433][ T4389] FAULT_INJECTION: forcing a failure. [ 51.324433][ T4389] name failslab, interval 1, probability 0, space 0, times 0 [ 51.337294][ T4389] CPU: 1 UID: 0 PID: 4389 Comm: syz.1.273 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.337322][ T4389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 51.337371][ T4389] Call Trace: [ 51.337377][ T4389] [ 51.337387][ T4389] __dump_stack+0x1d/0x30 [ 51.337415][ T4389] dump_stack_lvl+0xe8/0x140 [ 51.337440][ T4389] dump_stack+0x15/0x1b [ 51.337462][ T4389] should_fail_ex+0x265/0x280 [ 51.337492][ T4389] ? rtnl_newlink+0x5c/0x12d0 [ 51.337655][ T4389] should_failslab+0x8c/0xb0 [ 51.337687][ T4389] __kmalloc_cache_noprof+0x4c/0x320 [ 51.337729][ T4389] rtnl_newlink+0x5c/0x12d0 [ 51.337813][ T4389] ? refill_stock+0x32f/0x390 [ 51.337833][ T4389] ? page_counter_cancel+0xe1/0x1e0 [ 51.337868][ T4389] ? __rcu_read_unlock+0x4f/0x70 [ 51.337911][ T4389] ? bpf_get_ns_current_pid_tgid+0xf5/0x130 [ 51.337939][ T4389] ? __rcu_read_unlock+0x34/0x70 [ 51.337963][ T4389] ? bpf_trace_run3+0x12c/0x1d0 [ 51.337995][ T4389] ? __kfree_skb+0x109/0x150 [ 51.338040][ T4389] ? __rcu_read_unlock+0x4f/0x70 [ 51.338096][ T4389] ? avc_has_perm_noaudit+0x1b1/0x200 [ 51.338139][ T4389] ? cred_has_capability+0x210/0x280 [ 51.338165][ T4389] ? selinux_capable+0x31/0x40 [ 51.338196][ T4389] ? security_capable+0x83/0x90 [ 51.338303][ T4389] ? ns_capable+0x7d/0xb0 [ 51.338328][ T4389] ? __pfx_rtnl_newlink+0x10/0x10 [ 51.338363][ T4389] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 51.338443][ T4389] netlink_rcv_skb+0x123/0x220 [ 51.338472][ T4389] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 51.338589][ T4389] rtnetlink_rcv+0x1c/0x30 [ 51.338694][ T4389] netlink_unicast+0x5bd/0x690 [ 51.338756][ T4389] netlink_sendmsg+0x58b/0x6b0 [ 51.338832][ T4389] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.338864][ T4389] __sock_sendmsg+0x145/0x180 [ 51.338984][ T4389] ____sys_sendmsg+0x31e/0x4e0 [ 51.339020][ T4389] ___sys_sendmsg+0x17b/0x1d0 [ 51.339069][ T4389] __x64_sys_sendmsg+0xd4/0x160 [ 51.339128][ T4389] x64_sys_call+0x191e/0x2ff0 [ 51.339159][ T4389] do_syscall_64+0xd2/0x200 [ 51.339197][ T4389] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 51.339268][ T4389] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.339301][ T4389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.339323][ T4389] RIP: 0033:0x7f22f4b2eec9 [ 51.339366][ T4389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.339387][ T4389] RSP: 002b:00007f22f3597038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.339445][ T4389] RAX: ffffffffffffffda RBX: 00007f22f4d85fa0 RCX: 00007f22f4b2eec9 [ 51.339457][ T4389] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000004 [ 51.339470][ T4389] RBP: 00007f22f3597090 R08: 0000000000000000 R09: 0000000000000000 [ 51.339485][ T4389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.339568][ T4389] R13: 00007f22f4d86038 R14: 00007f22f4d85fa0 R15: 00007ffd75544458 [ 51.339591][ T4389] [ 51.648094][ T4391] SELinux: policydb version 0 does not match my version range 15-35 [ 51.661123][ T4391] SELinux: failed to load policy [ 51.672002][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.756542][ T4408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 51.827952][ T4418] loop1: detected capacity change from 0 to 2048 [ 51.864483][ T4416] loop4: detected capacity change from 0 to 128 [ 51.877875][ T4418] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.911395][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.990191][ T4434] loop0: detected capacity change from 0 to 512 [ 52.019534][ T4451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 52.031606][ T4434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 52.069217][ T4434] EXT4-fs (loop0): 1 truncate cleaned up [ 52.094338][ T4464] __nla_validate_parse: 20 callbacks suppressed [ 52.094358][ T4464] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.301'. [ 52.164027][ T4472] loop2: detected capacity change from 0 to 128 [ 52.459647][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.314'. [ 52.478638][ T4502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.302'. [ 52.488116][ T4467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.302'. [ 52.516278][ T4504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.316'. [ 52.714962][ T4533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.327'. [ 52.763089][ T4539] SELinux: policydb version 0 does not match my version range 15-35 [ 52.772300][ T4539] SELinux: failed to load policy [ 52.779162][ T4541] FAULT_INJECTION: forcing a failure. [ 52.779162][ T4541] name failslab, interval 1, probability 0, space 0, times 0 [ 52.791943][ T4541] CPU: 1 UID: 0 PID: 4541 Comm: syz.1.331 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.791973][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.792019][ T4541] Call Trace: [ 52.792080][ T4541] [ 52.792090][ T4541] __dump_stack+0x1d/0x30 [ 52.792117][ T4541] dump_stack_lvl+0xe8/0x140 [ 52.792142][ T4541] dump_stack+0x15/0x1b [ 52.792163][ T4541] should_fail_ex+0x265/0x280 [ 52.792194][ T4541] should_failslab+0x8c/0xb0 [ 52.792268][ T4541] __kmalloc_noprof+0xa5/0x3e0 [ 52.792299][ T4541] ? ip_options_get+0x52/0x350 [ 52.792334][ T4541] ip_options_get+0x52/0x350 [ 52.792361][ T4541] ? __rcu_read_unlock+0x4f/0x70 [ 52.792403][ T4541] do_ip_setsockopt+0x19d4/0x2240 [ 52.792443][ T4541] ip_setsockopt+0x58/0x110 [ 52.792463][ T4541] sctp_setsockopt+0x113/0xe30 [ 52.792539][ T4541] sock_common_setsockopt+0x66/0x80 [ 52.792614][ T4541] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 52.792650][ T4541] __sys_setsockopt+0x184/0x200 [ 52.792676][ T4541] __x64_sys_setsockopt+0x64/0x80 [ 52.792701][ T4541] x64_sys_call+0x20ec/0x2ff0 [ 52.792723][ T4541] do_syscall_64+0xd2/0x200 [ 52.792871][ T4541] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.792897][ T4541] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 52.792927][ T4541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.792950][ T4541] RIP: 0033:0x7f22f4b2eec9 [ 52.792966][ T4541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.793065][ T4541] RSP: 002b:00007f22f3597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.793155][ T4541] RAX: ffffffffffffffda RBX: 00007f22f4d85fa0 RCX: 00007f22f4b2eec9 [ 52.793169][ T4541] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.793181][ T4541] RBP: 00007f22f3597090 R08: 0000000000000005 R09: 0000000000000000 [ 52.793194][ T4541] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.793207][ T4541] R13: 00007f22f4d86038 R14: 00007f22f4d85fa0 R15: 00007ffd75544458 [ 52.793228][ T4541] [ 53.043687][ T4549] netlink: 132 bytes leftover after parsing attributes in process `syz.1.336'. [ 53.104410][ T4549] loop1: detected capacity change from 0 to 8192 [ 53.148338][ T4561] team0: Port device team_slave_0 removed [ 53.232021][ T4566] loop0: detected capacity change from 0 to 512 [ 53.239028][ T4566] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.251256][ T4566] EXT4-fs (loop0): 1 truncate cleaned up [ 53.280489][ T4573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.296345][ T4576] loop2: detected capacity change from 0 to 128 [ 53.317026][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.344'. [ 53.410360][ T4593] SELinux: policydb version 0 does not match my version range 15-35 [ 53.440223][ T4593] SELinux: failed to load policy [ 53.548068][ T4614] loop1: detected capacity change from 0 to 2048 [ 53.657511][ T4633] loop2: detected capacity change from 0 to 128 [ 53.706195][ T4637] SELinux: policydb version 0 does not match my version range 15-35 [ 53.715374][ T4637] SELinux: failed to load policy [ 53.832739][ T4657] loop2: detected capacity change from 0 to 2048 [ 53.917790][ T4672] SELinux: policydb version 0 does not match my version range 15-35 [ 53.921396][ T4675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 53.937894][ T4672] SELinux: failed to load policy [ 53.962170][ T4664] FAULT_INJECTION: forcing a failure. [ 53.962170][ T4664] name failslab, interval 1, probability 0, space 0, times 0 [ 53.975020][ T4664] CPU: 0 UID: 0 PID: 4664 Comm: syz.1.381 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.975076][ T4664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.975090][ T4664] Call Trace: [ 53.975097][ T4664] [ 53.975106][ T4664] __dump_stack+0x1d/0x30 [ 53.975133][ T4664] dump_stack_lvl+0xe8/0x140 [ 53.975159][ T4664] dump_stack+0x15/0x1b [ 53.975182][ T4664] should_fail_ex+0x265/0x280 [ 53.975215][ T4664] ? __request_module+0x1c4/0x3e0 [ 53.975312][ T4664] should_failslab+0x8c/0xb0 [ 53.975362][ T4664] ? dev_load+0xa3/0xc0 [ 53.975393][ T4664] __kmalloc_cache_noprof+0x4c/0x320 [ 53.975437][ T4664] ? dev_load+0xa3/0xc0 [ 53.975470][ T4664] __request_module+0x1c4/0x3e0 [ 53.975552][ T4664] dev_load+0xa3/0xc0 [ 53.975583][ T4664] dev_ioctl+0x6f4/0x960 [ 53.975651][ T4664] sock_do_ioctl+0x197/0x220 [ 53.975710][ T4664] sock_ioctl+0x41b/0x610 [ 53.975804][ T4664] ? __pfx_sock_ioctl+0x10/0x10 [ 53.975845][ T4664] __se_sys_ioctl+0xce/0x140 [ 53.975873][ T4664] __x64_sys_ioctl+0x43/0x50 [ 53.975926][ T4664] x64_sys_call+0x1816/0x2ff0 [ 53.975950][ T4664] do_syscall_64+0xd2/0x200 [ 53.976043][ T4664] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.976079][ T4664] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.976116][ T4664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.976140][ T4664] RIP: 0033:0x7f22f4b2eec9 [ 53.976178][ T4664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.976252][ T4664] RSP: 002b:00007f22f3597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.976278][ T4664] RAX: ffffffffffffffda RBX: 00007f22f4d85fa0 RCX: 00007f22f4b2eec9 [ 53.976293][ T4664] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000008 [ 53.976307][ T4664] RBP: 00007f22f3597090 R08: 0000000000000000 R09: 0000000000000000 [ 53.976322][ T4664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.976398][ T4664] R13: 00007f22f4d86038 R14: 00007f22f4d85fa0 R15: 00007ffd75544458 [ 53.976450][ T4664] [ 53.999237][ T4680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 54.096343][ T4689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 54.281547][ T4704] loop1: detected capacity change from 0 to 128 [ 54.353264][ T4716] FAULT_INJECTION: forcing a failure. [ 54.353264][ T4716] name failslab, interval 1, probability 0, space 0, times 0 [ 54.360306][ T4719] loop2: detected capacity change from 0 to 128 [ 54.366008][ T4716] CPU: 0 UID: 0 PID: 4716 Comm: syz.1.402 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.366048][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.366092][ T4716] Call Trace: [ 54.366099][ T4716] [ 54.366139][ T4716] __dump_stack+0x1d/0x30 [ 54.366171][ T4716] dump_stack_lvl+0xe8/0x140 [ 54.366199][ T4716] dump_stack+0x15/0x1b [ 54.366222][ T4716] should_fail_ex+0x265/0x280 [ 54.366258][ T4716] should_failslab+0x8c/0xb0 [ 54.366300][ T4716] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.366343][ T4716] ? __alloc_skb+0x101/0x320 [ 54.366446][ T4716] __alloc_skb+0x101/0x320 [ 54.366539][ T4716] alloc_uevent_skb+0x5c/0x120 [ 54.366580][ T4716] kobject_uevent_net_broadcast+0xfb/0x410 [ 54.366619][ T4716] kobject_uevent_env+0x43d/0x570 [ 54.366659][ T4716] kobject_uevent+0x1d/0x30 [ 54.366690][ T4716] __kobject_del+0x88/0x190 [ 54.366746][ T4716] kobject_put+0x127/0x190 [ 54.366774][ T4716] netdev_queue_update_kobjects+0x45f/0x4d0 [ 54.366854][ T4716] netif_set_real_num_tx_queues+0x1a1/0x4f0 [ 54.366891][ T4716] __tun_detach+0x6c2/0xad0 [ 54.366929][ T4716] __tun_chr_ioctl+0x880/0x14c0 [ 54.366962][ T4716] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 54.367012][ T4716] tun_chr_ioctl+0x27/0x40 [ 54.367039][ T4716] __se_sys_ioctl+0xce/0x140 [ 54.367120][ T4716] __x64_sys_ioctl+0x43/0x50 [ 54.367146][ T4716] x64_sys_call+0x1816/0x2ff0 [ 54.367178][ T4716] do_syscall_64+0xd2/0x200 [ 54.367289][ T4716] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.367330][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.367451][ T4716] RIP: 0033:0x7f22f4b2eec9 [ 54.367475][ T4716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.367501][ T4716] RSP: 002b:00007f22f3597038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 54.367531][ T4716] RAX: ffffffffffffffda RBX: 00007f22f4d85fa0 RCX: 00007f22f4b2eec9 [ 54.367549][ T4716] RDX: 0000200000000100 RSI: 00000000400454d9 RDI: 0000000000000006 [ 54.367620][ T4716] RBP: 00007f22f3597090 R08: 0000000000000000 R09: 0000000000000000 [ 54.367638][ T4716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.367655][ T4716] R13: 00007f22f4d86038 R14: 00007f22f4d85fa0 R15: 00007ffd75544458 [ 54.367683][ T4716] [ 54.478098][ T4723] loop4: detected capacity change from 0 to 512 [ 54.490504][ T4719] netlink: 20 bytes leftover after parsing attributes in process `syz.2.403'. [ 54.497280][ T4723] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.632633][ T4723] EXT4-fs (loop4): 1 truncate cleaned up [ 54.748201][ T4738] SELinux: policydb version 0 does not match my version range 15-35 [ 54.756967][ T4738] SELinux: failed to load policy [ 54.831443][ T4750] loop1: detected capacity change from 0 to 128 [ 54.884014][ T4755] loop2: detected capacity change from 0 to 2048 [ 54.910010][ T4760] loop1: detected capacity change from 0 to 128 [ 54.929607][ T29] kauditd_printk_skb: 835 callbacks suppressed [ 54.929624][ T29] audit: type=1400 audit(1759099767.037:2270): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.966708][ T29] audit: type=1400 audit(1759099767.067:2271): avc: denied { read } for pid=4765 comm="syz.1.423" dev="nsfs" ino=4026532602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.987943][ T29] audit: type=1400 audit(1759099767.067:2272): avc: denied { open } for pid=4765 comm="syz.1.423" path="net:[4026532602]" dev="nsfs" ino=4026532602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 55.022926][ T29] audit: type=1400 audit(1759099767.077:2273): avc: denied { ioctl } for pid=4766 comm="syz.0.422" path="socket:[9499]" dev="sockfs" ino=9499 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.048814][ T29] audit: type=1326 audit(1759099767.127:2274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 55.072304][ T29] audit: type=1326 audit(1759099767.127:2275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 55.078125][ T4774] SELinux: policydb version 0 does not match my version range 15-35 [ 55.096131][ T29] audit: type=1326 audit(1759099767.127:2276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffac90dd97f code=0x7ffc0000 [ 55.104826][ T4774] SELinux: failed to load policy [ 55.127707][ T29] audit: type=1326 audit(1759099767.127:2277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4771 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac90deec9 code=0x7ffc0000 [ 55.189876][ T4768] team0: Port device team_slave_0 removed [ 55.193846][ T4778] loop1: detected capacity change from 0 to 128 [ 55.276010][ T4787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.295321][ T29] audit: type=1400 audit(1759099767.397:2278): avc: denied { create } for pid=4784 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.315162][ T29] audit: type=1400 audit(1759099767.397:2279): avc: denied { setopt } for pid=4784 comm="syz.2.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 55.471889][ T4816] SELinux: policydb version 0 does not match my version range 15-35 [ 55.480409][ T4816] SELinux: failed to load policy [ 55.499858][ T4811] loop1: detected capacity change from 0 to 512 [ 55.508665][ T4811] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 55.522942][ T4811] EXT4-fs (loop1): 1 truncate cleaned up [ 55.582423][ T4824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.858859][ T4837] loop0: detected capacity change from 0 to 512 [ 55.874296][ T4837] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 55.907882][ T4837] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.063536][ T4853] SELinux: policydb version 0 does not match my version range 15-35 [ 56.072583][ T4853] SELinux: failed to load policy [ 56.174441][ T4859] loop2: detected capacity change from 0 to 128 [ 56.181989][ T4837] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 56.196692][ T4837] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 56.209291][ T4837] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.209291][ T4837] [ 56.219567][ T4837] EXT4-fs (loop0): Total free blocks count 0 [ 56.225684][ T4837] EXT4-fs (loop0): Free/Dirty block details [ 56.231604][ T4837] EXT4-fs (loop0): free_blocks=39626 [ 56.237000][ T4837] EXT4-fs (loop0): dirty_blocks=4096 [ 56.242315][ T4837] EXT4-fs (loop0): Block reservation details [ 56.248342][ T4837] EXT4-fs (loop0): i_reserved_data_blocks=4096 [ 56.286220][ T4837] syz.0.448 (4837) used greatest stack depth: 10024 bytes left [ 56.320972][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28 [ 56.333809][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 56.333809][ T51] [ 56.336821][ T4868] loop1: detected capacity change from 0 to 128 [ 56.468296][ T4880] loop2: detected capacity change from 0 to 128 [ 56.613586][ T4904] loop0: detected capacity change from 0 to 2048 [ 56.636951][ T4907] loop1: detected capacity change from 0 to 2048 [ 56.643827][ T4907] EXT4-fs: Ignoring removed i_version option [ 56.709819][ T4920] loop0: detected capacity change from 0 to 128 [ 56.881027][ T4945] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.042566][ C0] hrtimer: interrupt took 37606 ns [ 57.131283][ T4976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.162475][ T4979] __nla_validate_parse: 13 callbacks suppressed [ 57.162490][ T4979] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'. [ 57.273438][ T4989] loop1: detected capacity change from 0 to 512 [ 57.282279][ T4989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.317599][ T4989] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.333920][ T5003] SELinux: policydb version 0 does not match my version range 15-35 [ 57.342734][ T5003] SELinux: failed to load policy [ 57.344546][ T5005] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.359033][ T5005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 57.366318][ T5005] IPv6: NLM_F_CREATE should be set when creating new route [ 57.389185][ T5007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.518'. [ 57.462126][ T5015] FAULT_INJECTION: forcing a failure. [ 57.462126][ T5015] name failslab, interval 1, probability 0, space 0, times 0 [ 57.475149][ T5015] CPU: 0 UID: 0 PID: 5015 Comm: syz.2.521 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.475181][ T5015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.475197][ T5015] Call Trace: [ 57.475204][ T5015] [ 57.475215][ T5015] __dump_stack+0x1d/0x30 [ 57.475242][ T5015] dump_stack_lvl+0xe8/0x140 [ 57.475267][ T5015] dump_stack+0x15/0x1b [ 57.475345][ T5015] should_fail_ex+0x265/0x280 [ 57.475372][ T5015] should_failslab+0x8c/0xb0 [ 57.475474][ T5015] kmem_cache_alloc_node_noprof+0x57/0x320 [ 57.475516][ T5015] ? __alloc_skb+0x101/0x320 [ 57.475544][ T5015] ? should_fail_ex+0x30/0x280 [ 57.475573][ T5015] __alloc_skb+0x101/0x320 [ 57.475596][ T5015] ? avc_has_perm_noaudit+0x1b1/0x200 [ 57.475679][ T5015] alloc_skb_with_frags+0x7d/0x470 [ 57.475700][ T5015] ? avc_has_perm+0xf7/0x180 [ 57.475782][ T5015] sock_alloc_send_pskb+0x43a/0x4f0 [ 57.475815][ T5015] unix_dgram_sendmsg+0x380/0xfe0 [ 57.475926][ T5015] ? avc_has_perm+0xf7/0x180 [ 57.475963][ T5015] ? selinux_socket_sendmsg+0x175/0x1b0 [ 57.476004][ T5015] unix_seqpacket_sendmsg+0xd1/0x110 [ 57.476116][ T5015] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 57.476155][ T5015] __sock_sendmsg+0x145/0x180 [ 57.476191][ T5015] sock_write_iter+0x165/0x1b0 [ 57.476306][ T5015] ? __pfx_sock_write_iter+0x10/0x10 [ 57.476338][ T5015] vfs_write+0x527/0x960 [ 57.476438][ T5015] ksys_write+0xda/0x1a0 [ 57.476470][ T5015] __x64_sys_write+0x40/0x50 [ 57.476499][ T5015] x64_sys_call+0x27fe/0x2ff0 [ 57.476524][ T5015] do_syscall_64+0xd2/0x200 [ 57.476571][ T5015] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.476600][ T5015] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.476696][ T5015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.476721][ T5015] RIP: 0033:0x7ffac90deec9 [ 57.476739][ T5015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.476757][ T5015] RSP: 002b:00007ffac7b3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 57.476776][ T5015] RAX: ffffffffffffffda RBX: 00007ffac9335fa0 RCX: 00007ffac90deec9 [ 57.476868][ T5015] RDX: 000000000000457f RSI: 0000200000000b40 RDI: 0000000000000003 [ 57.476886][ T5015] RBP: 00007ffac7b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.476902][ T5015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.476918][ T5015] R13: 00007ffac9336038 R14: 00007ffac9335fa0 R15: 00007fff34e11c88 [ 57.476942][ T5015] [ 57.742456][ T4989] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 57.757513][ T4989] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2048 with error 28 [ 57.770393][ T4989] EXT4-fs (loop1): This should not happen!! Data will be lost [ 57.770393][ T4989] [ 57.780304][ T4989] EXT4-fs (loop1): Total free blocks count 0 [ 57.786515][ T4989] EXT4-fs (loop1): Free/Dirty block details [ 57.792463][ T4989] EXT4-fs (loop1): free_blocks=39626 [ 57.797808][ T4989] EXT4-fs (loop1): dirty_blocks=4096 [ 57.801466][ T5020] FAULT_INJECTION: forcing a failure. [ 57.801466][ T5020] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.803143][ T4989] EXT4-fs (loop1): Block reservation details [ 57.803161][ T4989] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 57.816242][ T5020] CPU: 0 UID: 0 PID: 5020 Comm: syz.0.523 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.816291][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 57.816307][ T5020] Call Trace: [ 57.816317][ T5020] [ 57.816328][ T5020] __dump_stack+0x1d/0x30 [ 57.816361][ T5020] dump_stack_lvl+0xe8/0x140 [ 57.816435][ T5020] dump_stack+0x15/0x1b [ 57.816460][ T5020] should_fail_ex+0x265/0x280 [ 57.816564][ T5020] should_fail+0xb/0x20 [ 57.816594][ T5020] should_fail_usercopy+0x1a/0x20 [ 57.816704][ T5020] strncpy_from_user+0x25/0x230 [ 57.816769][ T5020] ? kmem_cache_alloc_noprof+0x186/0x310 [ 57.816809][ T5020] ? getname_flags+0x80/0x3b0 [ 57.816853][ T5020] getname_flags+0xae/0x3b0 [ 57.816947][ T5020] do_sys_openat2+0x60/0x110 [ 57.816997][ T5020] __x64_sys_openat+0xf2/0x120 [ 57.817046][ T5020] x64_sys_call+0x2e9c/0x2ff0 [ 57.817169][ T5020] do_syscall_64+0xd2/0x200 [ 57.817221][ T5020] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 57.817257][ T5020] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.817297][ T5020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.817405][ T5020] RIP: 0033:0x7ff3a26eeec9 [ 57.817463][ T5020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.817488][ T5020] RSP: 002b:00007ff3a114f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 57.817541][ T5020] RAX: ffffffffffffffda RBX: 00007ff3a2945fa0 RCX: 00007ff3a26eeec9 [ 57.817559][ T5020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 57.817586][ T5020] RBP: 00007ff3a114f090 R08: 0000000000000000 R09: 0000000000000000 [ 57.817604][ T5020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.817684][ T5020] R13: 00007ff3a2946038 R14: 00007ff3a2945fa0 R15: 00007fff942de598 [ 57.817712][ T5020] [ 58.002091][ T5031] loop2: detected capacity change from 0 to 512 [ 58.028521][ T5031] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.041533][ T5031] EXT4-fs (loop2): 1 truncate cleaned up [ 58.078103][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2046 with error 28 [ 58.090957][ T56] EXT4-fs (loop1): This should not happen!! Data will be lost [ 58.090957][ T56] [ 58.165831][ T5036] loop1: detected capacity change from 0 to 2048 [ 58.366458][ T5068] netlink: 16 bytes leftover after parsing attributes in process `syz.0.542'. [ 58.421335][ T5073] loop0: detected capacity change from 0 to 128 [ 58.433838][ T5073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.544'. [ 58.517772][ T5083] loop1: detected capacity change from 0 to 128 [ 58.547206][ T5086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.550'. [ 58.620665][ T5097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.554'. [ 58.713923][ T5113] loop2: detected capacity change from 0 to 512 [ 58.717177][ T5112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 58.751931][ T5113] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 58.762183][ T5113] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.561: bad orphan inode 14 [ 58.773959][ T5113] ext4_test_bit(bit=13, block=18) = 1 [ 58.779399][ T5113] is_bad_inode(inode)=0 [ 58.783594][ T5113] NEXT_ORPHAN(inode)=0 [ 58.787709][ T5113] max_ino=32 [ 58.790918][ T5113] i_nlink=1 [ 58.796450][ T5113] ext2 filesystem being mounted at /131/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.829643][ T5116] loop0: detected capacity change from 0 to 128 [ 58.957024][ T5132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.567'. [ 59.158062][ T5144] FAULT_INJECTION: forcing a failure. [ 59.158062][ T5144] name failslab, interval 1, probability 0, space 0, times 0 [ 59.170852][ T5144] CPU: 1 UID: 0 PID: 5144 Comm: syz.2.573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.170889][ T5144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.170910][ T5144] Call Trace: [ 59.170918][ T5144] [ 59.170928][ T5144] __dump_stack+0x1d/0x30 [ 59.170962][ T5144] dump_stack_lvl+0xe8/0x140 [ 59.170982][ T5144] dump_stack+0x15/0x1b [ 59.171038][ T5144] should_fail_ex+0x265/0x280 [ 59.171074][ T5144] should_failslab+0x8c/0xb0 [ 59.171108][ T5144] kmem_cache_alloc_node_noprof+0x57/0x320 [ 59.171212][ T5144] ? __alloc_skb+0x101/0x320 [ 59.171240][ T5144] __alloc_skb+0x101/0x320 [ 59.171323][ T5144] netlink_alloc_large_skb+0xba/0xf0 [ 59.171351][ T5144] netlink_sendmsg+0x3cf/0x6b0 [ 59.171386][ T5144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.171416][ T5144] __sock_sendmsg+0x145/0x180 [ 59.171533][ T5144] ____sys_sendmsg+0x31e/0x4e0 [ 59.171566][ T5144] ___sys_sendmsg+0x17b/0x1d0 [ 59.171617][ T5144] __x64_sys_sendmsg+0xd4/0x160 [ 59.171647][ T5144] x64_sys_call+0x191e/0x2ff0 [ 59.171669][ T5144] do_syscall_64+0xd2/0x200 [ 59.171778][ T5144] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.171803][ T5144] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.171831][ T5144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.171853][ T5144] RIP: 0033:0x7ffac90deec9 [ 59.171879][ T5144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.171897][ T5144] RSP: 002b:00007ffac7b3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.171919][ T5144] RAX: ffffffffffffffda RBX: 00007ffac9335fa0 RCX: 00007ffac90deec9 [ 59.171931][ T5144] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 59.171944][ T5144] RBP: 00007ffac7b3f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.171979][ T5144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.172015][ T5144] R13: 00007ffac9336038 R14: 00007ffac9335fa0 R15: 00007fff34e11c88 [ 59.172121][ T5144] [ 59.391705][ T5146] SELinux: policydb version 0 does not match my version range 15-35 [ 59.400666][ T5146] SELinux: failed to load policy [ 59.468385][ T5157] loop4: detected capacity change from 0 to 128 [ 59.523573][ T5162] netlink: 16 bytes leftover after parsing attributes in process `syz.4.579'. [ 59.639809][ T5171] FAULT_INJECTION: forcing a failure. [ 59.639809][ T5171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.653058][ T5171] CPU: 1 UID: 0 PID: 5171 Comm: syz.4.584 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.653158][ T5171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.653175][ T5171] Call Trace: [ 59.653183][ T5171] [ 59.653193][ T5171] __dump_stack+0x1d/0x30 [ 59.653221][ T5171] dump_stack_lvl+0xe8/0x140 [ 59.653243][ T5171] dump_stack+0x15/0x1b [ 59.653301][ T5171] should_fail_ex+0x265/0x280 [ 59.653334][ T5171] should_fail+0xb/0x20 [ 59.653415][ T5171] should_fail_usercopy+0x1a/0x20 [ 59.653493][ T5171] _copy_from_user+0x1c/0xb0 [ 59.653620][ T5171] memdup_user+0x5e/0xd0 [ 59.653655][ T5171] security_setselfattr+0x8d/0x260 [ 59.653758][ T5171] __x64_sys_lsm_set_self_attr+0x51/0x60 [ 59.653783][ T5171] x64_sys_call+0x2c6b/0x2ff0 [ 59.653810][ T5171] do_syscall_64+0xd2/0x200 [ 59.653876][ T5171] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.653901][ T5171] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.653930][ T5171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.653951][ T5171] RIP: 0033:0x7f4b8495eec9 [ 59.653970][ T5171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.654073][ T5171] RSP: 002b:00007f4b833c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 59.654104][ T5171] RAX: ffffffffffffffda RBX: 00007f4b84bb5fa0 RCX: 00007f4b8495eec9 [ 59.654121][ T5171] RDX: 0000000000000065 RSI: 0000000000000000 RDI: 0000000000000000 [ 59.654138][ T5171] RBP: 00007f4b833c7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.654154][ T5171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.654176][ T5171] R13: 00007f4b84bb6038 R14: 00007f4b84bb5fa0 R15: 00007ffcbedf3398 [ 59.654201][ T5171] [ 59.842753][ T5173] loop0: detected capacity change from 0 to 128 [ 59.856055][ T5173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.585'. [ 59.886982][ T5163] loop2: detected capacity change from 0 to 512 [ 59.905878][ T5163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.920242][ T5163] EXT4-fs (loop2): 1 truncate cleaned up [ 59.936515][ T29] kauditd_printk_skb: 702 callbacks suppressed [ 59.936535][ T29] audit: type=1400 audit(1759099772.047:2980): avc: denied { add_name } for pid=5147 comm="syz.2.575" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 59.936756][ T5148] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #12: comm syz.2.575: corrupted in-inode xattr: bad e_name length [ 59.943235][ T29] audit: type=1400 audit(1759099772.047:2981): avc: denied { create } for pid=5147 comm="syz.2.575" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.968041][ T5148] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #12: comm syz.2.575: corrupted in-inode xattr: bad e_name length [ 59.994137][ T5182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.013172][ T5148] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #12: comm syz.2.575: corrupted in-inode xattr: bad e_name length [ 60.036577][ T5148] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #12: comm syz.2.575: corrupted in-inode xattr: bad e_name length [ 60.054048][ T29] audit: type=1400 audit(1759099772.157:2982): avc: denied { read write } for pid=5183 comm="syz.4.589" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 60.077741][ T29] audit: type=1400 audit(1759099772.157:2983): avc: denied { open } for pid=5183 comm="syz.4.589" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 60.124631][ T29] audit: type=1400 audit(1759099772.227:2984): avc: denied { ioctl } for pid=5185 comm="syz.4.590" path="socket:[10300]" dev="sockfs" ino=10300 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.150479][ T29] audit: type=1400 audit(1759099772.227:2985): avc: denied { module_request } for pid=5185 comm="syz.4.590" kmod="netdev-veth0_to_team" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.173241][ T29] audit: type=1400 audit(1759099772.237:2986): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 60.193551][ T29] audit: type=1400 audit(1759099772.307:2987): avc: denied { sys_module } for pid=5185 comm="syz.4.590" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.218680][ T29] audit: type=1400 audit(1759099772.327:2988): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.260088][ T29] audit: type=1400 audit(1759099772.367:2989): avc: denied { create } for pid=5192 comm="syz.2.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.300289][ T5195] loop4: detected capacity change from 0 to 128 [ 60.379081][ T5205] FAULT_INJECTION: forcing a failure. [ 60.379081][ T5205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.392327][ T5205] CPU: 0 UID: 0 PID: 5205 Comm: syz.2.597 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.392363][ T5205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.392380][ T5205] Call Trace: [ 60.392388][ T5205] [ 60.392453][ T5205] __dump_stack+0x1d/0x30 [ 60.392559][ T5205] dump_stack_lvl+0xe8/0x140 [ 60.392582][ T5205] dump_stack+0x15/0x1b [ 60.392638][ T5205] should_fail_ex+0x265/0x280 [ 60.392671][ T5205] should_fail+0xb/0x20 [ 60.392699][ T5205] should_fail_usercopy+0x1a/0x20 [ 60.392727][ T5205] strncpy_from_user+0x25/0x230 [ 60.392778][ T5205] ? __kmalloc_cache_noprof+0x189/0x320 [ 60.392844][ T5205] __se_sys_memfd_create+0x1ff/0x590 [ 60.392871][ T5205] __x64_sys_memfd_create+0x31/0x40 [ 60.392893][ T5205] x64_sys_call+0x2abe/0x2ff0 [ 60.392959][ T5205] do_syscall_64+0xd2/0x200 [ 60.393011][ T5205] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.393044][ T5205] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.393082][ T5205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.393110][ T5205] RIP: 0033:0x7ffac90deec9 [ 60.393130][ T5205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.393195][ T5205] RSP: 002b:00007ffac7b3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 60.393221][ T5205] RAX: ffffffffffffffda RBX: 0000000000000550 RCX: 00007ffac90deec9 [ 60.393234][ T5205] RDX: 00007ffac7b3eef0 RSI: 0000000000000000 RDI: 00007ffac9162960 [ 60.393248][ T5205] RBP: 0000200000001780 R08: 00007ffac7b3ebb7 R09: 00007ffac7b3ee40 [ 60.393264][ T5205] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 60.393291][ T5205] R13: 00007ffac7b3eef0 R14: 00007ffac7b3eeb0 R15: 00002000000003c0 [ 60.393317][ T5205] [ 60.488673][ T5207] loop4: detected capacity change from 0 to 512 [ 60.580517][ T5207] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.610882][ T5207] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.595: Failed to acquire dquot type 1 [ 60.629454][ T5207] EXT4-fs (loop4): 1 truncate cleaned up [ 60.723232][ T5219] loop2: detected capacity change from 0 to 512 [ 60.731787][ T5219] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.742962][ T5219] EXT4-fs (loop2): 1 truncate cleaned up [ 60.760846][ T5229] loop4: detected capacity change from 0 to 128 [ 60.867311][ T5245] loop4: detected capacity change from 0 to 128 [ 60.877295][ T5245] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.916178][ T5245] SELinux: security policydb version 18 (MLS) not backwards compatible [ 60.924681][ T5245] SELinux: failed to load policy [ 61.087108][ T5264] loop4: detected capacity change from 0 to 1024 [ 61.093785][ T5264] EXT4-fs: Ignoring removed orlov option [ 61.336447][ T5272] SELinux: policydb version 0 does not match my version range 15-35 [ 61.344990][ T5272] SELinux: failed to load policy [ 61.369450][ T5276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 61.529971][ T5307] SELinux: policydb version 0 does not match my version range 15-35 [ 61.538609][ T5307] SELinux: failed to load policy [ 61.613115][ T5313] SELinux: policydb version 0 does not match my version range 15-35 [ 61.621593][ T5311] loop2: detected capacity change from 0 to 512 [ 61.623182][ T5313] SELinux: failed to load policy [ 61.633370][ T5311] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 61.646372][ T5311] EXT4-fs (loop2): 1 truncate cleaned up [ 62.091706][ T5351] SELinux: policydb version 0 does not match my version range 15-35 [ 62.100090][ T5351] SELinux: failed to load policy [ 62.131745][ T5353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 62.445720][ T5380] SELinux: policydb version 0 does not match my version range 15-35 [ 62.454020][ T5380] SELinux: failed to load policy [ 62.616644][ T5401] __nla_validate_parse: 13 callbacks suppressed [ 62.616663][ T5401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.668'. [ 62.687178][ T5405] loop1: detected capacity change from 0 to 512 [ 62.694392][ T5405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 62.710805][ T5405] EXT4-fs (loop1): 1 truncate cleaned up [ 62.754838][ T5415] SELinux: policydb version 0 does not match my version range 15-35 [ 62.763101][ T5415] SELinux: failed to load policy [ 62.942159][ T5432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.679'. [ 63.049360][ T5441] SELinux: policydb version 0 does not match my version range 15-35 [ 63.057978][ T5441] SELinux: failed to load policy [ 63.205442][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.690'. [ 63.224214][ T5466] loop1: detected capacity change from 0 to 512 [ 63.234151][ T5466] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.691: iget: bad i_size value: 38620345925642 [ 63.247561][ T5466] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.691: couldn't read orphan inode 15 (err -117) [ 63.272131][ T5442] chnl_net:caif_netlink_parms(): no params data found [ 63.316735][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.323885][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.331451][ T5442] bridge_slave_0: entered allmulticast mode [ 63.337237][ T5479] loop2: detected capacity change from 0 to 512 [ 63.339673][ T5442] bridge_slave_0: entered promiscuous mode [ 63.344024][ T5479] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.350848][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.363094][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.370401][ T5442] bridge_slave_1: entered allmulticast mode [ 63.377213][ T5442] bridge_slave_1: entered promiscuous mode [ 63.382648][ T5479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.392096][ T5479] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.400860][ T5479] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.416273][ T5479] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.694: Allocating blocks 41-42 which overlap fs metadata [ 63.432134][ T5442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.442848][ T5442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.443588][ T5479] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.694: Allocating blocks 41-42 which overlap fs metadata [ 63.466543][ T5479] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.694: Failed to acquire dquot type 1 [ 63.478104][ T5479] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 63.492920][ T5479] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.694: corrupted inode contents [ 63.496808][ T5442] team0: Port device team_slave_0 added [ 63.510936][ T5479] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.694: mark_inode_dirty error [ 63.511981][ T5442] team0: Port device team_slave_1 added [ 63.524207][ T5479] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.694: corrupted inode contents [ 63.540074][ T5479] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.694: mark_inode_dirty error [ 63.551628][ T5479] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.694: corrupted inode contents [ 63.563825][ T5479] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 63.564796][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.574611][ T5479] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.694: corrupted inode contents [ 63.580462][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.594470][ T5479] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.694: mark_inode_dirty error [ 63.618486][ T5442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.631957][ T5479] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 63.641697][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.649561][ T5479] EXT4-fs (loop2): 1 truncate cleaned up [ 63.656220][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.687892][ T5442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.702189][ T5479] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.694: Allocating blocks 41-42 which overlap fs metadata [ 63.717627][ T5479] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.694: Failed to acquire dquot type 1 [ 63.732334][ T5442] hsr_slave_0: entered promiscuous mode [ 63.738793][ T5442] hsr_slave_1: entered promiscuous mode [ 63.745129][ T5442] debugfs: 'hsr0' already exists in 'hsr' [ 63.750880][ T5442] Cannot create hsr debugfs directory [ 63.826350][ T5442] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 63.835829][ T5442] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 63.846082][ T5442] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 63.855406][ T5442] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 63.872080][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.879185][ T5442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.886547][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.893621][ T5442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.925388][ T5496] loop2: detected capacity change from 0 to 512 [ 63.933237][ T5442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.935116][ T5496] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.947550][ T5442] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.960698][ T5496] EXT4-fs (loop2): 1 truncate cleaned up [ 63.966675][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.982891][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.990064][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.062458][ T5442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.184136][ T5442] veth0_vlan: entered promiscuous mode [ 64.192482][ T5442] veth1_vlan: entered promiscuous mode [ 64.210054][ T5442] veth0_macvtap: entered promiscuous mode [ 64.217636][ T5442] veth1_macvtap: entered promiscuous mode [ 64.231325][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.243605][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.255839][ T2860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.265219][ T2860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.274135][ T318] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.286080][ T318] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.347980][ T5518] SELinux: policydb version 0 does not match my version range 15-35 [ 64.356254][ T5518] SELinux: failed to load policy [ 64.386912][ T5520] loop5: detected capacity change from 0 to 128 [ 64.396505][ T5520] netlink: 20 bytes leftover after parsing attributes in process `syz.5.698'. [ 64.460230][ T5526] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 64.563410][ T5532] loop5: detected capacity change from 0 to 1024 [ 64.570691][ T5532] EXT4-fs: Ignoring removed orlov option [ 64.769496][ T5547] loop4: detected capacity change from 0 to 128 [ 64.778953][ T5547] netlink: 20 bytes leftover after parsing attributes in process `syz.4.709'. [ 64.833774][ T5553] af_packet: tpacket_rcv: packet too big, clamped from 192 to 4294967272. macoff=96 [ 64.908792][ T5563] SELinux: policydb version 0 does not match my version range 15-35 [ 64.917706][ T5563] SELinux: failed to load policy [ 64.969680][ T5571] loop0: detected capacity change from 0 to 1024 [ 64.976436][ T5571] EXT4-fs: Ignoring removed orlov option [ 64.978792][ T5574] loop5: detected capacity change from 0 to 128 [ 64.991357][ T5574] netlink: 20 bytes leftover after parsing attributes in process `syz.5.722'. [ 65.070693][ T29] kauditd_printk_skb: 460 callbacks suppressed [ 65.070708][ T29] audit: type=1326 audit(1759099777.177:3442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5583 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 65.114619][ T29] audit: type=1326 audit(1759099777.217:3443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5583 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fae5eaad97f code=0x7ffc0000 [ 65.137954][ T29] audit: type=1326 audit(1759099777.217:3444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5583 comm="syz.5.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 65.330085][ T5603] SELinux: policydb version 0 does not match my version range 15-35 [ 65.340473][ T5603] SELinux: failed to load policy [ 65.364704][ T29] audit: type=1400 audit(1759099777.377:3445): avc: denied { create } for pid=5586 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.384192][ T29] audit: type=1400 audit(1759099777.377:3446): avc: denied { setopt } for pid=5586 comm="syz.2.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.403829][ T29] audit: type=1326 audit(1759099777.407:3447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 65.427249][ T29] audit: type=1326 audit(1759099777.407:3448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 65.450604][ T29] audit: type=1326 audit(1759099777.407:3449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5599 comm="syz.5.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 65.474138][ T29] audit: type=1326 audit(1759099777.457:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 65.497485][ T29] audit: type=1326 audit(1759099777.457:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5601 comm="syz.5.733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 65.608469][ T5607] loop0: detected capacity change from 0 to 128 [ 65.646226][ T5607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.734'. [ 66.576647][ T5647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.748'. [ 66.819793][ T5676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.919519][ T5685] loop0: detected capacity change from 0 to 1024 [ 66.926662][ T5685] EXT4-fs: Ignoring removed orlov option [ 67.196758][ T5695] SELinux: policydb version 0 does not match my version range 15-35 [ 67.205797][ T5695] SELinux: failed to load policy [ 67.333017][ T5708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.774'. [ 67.472833][ T5721] loop0: detected capacity change from 0 to 128 [ 67.568343][ T5733] loop1: detected capacity change from 0 to 512 [ 67.576083][ T5733] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.594399][ T5733] EXT4-fs (loop1): 1 truncate cleaned up [ 67.603775][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz.0.785'. [ 67.646749][ T5743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.759376][ T5757] SELinux: policydb version 0 does not match my version range 15-35 [ 67.769575][ T5757] SELinux: failed to load policy [ 67.807878][ T5763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'. [ 67.856624][ T5771] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 67.971681][ T5785] SELinux: policydb version 0 does not match my version range 15-35 [ 67.980157][ T5785] SELinux: failed to load policy [ 67.990540][ T5789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.810'. [ 68.168672][ T5815] SELinux: policydb version 0 does not match my version range 15-35 [ 68.177328][ T5815] SELinux: failed to load policy [ 68.267788][ T5831] loop0: detected capacity change from 0 to 128 [ 68.280616][ T5831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.828'. [ 68.333785][ T5795] loop5: detected capacity change from 0 to 764 [ 68.365637][ T5843] SELinux: policydb version 0 does not match my version range 15-35 [ 68.374183][ T5843] SELinux: failed to load policy [ 68.537811][ T5870] loop2: detected capacity change from 0 to 128 [ 68.591384][ T5878] SELinux: policydb version 0 does not match my version range 15-35 [ 68.603023][ T5878] SELinux: failed to load policy [ 68.735738][ T5873] loop0: detected capacity change from 0 to 512 [ 68.745545][ T5873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 68.778842][ T5873] EXT4-fs (loop0): 1 truncate cleaned up [ 69.038185][ T5909] SELinux: policydb version 0 does not match my version range 15-35 [ 69.063170][ T5909] SELinux: failed to load policy [ 69.209803][ T5929] loop2: detected capacity change from 0 to 128 [ 69.411704][ T5957] loop4: detected capacity change from 0 to 128 [ 69.485677][ T5927] loop5: detected capacity change from 0 to 764 [ 69.539885][ T5976] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.716198][ T6006] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.859151][ T6031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.892832][ T6034] loop0: detected capacity change from 0 to 128 [ 70.022921][ T6058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.074916][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 70.074935][ T29] audit: type=1400 audit(1759099782.177:4099): avc: denied { name_bind } for pid=6063 comm="syz.4.933" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 70.102848][ T29] audit: type=1400 audit(1759099782.187:4100): avc: denied { node_bind } for pid=6063 comm="syz.4.933" saddr=224.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 70.133819][ T6066] loop2: detected capacity change from 0 to 128 [ 70.140560][ T29] audit: type=1400 audit(1759099782.257:4101): avc: denied { mounton } for pid=6062 comm="syz.2.934" path="/218/file0" dev="tmpfs" ino=1171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.168516][ T29] audit: type=1400 audit(1759099782.257:4102): avc: denied { mount } for pid=6062 comm="syz.2.934" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 70.190567][ T29] audit: type=1326 audit(1759099782.257:4103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 70.213911][ T29] audit: type=1326 audit(1759099782.257:4104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 70.238130][ T29] audit: type=1326 audit(1759099782.257:4105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fae5eaad97f code=0x7ffc0000 [ 70.262151][ T29] audit: type=1326 audit(1759099782.257:4106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6065 comm="syz.5.932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae5eaaeec9 code=0x7ffc0000 [ 70.290142][ T29] audit: type=1400 audit(1759099782.397:4107): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 70.313523][ T29] audit: type=1400 audit(1759099782.427:4108): avc: denied { read } for pid=6072 comm="syz.4.937" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.530951][ T6099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.562801][ T6105] loop0: detected capacity change from 0 to 128 [ 70.714161][ T6086] loop2: detected capacity change from 0 to 764 [ 70.746242][ T6133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 70.791593][ T6139] loop5: detected capacity change from 0 to 128 [ 70.808786][ T6139] netlink: 20 bytes leftover after parsing attributes in process `syz.5.966'. [ 70.877574][ T6150] loop4: detected capacity change from 0 to 1024 [ 70.886518][ T6150] EXT4-fs: Ignoring removed orlov option [ 70.912638][ T6150] EXT4-fs mount: 58 callbacks suppressed [ 70.912657][ T6150] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.010448][ T6175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.011967][ T6173] netlink: 16 bytes leftover after parsing attributes in process `syz.5.980'. [ 71.083253][ T6180] loop5: detected capacity change from 0 to 128 [ 71.122543][ T6180] netlink: 20 bytes leftover after parsing attributes in process `syz.5.982'. [ 71.186874][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.200951][ T6189] SELinux: policydb version 0 does not match my version range 15-35 [ 71.210088][ T6189] SELinux: failed to load policy [ 71.389684][ T6213] loop5: detected capacity change from 0 to 128 [ 71.411345][ T6213] netlink: 20 bytes leftover after parsing attributes in process `syz.5.999'. [ 71.449160][ T6227] loop2: detected capacity change from 0 to 128 [ 71.611683][ T6251] loop0: detected capacity change from 0 to 128 [ 71.628075][ T6251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1015'. [ 71.676313][ T6261] loop2: detected capacity change from 0 to 128 [ 71.693082][ T6223] loop4: detected capacity change from 0 to 764 [ 71.726562][ T6267] loop1: detected capacity change from 0 to 512 [ 71.734236][ T6267] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 71.749606][ T6267] EXT4-fs (loop1): 1 truncate cleaned up [ 71.755972][ T6267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.790405][ T6275] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 71.825519][ T6282] SELinux: policydb version 0 does not match my version range 15-35 [ 71.834177][ T6282] SELinux: failed to load policy [ 71.955980][ T6294] loop0: detected capacity change from 0 to 128 [ 72.187687][ T6314] loop0: detected capacity change from 0 to 128 [ 72.219262][ T6314] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1042'. [ 72.332298][ T6327] loop0: detected capacity change from 0 to 128 [ 72.481992][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.511382][ T6340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.542487][ T6348] loop1: detected capacity change from 0 to 128 [ 72.560653][ T6348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1055'. [ 72.634738][ T6360] loop1: detected capacity change from 0 to 128 [ 72.758963][ T6380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.779618][ T6382] loop4: detected capacity change from 0 to 1024 [ 72.786272][ T6383] loop2: detected capacity change from 0 to 512 [ 72.786983][ T6383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 72.793844][ T6382] EXT4-fs: Ignoring removed orlov option [ 72.807495][ T6383] EXT4-fs (loop2): 1 truncate cleaned up [ 72.814765][ T6383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.834962][ T6382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.860376][ T6392] __nla_validate_parse: 1 callbacks suppressed [ 72.860395][ T6392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1075'. [ 72.912234][ T6396] loop1: detected capacity change from 0 to 128 [ 73.097366][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.132586][ T6419] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.145588][ T6421] SELinux: policydb version 0 does not match my version range 15-35 [ 73.154114][ T6421] SELinux: failed to load policy [ 73.162096][ T6423] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1089'. [ 73.214050][ T6429] loop4: detected capacity change from 0 to 128 [ 73.332514][ T6441] loop1: detected capacity change from 0 to 1024 [ 73.346306][ T6441] EXT4-fs: Ignoring removed orlov option [ 73.358171][ T6441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.377946][ T6450] SELinux: policydb version 0 does not match my version range 15-35 [ 73.386526][ T6450] SELinux: failed to load policy [ 73.404219][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 73.413546][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 73.489008][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.623458][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.657208][ T6478] SELinux: policydb version 0 does not match my version range 15-35 [ 73.665735][ T6478] SELinux: failed to load policy [ 73.684247][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 73.707378][ T6484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 73.809170][ T6499] loop2: detected capacity change from 0 to 128 [ 73.857138][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 73.904214][ T6513] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.923269][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1132'. [ 73.932693][ T6517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1132'. [ 73.991063][ T6487] loop4: detected capacity change from 0 to 764 [ 74.003995][ T6527] loop2: detected capacity change from 0 to 128 [ 74.063661][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 74.097941][ T6539] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.188911][ T6549] loop1: detected capacity change from 0 to 1024 [ 74.196199][ T6549] EXT4-fs: Ignoring removed orlov option [ 74.205589][ T6556] loop0: detected capacity change from 0 to 128 [ 74.208937][ T6549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.312088][ T6570] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.444365][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.467670][ T6585] loop0: detected capacity change from 0 to 128 [ 74.519390][ T6595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.588447][ T6603] loop1: detected capacity change from 0 to 128 [ 74.646633][ T6612] loop4: detected capacity change from 0 to 1024 [ 74.669031][ T6612] EXT4-fs: Ignoring removed orlov option [ 74.686538][ T6612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.769786][ T6624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.786060][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.861737][ T6636] SELinux: policydb version 0 does not match my version range 15-35 [ 74.870489][ T6636] SELinux: failed to load policy [ 74.957019][ T6650] loop1: detected capacity change from 0 to 512 [ 74.973268][ T6650] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 74.989466][ T6656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.990050][ T6651] loop0: detected capacity change from 0 to 1024 [ 75.006077][ T6655] loop5: detected capacity change from 0 to 128 [ 75.015028][ T6651] EXT4-fs: Ignoring removed orlov option [ 75.034955][ T6650] EXT4-fs (loop1): 1 truncate cleaned up [ 75.055771][ T6651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.071409][ T6650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.107229][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 75.107246][ T29] audit: type=1326 audit(1759099787.217:4804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f22f4b2eec9 code=0x7ffc0000 [ 75.137624][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.176542][ T29] audit: type=1326 audit(1759099787.217:4805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f4b2eec9 code=0x7ffc0000 [ 75.200268][ T29] audit: type=1326 audit(1759099787.217:4806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f4b2eec9 code=0x7ffc0000 [ 75.223740][ T29] audit: type=1326 audit(1759099787.217:4807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f22f4b2eec9 code=0x7ffc0000 [ 75.247266][ T29] audit: type=1400 audit(1759099787.217:4808): avc: denied { remove_name } for pid=6631 comm="syz.1.1185" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.250634][ T6673] SELinux: policydb version 0 does not match my version range 15-35 [ 75.269988][ T29] audit: type=1400 audit(1759099787.217:4809): avc: denied { rename } for pid=6631 comm="syz.1.1185" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.300462][ T29] audit: type=1326 audit(1759099787.217:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f4b2eec9 code=0x7ffc0000 [ 75.300608][ T6673] SELinux: failed to load policy [ 75.323986][ T29] audit: type=1326 audit(1759099787.217:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6631 comm="syz.1.1185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22f4b2eec9 code=0x7ffc0000 [ 75.399251][ T29] audit: type=1326 audit(1759099787.507:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 75.424426][ T29] audit: type=1326 audit(1759099787.507:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6681 comm="syz.0.1206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 75.457056][ T6687] loop0: detected capacity change from 0 to 128 [ 75.493659][ T6689] loop5: detected capacity change from 0 to 128 [ 75.518263][ T6693] loop0: detected capacity change from 0 to 1024 [ 75.525022][ T6693] EXT4-fs: Ignoring removed orlov option [ 75.533961][ T6693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.561907][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.686199][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.727740][ T6721] loop1: detected capacity change from 0 to 1024 [ 75.734469][ T6721] EXT4-fs: Ignoring removed orlov option [ 75.752325][ T6726] IPv6: NLM_F_CREATE should be specified when creating new route [ 75.763009][ T6721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.777963][ T6726] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 75.785697][ T6726] IPv6: NLM_F_CREATE should be set when creating new route [ 75.809979][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.949573][ T6751] loop5: detected capacity change from 0 to 1024 [ 75.956458][ T6751] EXT4-fs: Ignoring removed orlov option [ 75.964479][ T6751] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.994881][ T6719] loop0: detected capacity change from 0 to 764 [ 76.011197][ T5442] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.052566][ T6760] loop1: detected capacity change from 0 to 512 [ 76.064588][ T6760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.078692][ T6760] EXT4-fs (loop1): 1 truncate cleaned up [ 76.084960][ T6760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.160667][ T6777] loop5: detected capacity change from 0 to 128 [ 76.212115][ T6785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.302182][ T6797] SELinux: policydb version 0 does not match my version range 15-35 [ 76.311551][ T6797] SELinux: failed to load policy [ 76.340023][ T6803] loop4: detected capacity change from 0 to 128 [ 76.369819][ T6809] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.403950][ T6811] loop4: detected capacity change from 0 to 1024 [ 76.411022][ T6811] EXT4-fs: Ignoring removed orlov option [ 76.419666][ T6811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.445859][ T6817] loop5: detected capacity change from 0 to 128 [ 76.453738][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.573395][ T6837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 76.622413][ T6845] loop4: detected capacity change from 0 to 128 [ 76.691820][ T6855] loop0: detected capacity change from 0 to 512 [ 76.708822][ T6855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.739458][ T6855] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.772762][ T6855] EXT4-fs (loop0): shut down requested (0) [ 76.801673][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.818204][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.879865][ T6877] loop1: detected capacity change from 0 to 128 [ 77.003501][ T6858] loop5: detected capacity change from 0 to 764 [ 77.008739][ T6896] loop4: detected capacity change from 0 to 128 [ 77.059019][ T6900] loop4: detected capacity change from 0 to 512 [ 77.076960][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.089757][ T6900] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.102700][ T6900] EXT4-fs (loop4): shut down requested (0) [ 77.119748][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.177513][ T6908] SELinux: policydb version 0 does not match my version range 15-35 [ 77.186016][ T6908] SELinux: failed to load policy [ 77.227217][ T6912] loop4: detected capacity change from 0 to 128 [ 77.240466][ T6914] loop0: detected capacity change from 0 to 1024 [ 77.247365][ T6914] EXT4-fs: Ignoring removed orlov option [ 77.259170][ T6914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.293767][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.331935][ T6924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.359384][ T6930] loop4: detected capacity change from 0 to 512 [ 77.380131][ T6930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.392874][ T6930] ext4 filesystem being mounted at /308/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.406923][ T6930] EXT4-fs (loop4): shut down requested (0) [ 77.427234][ T6936] SELinux: policydb version 0 does not match my version range 15-35 [ 77.436255][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.437203][ T6936] SELinux: failed to load policy [ 77.495522][ T6942] loop0: detected capacity change from 0 to 1024 [ 77.502214][ T6942] EXT4-fs: Ignoring removed orlov option [ 77.509988][ T6942] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.542975][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.594215][ T6955] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.662829][ T6963] loop2: detected capacity change from 0 to 512 [ 77.677120][ T6963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.689961][ T6963] ext4 filesystem being mounted at /269/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.701964][ T6971] loop5: detected capacity change from 0 to 128 [ 77.704270][ T6970] tipc: Started in network mode [ 77.713194][ T6970] tipc: Node identity 4, cluster identity 4711 [ 77.719439][ T6970] tipc: Node number set to 4 [ 77.729253][ T6963] EXT4-fs (loop2): shut down requested (0) [ 77.747569][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.913335][ T6994] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 77.944789][ T6996] SELinux: policydb version 0 does not match my version range 15-35 [ 77.953667][ T6996] SELinux: failed to load policy [ 77.963866][ T7000] loop4: detected capacity change from 0 to 128 [ 77.990685][ T7002] loop1: detected capacity change from 0 to 512 [ 78.006820][ T7002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.020488][ T7002] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.040329][ T7002] EXT4-fs (loop1): shut down requested (0) [ 78.062278][ T6981] loop2: detected capacity change from 0 to 764 [ 78.065123][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.236149][ T7021] loop4: detected capacity change from 0 to 512 [ 78.243209][ T7021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.255368][ T7021] EXT4-fs (loop4): 1 truncate cleaned up [ 78.261403][ T7021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.718373][ T7034] SELinux: policydb version 0 does not match my version range 15-35 [ 78.726612][ T7034] SELinux: failed to load policy [ 78.764354][ T7040] loop2: detected capacity change from 0 to 128 [ 78.776699][ T7042] loop1: detected capacity change from 0 to 512 [ 78.787432][ T7042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.800615][ T7042] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.813707][ T7042] EXT4-fs (loop1): shut down requested (0) [ 78.834000][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.912813][ T7027] loop0: detected capacity change from 0 to 764 [ 78.932787][ T7057] loop2: detected capacity change from 0 to 2048 [ 78.946329][ T7057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.970858][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.982898][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.008108][ T7063] __nla_validate_parse: 21 callbacks suppressed [ 79.008128][ T7063] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1367'. [ 79.025161][ T7065] SELinux: policydb version 0 does not match my version range 15-35 [ 79.033420][ T7065] SELinux: failed to load policy [ 79.068413][ T7069] loop2: detected capacity change from 0 to 1024 [ 79.076419][ T7069] EXT4-fs: Ignoring removed orlov option [ 79.084273][ T7069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.137412][ T7077] loop4: detected capacity change from 0 to 512 [ 79.158233][ T7077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.170959][ T7077] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.186415][ T7077] EXT4-fs (loop4): shut down requested (0) [ 79.216322][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.306528][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.360195][ T7093] loop4: detected capacity change from 0 to 128 [ 79.369847][ T7093] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1380'. [ 79.414979][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1381'. [ 79.443310][ T7099] loop2: detected capacity change from 0 to 512 [ 79.453625][ T7099] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 79.467281][ T7099] EXT4-fs (loop2): 1 truncate cleaned up [ 79.473509][ T7099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.535135][ T7110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.567686][ T7115] SELinux: policydb version 0 does not match my version range 15-35 [ 79.576708][ T7115] SELinux: failed to load policy [ 79.606185][ T7119] loop4: detected capacity change from 0 to 128 [ 79.852871][ T7132] loop1: detected capacity change from 0 to 128 [ 79.908102][ T7124] loop0: detected capacity change from 0 to 764 [ 79.909228][ T7134] loop4: detected capacity change from 0 to 128 [ 79.972203][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 80.006659][ T7152] loop4: detected capacity change from 0 to 512 [ 80.016340][ T7152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.030660][ T7152] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.043595][ T7152] EXT4-fs (loop4): shut down requested (0) [ 80.067424][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.102059][ T7159] loop1: detected capacity change from 0 to 1024 [ 80.110062][ T7159] EXT4-fs: Ignoring removed orlov option [ 80.117930][ T7159] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.154569][ T7164] tipc: Started in network mode [ 80.159487][ T7164] tipc: Node identity 4, cluster identity 4711 [ 80.165691][ T7164] tipc: Node number set to 4 [ 80.182209][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.268228][ T7174] loop2: detected capacity change from 0 to 128 [ 80.277492][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1409'. [ 80.333173][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.343884][ T7176] loop2: detected capacity change from 0 to 128 [ 80.393168][ T7187] SELinux: policydb version 0 does not match my version range 15-35 [ 80.402209][ T7187] SELinux: failed to load policy [ 80.447359][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 80.499635][ T7199] loop2: detected capacity change from 0 to 128 [ 80.510274][ T7199] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1420'. [ 80.511562][ T7201] loop0: detected capacity change from 0 to 512 [ 80.536948][ T7201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.549947][ T7201] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.563202][ T7201] EXT4-fs (loop0): shut down requested (0) [ 80.569392][ T7205] loop2: detected capacity change from 0 to 1024 [ 80.576245][ T7205] EXT4-fs: Ignoring removed orlov option [ 80.584704][ T7205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.611199][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.634053][ T7211] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1425'. [ 80.648284][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1424'. [ 80.711848][ T7219] SELinux: policydb version 0 does not match my version range 15-35 [ 80.720942][ T7219] SELinux: failed to load policy [ 80.824656][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.923061][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 80.970247][ T7242] loop2: detected capacity change from 0 to 512 [ 80.988814][ T7242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.014573][ T7242] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.029954][ T7242] EXT4-fs (loop2): shut down requested (0) [ 81.051187][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.068371][ T7230] loop0: detected capacity change from 0 to 764 [ 81.084054][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 81.084071][ T29] audit: type=1326 audit(1759099793.187:5359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8495eec9 code=0x7ffc0000 [ 81.127582][ T7257] loop5: detected capacity change from 0 to 1024 [ 81.140827][ T7257] EXT4-fs: Ignoring removed orlov option [ 81.147047][ T29] audit: type=1326 audit(1759099793.187:5360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8495eec9 code=0x7ffc0000 [ 81.170879][ T29] audit: type=1326 audit(1759099793.187:5361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4b8495eec9 code=0x7ffc0000 [ 81.194516][ T29] audit: type=1326 audit(1759099793.197:5362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.4.1442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b8495eec9 code=0x7ffc0000 [ 81.561539][ T7288] loop5: detected capacity change from 0 to 512 [ 81.577858][ T7288] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.593102][ T7288] EXT4-fs (loop5): shut down requested (0) [ 81.632377][ T7300] SELinux: policydb version 0 does not match my version range 15-35 [ 81.641340][ T7300] SELinux: failed to load policy [ 81.650038][ T7296] loop4: detected capacity change from 0 to 128 [ 81.695831][ T7308] loop4: detected capacity change from 0 to 128 [ 81.719603][ T29] audit: type=1326 audit(1759099793.827:5363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 81.749228][ T29] audit: type=1326 audit(1759099793.827:5364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 81.772969][ T29] audit: type=1326 audit(1759099793.857:5365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 81.796416][ T29] audit: type=1326 audit(1759099793.857:5366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 81.819952][ T29] audit: type=1326 audit(1759099793.857:5367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 81.852513][ T7319] loop0: detected capacity change from 0 to 512 [ 81.861035][ T7319] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 81.872680][ T7319] EXT4-fs (loop0): 1 truncate cleaned up [ 81.894995][ T29] audit: type=1326 audit(1759099794.007:5368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7303 comm="syz.0.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 82.301119][ T7331] loop5: detected capacity change from 0 to 764 [ 82.524563][ T7356] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.557594][ T7363] loop1: detected capacity change from 0 to 128 [ 82.623236][ T7359] loop2: detected capacity change from 0 to 512 [ 82.633166][ T7372] loop1: detected capacity change from 0 to 512 [ 82.635444][ T7359] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.650806][ T7359] EXT4-fs (loop2): 1 truncate cleaned up [ 82.651082][ T7374] SELinux: policydb version 0 does not match my version range 15-35 [ 82.664944][ T7374] SELinux: failed to load policy [ 82.669570][ T7372] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.720974][ T7382] loop1: detected capacity change from 0 to 1024 [ 82.727878][ T7382] EXT4-fs: Ignoring removed orlov option [ 82.735264][ T7379] loop0: detected capacity change from 0 to 128 [ 82.945351][ T7390] loop0: detected capacity change from 0 to 512 [ 82.953763][ T7390] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 82.967990][ T7390] EXT4-fs (loop0): 1 truncate cleaned up [ 83.618218][ T7402] loop1: detected capacity change from 0 to 128 [ 83.668949][ T7412] SELinux: policydb version 0 does not match my version range 15-35 [ 83.677329][ T7412] SELinux: failed to load policy [ 83.710158][ T7417] loop1: detected capacity change from 0 to 512 [ 83.751557][ T7417] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.874631][ T7432] loop5: detected capacity change from 0 to 512 [ 83.881829][ T7432] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 83.892961][ T7432] EXT4-fs (loop5): 1 truncate cleaned up [ 83.910773][ T7435] loop1: detected capacity change from 0 to 512 [ 83.919313][ T7435] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.931161][ T7435] EXT4-fs (loop1): 1 truncate cleaned up [ 83.963137][ T7442] loop2: detected capacity change from 0 to 128 [ 84.049250][ T7453] SELinux: policydb version 0 does not match my version range 15-35 [ 84.057510][ T7453] SELinux: failed to load policy [ 84.092508][ T7455] loop2: detected capacity change from 0 to 128 [ 84.102119][ T7455] __nla_validate_parse: 3 callbacks suppressed [ 84.102133][ T7455] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1512'. [ 84.152227][ T7459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 84.662444][ T7471] loop5: detected capacity change from 0 to 128 [ 84.720802][ T7480] SELinux: policydb version 0 does not match my version range 15-35 [ 84.729769][ T7480] SELinux: failed to load policy [ 84.744118][ T7482] loop5: detected capacity change from 0 to 128 [ 84.756435][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1525'. [ 84.824071][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'. [ 84.924771][ T7499] loop5: detected capacity change from 0 to 512 [ 84.931684][ T7499] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 84.943845][ T7499] EXT4-fs (loop5): 1 truncate cleaned up [ 84.955860][ T7501] loop0: detected capacity change from 0 to 512 [ 84.963014][ T7501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 84.982133][ T7501] EXT4-fs (loop0): 1 truncate cleaned up [ 84.989249][ T7505] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.019553][ T7508] loop2: detected capacity change from 0 to 1024 [ 85.026615][ T7508] EXT4-fs: Ignoring removed orlov option [ 85.059262][ T7516] loop4: detected capacity change from 0 to 128 [ 85.111599][ T7521] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1536'. [ 85.121483][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1536'. [ 85.142330][ T7523] SELinux: policydb version 0 does not match my version range 15-35 [ 85.150667][ T7523] SELinux: failed to load policy [ 85.298224][ T7542] loop1: detected capacity change from 0 to 128 [ 85.380011][ T7550] SELinux: policydb version 0 does not match my version range 15-35 [ 85.388533][ T7550] SELinux: failed to load policy [ 85.446795][ T7556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1552'. [ 85.457702][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1552'. [ 85.817795][ T7578] loop1: detected capacity change from 0 to 128 [ 85.879637][ T7584] SELinux: policydb version 0 does not match my version range 15-35 [ 85.888573][ T7584] SELinux: failed to load policy [ 85.926539][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1566'. [ 85.936058][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1566'. [ 86.036628][ T7605] loop5: detected capacity change from 0 to 512 [ 86.043626][ T7605] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 86.056961][ T7605] EXT4-fs (loop5): 1 truncate cleaned up [ 86.090315][ T7610] loop0: detected capacity change from 0 to 1024 [ 86.097364][ T7610] EXT4-fs: Ignoring removed orlov option [ 86.178410][ T7623] loop1: detected capacity change from 0 to 128 [ 86.257144][ T7625] loop1: detected capacity change from 0 to 1024 [ 86.264159][ T7625] EXT4-fs: Ignoring removed orlov option [ 86.352730][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1578'. [ 86.420123][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 86.420141][ T29] audit: type=1326 audit(1759099798.527:5589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.450766][ T29] audit: type=1326 audit(1759099798.527:5590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.474436][ T29] audit: type=1326 audit(1759099798.527:5591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.498218][ T29] audit: type=1326 audit(1759099798.527:5592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.521886][ T29] audit: type=1326 audit(1759099798.527:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.546084][ T29] audit: type=1326 audit(1759099798.527:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.569697][ T29] audit: type=1326 audit(1759099798.527:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.593415][ T29] audit: type=1326 audit(1759099798.527:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.593453][ T29] audit: type=1326 audit(1759099798.537:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.593505][ T29] audit: type=1326 audit(1759099798.537:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7637 comm="syz.0.1582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3a26eeec9 code=0x7ffc0000 [ 86.775317][ T7650] loop4: detected capacity change from 0 to 128 [ 86.825831][ T7662] loop5: detected capacity change from 0 to 1024 [ 86.833604][ T7662] EXT4-fs: Ignoring removed orlov option [ 86.948113][ T7678] loop0: detected capacity change from 0 to 1024 [ 86.956769][ T7678] EXT4-fs: Ignoring removed orlov option [ 87.211547][ T7692] loop5: detected capacity change from 0 to 512 [ 87.218714][ T7692] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.242771][ T7692] EXT4-fs (loop5): 1 truncate cleaned up [ 87.249455][ T7696] loop4: detected capacity change from 0 to 128 [ 87.633872][ T7714] loop4: detected capacity change from 0 to 764 [ 87.768021][ T7717] loop1: detected capacity change from 0 to 1024 [ 87.774846][ T7717] EXT4-fs: Ignoring removed orlov option [ 88.009759][ T7725] loop5: detected capacity change from 0 to 128 [ 88.056465][ T7729] loop5: detected capacity change from 0 to 1024 [ 88.065251][ T7729] EXT4-fs: Ignoring removed orlov option [ 88.084287][ T7735] loop1: detected capacity change from 0 to 512 [ 88.097209][ T7735] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.114023][ T7735] EXT4-fs (loop1): shut down requested (0) [ 88.141064][ T7739] loop0: detected capacity change from 0 to 128 [ 88.393450][ T7766] loop2: detected capacity change from 0 to 128 [ 88.403101][ T7764] loop4: detected capacity change from 0 to 128 [ 88.425580][ T7769] loop1: detected capacity change from 0 to 512 [ 88.490603][ T7769] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.560057][ T7769] EXT4-fs (loop1): shut down requested (0) [ 88.646906][ T7800] loop4: detected capacity change from 0 to 128 [ 88.744086][ T7771] loop2: detected capacity change from 0 to 764 [ 88.791468][ T7815] loop4: detected capacity change from 0 to 1024 [ 88.812111][ T7815] EXT4-fs: Ignoring removed orlov option [ 89.080764][ T7831] loop1: detected capacity change from 0 to 128 [ 89.251750][ T7842] loop5: detected capacity change from 0 to 512 [ 89.272240][ T7844] loop1: detected capacity change from 0 to 128 [ 89.279862][ T7842] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.295136][ T7842] EXT4-fs (loop5): shut down requested (0) [ 89.306747][ T7844] __nla_validate_parse: 18 callbacks suppressed [ 89.306767][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1658'. [ 89.384353][ T7858] SELinux: policydb version 0 does not match my version range 15-35 [ 89.393291][ T7858] SELinux: failed to load policy [ 89.420318][ T7869] tipc: Started in network mode [ 89.425330][ T7869] tipc: Node identity 4, cluster identity 4711 [ 89.431628][ T7869] tipc: Node number set to 4 [ 89.489838][ T7879] loop4: detected capacity change from 0 to 512 [ 89.509175][ T7879] ext4 filesystem being mounted at /398/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.532432][ T7881] loop1: detected capacity change from 0 to 128 [ 89.542153][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1675'. [ 89.549972][ T7879] EXT4-fs (loop4): shut down requested (0) [ 89.588144][ T7890] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.601025][ T7887] loop1: detected capacity change from 0 to 1024 [ 89.607705][ T7887] EXT4-fs: Ignoring removed orlov option [ 89.750603][ T7877] loop2: detected capacity change from 0 to 764 [ 89.857597][ T7901] SELinux: policydb version 0 does not match my version range 15-35 [ 89.866157][ T7901] SELinux: failed to load policy [ 90.087295][ T7915] loop4: detected capacity change from 0 to 128 [ 90.096995][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1687'. [ 90.128637][ T7917] loop4: detected capacity change from 0 to 512 [ 90.146955][ T7903] loop1: detected capacity change from 0 to 764 [ 90.153743][ T7917] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.167865][ T7917] EXT4-fs (loop4): shut down requested (0) [ 90.253970][ T7930] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.263287][ T7931] SELinux: policydb version 0 does not match my version range 15-35 [ 90.273182][ T7931] SELinux: failed to load policy [ 90.337533][ T7941] loop4: detected capacity change from 0 to 128 [ 90.346721][ T7941] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1699'. [ 90.351048][ T7943] loop2: detected capacity change from 0 to 512 [ 90.367933][ T7943] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.383000][ T7943] EXT4-fs (loop2): shut down requested (0) [ 90.761159][ T7958] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.828511][ T7971] loop1: detected capacity change from 0 to 1024 [ 90.836733][ T7971] EXT4-fs: Ignoring removed orlov option [ 90.953342][ T7976] ================================================================== [ 90.961466][ T7976] BUG: KCSAN: data-race in filemap_read / filemap_read [ 90.968354][ T7976] [ 90.970702][ T7976] read to 0xffff88811acaab28 of 8 bytes by task 7971 on cpu 0: [ 90.978270][ T7976] filemap_read+0x6f/0xa00 [ 90.982707][ T7976] generic_file_read_iter+0x79/0x330 [ 90.988027][ T7976] ext4_file_read_iter+0x1cc/0x290 [ 90.993191][ T7976] copy_splice_read+0x43f/0x660 [ 90.998075][ T7976] splice_direct_to_actor+0x290/0x680 [ 91.003465][ T7976] do_splice_direct+0xda/0x150 [ 91.008259][ T7976] do_sendfile+0x380/0x650 [ 91.012716][ T7976] __x64_sys_sendfile64+0x105/0x150 [ 91.017989][ T7976] x64_sys_call+0x2bb0/0x2ff0 [ 91.022686][ T7976] do_syscall_64+0xd2/0x200 [ 91.027231][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.033136][ T7976] [ 91.035484][ T7976] write to 0xffff88811acaab28 of 8 bytes by task 7976 on cpu 1: [ 91.043156][ T7976] filemap_read+0x974/0xa00 [ 91.047669][ T7976] generic_file_read_iter+0x79/0x330 [ 91.052965][ T7976] ext4_file_read_iter+0x1cc/0x290 [ 91.058107][ T7976] copy_splice_read+0x43f/0x660 [ 91.062970][ T7976] splice_direct_to_actor+0x290/0x680 [ 91.068356][ T7976] do_splice_direct+0xda/0x150 [ 91.073130][ T7976] do_sendfile+0x380/0x650 [ 91.077568][ T7976] __x64_sys_sendfile64+0x105/0x150 [ 91.082786][ T7976] x64_sys_call+0x2bb0/0x2ff0 [ 91.087467][ T7976] do_syscall_64+0xd2/0x200 [ 91.091982][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.097881][ T7976] [ 91.100204][ T7976] value changed: 0x000000000000022c -> 0x000000000000022d [ 91.107352][ T7976] [ 91.109688][ T7976] Reported by Kernel Concurrency Sanitizer on: [ 91.115944][ T7976] CPU: 1 UID: 0 PID: 7976 Comm: syz.1.1711 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.125687][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 91.135756][ T7976] ==================================================================