last executing test programs: 18.581644759s ago: executing program 3 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000004cbd18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) write$cgroup_int(r2, &(0x7f0000000040)=0xfe8e, 0x12) socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000180)={0xff, 0xff, 0x3, 0x40, 0x6, 0x2, 0x2, 0x1, 0x4, 0x20, 0x13, 0x7, 0x1, 0x93}, 0xe) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) sendto$inet6(r7, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r7, 0x1) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000feffffffff91f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000340)=0xc) wait4(r11, 0x0, 0x40000000, &(0x7f0000000380)) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYRESOCT=r5, @ANYRES32=r10, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_mempolicy(0x1, &(0x7f0000000140)=0x5, 0x7) 18.271239492s ago: executing program 3 (id=104): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x290, 0x230, 0x258, 0x290, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x128, 0x170, 0x12, {0x959f1400}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0x28000, 0x10, 0x3, {0x2df7}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0x0, 0xff000000, 0xffffff00], 0x6, 0xc, 0x3, 0x4e24, 0x2, 0x8}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'geneve1\x00'}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0xff000000], 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x0, 0xc4, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x2}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) r8 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) sendfile(r6, r8, 0x0, 0x1000000201001) getsockname$packet(r5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newqdisc={0x84, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xd, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xd1, 0x6, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x1, 0xa}}]}, 0x84}}, 0x40440c0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) 17.378876153s ago: executing program 3 (id=119): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x3d8}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0xfffffffd, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x1}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {0x0, 0x0, 0x3e4}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc, 0x4000000}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x0, 0x0, 0x1}, {}, {0xffffffff, 0x0, 0x3, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80, 0xffffffff}, {0x80, 0x2000000}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {0x0, 0x0, 0x0, 0x0, 0xf}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x1}, {0x2}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {0x0, 0x0, 0xffffffff}, {0x4, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x59b}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9, 0xfffffffc}, {}, {0x400000, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x7fff, 0x2, 0x0, 0x2, 0x3ff, 0xffffbffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2, 0xfffffffe}, {0x2, 0x9, 0x20000001}, {0xfffffffc, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe640, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x200000}, {0x0, 0x4, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff}, {0x0, 0x8000}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x2}, {}, {0x40000, 0x1}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80400000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}, {0xfffffffc}], [{}, {}, {0x5, 0x1}, {0x1}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {0x2}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xe68}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 17.365290284s ago: executing program 3 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = dup(r0) sendto$packet(r2, &(0x7f0000000180)="008220", 0xfffffffffffffe0a, 0x5e0ffc3d130561ca, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0xa0, r4, 0x4, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x7c, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x135c502c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17870e5}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bcff5a8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x379a8e6b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x62}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0xc082}, 0xc000) 16.474210876s ago: executing program 3 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r3, 0x500000000000000) 16.262369358s ago: executing program 3 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 16.236582961s ago: executing program 32 (id=139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 2.200979254s ago: executing program 5 (id=383): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x9c, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x81, 0x67}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1c56da06ad701e67}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7c92}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3d1}], @NL80211_ATTR_MAC={0xa}]}, 0x9c}}, 0x40) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x1018658, &(0x7f00000006c0)={[{@noinit_itable}, {@nombcache}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x625, &(0x7f0000001d80)="$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") (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000740)=ANY=[], 0x50) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fedbdf25080000001800028014000380100000140400030008000100050000000c00018008000100", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4004815}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYRES64=r4, @ANYRESOCT, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83c8}, 0x94) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x5, 0x20, 0x5}, 0x10}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x80, 0x0, 0xfffa, 0x4360, 0x300}, 0x8, 0x6, 0x0, 0x0, 0x1, 0x101, 0x0}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) (async) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) (async) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) (async) r11 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[@ANYRES16=r5, @ANYRES64=r8], 0xfe37, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r10, 0x0) 2.158259748s ago: executing program 4 (id=384): lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(0x0, 0x40) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) ppoll(&(0x7f0000000100)=[{r2, 0x9068}, {r4, 0x7a4ff6b8b16a700}, {r1, 0xa441}, {r1, 0xa002}, {r1, 0x4}], 0x5, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x3]}, 0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x400, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) close(r6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) syz_clone(0x410a4400, 0x0, 0xfffffffffffffd56, 0x0, 0x0, 0xffffffffffffffff) setresuid(0x0, r0, r0) 2.081415836s ago: executing program 5 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 2.026597442s ago: executing program 5 (id=386): socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000f8ffffff0000000000000000850000007b00000085000000050004009500000000000001", @ANYRES64=r1], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.857395599s ago: executing program 5 (id=388): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x3, 0x0, 0x9, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x100102, 0x32, 0x43a1bd75, 0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 1.666307999s ago: executing program 4 (id=390): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000400)={0x4, &(0x7f0000000680)=[{0xe, 0x14, &(0x7f0000000240)="5ee2687562a0cabe23b6bd4ba6802094bb2d5d79", 0x1, 0x1}, {0x2, 0xc6, &(0x7f0000000580)="ca8cd2f6079d6da4942278a5e60998d0d61c9d6ae83d0cbdc3c568a03503872301bbe5e2f3e4ed5c6c920654ebd4e174ac2838767d0cfc738e1f4a01ab0870ba6ee92cea103f05fcbd7690a12966639f3cf34e93163dd8b02452d96cd9a182acc705f1886b31214047e1738c0b378528e6e38d8ced7c618c77354d173a63c25a92fca5ab0082b049cc02d5fcd9391fb0e6558ebc8367604a7146483cb06e6e966018f88369fcf121bc20fbe6767bceccd28ba3542e2b5265bea8eddf3c83cda5c84c8ac4c20b", 0x1}, {0x7, 0x2c, &(0x7f0000000280)="78423052050d30e7062608c3bd4d293786dcc8127a86838e3fd33d5c99d38a6029939f9dcffb282962fa52c1", 0x1}, {0x9, 0x12, &(0x7f00000003c0)="729ae7453545585372b04abec35bc085b544", 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) r6 = syz_clone(0x4000, &(0x7f0000000d00)="ba1fc7f4a3ca43ef54d9e60fb8615fe94630dbc9940431a8243eebc2ce63170a3c485cd9caedd9e3f4d1cb2968d273417e3fabf3ce0302a36f41e7b8ef9f939385b6ce79e2cd2c4d5a7eb49a731af24f6c7bfa4de41b7b7d965b02b737196fa7aa3ab581a5189df3e26504c950a5654093c8d55b25795fb8c07c358561c9ba806fa1f0384a27a3497fa71a5e9df74434c482ffc9df6b244010f90b81fa124564b40b854726eb65b8ed14219d62c5ec5a28f6115040cd303e3ca174c29cb452cc3e1d", 0xc2, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)="6604ce145bea612547bb0f872f42b58013cea7744c2cc4") r7 = syz_clone(0x10010000, &(0x7f00000020c0)="6498c8ee98df29fc6704386b207d873567556631f49444153e4160a4b3d34f640353c25a310462ddd28dbf1e7610356ebc71a8af32b151f9deaaebc7a589c06a22ccefa85e35ea2ae5d3c2c411e90d2896b84e3a4e0b421c216e97876218d4", 0x5f, &(0x7f0000000ec0), &(0x7f0000002140), &(0x7f0000002180)="0997bc4f393aab3871243ec67d976ad94d7ec6927692e93b7c8e03ff358ad061266d45be2b1aa5774f09d9c634602162e3fb65b1aff201eeaa78e03e7ac8d9e9dc20c3f1ea51358404d5646beb79f22183801d4a0c95b51b62e957fa238fcee3d8d2350fb91fb48aae8f210f0c781b7d802a9b2e32eca1cb3d725262995efb603ebacfb58790aa2f7c064751ad") msgctl$IPC_SET(r2, 0x1, &(0x7f0000002240)={{0x3, r4, r5, r4, r5, 0x2, 0x9}, 0x0, 0x0, 0xb, 0x3, 0xa92, 0xffffffffffff3f35, 0x3, 0x1ff, 0x7, 0xf, r6, r7}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@private2, 0x0}, &(0x7f00000009c0)=0x14) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x1a, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x0, 0x0, 0x6, 0x4, 0xfffffffffffffff4}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}]}, &(0x7f0000000940)='syzkaller\x00', 0x641, 0x1000, &(0x7f00000010c0)=""/4096, 0x40f00, 0x0, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000a40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0xf, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r10, r12], &(0x7f0000000bc0)=[{0x3, 0x5, 0x10, 0x8}], 0x10, 0x1000000}, 0x94) msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800850, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 1.56117884s ago: executing program 4 (id=392): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x34, r2, 0xa5456c2fe1cd7aeb, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) 1.530805073s ago: executing program 1 (id=393): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000"], 0x48) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)}) (async) syz_open_procfs(r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="794d1526c957134da5fa82ae5e0ab5aa9f787bc5bc948e2e"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8004}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) (async) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000018c0), 0x0, 0x0, 0x1) (async) fremovexattr(r7, &(0x7f0000000140)=@known='system.sockprotoname\x00') (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000107b2081300000000000000000000120000000000000000bd2a7c9cae01d04233a0f3fbe4531be70487c2e10714084e77e266422f69161702dde3b7183a2c8b5adc12a6bace35eb22b639b671b5e30abe5005f757f60f18522f7a43dadd458cf9ed8ecb0e7740f0df3675e10175c4f7aa75b3d281103c2db612cc4146c491995bde3a1fe38bc1716f802116290b581cf6c11e103caef08bd5a7e9c11881072ab888a87ca5715f9f7ba941476d70f31b1b6366f643a00d4d66d66230f46814e56622"], 0x50) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r13}, 0x18) (async) r14 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r14, 0x5423, &(0x7f0000000040)=0x1) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xa, &(0x7f0000000080)=@raw=[@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x42, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[0xffffffffffffffff, r8, r9, r10, r11, r15, 0xffffffffffffffff], &(0x7f0000000600)=[{0x2, 0x3, 0xf, 0x9}, {0x4, 0x5, 0xf, 0x8}, {0x1, 0x1, 0x3, 0x9}, {0x0, 0x1, 0x7, 0x5}, {0x5, 0x2, 0x6, 0xc}, {0x0, 0x5, 0x3, 0x1}], 0x10, 0x1ff}, 0x94) (async) rmdir(0x0) 1.519436955s ago: executing program 5 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 1.280015209s ago: executing program 2 (id=395): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0xfffffffd, 0xffffff4a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") 1.204047197s ago: executing program 0 (id=397): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 1.197609367s ago: executing program 5 (id=398): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="070000000300000008020000d900000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1e, 0x34, &(0x7f00000021c0)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000153a0100ffffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000c000000b70000000000181100"/36, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018430000040000000000000000000000181100", @ANYRES32=r1, @ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="0000000001000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006000000186200000a000000000000000300000018210000", @ANYRES32, @ANYBLOB="0006000001000080bf910030fd000000b7020300000000008500000084000000b700000000000000950000000000093d1f0020"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x4110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x10040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4004881) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250301f2800c0018000bac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002000600000003000100"/65]) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x4008000) socket$xdp(0x2c, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f00000002c0)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@sysvgroups}, {@grpjquota, 0x32}, {@mblk_io_submit}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") setsockopt(r8, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) 1.149513702s ago: executing program 0 (id=399): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000400)={0x4, &(0x7f0000000680)=[{0xe, 0x14, &(0x7f0000000240)="5ee2687562a0cabe23b6bd4ba6802094bb2d5d79", 0x1, 0x1}, {0x2, 0xc6, &(0x7f0000000580)="ca8cd2f6079d6da4942278a5e60998d0d61c9d6ae83d0cbdc3c568a03503872301bbe5e2f3e4ed5c6c920654ebd4e174ac2838767d0cfc738e1f4a01ab0870ba6ee92cea103f05fcbd7690a12966639f3cf34e93163dd8b02452d96cd9a182acc705f1886b31214047e1738c0b378528e6e38d8ced7c618c77354d173a63c25a92fca5ab0082b049cc02d5fcd9391fb0e6558ebc8367604a7146483cb06e6e966018f88369fcf121bc20fbe6767bceccd28ba3542e2b5265bea8eddf3c83cda5c84c8ac4c20b", 0x1}, {0x7, 0x2c, &(0x7f0000000280)="78423052050d30e7062608c3bd4d293786dcc8127a86838e3fd33d5c99d38a6029939f9dcffb282962fa52c1", 0x1}, {0x9, 0x12, &(0x7f00000003c0)="729ae7453545585372b04abec35bc085b544", 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) r6 = syz_clone(0x4000, &(0x7f0000000d00)="ba1fc7f4a3ca43ef54d9e60fb8615fe94630dbc9940431a8243eebc2ce63170a3c485cd9caedd9e3f4d1cb2968d273417e3fabf3ce0302a36f41e7b8ef9f939385b6ce79e2cd2c4d5a7eb49a731af24f6c7bfa4de41b7b7d965b02b737196fa7aa3ab581a5189df3e26504c950a5654093c8d55b25795fb8c07c358561c9ba806fa1f0384a27a3497fa71a5e9df74434c482ffc9df6b244010f90b81fa124564b40b854726eb65b8ed14219d62c5ec5a28f6115040cd303e3ca174c29cb452cc3e1d", 0xc2, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)="6604ce145bea612547bb0f872f42b58013cea7744c2cc4") r7 = syz_clone(0x10010000, &(0x7f00000020c0)="6498c8ee98df29fc6704386b207d873567556631f49444153e4160a4b3d34f640353c25a310462ddd28dbf1e7610356ebc71a8af32b151f9deaaebc7a589c06a22ccefa85e35ea2ae5d3c2c411e90d2896b84e3a4e0b421c216e97876218d4", 0x5f, &(0x7f0000000ec0), &(0x7f0000002140), &(0x7f0000002180)="0997bc4f393aab3871243ec67d976ad94d7ec6927692e93b7c8e03ff358ad061266d45be2b1aa5774f09d9c634602162e3fb65b1aff201eeaa78e03e7ac8d9e9dc20c3f1ea51358404d5646beb79f22183801d4a0c95b51b62e957fa238fcee3d8d2350fb91fb48aae8f210f0c781b7d802a9b2e32eca1cb3d725262995efb603ebacfb58790aa2f7c064751ad") msgctl$IPC_SET(r2, 0x1, &(0x7f0000002240)={{0x3, r4, r5, r4, r5, 0x2, 0x9}, 0x0, 0x0, 0xb, 0x3, 0xa92, 0xffffffffffff3f35, 0x3, 0x1ff, 0x7, 0xf, r6, r7}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@private2, 0x0}, &(0x7f00000009c0)=0x14) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x1a, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xa}, @jmp={0x5, 0x0, 0x0, 0x6, 0x4, 0xfffffffffffffff4}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xe}]}, &(0x7f0000000940)='syzkaller\x00', 0x641, 0x1000, &(0x7f00000010c0)=""/4096, 0x40f00, 0x0, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000a40)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x1, 0xf, 0x7, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b80)=[r10, r12], &(0x7f0000000bc0)=[{0x3, 0x5, 0x10, 0x8}], 0x10, 0x1000000}, 0x94) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800850, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 1.081253959s ago: executing program 2 (id=400): socket$nl_route(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.080551089s ago: executing program 4 (id=401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000001500)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 1.048023632s ago: executing program 4 (id=402): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x292, &(0x7f0000000140)={0x0, 0xe359, 0x0, 0x4, 0x289}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(0x0, 0x0) 989.741509ms ago: executing program 1 (id=403): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) 989.355018ms ago: executing program 1 (id=404): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x3, 0x0, 0x9, 0x690bb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x100102, 0x32, 0x43a1bd75, 0x7, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, 0xffffffffffffffff, 0x308000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@noblock_validity}]}, 0x1, 0xbb6, &(0x7f0000000c00)="$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") madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) 902.698358ms ago: executing program 4 (id=405): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000001280)) pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x4, 0x5e, 0xf8, 0x38da, 0xc, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0xd2e734648565d712, 0x8, 0x0, 0x8}}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r3, 0x1, 0x9}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff00000000000000008500000041000000850000002a00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x11, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 902.017247ms ago: executing program 0 (id=406): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x20, 0x18, 0x1, 0x0, 0x0, {0x2}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid}]}]}, 0x20}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x7fffffffffffffff}, 0x18) r7 = socket(0x40000000015, 0x5, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) recvmmsg(r7, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x24}}], 0x1, 0x0, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000100)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x3, 0x0, 0x34, 0x0, 0x0, 0x2, 0x4, 0x0, @empty, @multicast1, {[@generic={0x4af3dca665480ba0, 0x5, "3b6d1c"}, @noop, @generic={0x0, 0x2}]}}, {0x4e23, 0x4e22, 0x18, 0x0, @wg=@data={0x4, 0xffffffff}}}}}}, 0x0) 897.671428ms ago: executing program 2 (id=407): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 839.328814ms ago: executing program 2 (id=408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) 689.210439ms ago: executing program 0 (id=409): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESDEC], 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, 0x0, 0x45) 663.343502ms ago: executing program 2 (id=410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000400)={0x4, &(0x7f0000000680)=[{0xe, 0x14, &(0x7f0000000240)="5ee2687562a0cabe23b6bd4ba6802094bb2d5d79", 0x1, 0x1}, {0x2, 0xc6, &(0x7f0000000580)="ca8cd2f6079d6da4942278a5e60998d0d61c9d6ae83d0cbdc3c568a03503872301bbe5e2f3e4ed5c6c920654ebd4e174ac2838767d0cfc738e1f4a01ab0870ba6ee92cea103f05fcbd7690a12966639f3cf34e93163dd8b02452d96cd9a182acc705f1886b31214047e1738c0b378528e6e38d8ced7c618c77354d173a63c25a92fca5ab0082b049cc02d5fcd9391fb0e6558ebc8367604a7146483cb06e6e966018f88369fcf121bc20fbe6767bceccd28ba3542e2b5265bea8eddf3c83cda5c84c8ac4c20b", 0x1}, {0x7, 0x2c, &(0x7f0000000280)="78423052050d30e7062608c3bd4d293786dcc8127a86838e3fd33d5c99d38a6029939f9dcffb282962fa52c1", 0x1}, {0x9, 0x12, &(0x7f00000003c0)="729ae7453545585372b04abec35bc085b544", 0x1}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[], 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file1\x00'}) r5 = syz_clone(0x4000, &(0x7f0000000d00)="ba1fc7f4a3ca43ef54d9e60fb8615fe94630dbc9940431a8243eebc2ce63170a3c485cd9caedd9e3f4d1cb2968d273417e3fabf3ce0302a36f41e7b8ef9f939385b6ce79e2cd2c4d5a7eb49a731af24f6c7bfa4de41b7b7d965b02b737196fa7aa3ab581a5189df3e26504c950a5654093c8d55b25795fb8c07c358561c9ba806fa1f0384a27a3497fa71a5e9df74434c482ffc9df6b244010f90b81fa124564b40b854726eb65b8ed14219d62c5ec5a28f6115040cd303e3ca174c29cb452cc3e1d", 0xc2, &(0x7f0000000e00), &(0x7f0000000e40), &(0x7f0000000e80)="6604ce145bea612547bb0f872f42b58013cea7744c2cc4") r6 = syz_clone(0x10010000, &(0x7f00000020c0)="6498c8ee98df29fc6704386b207d873567556631f49444153e4160a4b3d34f640353c25a310462ddd28dbf1e7610356ebc71a8af32b151f9deaaebc7a589c06a22ccefa85e35ea2ae5d3c2c411e90d2896b84e3a4e0b421c216e97876218d4", 0x5f, &(0x7f0000000ec0), &(0x7f0000002140), &(0x7f0000002180)="0997bc4f393aab3871243ec67d976ad94d7ec6927692e93b7c8e03ff358ad061266d45be2b1aa5774f09d9c634602162e3fb65b1aff201eeaa78e03e7ac8d9e9dc20c3f1ea51358404d5646beb79f22183801d4a0c95b51b62e957fa238fcee3d8d2350fb91fb48aae8f210f0c781b7d802a9b2e32eca1cb3d725262995efb603ebacfb58790aa2f7c064751ad") msgctl$IPC_SET(r2, 0x1, &(0x7f0000002240)={{0x3, r3, r4, r3, r4, 0x2, 0x9}, 0x0, 0x0, 0xb, 0x3, 0xa92, 0xffffffffffff3f35, 0x3, 0x1ff, 0x7, 0xf, r5, r6}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000980)={@private2}, &(0x7f00000009c0)=0x14) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b00), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x563, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file1\x00'}) msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800850, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 613.197527ms ago: executing program 0 (id=411): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0xfffffffd, 0xffffff4a, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") 506.549958ms ago: executing program 1 (id=412): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f00000002c0)="174640b6d80fb2eedc81ba60ccbb9d", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}}], 0x2, 0x4004040) 453.482084ms ago: executing program 0 (id=413): r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xc0fe}}], 0x1, 0x2400ff14) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000001540)="94", 0xffe3}], 0x1}}], 0x1, 0x4000800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x1104, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x1000, 0xfffffffe, 0x1cb}, &(0x7f00000003c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1fc, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0xfd5d, 0x200000000000000, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x40032043, 0x1}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 393.15598ms ago: executing program 1 (id=414): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0xffff, 0x7}, 0x5, 0x0, 0xff, 0x0, 0x8, 0x17, 0xe, 0x1d, 0x8, 0x2, {0x7411, 0xfffffff7, 0x6, 0x810000, 0xe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x94, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x68, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0x2, 0x5, 0x5, 0xfffd, 0x6, 0x25a2, 0x9, 0x1000, [{0xf, 0xe, 0xffffffa0, 0x10001}, {0x3, 0xcd2, 0x7, 0x7}, {0xb102, 0x40, 0x1ff, 0x90c1}, {0xf, 0x2000, 0x4, 0x7634293a}, {0x800, 0x9, 0x5, 0x4}]}}]}}]}, 0x94}}, 0x404c004) (fail_nth: 6) 741.45µs ago: executing program 1 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001480)={&(0x7f0000001500)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 0s ago: executing program 2 (id=416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) sendfile(r1, r1, 0x0, 0x8) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20240000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc040}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='rxrpc_call\x00', r2, 0x0, 0x3fc}, 0x18) socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8e, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000300)={0x0, 0xaba, 0x2, 0xfffffffe}, 0x10) socket$kcm(0x2, 0x1, 0x0) sendmsg(r5, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) sendmmsg$inet(r5, &(0x7f000000c3c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000ebe500000500"/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000003) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000240)={0x0, 0xfffffffffffffe52, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): [ 22.142621][ T29] audit: type=1400 audit(1768115994.033:62): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.164701][ T29] audit: type=1400 audit(1768115994.033:63): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.187304][ T29] audit: type=1400 audit(1768115994.033:64): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.210242][ T29] audit: type=1400 audit(1768115994.033:65): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.233224][ T29] audit: type=1400 audit(1768115994.033:66): avc: denied { read open } for pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.10.16' (ED25519) to the list of known hosts. [ 26.535482][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.535498][ T29] audit: type=1400 audit(1768115998.423:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.564732][ T29] audit: type=1400 audit(1768115998.453:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.566935][ T3304] cgroup: Unknown subsys name 'net' [ 26.592669][ T29] audit: type=1400 audit(1768115998.483:72): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.732711][ T3304] cgroup: Unknown subsys name 'cpuset' [ 26.739097][ T3304] cgroup: Unknown subsys name 'rlimit' [ 26.930308][ T29] audit: type=1400 audit(1768115998.813:73): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.962387][ T29] audit: type=1400 audit(1768115998.823:74): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.982889][ T29] audit: type=1400 audit(1768115998.823:75): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.003244][ T29] audit: type=1400 audit(1768115998.823:76): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.005141][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.023576][ T29] audit: type=1400 audit(1768115998.833:77): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.056955][ T29] audit: type=1400 audit(1768115998.833:78): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.080179][ T29] audit: type=1400 audit(1768115998.843:79): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.085985][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.347645][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.383473][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.401418][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.430800][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.467222][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 28.541211][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.548391][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.555705][ T3316] bridge_slave_0: entered allmulticast mode [ 28.562302][ T3316] bridge_slave_0: entered promiscuous mode [ 28.571544][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.578667][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.585865][ T3317] bridge_slave_0: entered allmulticast mode [ 28.592589][ T3317] bridge_slave_0: entered promiscuous mode [ 28.610740][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.618014][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.625232][ T3316] bridge_slave_1: entered allmulticast mode [ 28.631882][ T3316] bridge_slave_1: entered promiscuous mode [ 28.640534][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.647652][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.655269][ T3317] bridge_slave_1: entered allmulticast mode [ 28.661745][ T3317] bridge_slave_1: entered promiscuous mode [ 28.668115][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.675224][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.682708][ T3321] bridge_slave_0: entered allmulticast mode [ 28.689043][ T3321] bridge_slave_0: entered promiscuous mode [ 28.712184][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.719274][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.726426][ T3321] bridge_slave_1: entered allmulticast mode [ 28.732904][ T3321] bridge_slave_1: entered promiscuous mode [ 28.739220][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.746317][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.753605][ T3318] bridge_slave_0: entered allmulticast mode [ 28.760101][ T3318] bridge_slave_0: entered promiscuous mode [ 28.790794][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.798004][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.805226][ T3318] bridge_slave_1: entered allmulticast mode [ 28.811703][ T3318] bridge_slave_1: entered promiscuous mode [ 28.819438][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.828706][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.835811][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.842996][ T3324] bridge_slave_0: entered allmulticast mode [ 28.849337][ T3324] bridge_slave_0: entered promiscuous mode [ 28.857028][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.883067][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.892343][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.899515][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.906873][ T3324] bridge_slave_1: entered allmulticast mode [ 28.913517][ T3324] bridge_slave_1: entered promiscuous mode [ 28.921157][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.936908][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.947484][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.972609][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.983081][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.002636][ T3317] team0: Port device team_slave_0 added [ 29.018849][ T3316] team0: Port device team_slave_0 added [ 29.025760][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.036188][ T3317] team0: Port device team_slave_1 added [ 29.052612][ T3316] team0: Port device team_slave_1 added [ 29.059205][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.073868][ T3321] team0: Port device team_slave_0 added [ 29.080306][ T3318] team0: Port device team_slave_0 added [ 29.102029][ T3321] team0: Port device team_slave_1 added [ 29.109024][ T3318] team0: Port device team_slave_1 added [ 29.125283][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.132357][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.158348][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.178977][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.185977][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.211946][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.223544][ T3324] team0: Port device team_slave_0 added [ 29.229448][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.236434][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.262425][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.284036][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.290989][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.316922][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.328707][ T3324] team0: Port device team_slave_1 added [ 29.337603][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.344617][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.370565][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.381576][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.388586][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.414602][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.439131][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.446140][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.472127][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.483300][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.490505][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.516475][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.540101][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.547214][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.573293][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.599209][ T3317] hsr_slave_0: entered promiscuous mode [ 29.605368][ T3317] hsr_slave_1: entered promiscuous mode [ 29.611997][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.618957][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.645049][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.695020][ T3318] hsr_slave_0: entered promiscuous mode [ 29.701004][ T3318] hsr_slave_1: entered promiscuous mode [ 29.706975][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 29.712861][ T3318] Cannot create hsr debugfs directory [ 29.720882][ T3316] hsr_slave_0: entered promiscuous mode [ 29.727141][ T3316] hsr_slave_1: entered promiscuous mode [ 29.733003][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 29.738724][ T3316] Cannot create hsr debugfs directory [ 29.762860][ T3321] hsr_slave_0: entered promiscuous mode [ 29.769008][ T3321] hsr_slave_1: entered promiscuous mode [ 29.775096][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 29.780835][ T3321] Cannot create hsr debugfs directory [ 29.788899][ T3324] hsr_slave_0: entered promiscuous mode [ 29.794927][ T3324] hsr_slave_1: entered promiscuous mode [ 29.800774][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 29.806549][ T3324] Cannot create hsr debugfs directory [ 30.020969][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.030534][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.041853][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.053883][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.075266][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.088590][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.097782][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.109395][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.135612][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.155182][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.165512][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.178089][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.211241][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.223735][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.242741][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.253978][ T3324] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.262959][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.273945][ T3324] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.286723][ T3324] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.297222][ T3324] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.314902][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.342775][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.355999][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.364115][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.371461][ T875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.387127][ T875] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.394262][ T875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.412585][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.435969][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.443142][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.459779][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.466876][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.507435][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.542612][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.559524][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.566658][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.578873][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.589303][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.603743][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.610879][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.644596][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.657187][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.667222][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.674361][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.686617][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.693839][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.711122][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.718253][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.727559][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.734632][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.759027][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.784825][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.803362][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.907121][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.929133][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.972714][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.014791][ T3321] veth0_vlan: entered promiscuous mode [ 31.032604][ T3321] veth1_vlan: entered promiscuous mode [ 31.053392][ T3317] veth0_vlan: entered promiscuous mode [ 31.083225][ T3317] veth1_vlan: entered promiscuous mode [ 31.097966][ T3321] veth0_macvtap: entered promiscuous mode [ 31.105843][ T3321] veth1_macvtap: entered promiscuous mode [ 31.141512][ T3318] veth0_vlan: entered promiscuous mode [ 31.156058][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.169765][ T3317] veth0_macvtap: entered promiscuous mode [ 31.181273][ T3317] veth1_macvtap: entered promiscuous mode [ 31.194470][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.204129][ T3316] veth0_vlan: entered promiscuous mode [ 31.212320][ T3318] veth1_vlan: entered promiscuous mode [ 31.222866][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.236088][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.259773][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.267749][ T3316] veth1_vlan: entered promiscuous mode [ 31.276424][ T3318] veth0_macvtap: entered promiscuous mode [ 31.283059][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.292953][ T3318] veth1_macvtap: entered promiscuous mode [ 31.299621][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.313718][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.326811][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.338585][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355841][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.364792][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.386074][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.397182][ T3324] veth0_vlan: entered promiscuous mode [ 31.403535][ T3321] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.425881][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.441845][ T1431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.464189][ T1626] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.474688][ T3324] veth1_vlan: entered promiscuous mode [ 31.484894][ T1626] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.497810][ T3316] veth0_macvtap: entered promiscuous mode [ 31.516686][ T1626] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.532433][ T3316] veth1_macvtap: entered promiscuous mode [ 31.532701][ C0] hrtimer: interrupt took 56080 ns [ 31.567156][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.574586][ T3488] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 31.582762][ T3324] veth0_macvtap: entered promiscuous mode [ 31.589155][ T3488] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.593229][ T3324] veth1_macvtap: entered promiscuous mode [ 31.605780][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.620682][ T3495] loop2: detected capacity change from 0 to 512 [ 31.643171][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.655880][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 31.655896][ T29] audit: type=1400 audit(1768116003.543:112): avc: denied { mount } for pid=3487 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.683380][ T3495] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.698871][ T3495] rdma_op ffff88811b4c8180 conn xmit_rdma 0000000000000000 [ 31.705892][ T29] audit: type=1400 audit(1768116003.583:113): avc: denied { create } for pid=3487 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 31.725216][ T29] audit: type=1400 audit(1768116003.583:114): avc: denied { bind } for pid=3487 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 31.744266][ T29] audit: type=1400 audit(1768116003.583:115): avc: denied { write } for pid=3487 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 31.748736][ T3490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.764513][ T29] audit: type=1400 audit(1768116003.633:116): avc: denied { read write } for pid=3489 comm="syz.3.4" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.793668][ T3490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.795012][ T29] audit: type=1400 audit(1768116003.633:117): avc: denied { open } for pid=3489 comm="syz.3.4" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.825849][ T29] audit: type=1400 audit(1768116003.633:118): avc: denied { ioctl } for pid=3489 comm="syz.3.4" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.852467][ T1431] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.856214][ T29] audit: type=1400 audit(1768116003.693:119): avc: denied { create } for pid=3489 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 31.861239][ T1431] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.880746][ T29] audit: type=1400 audit(1768116003.693:120): avc: denied { prog_run } for pid=3489 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.916415][ T29] audit: type=1400 audit(1768116003.803:121): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.944619][ T1431] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.973165][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.990281][ T3500] loop6: detected capacity change from 0 to 7 [ 31.997180][ T3490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 31.999781][ T3500] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.015217][ T1431] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.026321][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.047689][ T1626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.063676][ T3500] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.071591][ T3500] loop6: unable to read partition table [ 32.078492][ T1626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.097175][ T3490] loop3: detected capacity change from 0 to 4096 [ 32.100740][ T3500] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 32.110184][ T3305] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.147829][ T1626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.165533][ T3507] loop1: detected capacity change from 0 to 128 [ 32.165952][ T3490] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.176089][ T3305] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.198452][ T1626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.211972][ T3305] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.220492][ T3305] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.228832][ T3305] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.236939][ T3305] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.245447][ T3305] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.253499][ T3305] Buffer I/O error on dev loop6, logical block 0, async page read [ 32.322675][ T3512] netlink: 'syz.0.6': attribute type 1 has an invalid length. [ 32.415336][ T3514] loop4: detected capacity change from 0 to 4096 [ 32.458071][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.673556][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.712361][ T3524] loop0: detected capacity change from 0 to 1024 [ 32.723919][ T3524] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.9: Failed to acquire dquot type 0 [ 32.740217][ T3524] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 32.772962][ T3524] EXT4-fs (loop0): 1 truncate cleaned up [ 32.783522][ T3526] loop2: detected capacity change from 0 to 512 [ 32.803609][ T3524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.833285][ T3526] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.10: bad orphan inode 11862016 [ 32.862630][ T3526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.882268][ T3524] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.9: Failed to acquire dquot type 0 [ 32.895021][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.904644][ T3526] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.987746][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 33.186625][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.277499][ T3558] loop4: detected capacity change from 0 to 2048 [ 33.305141][ T3558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.364430][ T3569] loop3: detected capacity change from 0 to 128 [ 33.381074][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.391342][ T3569] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.458672][ T3569] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.500274][ T3574] loop4: detected capacity change from 0 to 2048 [ 33.522406][ T3568] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.540846][ T3574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.584295][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.609217][ T3583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18'. [ 33.628972][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.693790][ T3581] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 33.705971][ T3581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.17'. [ 33.746259][ T3601] rdma_op ffff88811bfe4180 conn xmit_rdma 0000000000000000 [ 33.785786][ T3595] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.829101][ T3601] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.837653][ T3601] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.854149][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.882536][ T3607] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.891287][ T3607] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.900856][ T3601] EXT4-fs warning (device loop1): read_mmp_block:111: Error -117 while reading MMP block 0 [ 33.931682][ T3607] EXT4-fs warning (device loop4): read_mmp_block:111: Error -117 while reading MMP block 0 [ 33.976123][ T3597] netlink: 'syz.4.20': attribute type 1 has an invalid length. [ 33.985376][ T3597] netlink: 224 bytes leftover after parsing attributes in process `syz.4.20'. [ 33.994303][ T3602] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 34.032333][ T3591] infiniband syz!: set active [ 34.037136][ T3591] infiniband syz!: added team_slave_0 [ 34.054909][ T3615] veth0: entered promiscuous mode [ 34.060626][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 34.105303][ T3616] rdma_op ffff88811be5a180 conn xmit_rdma 0000000000000000 [ 34.151207][ T3591] RDS/IB: syz!: added [ 34.174584][ T3591] smc: adding ib device syz! with port count 1 [ 34.208791][ T3591] smc: ib device syz! port 1 has no pnetid [ 34.531648][ T3628] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.573664][ T3628] EXT4-fs (loop4): invalid journal inode [ 34.603040][ T3628] EXT4-fs (loop4): can't get journal size [ 34.636841][ T3628] EXT4-fs (loop4): 1 truncate cleaned up [ 34.686617][ T3628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.754016][ T3628] ip6t_srh: unknown srh match flags 4000 [ 34.760603][ T3628] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1073741833 (only 1 groups) [ 34.796508][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.820601][ T3631] netlink: 9 bytes leftover after parsing attributes in process `syz.2.27'. [ 34.832436][ T3631] netlink: 9 bytes leftover after parsing attributes in process `syz.2.27'. [ 34.919434][ T3634] pim6reg: entered allmulticast mode [ 34.926772][ T3634] pim6reg: left allmulticast mode [ 34.927633][ T3635] netlink: 131740 bytes leftover after parsing attributes in process `syz.4.26'. [ 34.952359][ T3635] netlink: zone id is out of range [ 34.957532][ T3635] netlink: zone id is out of range [ 34.991729][ T3635] netlink: zone id is out of range [ 35.007197][ T3635] netlink: zone id is out of range [ 35.021635][ T3635] netlink: zone id is out of range [ 35.037534][ T3635] netlink: del zone limit has 8 unknown bytes [ 35.079856][ T3612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.089937][ T3612] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.109598][ T3612] EXT4-fs warning (device loop0): read_mmp_block:111: Error -117 while reading MMP block 0 [ 35.198676][ T3639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.257267][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.285601][ T3650] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.321260][ T3654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 35.330188][ T3654] netlink: 'syz.0.33': attribute type 1 has an invalid length. [ 35.354506][ T3656] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 35.474514][ T3656] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.487919][ T3656] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.505358][ T3656] rdma_op ffff88811be58180 conn xmit_rdma 0000000000000000 [ 35.605843][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.630591][ T3664] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 35.794158][ T3680] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.39: bad orphan inode 11862016 [ 35.805956][ T3680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.820587][ T3680] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.849318][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 35.923116][ T3691] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.42: bad orphan inode 11862016 [ 35.934502][ T3691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 35.945843][ T3694] pim6reg: entered allmulticast mode [ 35.948443][ T3691] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.963435][ T3694] pim6reg: left allmulticast mode [ 35.980783][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.015776][ T3698] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 36.184694][ T3704] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 36.213852][ T3706] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.227020][ T3706] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.247385][ T3706] EXT4-fs (loop2): 1 orphan inode deleted [ 36.253193][ T3706] EXT4-fs (loop2): 1 truncate cleaned up [ 36.262418][ T3706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.282889][ T3706] Invalid ELF header magic: != ELF [ 36.295928][ T3710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.311546][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.334348][ T3710] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.347170][ T3717] Cannot find del_set index 29 as target [ 36.353783][ T3717] syz.3.47 uses obsolete (PF_INET,SOCK_PACKET) [ 36.389783][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.465167][ T3726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.510550][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.608525][ T3736] veth0: entered promiscuous mode [ 36.629200][ T3736] __nla_validate_parse: 9 callbacks suppressed [ 36.629216][ T3736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.53'. [ 36.666459][ T3738] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 36.995159][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 36.995179][ T29] audit: type=1326 audit(1768116008.873:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d21ff749 code=0x7ffc0000 [ 37.024875][ T29] audit: type=1326 audit(1768116008.873:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fb3d21ff749 code=0x7ffc0000 [ 37.048429][ T29] audit: type=1326 audit(1768116008.873:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d21ff749 code=0x7ffc0000 [ 37.071903][ T29] audit: type=1326 audit(1768116008.873:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3737 comm="syz.2.54" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d21ff749 code=0x7ffc0000 [ 37.126168][ T3759] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 37.201736][ T3764] netlink: 'syz.3.59': attribute type 7 has an invalid length. [ 37.214199][ T172] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.214238][ T3764] netlink: 'syz.3.59': attribute type 7 has an invalid length. [ 37.250046][ T172] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.261655][ T29] audit: type=1400 audit(1768116009.083:293): avc: denied { create } for pid=3763 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 37.280948][ T29] audit: type=1400 audit(1768116009.083:294): avc: denied { ioctl } for pid=3763 comm="syz.3.59" path="socket:[5228]" dev="sockfs" ino=5228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.293375][ T172] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.306304][ T29] audit: type=1400 audit(1768116009.083:295): avc: denied { create } for pid=3763 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 37.342011][ T3764] Zero length message leads to an empty skb [ 37.417247][ T29] audit: type=1326 audit(1768116009.223:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 37.440675][ T29] audit: type=1326 audit(1768116009.223:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 37.464397][ T29] audit: type=1326 audit(1768116009.223:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3758 comm="syz.4.57" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 37.483181][ T172] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.656513][ T3785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'. [ 37.788162][ T3792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 37.833785][ T3795] set_capacity_and_notify: 12 callbacks suppressed [ 37.833800][ T3795] loop1: detected capacity change from 0 to 4096 [ 37.836245][ T3788] loop0: detected capacity change from 0 to 4096 [ 37.861069][ T3797] netlink: 9 bytes leftover after parsing attributes in process `syz.2.68'. [ 37.881507][ T3795] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.900264][ T3797] netlink: 9 bytes leftover after parsing attributes in process `syz.2.68'. [ 37.940996][ T3788] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.024810][ T3801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.051837][ T3802] pim6reg: entered allmulticast mode [ 38.059104][ T3802] pim6reg: left allmulticast mode [ 38.239494][ T3810] loop2: detected capacity change from 0 to 128 [ 38.249044][ T3810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 38.500545][ T3812] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 38.876146][ T3816] netlink: 9 bytes leftover after parsing attributes in process `syz.3.71'. [ 38.977521][ T3816] netlink: 9 bytes leftover after parsing attributes in process `syz.3.71'. [ 39.011227][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.110488][ T3819] pim6reg: entered allmulticast mode [ 39.143444][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.194600][ T3816] pim6reg: left allmulticast mode [ 39.207234][ T3821] loop0: detected capacity change from 0 to 512 [ 39.236096][ T3823] loop6: detected capacity change from 0 to 7 [ 39.244047][ T3819] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 39.258712][ T3823] buffer_io_error: 2 callbacks suppressed [ 39.258726][ T3823] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.291734][ T3823] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.299713][ T3823] loop6: unable to read partition table [ 39.307110][ T3821] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.72: bad orphan inode 11862016 [ 39.319281][ T3823] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 39.326519][ T3613] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.337249][ T3821] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.340014][ T3613] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.360353][ T3613] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.368403][ T3613] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.376684][ T3613] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.385600][ T3613] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.394676][ T3613] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.402948][ T3613] Buffer I/O error on dev loop6, logical block 0, async page read [ 39.404403][ T3830] xt_TPROXY: Can be used only with -p tcp or -p udp [ 39.422332][ T3821] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.445686][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.466512][ T3831] loop1: detected capacity change from 0 to 2048 [ 39.507738][ T3835] netlink: 9 bytes leftover after parsing attributes in process `syz.0.78'. [ 39.533761][ T3831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.576765][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.922360][ T3867] loop2: detected capacity change from 0 to 512 [ 39.929047][ T3867] EXT4-fs: Ignoring removed nobh option [ 39.998431][ T3871] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 40.076473][ T3867] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.107281][ T3867] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.131848][ T3867] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.79: corrupted inode contents [ 40.180048][ T3867] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.79: mark_inode_dirty error [ 40.216110][ T3867] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.79: corrupted inode contents [ 40.250924][ T3867] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.79: mark_inode_dirty error [ 40.272184][ T3867] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.79: mark inode dirty (error -117) [ 40.358456][ T3867] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 40.370866][ T3867] EXT4-fs (loop2): 1 orphan inode deleted [ 40.419519][ T3867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.572530][ T3903] veth0: entered promiscuous mode [ 40.736935][ T3913] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 41.011113][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.375654][ T3950] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 41.406905][ T3950] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 41.478558][ T3959] team0 (unregistering): Port device team_slave_0 removed [ 41.489695][ T3959] team0 (unregistering): Port device team_slave_1 removed [ 41.507393][ T3958] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 41.632619][ T3941] loop2: detected capacity change from 0 to 512 [ 41.648593][ T3971] netlink: 'syz.1.118': attribute type 1 has an invalid length. [ 41.657150][ T3971] __nla_validate_parse: 14 callbacks suppressed [ 41.657229][ T3971] netlink: 224 bytes leftover after parsing attributes in process `syz.1.118'. [ 41.693465][ T3976] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 41.709941][ T3977] loop1: detected capacity change from 0 to 512 [ 41.735269][ T3941] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.758625][ T3977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.781044][ T3941] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.802071][ T3977] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.823548][ T3971] rdma_op ffff88811bfe5d80 conn xmit_rdma 0000000000000000 [ 41.838717][ T3962] loop4: detected capacity change from 0 to 256 [ 41.860492][ T3962] FAT-fs (loop4): Directory bread(block 64) failed [ 41.871263][ T3962] FAT-fs (loop4): Directory bread(block 65) failed [ 41.885394][ T3962] FAT-fs (loop4): Directory bread(block 66) failed [ 41.901783][ T3962] FAT-fs (loop4): Directory bread(block 67) failed [ 41.917936][ T3962] FAT-fs (loop4): Directory bread(block 68) failed [ 41.933255][ T3962] FAT-fs (loop4): Directory bread(block 69) failed [ 41.950252][ T3962] FAT-fs (loop4): Directory bread(block 70) failed [ 41.964170][ T3962] FAT-fs (loop4): Directory bread(block 71) failed [ 41.982436][ T3962] FAT-fs (loop4): Directory bread(block 72) failed [ 42.000718][ T3962] FAT-fs (loop4): Directory bread(block 73) failed [ 42.049533][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 42.049551][ T29] audit: type=1400 audit(1768116013.933:339): avc: denied { mounton } for pid=3956 comm="syz.4.111" path="/19/file1/file0" dev="loop4" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 42.160057][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.183830][ T3988] FAULT_INJECTION: forcing a failure. [ 42.183830][ T3988] name failslab, interval 1, probability 0, space 0, times 1 [ 42.196485][ T3988] CPU: 1 UID: 0 PID: 3988 Comm: syz.1.121 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.196512][ T3988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.196528][ T3988] Call Trace: [ 42.196538][ T3988] [ 42.196550][ T3988] __dump_stack+0x1d/0x30 [ 42.196579][ T3988] dump_stack_lvl+0x95/0xd0 [ 42.196599][ T3988] dump_stack+0x15/0x1b [ 42.196623][ T3988] should_fail_ex+0x265/0x280 [ 42.196663][ T3988] should_failslab+0x8c/0xb0 [ 42.196687][ T3988] __kmalloc_noprof+0xb9/0x5a0 [ 42.196710][ T3988] ? sidtab_sid2str_put+0xe5/0x360 [ 42.196742][ T3988] sidtab_sid2str_put+0xe5/0x360 [ 42.196773][ T3988] security_sid_to_context_core+0x252/0x2e0 [ 42.196880][ T3988] security_sid_to_context+0x27/0x40 [ 42.196907][ T3988] avc_audit_post_callback+0x10f/0x520 [ 42.196943][ T3988] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.196992][ T3988] common_lsm_audit+0x1bb/0x230 [ 42.197019][ T3988] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 42.197083][ T3988] slow_avc_audit+0x104/0x140 [ 42.197145][ T3988] avc_has_perm+0x13a/0x180 [ 42.197257][ T3988] sel_write_load+0xf7/0x380 [ 42.197292][ T3988] ? __pfx_sel_write_load+0x10/0x10 [ 42.197331][ T3988] vfs_write+0x269/0x960 [ 42.197350][ T3988] ? __rcu_read_unlock+0x4f/0x70 [ 42.197404][ T3988] ? __fget_files+0x184/0x1c0 [ 42.197507][ T3988] ? mutex_lock+0x58/0x90 [ 42.197537][ T3988] ksys_write+0xda/0x1a0 [ 42.197564][ T3988] __x64_sys_write+0x40/0x50 [ 42.197583][ T3988] x64_sys_call+0x2847/0x3000 [ 42.197686][ T3988] do_syscall_64+0xca/0x2b0 [ 42.197720][ T3988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.197743][ T3988] RIP: 0033:0x7f95ae93f749 [ 42.197801][ T3988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.197820][ T3988] RSP: 002b:00007f95ad3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.197840][ T3988] RAX: ffffffffffffffda RBX: 00007f95aeb95fa0 RCX: 00007f95ae93f749 [ 42.197853][ T3988] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000005 [ 42.197874][ T3988] RBP: 00007f95ad3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.197886][ T3988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.197898][ T3988] R13: 00007f95aeb96038 R14: 00007f95aeb95fa0 R15: 00007ffed3cb38b8 [ 42.197917][ T3988] [ 42.434912][ T29] audit: type=1400 audit(1768116014.073:340): avc: denied { load_policy } for pid=3987 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 42.475394][ T3988] SELinux: policydb version 280 does not match my version range 15-35 [ 42.484565][ T3988] SELinux: failed to load policy [ 42.538317][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.573311][ T4000] FAULT_INJECTION: forcing a failure. [ 42.573311][ T4000] name failslab, interval 1, probability 0, space 0, times 0 [ 42.586054][ T4000] CPU: 0 UID: 0 PID: 4000 Comm: syz.1.125 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.586088][ T4000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.586104][ T4000] Call Trace: [ 42.586113][ T4000] [ 42.586123][ T4000] __dump_stack+0x1d/0x30 [ 42.586203][ T4000] dump_stack_lvl+0x95/0xd0 [ 42.586225][ T4000] dump_stack+0x15/0x1b [ 42.586314][ T4000] should_fail_ex+0x265/0x280 [ 42.586423][ T4000] should_failslab+0x8c/0xb0 [ 42.586451][ T4000] __kmalloc_cache_noprof+0x65/0x4c0 [ 42.586534][ T4000] ? nf_tables_newtable+0x375/0xea0 [ 42.586574][ T4000] ? __nla_validate_parse+0x1652/0x1d00 [ 42.586600][ T4000] nf_tables_newtable+0x375/0xea0 [ 42.586650][ T4000] nfnetlink_rcv+0xbc9/0x16c0 [ 42.586747][ T4000] netlink_unicast+0x5c0/0x690 [ 42.586780][ T4000] netlink_sendmsg+0x58b/0x6b0 [ 42.586840][ T4000] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.586980][ T4000] __sock_sendmsg+0x145/0x180 [ 42.587007][ T4000] ____sys_sendmsg+0x31e/0x4a0 [ 42.587097][ T4000] ___sys_sendmsg+0x17b/0x1d0 [ 42.587181][ T4000] __x64_sys_sendmsg+0xd4/0x160 [ 42.587235][ T4000] x64_sys_call+0x17ba/0x3000 [ 42.587307][ T4000] do_syscall_64+0xca/0x2b0 [ 42.587377][ T4000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.587406][ T4000] RIP: 0033:0x7f95ae93f749 [ 42.587425][ T4000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.587446][ T4000] RSP: 002b:00007f95ad3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.587519][ T4000] RAX: ffffffffffffffda RBX: 00007f95aeb95fa0 RCX: 00007f95ae93f749 [ 42.587609][ T4000] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 42.587620][ T4000] RBP: 00007f95ad3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.587631][ T4000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.587685][ T4000] R13: 00007f95aeb96038 R14: 00007f95aeb95fa0 R15: 00007ffed3cb38b8 [ 42.587701][ T4000] [ 42.840666][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.130'. [ 42.862365][ T4011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 42.890468][ T4014] netlink: 9 bytes leftover after parsing attributes in process `syz.2.132'. [ 42.899849][ T4014] netlink: 9 bytes leftover after parsing attributes in process `syz.2.132'. [ 42.910077][ T4014] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 42.940992][ T4017] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.089261][ T875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.099713][ T875] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.110824][ T29] audit: type=1326 audit(1768116014.993:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d21ff749 code=0x7ffc0000 [ 43.135423][ T29] audit: type=1326 audit(1768116015.023:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7fb3d21ff749 code=0x7ffc0000 [ 43.158797][ T29] audit: type=1326 audit(1768116015.023:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d21ff749 code=0x7ffc0000 [ 43.182085][ T29] audit: type=1326 audit(1768116015.023:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.2.134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3d21ff749 code=0x7ffc0000 [ 43.237439][ T4040] netlink: 9 bytes leftover after parsing attributes in process `syz.2.141'. [ 43.248121][ T4040] netlink: 9 bytes leftover after parsing attributes in process `syz.2.141'. [ 43.265066][ T875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.275451][ T875] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.312351][ T4047] loop2: detected capacity change from 0 to 512 [ 43.324903][ T4047] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.142: bad orphan inode 11862016 [ 43.341653][ T875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.344279][ T4047] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.352027][ T875] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.367455][ T4047] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.403087][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.425677][ T4055] loop2: detected capacity change from 0 to 512 [ 43.446126][ T875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 43.456596][ T875] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.476875][ T4055] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.143: bad orphan inode 11862016 [ 43.488300][ T4058] netlink: 9 bytes leftover after parsing attributes in process `syz.4.144'. [ 43.498537][ T4058] netlink: 9 bytes leftover after parsing attributes in process `syz.4.144'. [ 43.508488][ T4058] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 43.522325][ T4055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.547551][ T4062] netlink: 9 bytes leftover after parsing attributes in process `syz.4.145'. [ 43.557084][ T4055] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.568932][ T4062] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 43.615763][ T875] bridge_slave_1: left allmulticast mode [ 43.621543][ T875] bridge_slave_1: left promiscuous mode [ 43.627332][ T875] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.660243][ T875] bridge_slave_0: left allmulticast mode [ 43.666162][ T875] bridge_slave_0: left promiscuous mode [ 43.672138][ T875] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.680672][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.744190][ T4077] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.797192][ T4076] loop2: detected capacity change from 0 to 4096 [ 43.814590][ T4076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.851322][ T875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.873603][ T875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.894773][ T875] bond0 (unregistering): Released all slaves [ 43.935724][ T29] audit: type=1326 audit(1768116015.823:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 43.959052][ T29] audit: type=1326 audit(1768116015.823:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 43.982450][ T29] audit: type=1326 audit(1768116015.823:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 44.008674][ T875] bond1 (unregistering): Released all slaves [ 44.042601][ T29] audit: type=1326 audit(1768116015.873:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4074 comm="syz.4.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 44.084410][ T4103] xt_TPROXY: Can be used only with -p tcp or -p udp [ 44.259985][ T4111] loop1: detected capacity change from 0 to 2048 [ 44.268805][ T875] hsr_slave_0: left promiscuous mode [ 44.298030][ T875] hsr_slave_1: left promiscuous mode [ 44.307090][ T4111] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.314149][ T875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.327036][ T875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.343966][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.359990][ T875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.367489][ T875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.386073][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.398986][ T875] veth1_macvtap: left promiscuous mode [ 44.415261][ T875] veth0_macvtap: left promiscuous mode [ 44.437566][ T875] veth1_vlan: left promiscuous mode [ 44.455107][ T875] veth0_vlan: left promiscuous mode [ 44.461533][ T4126] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 44.545303][ T4134] loop2: detected capacity change from 0 to 512 [ 44.573977][ T4134] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.156: bad orphan inode 11862016 [ 44.587321][ T4134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.600468][ T4134] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.625032][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.650427][ T875] team0 (unregistering): Port device team_slave_1 removed [ 44.677087][ T875] team0 (unregistering): Port device team_slave_0 removed [ 44.684850][ T1483] smc: removing ib device syz! [ 44.732687][ T4041] chnl_net:caif_netlink_parms(): no params data found [ 44.781095][ T4142] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 44.878757][ T4147] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 44.906327][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.913483][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.930898][ T4041] bridge_slave_0: entered allmulticast mode [ 44.942237][ T4041] bridge_slave_0: entered promiscuous mode [ 44.951077][ T4153] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 44.956107][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.967667][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.969709][ T4151] loop2: detected capacity change from 0 to 512 [ 44.991971][ T4041] bridge_slave_1: entered allmulticast mode [ 45.001366][ T4156] FAULT_INJECTION: forcing a failure. [ 45.001366][ T4156] name failslab, interval 1, probability 0, space 0, times 0 [ 45.006109][ T4041] bridge_slave_1: entered promiscuous mode [ 45.014128][ T4156] CPU: 1 UID: 0 PID: 4156 Comm: syz.0.162 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.014200][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.014248][ T4156] Call Trace: [ 45.014276][ T4156] [ 45.014306][ T4156] __dump_stack+0x1d/0x30 [ 45.014391][ T4156] dump_stack_lvl+0x95/0xd0 [ 45.014463][ T4156] dump_stack+0x15/0x1b [ 45.014566][ T4156] should_fail_ex+0x265/0x280 [ 45.014702][ T4156] should_failslab+0x8c/0xb0 [ 45.014834][ T4156] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 45.014908][ T4156] ? __alloc_skb+0x2ff/0x4b0 [ 45.014990][ T4156] __alloc_skb+0x2ff/0x4b0 [ 45.015139][ T4156] ? __alloc_skb+0x228/0x4b0 [ 45.015214][ T4156] audit_log_start+0x3a0/0x720 [ 45.015280][ T4156] ? kstrtouint+0x76/0xc0 [ 45.015365][ T4156] audit_seccomp+0x48/0x100 [ 45.015544][ T4156] ? __seccomp_filter+0x832/0x1260 [ 45.015656][ T4156] __seccomp_filter+0x843/0x1260 [ 45.015769][ T4156] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 45.015857][ T4156] ? vfs_write+0x7e8/0x960 [ 45.015910][ T4156] ? __rcu_read_unlock+0x4f/0x70 [ 45.015948][ T4156] ? __fget_files+0x184/0x1c0 [ 45.016018][ T4156] __secure_computing+0x82/0x150 [ 45.016105][ T4156] syscall_trace_enter+0xcf/0x1e0 [ 45.016181][ T4156] do_syscall_64+0xa4/0x2b0 [ 45.016308][ T4156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.016391][ T4156] RIP: 0033:0x7f2c8c23f749 [ 45.016435][ T4156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.016618][ T4156] RSP: 002b:00007f2c8ac9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 45.016676][ T4156] RAX: ffffffffffffffda RBX: 00007f2c8c495fa0 RCX: 00007f2c8c23f749 [ 45.016727][ T4156] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000100 [ 45.016768][ T4156] RBP: 00007f2c8ac9f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.016809][ T4156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.016850][ T4156] R13: 00007f2c8c496038 R14: 00007f2c8c495fa0 R15: 00007ffdcdd08b78 [ 45.016910][ T4156] [ 45.063888][ T4151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.064029][ T4151] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.294534][ T4041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.305600][ T4041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.328376][ T4041] team0: Port device team_slave_0 added [ 45.342096][ T4041] team0: Port device team_slave_1 added [ 45.344815][ T4147] rdma_op ffff888103ba3980 conn xmit_rdma 0000000000000000 [ 45.380081][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.387133][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.413305][ T4041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.457101][ T4176] loop0: detected capacity change from 0 to 2048 [ 45.465519][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.472620][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.498667][ T4041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.513742][ T4176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.553090][ T4041] hsr_slave_0: entered promiscuous mode [ 45.560577][ T4041] hsr_slave_1: entered promiscuous mode [ 45.572836][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.636839][ T4192] SELinux: policydb string length 458760 does not match expected length 8 [ 45.645875][ T4192] SELinux: failed to load policy [ 45.707682][ T4189] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 45.754763][ T4041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.796558][ T4041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.810593][ T4041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.830461][ T4041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.936747][ T4041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.001954][ T4041] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.037848][ T1431] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.045003][ T1431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.118683][ T1431] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.125902][ T1431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.339190][ T4041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.496443][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.750180][ T4252] __nla_validate_parse: 3 callbacks suppressed [ 46.750230][ T4252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.175'. [ 46.868755][ T4041] veth0_vlan: entered promiscuous mode [ 46.894144][ T4041] veth1_vlan: entered promiscuous mode [ 46.931708][ T4277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.934459][ T4041] veth0_macvtap: entered promiscuous mode [ 46.954178][ T4041] veth1_macvtap: entered promiscuous mode [ 46.962483][ T4277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.973754][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.002449][ T4041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.019914][ T1664] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.028996][ T1664] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.052346][ T1664] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.074160][ T1664] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.095937][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 47.095957][ T29] audit: type=1400 audit(1768116018.983:386): avc: denied { create } for pid=4280 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.142599][ T4281] team0 (unregistering): Port device team_slave_0 removed [ 47.171953][ T29] audit: type=1326 audit(1768116019.053:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.172786][ T4281] team0 (unregistering): Port device team_slave_1 removed [ 47.195295][ T29] audit: type=1326 audit(1768116019.053:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.226229][ T29] audit: type=1326 audit(1768116019.053:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.249551][ T29] audit: type=1326 audit(1768116019.053:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.272979][ T29] audit: type=1326 audit(1768116019.053:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.296466][ T29] audit: type=1326 audit(1768116019.053:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.319819][ T29] audit: type=1326 audit(1768116019.053:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.343341][ T29] audit: type=1326 audit(1768116019.143:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.366664][ T29] audit: type=1326 audit(1768116019.143:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4285 comm="syz.4.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393673f749 code=0x7ffc0000 [ 47.507607][ T4295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.188'. [ 47.958137][ T4318] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 47.975573][ T4320] $H: renamed from bond0 (while UP) [ 47.989247][ T4320] $H: entered promiscuous mode [ 47.994439][ T4320] bond_slave_0: entered promiscuous mode [ 48.000176][ T4320] bond_slave_1: entered promiscuous mode [ 48.091082][ T4334] loop0: detected capacity change from 0 to 128 [ 48.098117][ T4334] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.135304][ T4328] loop4: detected capacity change from 0 to 128 [ 48.141876][ T4328] ======================================================= [ 48.141876][ T4328] WARNING: The mand mount option has been deprecated and [ 48.141876][ T4328] and is ignored by this kernel. Remove the mand [ 48.141876][ T4328] option from the mount to silence this warning. [ 48.141876][ T4328] ======================================================= [ 48.219453][ T4334] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.235142][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 48.254035][ T4309] netlink: 132 bytes leftover after parsing attributes in process `syz.2.194'. [ 48.277735][ T4342] loop4: detected capacity change from 0 to 512 [ 48.290177][ T4309] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 48.315297][ T4342] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.206: bad orphan inode 11862016 [ 48.346495][ T4342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 48.376027][ T4342] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.452668][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 48.487858][ T4361] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 48.562068][ T4368] set_capacity_and_notify: 1 callbacks suppressed [ 48.562089][ T4368] loop1: detected capacity change from 0 to 512 [ 48.587913][ T4368] EXT4-fs (loop1): orphan cleanup on readonly fs [ 48.596907][ T4368] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.216: bad orphan inode 13 [ 48.607727][ T4368] ext4_test_bit(bit=12, block=18) = 1 [ 48.613315][ T4368] is_bad_inode(inode)=0 [ 48.617525][ T4368] NEXT_ORPHAN(inode)=2130706432 [ 48.622448][ T4368] max_ino=32 [ 48.625679][ T4368] i_nlink=1 [ 48.629679][ T4368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.644210][ T4368] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 48.662870][ T4368] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.697882][ T4376] netlink: 9 bytes leftover after parsing attributes in process `syz.4.219'. [ 48.709307][ T4376] netlink: 9 bytes leftover after parsing attributes in process `syz.4.219'. [ 48.909587][ T4383] gtp0: entered allmulticast mode [ 48.954251][ T111] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.986911][ T4385] loop5: detected capacity change from 0 to 512 [ 49.016431][ T4385] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.222: bad orphan inode 11862016 [ 49.027755][ T4385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.040472][ T4385] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.052601][ T4389] loop4: detected capacity change from 0 to 512 [ 49.080265][ T4389] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.224: bad orphan inode 11862016 [ 49.092016][ T4041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.093872][ T4389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 49.120989][ T4389] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.159774][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.178489][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 49.261146][ T4405] netlink: 9 bytes leftover after parsing attributes in process `syz.1.230'. [ 49.290161][ T4405] netlink: 9 bytes leftover after parsing attributes in process `syz.1.230'. [ 49.355691][ T4409] netlink: 'syz.4.232': attribute type 1 has an invalid length. [ 49.365271][ T4409] netlink: 224 bytes leftover after parsing attributes in process `syz.4.232'. [ 49.395848][ T4414] team0 (unregistering): Port device team_slave_0 removed [ 49.406797][ T4414] team0 (unregistering): Port device team_slave_1 removed [ 49.420535][ T4418] loop4: detected capacity change from 0 to 512 [ 49.442181][ T4422] syz.1.236 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 49.513454][ T4418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.528141][ T4422] ALSA: seq fatal error: cannot create timer (-19) [ 49.594756][ T4418] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.655675][ T4409] rdma_op ffff88811b4ae580 conn xmit_rdma 0000000000000000 [ 50.178641][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.305477][ T4458] loop0: detected capacity change from 0 to 512 [ 50.315643][ T4458] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.341837][ T4458] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.250: bad orphan inode 13 [ 50.357378][ T4464] netlink: 'syz.5.252': attribute type 21 has an invalid length. [ 50.365515][ T4464] netlink: 132 bytes leftover after parsing attributes in process `syz.5.252'. [ 50.374605][ T4464] netlink: 'syz.5.252': attribute type 1 has an invalid length. [ 50.382686][ T4458] ext4_test_bit(bit=12, block=18) = 1 [ 50.388112][ T4458] is_bad_inode(inode)=0 [ 50.392339][ T4458] NEXT_ORPHAN(inode)=2130706432 [ 50.397229][ T4458] max_ino=32 [ 50.400447][ T4458] i_nlink=1 [ 50.404536][ T4458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.417877][ T4458] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 50.439195][ T4458] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 50.448875][ T4458] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 50.458136][ T4458] FAULT_INJECTION: forcing a failure. [ 50.458136][ T4458] name failslab, interval 1, probability 0, space 0, times 0 [ 50.470832][ T4458] CPU: 1 UID: 0 PID: 4458 Comm: syz.0.250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.470864][ T4458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.470903][ T4458] Call Trace: [ 50.470909][ T4458] [ 50.470915][ T4458] __dump_stack+0x1d/0x30 [ 50.471054][ T4458] dump_stack_lvl+0x95/0xd0 [ 50.471076][ T4458] dump_stack+0x15/0x1b [ 50.471103][ T4458] should_fail_ex+0x265/0x280 [ 50.471129][ T4458] should_failslab+0x8c/0xb0 [ 50.471150][ T4458] __kvmalloc_node_noprof+0x149/0x6b0 [ 50.471212][ T4458] ? __nf_hook_entries_try_shrink+0x265/0x460 [ 50.471356][ T4458] __nf_hook_entries_try_shrink+0x265/0x460 [ 50.471393][ T4458] __nf_unregister_net_hook+0x2db/0x370 [ 50.471480][ T4458] nf_unregister_net_hooks+0xab/0xe0 [ 50.471525][ T4458] nf_defrag_ipv4_disable+0x84/0xa0 [ 50.471695][ T4458] ? __pfx_tproxy_tg4_destroy+0x10/0x10 [ 50.471723][ T4458] tproxy_tg4_destroy+0x1d/0x30 [ 50.471801][ T4458] cleanup_entry+0x15c/0x1b0 [ 50.471874][ T4458] translate_table+0xf3a/0xf90 [ 50.471913][ T4458] do_ipt_set_ctl+0x66f/0x820 [ 50.471937][ T4458] ? _raw_spin_unlock_bh+0x36/0x40 [ 50.471965][ T4458] ? tcp_release_cb+0xf1/0x370 [ 50.472062][ T4458] nf_setsockopt+0x199/0x1b0 [ 50.472121][ T4458] ip_setsockopt+0x102/0x110 [ 50.472161][ T4458] tcp_setsockopt+0x98/0xb0 [ 50.472228][ T4458] sock_common_setsockopt+0x69/0x80 [ 50.472251][ T4458] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 50.472278][ T4458] __sys_setsockopt+0x184/0x200 [ 50.472359][ T4458] __x64_sys_setsockopt+0x64/0x80 [ 50.472395][ T4458] x64_sys_call+0x21d5/0x3000 [ 50.472429][ T4458] do_syscall_64+0xca/0x2b0 [ 50.472604][ T4458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.472626][ T4458] RIP: 0033:0x7f2c8c23f749 [ 50.472641][ T4458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.472660][ T4458] RSP: 002b:00007f2c8ac9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.472708][ T4458] RAX: ffffffffffffffda RBX: 00007f2c8c495fa0 RCX: 00007f2c8c23f749 [ 50.472725][ T4458] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 50.472736][ T4458] RBP: 00007f2c8ac9f090 R08: 0000000000000500 R09: 0000000000000000 [ 50.472748][ T4458] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 50.472759][ T4458] R13: 00007f2c8c496038 R14: 00007f2c8c495fa0 R15: 00007ffdcdd08b78 [ 50.472844][ T4458] [ 50.815022][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.917825][ T4480] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 50.934176][ T4479] netlink: 'syz.5.257': attribute type 1 has an invalid length. [ 50.937314][ T4482] loop0: detected capacity change from 0 to 512 [ 50.993164][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.015992][ T4487] loop5: detected capacity change from 0 to 512 [ 51.043265][ T4487] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.080591][ T4487] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.094520][ T4482] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.170596][ T4494] loop2: detected capacity change from 0 to 512 [ 51.183904][ T4494] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 51.206670][ T4494] FAULT_INJECTION: forcing a failure. [ 51.206670][ T4494] name failslab, interval 1, probability 0, space 0, times 0 [ 51.219403][ T4494] CPU: 0 UID: 0 PID: 4494 Comm: syz.2.261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.219437][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.219450][ T4494] Call Trace: [ 51.219458][ T4494] [ 51.219468][ T4494] __dump_stack+0x1d/0x30 [ 51.219500][ T4494] dump_stack_lvl+0x95/0xd0 [ 51.219528][ T4494] dump_stack+0x15/0x1b [ 51.219553][ T4494] should_fail_ex+0x265/0x280 [ 51.219577][ T4494] should_failslab+0x8c/0xb0 [ 51.219598][ T4494] kmem_cache_alloc_noprof+0x69/0x4b0 [ 51.219619][ T4494] ? vm_area_dup+0x33/0x2c0 [ 51.219644][ T4494] vm_area_dup+0x33/0x2c0 [ 51.219673][ T4494] __split_vma+0xe9/0x660 [ 51.219699][ T4494] ? mas_find+0x5d5/0x700 [ 51.219748][ T4494] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 51.219785][ T4494] mmap_region+0x573/0x1410 [ 51.219821][ T4494] ? selinux_file_open+0x2dc/0x330 [ 51.219879][ T4494] do_mmap+0x9b3/0xbe0 [ 51.219906][ T4494] vm_mmap_pgoff+0x17a/0x2e0 [ 51.219936][ T4494] ksys_mmap_pgoff+0xc2/0x310 [ 51.219966][ T4494] ? __x64_sys_mmap+0x49/0x70 [ 51.220003][ T4494] x64_sys_call+0x16bb/0x3000 [ 51.220036][ T4494] do_syscall_64+0xca/0x2b0 [ 51.220078][ T4494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.220099][ T4494] RIP: 0033:0x7fb3d21ff749 [ 51.220113][ T4494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.220133][ T4494] RSP: 002b:00007fb3d0c67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 51.220157][ T4494] RAX: ffffffffffffffda RBX: 00007fb3d2455fa0 RCX: 00007fb3d21ff749 [ 51.220169][ T4494] RDX: d3283d0368e269b3 RSI: 000000000000a000 RDI: 0000200000000000 [ 51.220181][ T4494] RBP: 00007fb3d0c67090 R08: ffffffffffffffff R09: 000000006a0a4000 [ 51.220192][ T4494] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 51.220203][ T4494] R13: 00007fb3d2456038 R14: 00007fb3d2455fa0 R15: 00007fff789981e8 [ 51.220237][ T4494] [ 51.428651][ T4479] rdma_op ffff888103d24d80 conn xmit_rdma 0000000000000000 [ 51.459251][ T4494] loop2: detected capacity change from 0 to 1024 [ 51.469444][ T4494] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.480533][ T4494] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.527322][ T4494] JBD2: no valid journal superblock found [ 51.533246][ T4494] EXT4-fs (loop2): Could not load journal inode [ 51.573752][ T4482] FAULT_INJECTION: forcing a failure. [ 51.573752][ T4482] name failslab, interval 1, probability 0, space 0, times 0 [ 51.586425][ T4482] CPU: 0 UID: 0 PID: 4482 Comm: syz.0.258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.586460][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.586477][ T4482] Call Trace: [ 51.586485][ T4482] [ 51.586564][ T4482] __dump_stack+0x1d/0x30 [ 51.586590][ T4482] dump_stack_lvl+0x95/0xd0 [ 51.586615][ T4482] dump_stack+0x15/0x1b [ 51.586634][ T4482] should_fail_ex+0x265/0x280 [ 51.586688][ T4482] should_failslab+0x8c/0xb0 [ 51.586716][ T4482] kmem_cache_alloc_noprof+0x69/0x4b0 [ 51.586740][ T4482] ? getname_flags+0x80/0x3b0 [ 51.586764][ T4482] getname_flags+0x80/0x3b0 [ 51.586832][ T4482] __se_sys_quotactl+0x16a/0x670 [ 51.586905][ T4482] __x64_sys_quotactl+0x55/0x70 [ 51.586925][ T4482] x64_sys_call+0x19a4/0x3000 [ 51.586953][ T4482] do_syscall_64+0xca/0x2b0 [ 51.587144][ T4482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.587193][ T4482] RIP: 0033:0x7f2c8c23f749 [ 51.587211][ T4482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.587229][ T4482] RSP: 002b:00007f2c8ac9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 51.587316][ T4482] RAX: ffffffffffffffda RBX: 00007f2c8c495fa0 RCX: 00007f2c8c23f749 [ 51.587331][ T4482] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffff80000200 [ 51.587346][ T4482] RBP: 00007f2c8ac9f090 R08: 0000000000000000 R09: 0000000000000000 [ 51.587361][ T4482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.587376][ T4482] R13: 00007f2c8c496038 R14: 00007f2c8c495fa0 R15: 00007ffdcdd08b78 [ 51.587393][ T4482] [ 51.792409][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.823855][ T4041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.848444][ T4506] team0 (unregistering): Port device team_slave_0 removed [ 51.871991][ T4506] team0 (unregistering): Port device team_slave_1 removed [ 51.902023][ T4512] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 51.921001][ T4513] __nla_validate_parse: 1 callbacks suppressed [ 51.921061][ T4513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 52.097872][ T4539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.279'. [ 52.144428][ T4544] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 52.159844][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 52.159859][ T29] audit: type=1400 audit(1768116024.043:488): avc: denied { setopt } for pid=4545 comm="syz.5.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.213083][ T4549] loop2: detected capacity change from 0 to 512 [ 52.246113][ T29] audit: type=1400 audit(1768116024.133:489): avc: denied { tracepoint } for pid=4543 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 52.266443][ T4549] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.284: bad orphan inode 11862016 [ 52.278056][ T4549] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.290800][ T4549] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.301356][ T29] audit: type=1400 audit(1768116024.183:490): avc: denied { connect } for pid=4545 comm="syz.5.283" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.339224][ T4555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.361213][ T4555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.379168][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 52.408660][ T29] audit: type=1326 audit(1768116024.283:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 52.432042][ T29] audit: type=1326 audit(1768116024.283:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 52.455439][ T29] audit: type=1326 audit(1768116024.283:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 52.478931][ T29] audit: type=1326 audit(1768116024.283:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 52.502154][ T29] audit: type=1326 audit(1768116024.283:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 52.525640][ T29] audit: type=1326 audit(1768116024.283:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 52.548989][ T29] audit: type=1326 audit(1768116024.283:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.0.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 52.598864][ T4560] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 52.605423][ T4560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.613050][ T4560] vhci_hcd vhci_hcd.0: Device attached [ 52.630671][ T4560] process 'syz.2.285' launched './file0' with NULL argv: empty string added [ 52.640547][ T4561] vhci_hcd: connection closed [ 52.640704][ T1664] vhci_hcd vhci_hcd.2: stop threads [ 52.650758][ T1664] vhci_hcd vhci_hcd.2: release socket [ 52.656207][ T1664] vhci_hcd vhci_hcd.2: disconnect device [ 52.704573][ T4566] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 52.792870][ T4579] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 52.840980][ T4582] netlink: 'syz.4.295': attribute type 7 has an invalid length. [ 52.853345][ T1431] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.853408][ T4582] netlink: 'syz.4.295': attribute type 7 has an invalid length. [ 52.866989][ T1431] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.881310][ T1431] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.890173][ T1431] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.977203][ T4591] FAULT_INJECTION: forcing a failure. [ 52.977203][ T4591] name failslab, interval 1, probability 0, space 0, times 0 [ 52.990036][ T4591] CPU: 1 UID: 0 PID: 4591 Comm: syz.4.298 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.990059][ T4591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.990070][ T4591] Call Trace: [ 52.990075][ T4591] [ 52.990082][ T4591] __dump_stack+0x1d/0x30 [ 52.990118][ T4591] dump_stack_lvl+0x95/0xd0 [ 52.990142][ T4591] dump_stack+0x15/0x1b [ 52.990160][ T4591] should_fail_ex+0x265/0x280 [ 52.990242][ T4591] should_failslab+0x8c/0xb0 [ 52.990273][ T4591] __kmalloc_noprof+0xb9/0x5a0 [ 52.990323][ T4591] ? sk_prot_alloc+0xa8/0x190 [ 52.990347][ T4591] ? should_fail_ex+0xdb/0x280 [ 52.990368][ T4591] sk_prot_alloc+0xa8/0x190 [ 52.990393][ T4591] sk_alloc+0x34/0x3d0 [ 52.990417][ T4591] bpf_prog_test_run_skb+0x31c/0xf50 [ 52.990483][ T4591] ? __rcu_read_unlock+0x4f/0x70 [ 52.990501][ T4591] ? __fget_files+0x184/0x1c0 [ 52.990524][ T4591] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 52.990551][ T4591] bpf_prog_test_run+0x204/0x340 [ 52.990638][ T4591] __sys_bpf+0x4c0/0x7c0 [ 52.990669][ T4591] __x64_sys_bpf+0x41/0x50 [ 52.990698][ T4591] x64_sys_call+0x28e1/0x3000 [ 52.990801][ T4591] do_syscall_64+0xca/0x2b0 [ 52.990926][ T4591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.990946][ T4591] RIP: 0033:0x7f393673f749 [ 52.990960][ T4591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.990975][ T4591] RSP: 002b:00007f39351a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 52.990999][ T4591] RAX: ffffffffffffffda RBX: 00007f3936995fa0 RCX: 00007f393673f749 [ 52.991010][ T4591] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 52.991047][ T4591] RBP: 00007f39351a7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.991058][ T4591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.991069][ T4591] R13: 00007f3936996038 R14: 00007f3936995fa0 R15: 00007fffcbc73ba8 [ 52.991095][ T4591] [ 53.314347][ T4596] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 53.570301][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 53.719357][ T4618] set_capacity_and_notify: 2 callbacks suppressed [ 53.719373][ T4618] loop5: detected capacity change from 0 to 8192 [ 53.734713][ T4618] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.783217][ T4624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 53.886043][ T4638] netlink: 'syz.1.316': attribute type 7 has an invalid length. [ 53.894274][ T4638] netlink: 'syz.1.316': attribute type 23 has an invalid length. [ 54.052599][ T4643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 54.147769][ T4651] program syz.1.317 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.188368][ T4653] loop2: detected capacity change from 0 to 2048 [ 54.217145][ T4653] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.243295][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.304354][ T4663] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 54.520682][ T4679] netlink: 'syz.5.327': attribute type 7 has an invalid length. [ 54.528500][ T4679] netlink: 'syz.5.327': attribute type 23 has an invalid length. [ 54.573068][ T4685] loop2: detected capacity change from 0 to 512 [ 54.584028][ T4685] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.329: bad orphan inode 11862016 [ 54.607203][ T4685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.619952][ T4685] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.645279][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 54.728102][ T4695] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 54.746840][ T4695] netlink: 224 bytes leftover after parsing attributes in process `syz.2.332'. [ 54.781455][ T4706] loop2: detected capacity change from 0 to 512 [ 54.797646][ T4706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.826168][ T4706] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.847533][ T4695] rdma_op ffff8881053d7580 conn xmit_rdma 0000000000000000 [ 55.017957][ T4730] loop4: detected capacity change from 0 to 512 [ 55.035642][ T4730] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.342: bad orphan inode 11862016 [ 55.047033][ T4730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 55.060636][ T4730] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.126192][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 55.246811][ T4747] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 55.291033][ T4740] loop4: detected capacity change from 0 to 128 [ 55.455767][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.521817][ T4776] netlink: 'syz.2.354': attribute type 7 has an invalid length. [ 55.529555][ T4776] netlink: 'syz.2.354': attribute type 23 has an invalid length. [ 55.570126][ T4779] veth0: entered promiscuous mode [ 55.575723][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 55.627794][ T4784] netlink: 'syz.5.357': attribute type 12 has an invalid length. [ 55.646659][ T4785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'. [ 55.844363][ T4797] loop2: detected capacity change from 0 to 512 [ 55.885034][ T4797] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.364: bad orphan inode 11862016 [ 55.911848][ T4797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 56.028166][ T4797] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.137731][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 56.395607][ T4833] netlink: 'syz.1.370': attribute type 7 has an invalid length. [ 56.407267][ T172] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.407302][ T4833] netlink: 'syz.1.370': attribute type 7 has an invalid length. [ 56.445344][ T4831] loop2: detected capacity change from 0 to 4096 [ 56.453123][ T172] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.464822][ T4831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.485852][ T172] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.551999][ T172] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 56.640281][ T4843] FAULT_INJECTION: forcing a failure. [ 56.640281][ T4843] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 56.653607][ T4843] CPU: 0 UID: 0 PID: 4843 Comm: syz.5.374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.653717][ T4843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.653730][ T4843] Call Trace: [ 56.653738][ T4843] [ 56.653751][ T4843] __dump_stack+0x1d/0x30 [ 56.653831][ T4843] dump_stack_lvl+0x95/0xd0 [ 56.653858][ T4843] dump_stack+0x15/0x1b [ 56.653884][ T4843] should_fail_ex+0x265/0x280 [ 56.653987][ T4843] should_fail_alloc_page+0xf2/0x100 [ 56.654018][ T4843] __alloc_frozen_pages_noprof+0x109/0x360 [ 56.654059][ T4843] alloc_pages_mpol+0xb3/0x260 [ 56.654110][ T4843] vma_alloc_folio_noprof+0x1aa/0x300 [ 56.654174][ T4843] do_wp_page+0xf60/0x2510 [ 56.654204][ T4843] ? css_rstat_updated+0xbb/0x280 [ 56.654280][ T4843] ? __rcu_read_lock+0x37/0x50 [ 56.654305][ T4843] handle_mm_fault+0x7b0/0x2c60 [ 56.654345][ T4843] do_user_addr_fault+0x630/0x1080 [ 56.654454][ T4843] ? ksys_mmap_pgoff+0xc2/0x310 [ 56.654489][ T4843] exc_page_fault+0x62/0xa0 [ 56.654575][ T4843] asm_exc_page_fault+0x26/0x30 [ 56.654601][ T4843] RIP: 0033:0x7f9fbdba0943 [ 56.654616][ T4843] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 56.654706][ T4843] RSP: 002b:00007f9fbc7464a0 EFLAGS: 00010202 [ 56.654727][ T4843] RAX: 0000000000000400 RBX: 00007f9fbc746540 RCX: 00007f9fb4327000 [ 56.654743][ T4843] RDX: 00007f9fbc7466e0 RSI: 0000000000000011 RDI: 00007f9fbc7465e0 [ 56.654759][ T4843] RBP: 00000000000000f9 R08: 000000000000000a R09: 00000000000003b4 [ 56.654804][ T4843] R10: 00000000000003ca R11: 00007f9fbc746540 R12: 0000000000000001 [ 56.654820][ T4843] R13: 00007f9fbdd7fc40 R14: 0000000000000020 R15: 00007f9fbc7465e0 [ 56.654839][ T4843] [ 56.654859][ T4843] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 56.866535][ T4848] loop4: detected capacity change from 0 to 512 [ 56.884539][ T4843] loop5: detected capacity change from 0 to 512 [ 56.909209][ T4843] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.374: Failed to acquire dquot type 1 [ 56.937389][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.947302][ T4848] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.376: bad orphan inode 11862016 [ 56.970426][ T4843] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.374: Failed to acquire dquot type 1 [ 56.993080][ T4843] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.374: bg 0: block 248: padding at end of block bitmap is not set [ 57.008036][ T4848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 57.021208][ T4843] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 57.023212][ T4848] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.033162][ T4843] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.374: Failed to acquire dquot type 1 [ 57.052457][ T4843] EXT4-fs (loop5): 1 orphan inode deleted [ 57.058620][ T4843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.071191][ T4843] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.102056][ T3324] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 57.122471][ T4041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.263825][ T4868] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 57.411863][ T4883] netlink: 'syz.5.386': attribute type 7 has an invalid length. [ 57.435769][ T4883] netlink: 'syz.5.386': attribute type 7 has an invalid length. [ 57.435760][ T1431] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.491232][ T1431] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.510951][ T1431] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.518567][ T4883] syz.5.386 (4883) used greatest stack depth: 10368 bytes left [ 57.533813][ T1431] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 57.673467][ T4898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.813477][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 57.813495][ T29] audit: type=1400 audit(1768116029.703:663): avc: denied { watch watch_reads } for pid=4916 comm="syz.0.391" path="/80" dev="tmpfs" ino=431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 57.878841][ T4041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.905774][ T29] audit: type=1326 audit(1768116029.703:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 57.929108][ T29] audit: type=1326 audit(1768116029.703:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 57.952592][ T29] audit: type=1326 audit(1768116029.713:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 57.976217][ T29] audit: type=1326 audit(1768116029.713:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 57.999594][ T29] audit: type=1326 audit(1768116029.713:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 58.006988][ T4927] bridge0: entered promiscuous mode [ 58.023023][ T29] audit: type=1326 audit(1768116029.713:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 58.051505][ T29] audit: type=1326 audit(1768116029.713:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 58.074826][ T29] audit: type=1326 audit(1768116029.713:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 58.098109][ T29] audit: type=1326 audit(1768116029.713:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4916 comm="syz.0.391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2c8c23f749 code=0x7ffc0000 [ 58.131873][ T4927] macsec1: entered promiscuous mode [ 58.141190][ T4927] bridge0: port 3(macsec1) entered blocking state [ 58.147726][ T4927] bridge0: port 3(macsec1) entered disabled state [ 58.154496][ T4927] macsec1: entered allmulticast mode [ 58.159877][ T4927] bridge0: entered allmulticast mode [ 58.166022][ T4927] macsec1: left allmulticast mode [ 58.171082][ T4927] bridge0: left allmulticast mode [ 58.176759][ T4927] bridge0: left promiscuous mode [ 58.198309][ T4941] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 58.230913][ T4939] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.395: bad orphan inode 11862016 [ 58.259586][ T4939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 58.274032][ T4944] netlink: 'syz.5.398': attribute type 1 has an invalid length. [ 58.275684][ T4939] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.282041][ T4944] netlink: 224 bytes leftover after parsing attributes in process `syz.5.398'. [ 58.321735][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 58.370998][ T4960] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 58.383964][ T4948] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.417537][ T4948] rdma_op ffff88811bfe4180 conn xmit_rdma 0000000000000000 [ 58.542919][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 58.627975][ T4983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 58.889726][ T4993] set_capacity_and_notify: 5 callbacks suppressed [ 58.889743][ T4993] loop2: detected capacity change from 0 to 128 [ 59.069488][ T5010] FAULT_INJECTION: forcing a failure. [ 59.069488][ T5010] name failslab, interval 1, probability 0, space 0, times 0 [ 59.082253][ T5010] CPU: 1 UID: 0 PID: 5010 Comm: syz.1.414 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.082279][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.082291][ T5010] Call Trace: [ 59.082296][ T5010] [ 59.082304][ T5010] __dump_stack+0x1d/0x30 [ 59.082406][ T5010] dump_stack_lvl+0x95/0xd0 [ 59.082506][ T5010] dump_stack+0x15/0x1b [ 59.082525][ T5010] should_fail_ex+0x265/0x280 [ 59.082548][ T5010] should_failslab+0x8c/0xb0 [ 59.082640][ T5010] __kmalloc_cache_noprof+0x65/0x4c0 [ 59.082664][ T5010] ? tcf_proto_create+0x44/0x1a0 [ 59.082696][ T5010] tcf_proto_create+0x44/0x1a0 [ 59.082788][ T5010] tc_new_tfilter+0x95c/0x10a0 [ 59.082833][ T5010] ? __rcu_read_unlock+0x4f/0x70 [ 59.082873][ T5010] ? ns_capable+0x7d/0xb0 [ 59.082956][ T5010] ? __pfx_tc_new_tfilter+0x10/0x10 [ 59.082996][ T5010] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 59.083098][ T5010] netlink_rcv_skb+0x123/0x220 [ 59.083136][ T5010] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 59.083168][ T5010] rtnetlink_rcv+0x1c/0x30 [ 59.083237][ T5010] netlink_unicast+0x5c0/0x690 [ 59.083277][ T5010] netlink_sendmsg+0x58b/0x6b0 [ 59.083322][ T5010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.083364][ T5010] __sock_sendmsg+0x145/0x180 [ 59.083413][ T5010] ____sys_sendmsg+0x31e/0x4a0 [ 59.083452][ T5010] ___sys_sendmsg+0x17b/0x1d0 [ 59.083497][ T5010] __x64_sys_sendmsg+0xd4/0x160 [ 59.083608][ T5010] x64_sys_call+0x17ba/0x3000 [ 59.083633][ T5010] do_syscall_64+0xca/0x2b0 [ 59.083784][ T5010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.083813][ T5010] RIP: 0033:0x7f95ae93f749 [ 59.083839][ T5010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.083862][ T5010] RSP: 002b:00007f95ad3a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.083880][ T5010] RAX: ffffffffffffffda RBX: 00007f95aeb95fa0 RCX: 00007f95ae93f749 [ 59.083892][ T5010] RDX: 000000000404c004 RSI: 0000200000006040 RDI: 0000000000000004 [ 59.083904][ T5010] RBP: 00007f95ad3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.083979][ T5010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.084016][ T5010] R13: 00007f95aeb96038 R14: 00007f95aeb95fa0 R15: 00007ffed3cb38b8 [ 59.084041][ T5010] [ 59.414564][ T3613] ================================================================== [ 59.422699][ T3613] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 59.429428][ T3613] [ 59.431774][ T3613] write to 0xffff88811b838b50 of 8 bytes by task 3008 on cpu 0: [ 59.439424][ T3613] __dentry_kill+0x142/0x4b0 [ 59.444061][ T3613] finish_dput+0x2b/0x200 [ 59.448427][ T3613] dput+0x52/0x60 [ 59.452087][ T3613] step_into_slowpath+0x36b/0x480 [ 59.457147][ T3613] path_lookupat+0x330/0x500 [ 59.461782][ T3613] filename_lookup+0x2d7/0x340 [ 59.466602][ T3613] do_readlinkat+0x7d/0x320 [ 59.471147][ T3613] __x64_sys_readlink+0x47/0x60 [ 59.476031][ T3613] x64_sys_call+0x2af1/0x3000 [ 59.480756][ T3613] do_syscall_64+0xca/0x2b0 [ 59.485310][ T3613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.491226][ T3613] [ 59.493569][ T3613] read to 0xffff88811b838b50 of 8 bytes by task 3613 on cpu 1: [ 59.501126][ T3613] fast_dput+0x5f/0x2c0 [ 59.505330][ T3613] dput+0x24/0x60 [ 59.508983][ T3613] do_unlinkat+0x202/0x4b0 [ 59.513436][ T3613] __x64_sys_unlink+0x2e/0x40 [ 59.518129][ T3613] x64_sys_call+0x2f48/0x3000 [ 59.522921][ T3613] do_syscall_64+0xca/0x2b0 [ 59.527536][ T3613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.533448][ T3613] [ 59.535882][ T3613] value changed: 0xffff8882376cbd58 -> 0x0000000000000000 [ 59.543012][ T3613] [ 59.545373][ T3613] Reported by Kernel Concurrency Sanitizer on: [ 59.551624][ T3613] CPU: 1 UID: 0 PID: 3613 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.560923][ T3613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.570999][ T3613] ================================================================== [ 59.654791][ T5020] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 59.662655][ T5020] netlink: 224 bytes leftover after parsing attributes in process `syz.2.416'.