last executing test programs: 26.719852724s ago: executing program 2 (id=3): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xf43b000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 25.773788568s ago: executing program 2 (id=12): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f00000021c0)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) 25.700189399s ago: executing program 2 (id=13): mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x800000000007, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4000850) 25.495295512s ago: executing program 2 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000640)=@name={0x1e, 0x2, 0xf1639f5432e063d9, {{0x42, 0x2}, 0x2}}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000140)={0xe021, 0x1, [{0x1, 0x1}]}) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)='\x00', r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setresuid(0xee00, 0x0, 0x0) 25.361865944s ago: executing program 2 (id=17): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', '', [{0x20, '#! '}, {0x20, '\x1b,'}, {0x20, '@'}]}, 0xd) fadvise64(r0, 0x5, 0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x31) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x2, {0x1, 0x0, 0x6}, 0x1}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 25.226847746s ago: executing program 2 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r0, 0x4000, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x1, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x854) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x854) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@deltclass={0x80, 0x29, 0x7080f9a6df3e263a, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0x7}, {0xd, 0x10}, {0xb, 0xfff4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @TCA_RATE={0x6, 0x5, {0x25, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf8}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe2}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x41}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x8004) (async) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@deltclass={0x80, 0x29, 0x7080f9a6df3e263a, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0x7}, {0xd, 0x10}, {0xb, 0xfff4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @TCA_RATE={0x6, 0x5, {0x25, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf8}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe2}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x41}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x8004) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) (async) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000700), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000050a245d5cde008"], 0x0) 10.020311459s ago: executing program 32 (id=18): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r0, 0x4000, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x1, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x854) (async) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xffe0, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x854) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@deltclass={0x80, 0x29, 0x7080f9a6df3e263a, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0x7}, {0xd, 0x10}, {0xb, 0xfff4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @TCA_RATE={0x6, 0x5, {0x25, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf8}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe2}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x41}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x8004) (async) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@deltclass={0x80, 0x29, 0x7080f9a6df3e263a, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x3, 0x7}, {0xd, 0x10}, {0xb, 0xfff4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xa}}, @TCA_RATE={0x6, 0x5, {0x25, 0x3}}, @TCA_RATE={0x6, 0x5, {0x4, 0x4}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}, @TCA_RATE={0x6, 0x5, {0xf8}}, @TCA_RATE={0x6, 0x5, {0x8, 0xe2}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x41}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x8004) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) (async) ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) setsockopt$inet_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000700), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c200000050a245d5cde008"], 0x0) 4.464253627s ago: executing program 0 (id=186): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xbe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 4.225516651s ago: executing program 0 (id=190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/183, 0xf4}], 0x1, 0xa800, 0x7ffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 3.956101024s ago: executing program 4 (id=194): timerfd_create(0x7, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x24002, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$poke(0x4, r1, &(0x7f0000000100), 0xc6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) write$cgroup_int(r5, 0x0, 0x2) capset(0x0, &(0x7f0000000380)={0x1, 0x89, 0x40, 0x7ffc, 0x2, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c000000cc212f9078ac1e0001e0000030fc235dc444fbbe78"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_socket_connect_nvme_tcp() socket$nl_generic(0x10, 0x3, 0x10) 3.271813954s ago: executing program 0 (id=199): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%ps \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) sendfile(r0, r0, 0x0, 0x800000009) 3.036293607s ago: executing program 4 (id=201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x100, 0x4, 0xa0280, r4}) 3.025951057s ago: executing program 0 (id=202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x8, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 3.024603497s ago: executing program 4 (id=203): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x31) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x2, {0x1, 0x0, 0x6}, 0x1}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 2.83133073s ago: executing program 4 (id=204): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000600), 0xeb2bc003b4c7f3c8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0), 0x1, 0x506, &(0x7f0000001000)="$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") get_mempolicy(0x0, &(0x7f00000001c0), 0xe3c3, &(0x7f0000ffd000/0x1000)=nil, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x10) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@dax_inode}, {@nodiscard}, {@dax_inode}, {@nojournal_checksum}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2.378786396s ago: executing program 4 (id=207): getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}, {0x0, 0x4}], 0x2) write$UHID_DESTROY(r4, &(0x7f0000000200), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="73015eeb4d144509cae28c000000000000003f", @ANYRES16=r1, @ANYBLOB="01002600000000250000000e0001006e657441657673696d0000000f0002006e672700000000000000000008008b00000000", @ANYRES16=r2, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='r', 0x200420}], 0x1}, 0x48000) sendmsg$kcm(r7, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)="96", 0x1}], 0x1}, 0x1) r8 = dup(r6) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', r5, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={'syz', 0x2}, &(0x7f00000005c0)='\x00', 0xffffffffffffffff) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700091f632bab0003000000000000000001"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x18) r12 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) r13 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x21) pwrite64(r13, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) write(r12, &(0x7f0000000800)="c8fcc13ff597da4342e5e66d9556a83522fee52a3de2ad3e9c6b7c95826bc8a77122ba4c61a039529e438d2f3fb2487f54afbe91b2350f4573fddfd9363a13c666e7b779c75900763f6cc974b567dab306791592bfadd7a4617a8b02353c88419d64c924d83729384594e8026d52261a2a56c81c48cefc4adfc14912c4ece54ed4462381e6070bca5d201d238ab10d464817cd8454c23d9aae4deb823c672605ed2c70955ba3f0122eeadc847e664f5fe53df5ccc8cfd54a53cc0a9fea4c7e619cf3a6437ebe6cbd0bbbdc61d52ef4050de363c9d6446705a6da", 0xda) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r12, &(0x7f0000001fc0)=""/184, 0xb8) 2.314047687s ago: executing program 3 (id=208): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ftruncate(r0, 0x2007ffc) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000140), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 2.183492329s ago: executing program 5 (id=210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/183, 0xf4}], 0x1, 0xa800, 0x7ffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 2.08691772s ago: executing program 5 (id=212): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xe, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r3, &(0x7f0000000640)=@name={0x1e, 0x2, 0xf1639f5432e063d9, {{0x42, 0x2}, 0x2}}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = add_key$keyring(0x0, &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000280)='\x00', r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) setresuid(0xee00, 0x0, 0x0) 2.045235281s ago: executing program 5 (id=213): timerfd_create(0x7, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.pending_reads\x00', 0x24002, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, &(0x7f0000000380)={0x1, 0x9, 0x40, 0x80000000, 0x2, 0x402}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000100000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e7465720010000180090001006c617374"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_socket_connect_nvme_tcp() socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 1.840284144s ago: executing program 3 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x31) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x2, {0x1, 0x0, 0x6}, 0x1}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 1.38422881s ago: executing program 4 (id=217): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x1080810, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x512, &(0x7f0000000380)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4H8ggoJPPvki+AcIwzz4B8jAgL6ID6KiiM7og6DOlSQ3TidN2rrTNp3m84HTnHPvzf2ec0NO7o/TewMYWy9FxFsRMRERr0ZEMZ+e5in2uqm93IP77y21UxJZ9s5fk0jyab11tcuTEXE1f9tURHztyxHfTA7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7ujYU3F15fmM1yT9TOUi/zky99/vanv/W7G3++9u12tT73kShEXztOUrfphc626Glvo63TCDYCE3l7CqOuCAAAx9Lex/9gRHyis/9fjInO3lyfiVHUDAAAADgp2Rem499JRAYAAABcWGlETEeSlvOxANORppfycwMfjitprdFsfWqlsb2x3J4XUYpCurJWq87mY4VLUUja5bl8jG2v/FpfeT4inouI7xcvd8rlpUZtecTnPgAAAGBcXO07/v9HMe3kjzbg/wQAAACA86s0tAAAAABcFA75AQAA4OLrP/6/PaJ6AAAAAKfiK2+/3U5Z7/nXy+/ubK833r2+XG2ul+vbS+WlxtZmebXRWO3cs69+1PpqjcbmZ2Jj+2alVW22Ks2d3Rv1xvZG68baY4/ABgAAAM7Qcx+/8+skIvY+e7mTIr8PIMBj/jDqCgAnaWLUFQBGxl28YXwVRl0BYOSSI+YbvAMAAE+/mY8evP7fe/6/cwNwsRnrAwDjx/V/GF8FIwBhrKUR8YFu9plhywy9/v/L40bJsoi7xf1TnF8EAICzNd1JSVrOjwOmI03L5YhnI9JSFJKVtVp1Nj8++FWx8Ey7PNd5Z3LkmGEAAAAAAAAAAAAAAAAAAAAAAAAAoCvLksgAAACACy0i/VPSuZt/xEzxlen+8wOXkn8W44954Ufv/ODmYqu1Ndee/rfOs7wuRUTrh/n014Y+PgwAAAA4acne0Fnd4/T8de5MawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAGHhw/72lXjrLuH/5YkSUBsWfjKnO61QUIuLK35OY3Pe+JCImTiD+3q2IeH5Q/CQeZllWymsxKP7lU45f6myawfHTiLh6AvFhnN1p9z9vDfr+pfFS53Xw928yT09qeP+X5pGf7/Rzg/qfZw+srT4wxgv3flYZGv9WxAuTg/ufXv+bDIn/8oG1/SvLsoMxvvH13d1h8bMfR8wM/P1JHotVadU3K82d3etr9cXV6mp1Y35+7o2FNxdeX5itrKzVqvnfgTG+97GfPzys/VcGxP/tb7r972Htf2XYSvv8597N+x/qZguD4l97eeDv71QMiZ/mv32fzPPt+TO9/F43v9+LP7374mHtXx6y/Y/6/K8ds/2vfvW7vz/mogDAGWju7K4v1mrVrUMyU8dY5mnM/GLqXFTj/8xk3+l+cuelPu83095bfTSl16pzULF9mezMYk3EOWny/zIj7ZYAAIBT8Ginf9Q1AQAAAAAAAAAAAAAAAAAAgPF1FrcT64+5N5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc6r8BAAD//0wa4Aw=") socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 2) 1.284244072s ago: executing program 3 (id=218): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r1, 0x20, &(0x7f0000000080)={&(0x7f0000000380)=""/104, 0x68, 0x0, &(0x7f0000000400)=""/93, 0x5d}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = open(0x0, 0x143142, 0x80) ftruncate(r4, 0x2007ffb) epoll_pwait2(r4, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}], 0x6, 0x0, &(0x7f00000006c0)={[0x100000000]}, 0x8) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r5, &(0x7f0000000080)=ANY=[], 0x27) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000000)={0x8}) timer_delete(0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001f40)=ANY=[@ANYBLOB="640000001900010000000000000000001d0109004d0012803b6f2811032d68bea0612044f47c2842302454b8fb77c662db41c6ea1350b277eb5cc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eb0800000000000000a3e6db0d119174000000"], 0x64}, 0x1, 0x0, 0x0, 0x2048000}, 0x400c000) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x4, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x4, 0x7, 0x0, 0x2, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xb, 0x600}]}}}}}}, 0x46) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x804000, &(0x7f0000000100)=ANY=[@ANYBLOB="6d61503d6f66662c63927566742c696f016861727365743d617363c7d323c46599680e836355c5568f69692c626c6f636b3d3078c3a14fc7573230300000657373696f6e3d3078303030303030303030304b30303031312c7569643dd9d677da609ef7208073250100000000000000cbdb4129ece5eac7041d2ff29325db3d064b4bd29c95950a41a573ccaf7851", @ANYRESDEC, @ANYRES32=r7], 0x1, 0xa31, &(0x7f0000000b40)="$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") 1.139286124s ago: executing program 0 (id=219): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x49, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) unshare(0x68040200) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000400)='{\x05T\x82\x89\x98Yi:') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) ftruncate(0xffffffffffffffff, 0x2007ffc) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$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") chdir(0x0) 1.138834174s ago: executing program 5 (id=220): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) getdents(r0, &(0x7f0000000380)=""/107, 0x6b) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[], 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = memfd_secret(0x80000) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) close(r5) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0xfff8, 0x1ff, 0x0, 0x50, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000c123ce0b3b000000001e000000c2b6cc974e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r10) 971.462476ms ago: executing program 5 (id=221): r0 = socket$nl_generic(0x10, 0x3, 0x10) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340)=""/113, 0x71) syz_io_uring_setup(0x16e, &(0x7f0000000b00)={0x0, 0xfffffffd, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, &(0x7f0000001340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x10, r0, 0x0, 0x0, 0x0, 0x10060, 0x1, {0x2}}) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000019200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002cbd7000fedbdf2512000000b09697082f4cc57abc97ff075bbf213efaeae4f0ae0eb3b4cb42621619b7d9bd919da2349f11c3f6c73d828f6fe2b79be1909a817a92f056588353"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x48200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000040)={0x6, 0x0, {0xffffffffffffffff, 0x1, 0xc, 0x3, 0x4}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) creat(&(0x7f0000000040)='./file0\x00', 0x0) r6 = gettid() r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r7, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r9, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r11 = dup(r10) write$P9_RLERRORu(r11, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40", @ANYBLOB="fe4cecb210bc091b10"], 0x53) syz_open_procfs(0x0, &(0x7f0000000640)='uid_map\x00') 971.019166ms ago: executing program 1 (id=222): socket(0x13, 0x1, 0x3) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) unshare(0x22020600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) 888.210127ms ago: executing program 3 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/183, 0xf4}], 0x1, 0xa800, 0x7ffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 887.837777ms ago: executing program 1 (id=224): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, &(0x7f0000000000)=0x2, 0x4) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x800) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, r4) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f00000008c0)='wchan\x00') pread64(r6, &(0x7f0000000280)=""/252, 0xfc, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000580)=""/176, 0xb0}, {&(0x7f0000000340)=""/181, 0xb5}], 0x3}, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r7, 0xc0a85322, &(0x7f0000000b40)) socket$caif_stream(0x25, 0x1, 0x1) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_other_inode_update_time\x00', r8}, 0x18) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) 700.11084ms ago: executing program 1 (id=225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2600c054) 544.777252ms ago: executing program 3 (id=226): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) ftruncate(r0, 0x2007ffc) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{}, &(0x7f0000000140), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendfile(r0, r0, 0x0, 0x800000009) 533.933482ms ago: executing program 1 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e85"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, 0x0, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}}, 0x14}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00'}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0xb, 0x0, 0x100, 0x4, 0xa0280, r4}) 431.418824ms ago: executing program 1 (id=228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000001480)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00'}, 0x3d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x13) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES64], 0x31) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000200)={0x1d, r3, 0x2, {0x1, 0x0, 0x6}, 0x1}, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) 377.279724ms ago: executing program 1 (id=229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570001c000280080002"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x8, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv2(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 212.742677ms ago: executing program 0 (id=230): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfe, 0x799, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000000c0)=0xffffffff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 64.528999ms ago: executing program 3 (id=231): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x0) getdents(r0, &(0x7f0000000380)=""/107, 0x6b) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[], 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = memfd_secret(0x80000) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) close(r5) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000001c0)={0x2, {0x2, 0xfff8, 0x1ff, 0x0, 0x50, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000002000010327bd7000ffdbdf2502000000c123ce0b3b000000001e000000c2b6cc974e204e20"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r10) 0s ago: executing program 5 (id=232): socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f"], 0x24}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000), 0x1000) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r3, 0x0, 0x46) close(r3) socket$igmp6(0xa, 0x3, 0x2) memfd_create(0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x200880, &(0x7f0000000280)=ANY=[], 0x11, 0x736, &(0x7f0000000b40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8000000003, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x5, 0x800000000003}, 0x115d2, 0x0, 0x10000005, 0x3, 0x3c, 0xa, 0xfffc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) membarrier(0x10, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) pipe2$9p(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.95' (ED25519) to the list of known hosts. [ 33.200073][ T29] audit: type=1400 audit(1751677329.387:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.201242][ T3295] cgroup: Unknown subsys name 'net' [ 33.222849][ T29] audit: type=1400 audit(1751677329.387:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.250464][ T29] audit: type=1400 audit(1751677329.417:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.385151][ T3295] cgroup: Unknown subsys name 'cpuset' [ 33.391523][ T3295] cgroup: Unknown subsys name 'rlimit' [ 33.562908][ T29] audit: type=1400 audit(1751677329.747:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.588052][ T29] audit: type=1400 audit(1751677329.747:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.608550][ T29] audit: type=1400 audit(1751677329.747:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.629064][ T29] audit: type=1400 audit(1751677329.757:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.638313][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.649425][ T29] audit: type=1400 audit(1751677329.757:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.682796][ T29] audit: type=1400 audit(1751677329.757:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.706182][ T29] audit: type=1400 audit(1751677329.847:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.734114][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.993222][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.016950][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.042820][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 35.107240][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.116255][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 35.140840][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.148696][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.156117][ T3310] bridge_slave_0: entered allmulticast mode [ 35.162509][ T3310] bridge_slave_0: entered promiscuous mode [ 35.186337][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.193502][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.200787][ T3310] bridge_slave_1: entered allmulticast mode [ 35.207392][ T3310] bridge_slave_1: entered promiscuous mode [ 35.224532][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.231666][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.238994][ T3311] bridge_slave_0: entered allmulticast mode [ 35.245448][ T3311] bridge_slave_0: entered promiscuous mode [ 35.267133][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.274621][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.281786][ T3306] bridge_slave_0: entered allmulticast mode [ 35.288351][ T3306] bridge_slave_0: entered promiscuous mode [ 35.297561][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.304730][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.311884][ T3311] bridge_slave_1: entered allmulticast mode [ 35.318455][ T3311] bridge_slave_1: entered promiscuous mode [ 35.337835][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.344958][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.352122][ T3306] bridge_slave_1: entered allmulticast mode [ 35.358538][ T3306] bridge_slave_1: entered promiscuous mode [ 35.381166][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.400389][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.411504][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.421929][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.441784][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.456581][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.491777][ T3310] team0: Port device team_slave_0 added [ 35.497637][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.504745][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.512841][ T3314] bridge_slave_0: entered allmulticast mode [ 35.519560][ T3314] bridge_slave_0: entered promiscuous mode [ 35.527029][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.534140][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.541370][ T3305] bridge_slave_0: entered allmulticast mode [ 35.547774][ T3305] bridge_slave_0: entered promiscuous mode [ 35.564742][ T3310] team0: Port device team_slave_1 added [ 35.571054][ T3306] team0: Port device team_slave_0 added [ 35.577212][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.584295][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.591527][ T3314] bridge_slave_1: entered allmulticast mode [ 35.597993][ T3314] bridge_slave_1: entered promiscuous mode [ 35.608782][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.615917][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.623149][ T3305] bridge_slave_1: entered allmulticast mode [ 35.629678][ T3305] bridge_slave_1: entered promiscuous mode [ 35.636674][ T3311] team0: Port device team_slave_0 added [ 35.653393][ T3306] team0: Port device team_slave_1 added [ 35.664691][ T3311] team0: Port device team_slave_1 added [ 35.685576][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.700766][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.710300][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.717413][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.743423][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.760066][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.775294][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.790172][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.797342][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.823415][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.834721][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.841707][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.867744][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.884219][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.891233][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.917778][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.936107][ T3305] team0: Port device team_slave_0 added [ 35.942210][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.949321][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.975397][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.990811][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.997865][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.023987][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.038066][ T3305] team0: Port device team_slave_1 added [ 36.058243][ T3314] team0: Port device team_slave_0 added [ 36.071999][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.079072][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.105136][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.116669][ T3314] team0: Port device team_slave_1 added [ 36.142182][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.149358][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.175337][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.202842][ T3306] hsr_slave_0: entered promiscuous mode [ 36.208978][ T3306] hsr_slave_1: entered promiscuous mode [ 36.223116][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.230166][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.256270][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.269185][ T3310] hsr_slave_0: entered promiscuous mode [ 36.275397][ T3310] hsr_slave_1: entered promiscuous mode [ 36.281232][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.288872][ T3310] Cannot create hsr debugfs directory [ 36.309823][ T3311] hsr_slave_0: entered promiscuous mode [ 36.315873][ T3311] hsr_slave_1: entered promiscuous mode [ 36.321743][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.329434][ T3311] Cannot create hsr debugfs directory [ 36.335591][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.342636][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.368783][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.395569][ T3305] hsr_slave_0: entered promiscuous mode [ 36.401791][ T3305] hsr_slave_1: entered promiscuous mode [ 36.407743][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.415354][ T3305] Cannot create hsr debugfs directory [ 36.469857][ T3314] hsr_slave_0: entered promiscuous mode [ 36.476106][ T3314] hsr_slave_1: entered promiscuous mode [ 36.481902][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.489510][ T3314] Cannot create hsr debugfs directory [ 36.639969][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.658669][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.674923][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.686116][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.705309][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.714354][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.729829][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.748615][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.760184][ T3310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.769616][ T3310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.780922][ T3310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.799238][ T3310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.822205][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.832888][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.843066][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.851781][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.890979][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.900026][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.909392][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.931511][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.965742][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.974780][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.998596][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.013822][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.021046][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.043250][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.051844][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.059001][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.070341][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.082165][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.089354][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.101623][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.115415][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.122571][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.139998][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.147110][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.161060][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.168232][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.178458][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.225347][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.234599][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.260331][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.267481][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.287106][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.295102][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.322347][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.329526][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.344841][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.352146][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.361609][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.368745][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.389099][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.410649][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.421199][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.478424][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.495762][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.519748][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.559847][ T3305] veth0_vlan: entered promiscuous mode [ 37.571128][ T3305] veth1_vlan: entered promiscuous mode [ 37.601728][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.610564][ T3305] veth0_macvtap: entered promiscuous mode [ 37.626009][ T3305] veth1_macvtap: entered promiscuous mode [ 37.646272][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.658359][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.670296][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.685677][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.694524][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.703260][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.712019][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.751031][ T3306] veth0_vlan: entered promiscuous mode [ 37.759797][ T3311] veth0_vlan: entered promiscuous mode [ 37.777611][ T3306] veth1_vlan: entered promiscuous mode [ 37.789070][ T3311] veth1_vlan: entered promiscuous mode [ 37.819019][ T3306] veth0_macvtap: entered promiscuous mode [ 37.849379][ T3310] veth0_vlan: entered promiscuous mode [ 37.857931][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.873713][ T3306] veth1_macvtap: entered promiscuous mode [ 37.890591][ T3310] veth1_vlan: entered promiscuous mode [ 37.911109][ T3311] veth0_macvtap: entered promiscuous mode [ 37.923798][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.937317][ T3310] veth0_macvtap: entered promiscuous mode [ 37.946005][ T3310] veth1_macvtap: entered promiscuous mode [ 37.957725][ T3311] veth1_macvtap: entered promiscuous mode [ 37.970010][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.982187][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.990798][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.999700][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.008561][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.017341][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.032257][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.047069][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.064195][ T3310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.073041][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.081958][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.091102][ T3310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.106605][ T3478] loop0: detected capacity change from 0 to 1024 [ 38.114931][ T3478] ======================================================= [ 38.114931][ T3478] WARNING: The mand mount option has been deprecated and [ 38.114931][ T3478] and is ignored by this kernel. Remove the mand [ 38.114931][ T3478] option from the mount to silence this warning. [ 38.114931][ T3478] ======================================================= [ 38.117103][ T3314] veth0_vlan: entered promiscuous mode [ 38.158723][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.175297][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.184121][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.192979][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.201838][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.213384][ T3478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.222650][ T3314] veth1_vlan: entered promiscuous mode [ 38.233580][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 38.233598][ T29] audit: type=1400 audit(1751677334.417:98): avc: denied { mount } for pid=3477 comm="syz.0.6" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.269883][ T29] audit: type=1400 audit(1751677334.437:99): avc: denied { add_name } for pid=3477 comm="syz.0.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.282820][ T3478] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.6: Allocating blocks 449-513 which overlap fs metadata [ 38.290256][ T29] audit: type=1400 audit(1751677334.437:100): avc: denied { create } for pid=3477 comm="syz.0.6" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.322881][ T3477] EXT4-fs (loop0): pa ffff888106a3f070: logic 48, phys. 177, len 21 [ 38.323947][ T29] audit: type=1400 audit(1751677334.437:101): avc: denied { read write } for pid=3477 comm="syz.0.6" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.331894][ T3477] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 38.354164][ T29] audit: type=1400 audit(1751677334.437:102): avc: denied { open } for pid=3477 comm="syz.0.6" path="/1/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.402870][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.412580][ T3314] veth0_macvtap: entered promiscuous mode [ 38.445181][ T3314] veth1_macvtap: entered promiscuous mode [ 38.456072][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.466920][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.484817][ T3486] netlink: 'wg1': attribute type 10 has an invalid length. [ 38.505548][ T3314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.514367][ T3314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.523221][ T3314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.531966][ T3314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.554688][ T29] audit: type=1400 audit(1751677334.737:103): avc: denied { append } for pid=3489 comm="syz.1.2" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 38.585929][ T3486] veth0_vlan: entered allmulticast mode [ 38.587229][ T29] audit: type=1400 audit(1751677334.777:104): avc: denied { prog_run } for pid=3491 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.602584][ T3486] veth0_vlan: left promiscuous mode [ 38.636947][ T3486] veth0_vlan: entered promiscuous mode [ 38.655637][ T3486] team0: Device veth0_vlan failed to register rx_handler [ 38.664057][ T3494] loop2: detected capacity change from 0 to 2048 [ 38.718970][ T3494] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.726612][ T3486] wg1 (3486) used greatest stack depth: 10136 bytes left [ 38.735674][ T29] audit: type=1400 audit(1751677334.917:105): avc: denied { create } for pid=3493 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.801663][ T29] audit: type=1400 audit(1751677334.977:106): avc: denied { write } for pid=3493 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.820983][ T29] audit: type=1400 audit(1751677334.987:107): avc: denied { read write open } for pid=3493 comm="syz.2.3" path="/0/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.997150][ T3504] netlink: 'wg1': attribute type 10 has an invalid length. [ 39.014772][ T3504] veth0_vlan: entered allmulticast mode [ 39.042974][ T3504] veth0_vlan: left promiscuous mode [ 39.176944][ T3504] veth0_vlan: entered promiscuous mode [ 39.273935][ T3504] team0: Device veth0_vlan failed to register rx_handler [ 39.480696][ T3502] netlink: 'syz.1.8': attribute type 46 has an invalid length. [ 39.528243][ T3504] wg1 (3504) used greatest stack depth: 9944 bytes left [ 39.551406][ T3502] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8'. [ 39.571983][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.581022][ T3512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11'. [ 39.652615][ T3517] netlink: 'wg1': attribute type 10 has an invalid length. [ 39.661418][ T3517] veth0_vlan: entered allmulticast mode [ 39.724205][ T3517] veth0_vlan: left promiscuous mode [ 39.737639][ T3517] veth0_vlan: entered promiscuous mode [ 39.739588][ T3520] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15'. [ 39.747952][ T3517] team0: Device veth0_vlan failed to register rx_handler [ 39.898423][ T3525] usb usb1: usbfs: process 3525 (syz.2.16) did not claim interface 0 before use [ 40.123713][ T3531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 40.142910][ T3532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18'. [ 40.203382][ T3535] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3535 comm=syz.0.19 [ 40.517632][ T3544] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.090192][ T3519] syz.1.14 (3519) used greatest stack depth: 9880 bytes left [ 41.409619][ T3556] usb usb1: usbfs: process 3556 (syz.4.24) did not claim interface 0 before use [ 41.477043][ T3558] tipc: Started in network mode [ 41.482080][ T3558] tipc: Node identity ac14140f, cluster identity 4711 [ 41.490226][ T3558] tipc: New replicast peer: 0.0.255.255 [ 41.496025][ T3558] tipc: Enabled bearer , priority 10 [ 41.582341][ T3563] loop3: detected capacity change from 0 to 512 [ 41.606134][ T3563] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 41.966230][ T3569] FAULT_INJECTION: forcing a failure. [ 41.966230][ T3569] name failslab, interval 1, probability 0, space 0, times 1 [ 41.978965][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: syz.3.29 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 41.979040][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.979056][ T3569] Call Trace: [ 41.979063][ T3569] [ 41.979071][ T3569] __dump_stack+0x1d/0x30 [ 41.979096][ T3569] dump_stack_lvl+0xe8/0x140 [ 41.979155][ T3569] dump_stack+0x15/0x1b [ 41.979171][ T3569] should_fail_ex+0x265/0x280 [ 41.979211][ T3569] ? audit_log_d_path+0x8d/0x150 [ 41.979325][ T3569] should_failslab+0x8c/0xb0 [ 41.979350][ T3569] __kmalloc_cache_noprof+0x4c/0x320 [ 41.979418][ T3569] audit_log_d_path+0x8d/0x150 [ 41.979461][ T3569] audit_log_d_path_exe+0x42/0x70 [ 41.979500][ T3569] audit_log_task+0x1e9/0x250 [ 41.979536][ T3569] audit_seccomp+0x61/0x100 [ 41.979577][ T3569] ? __seccomp_filter+0x68c/0x10d0 [ 41.979604][ T3569] __seccomp_filter+0x69d/0x10d0 [ 41.979659][ T3569] ? _raw_spin_unlock+0x26/0x50 [ 41.979686][ T3569] __secure_computing+0x82/0x150 [ 41.979713][ T3569] syscall_trace_enter+0xcf/0x1e0 [ 41.979825][ T3569] do_syscall_64+0xac/0x200 [ 41.979849][ T3569] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.979884][ T3569] ? clear_bhb_loop+0x40/0x90 [ 41.979912][ T3569] ? clear_bhb_loop+0x40/0x90 [ 41.980055][ T3569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.980085][ T3569] RIP: 0033:0x7f59b49ad33c [ 41.980114][ T3569] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 41.980138][ T3569] RSP: 002b:00007f59b3017030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 41.980217][ T3569] RAX: ffffffffffffffda RBX: 00007f59b4bd5fa0 RCX: 00007f59b49ad33c [ 41.980230][ T3569] RDX: 000000000000000f RSI: 00007f59b30170a0 RDI: 0000000000000006 [ 41.980242][ T3569] RBP: 00007f59b3017090 R08: 0000000000000000 R09: 0000000000000000 [ 41.980257][ T3569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.980272][ T3569] R13: 0000000000000000 R14: 00007f59b4bd5fa0 R15: 00007ffff1d8ecc8 [ 41.980297][ T3569] [ 42.259245][ T3573] usb usb1: usbfs: process 3573 (syz.3.30) did not claim interface 0 before use [ 42.297390][ T3575] usb usb1: usbfs: process 3575 (syz.3.31) did not claim interface 0 before use [ 42.413218][ T3578] IPv4: Oversized IP packet from 127.202.26.0 [ 42.455906][ T3521] syz.1.14 (3521) used greatest stack depth: 6648 bytes left [ 42.503862][ T3583] loop4: detected capacity change from 0 to 1024 [ 42.550315][ T3583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.564992][ T3588] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 42.572755][ T3588] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'. [ 42.600010][ T3588] dummy0: entered promiscuous mode [ 42.605946][ T3588] bridge0: port 3(dummy0) entered blocking state [ 42.612623][ T3588] bridge0: port 3(dummy0) entered disabled state [ 42.615024][ T10] tipc: Node number set to 2886997007 [ 42.619303][ T3588] dummy0: entered allmulticast mode [ 42.630603][ T3588] bridge0: port 3(dummy0) entered blocking state [ 42.637134][ T3588] bridge0: port 3(dummy0) entered forwarding state [ 42.687195][ T3583] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.35: Allocating blocks 449-513 which overlap fs metadata [ 42.701125][ T3581] loop0: detected capacity change from 0 to 512 [ 42.719199][ T3593] loop3: detected capacity change from 0 to 1024 [ 42.725753][ T3582] EXT4-fs (loop4): pa ffff888106a3f000: logic 48, phys. 177, len 21 [ 42.733892][ T3582] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 42.756105][ T3593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.787933][ T3593] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.36: Allocating blocks 449-513 which overlap fs metadata [ 42.814808][ T3581] tipc: Started in network mode [ 42.819732][ T3581] tipc: Node identity ac14140f, cluster identity 4711 [ 42.826999][ T3591] EXT4-fs (loop3): pa ffff8881069da620: logic 48, phys. 177, len 21 [ 42.832149][ T3581] tipc: New replicast peer: 0.0.255.255 [ 42.835134][ T3591] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 42.850811][ T3581] tipc: Enabled bearer , priority 10 [ 42.886919][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.914023][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.937263][ T3599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3599 comm=syz.0.39 [ 42.938230][ T3599] SELinux: syz.0.39 (3599) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 42.970801][ T3599] macvlan2: entered promiscuous mode [ 42.970824][ T3599] macvlan2: entered allmulticast mode [ 43.058506][ T3609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 43.113235][ T3615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 43.128570][ T3615] vlan2: entered allmulticast mode [ 43.133949][ T3615] bond_slave_1: entered allmulticast mode [ 43.205306][ T3618] loop3: detected capacity change from 0 to 2048 [ 43.217269][ T3618] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.255848][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 43.255866][ T29] audit: type=1400 audit(1751677339.447:381): avc: denied { read write open } for pid=3617 comm="syz.3.46" path="/13/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.295171][ C1] hrtimer: interrupt took 37324 ns [ 43.656666][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 43.677227][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.687564][ T29] audit: type=1400 audit(1751677339.877:382): avc: denied { firmware_load } for pid=3623 comm="syz.1.47" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 43.719800][ T29] audit: type=1326 audit(1751677339.907:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 43.743073][ T29] audit: type=1326 audit(1751677339.907:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 43.766518][ T29] audit: type=1326 audit(1751677339.907:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 43.789873][ T29] audit: type=1326 audit(1751677339.907:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 43.813237][ T29] audit: type=1326 audit(1751677339.907:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 43.836701][ T29] audit: type=1326 audit(1751677339.907:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 43.860286][ T29] audit: type=1326 audit(1751677339.907:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 43.883503][ T29] audit: type=1326 audit(1751677339.907:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3623 comm="syz.1.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 43.912345][ T3629] loop3: detected capacity change from 0 to 512 [ 43.920486][ T3629] EXT4-fs: test_dummy_encryption option not supported [ 43.965002][ T10] tipc: Node number set to 2886997007 [ 44.068858][ T3637] loop4: detected capacity change from 0 to 128 [ 44.085677][ T3639] FAULT_INJECTION: forcing a failure. [ 44.085677][ T3639] name failslab, interval 1, probability 0, space 0, times 0 [ 44.098470][ T3639] CPU: 1 UID: 0 PID: 3639 Comm: syz.1.52 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 44.098506][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.098523][ T3639] Call Trace: [ 44.098530][ T3639] [ 44.098538][ T3639] __dump_stack+0x1d/0x30 [ 44.098561][ T3639] dump_stack_lvl+0xe8/0x140 [ 44.098586][ T3639] dump_stack+0x15/0x1b [ 44.098607][ T3639] should_fail_ex+0x265/0x280 [ 44.098661][ T3639] should_failslab+0x8c/0xb0 [ 44.098685][ T3639] kmem_cache_alloc_node_noprof+0x57/0x320 [ 44.098718][ T3639] ? __alloc_skb+0x101/0x320 [ 44.098826][ T3639] __alloc_skb+0x101/0x320 [ 44.098865][ T3639] netlink_alloc_large_skb+0xba/0xf0 [ 44.098933][ T3639] netlink_sendmsg+0x3cf/0x6b0 [ 44.098957][ T3639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.098976][ T3639] __sock_sendmsg+0x145/0x180 [ 44.099001][ T3639] __sys_sendto+0x268/0x330 [ 44.099049][ T3639] __x64_sys_sendto+0x76/0x90 [ 44.099140][ T3639] x64_sys_call+0x2eb6/0x2fb0 [ 44.099161][ T3639] do_syscall_64+0xd2/0x200 [ 44.099182][ T3639] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.099328][ T3639] ? clear_bhb_loop+0x40/0x90 [ 44.099356][ T3639] ? clear_bhb_loop+0x40/0x90 [ 44.099384][ T3639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.099412][ T3639] RIP: 0033:0x7f84f442e929 [ 44.099431][ T3639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.099450][ T3639] RSP: 002b:00007f84f2a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 44.099494][ T3639] RAX: ffffffffffffffda RBX: 00007f84f4655fa0 RCX: 00007f84f442e929 [ 44.099588][ T3639] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000004 [ 44.099646][ T3639] RBP: 00007f84f2a97090 R08: 0000000000000000 R09: 0000000000000000 [ 44.099659][ T3639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.099670][ T3639] R13: 0000000000000000 R14: 00007f84f4655fa0 R15: 00007ffdc0dd8b08 [ 44.099768][ T3639] [ 44.100464][ T3637] EXT4-fs: Ignoring removed i_version option [ 44.310142][ T3637] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.335691][ T3637] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.354575][ T3637] ext4 filesystem being mounted at /15/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.398501][ T3637] EXT4-fs error (device loop4): swap_inode_boot_loader:384: inode #5: comm syz.4.53: iget: checksum invalid [ 44.429569][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.483154][ T3647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 44.533556][ T3648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3648 comm=syz.1.55 [ 44.580087][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 44.787507][ T3665] loop1: detected capacity change from 0 to 2048 [ 44.820142][ T3665] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.501433][ T3678] loop3: detected capacity change from 0 to 1024 [ 45.535922][ T3678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.578300][ T3678] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.64: Allocating blocks 497-513 which overlap fs metadata [ 45.598185][ T3677] EXT4-fs (loop3): pa ffff8881069da690: logic 48, phys. 193, len 20 [ 45.606265][ T3677] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 45.674593][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 45.729974][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.755976][ T3684] loop3: detected capacity change from 0 to 1024 [ 45.784042][ T3686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.66'. [ 45.799184][ T3684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.844819][ T3684] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.67: Allocating blocks 449-513 which overlap fs metadata [ 45.966242][ T3683] EXT4-fs (loop3): pa ffff888106a3f070: logic 48, phys. 177, len 21 [ 45.974324][ T3683] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 45.997102][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.035983][ T3691] loop3: detected capacity change from 0 to 1024 [ 46.126697][ T3691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.240744][ T3691] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.68: Allocating blocks 449-513 which overlap fs metadata [ 46.283445][ T3690] EXT4-fs (loop3): pa ffff8881069da700: logic 48, phys. 177, len 21 [ 46.291692][ T3690] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 46.402762][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.441078][ T3696] futex_wake_op: syz.3.69 tries to shift op by -1; fix this program [ 46.762807][ T3701] loop3: detected capacity change from 0 to 2048 [ 46.792741][ T3705] futex_wake_op: syz.4.72 tries to shift op by -1; fix this program [ 46.905428][ T3701] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.917692][ T3701] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.948283][ T3709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.70'. [ 47.031055][ T3712] loop4: detected capacity change from 0 to 2048 [ 47.127195][ T3712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.139544][ T3712] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.215817][ T3723] loop1: detected capacity change from 0 to 128 [ 47.473791][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.536611][ T3733] loop3: detected capacity change from 0 to 2048 [ 47.556846][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.678298][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.974484][ T3589] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 48.438639][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 48.472573][ T29] kauditd_printk_skb: 234 callbacks suppressed [ 48.472590][ T29] audit: type=1400 audit(1751677344.657:625): avc: denied { write } for pid=3749 comm="syz.1.83" name="tcp6" dev="proc" ino=4026532480 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 48.520980][ T3752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.82'. [ 48.642217][ T3760] loop4: detected capacity change from 0 to 2048 [ 48.689922][ T3763] loop1: detected capacity change from 0 to 128 [ 48.711285][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.149590][ T3774] futex_wake_op: syz.1.87 tries to shift op by -1; fix this program [ 49.545603][ T3777] loop1: detected capacity change from 0 to 2048 [ 49.566132][ T3784] loop3: detected capacity change from 0 to 1024 [ 49.585006][ T3777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.604708][ T3777] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.639147][ T3784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.701736][ T3784] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.89: Allocating blocks 497-513 which overlap fs metadata [ 49.760706][ T3782] EXT4-fs (loop3): pa ffff888106a3f000: logic 48, phys. 193, len 20 [ 49.768800][ T3782] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 49.878992][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.321283][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 50.472514][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.533193][ T3799] loop1: detected capacity change from 0 to 2048 [ 50.571520][ T3799] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.691397][ T29] audit: type=1326 audit(1751677346.877:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 50.714733][ T29] audit: type=1326 audit(1751677346.877:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 50.738079][ T29] audit: type=1326 audit(1751677346.877:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 50.761334][ T29] audit: type=1326 audit(1751677346.877:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 50.784583][ T29] audit: type=1326 audit(1751677346.877:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 50.807918][ T29] audit: type=1326 audit(1751677346.877:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 50.831336][ T29] audit: type=1326 audit(1751677346.877:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7285f1d290 code=0x7ffc0000 [ 50.854728][ T29] audit: type=1326 audit(1751677346.877:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 50.878022][ T29] audit: type=1326 audit(1751677346.877:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3802 comm="syz.4.94" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 51.157019][ T3822] loop3: detected capacity change from 0 to 2048 [ 51.176942][ T3822] EXT4-fs (loop3): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.762013][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 51.811363][ T3833] futex_wake_op: syz.1.103 tries to shift op by -1; fix this program [ 52.046969][ T3838] loop1: detected capacity change from 0 to 2048 [ 52.137180][ T3838] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.149526][ T3838] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.179654][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 52.641267][ T3855] loop3: detected capacity change from 0 to 1024 [ 52.696649][ T3855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.709142][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.741045][ T3855] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.111: Allocating blocks 449-513 which overlap fs metadata [ 52.771281][ T3854] EXT4-fs (loop3): pa ffff8881069da5b0: logic 48, phys. 177, len 21 [ 52.779406][ T3854] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 52.785204][ T3864] loop0: detected capacity change from 0 to 2048 [ 52.816918][ T3860] loop1: detected capacity change from 0 to 128 [ 52.827542][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.851402][ T3864] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.003090][ T3882] loop4: detected capacity change from 0 to 128 [ 53.435195][ T3896] futex_wake_op: syz.4.123 tries to shift op by -1; fix this program [ 53.662572][ T3898] loop4: detected capacity change from 0 to 2048 [ 53.765438][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 53.795213][ T3898] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.807462][ T3898] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.964279][ T3903] loop1: detected capacity change from 0 to 2048 [ 54.000846][ T3903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.052714][ T3911] futex_wake_op: syz.0.127 tries to shift op by -1; fix this program [ 54.087887][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.188755][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 54.188774][ T29] audit: type=1326 audit(1751677350.377:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.199856][ T3914] usb usb1: usbfs: process 3914 (syz.1.128) did not claim interface 0 before use [ 54.219842][ T29] audit: type=1326 audit(1751677350.377:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.251438][ T29] audit: type=1326 audit(1751677350.377:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.274865][ T29] audit: type=1326 audit(1751677350.377:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.298174][ T29] audit: type=1326 audit(1751677350.377:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.321514][ T29] audit: type=1326 audit(1751677350.377:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.344900][ T29] audit: type=1326 audit(1751677350.377:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.368160][ T29] audit: type=1326 audit(1751677350.377:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.391553][ T29] audit: type=1326 audit(1751677350.377:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.414855][ T29] audit: type=1326 audit(1751677350.377:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3913 comm="syz.1.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84f442e929 code=0x7ffc0000 [ 54.492495][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.502459][ T3912] loop0: detected capacity change from 0 to 2048 [ 54.539653][ T3912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.552297][ T3912] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.815089][ T3945] loop3: detected capacity change from 0 to 1024 [ 54.840534][ T3945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.905881][ T3945] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.139: Allocating blocks 449-513 which overlap fs metadata [ 54.960750][ T3944] EXT4-fs (loop3): pa ffff888106a3f070: logic 48, phys. 177, len 21 [ 54.968997][ T3944] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 55.003001][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.067342][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.106271][ T3954] futex_wake_op: syz.3.141 tries to shift op by -1; fix this program [ 55.339828][ T3956] loop3: detected capacity change from 0 to 2048 [ 55.641390][ T3956] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.653893][ T3956] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.686949][ T3966] futex_wake_op: syz.4.144 tries to shift op by -1; fix this program [ 55.998866][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.014174][ T3963] chnl_net:caif_netlink_parms(): no params data found [ 56.148633][ T3963] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.155927][ T3963] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.204699][ T3963] bridge_slave_0: entered allmulticast mode [ 56.211219][ T3963] bridge_slave_0: entered promiscuous mode [ 56.227433][ T3963] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.234601][ T3963] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.241853][ T3963] bridge_slave_1: entered allmulticast mode [ 56.252899][ T3963] bridge_slave_1: entered promiscuous mode [ 56.295354][ T3963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.318716][ T3996] loop4: detected capacity change from 0 to 2048 [ 56.328266][ T3963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.388770][ T3996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.405805][ T3963] team0: Port device team_slave_0 added [ 56.423042][ T3963] team0: Port device team_slave_1 added [ 56.442763][ T3963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.449810][ T3963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.468941][ T3996] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.475829][ T3963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.476940][ T3963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.503986][ T3963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.530139][ T3963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.563260][ T3963] hsr_slave_0: entered promiscuous mode [ 56.574120][ T3963] hsr_slave_1: entered promiscuous mode [ 56.580214][ T3963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.591251][ T3963] Cannot create hsr debugfs directory [ 56.688341][ T3963] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 56.703494][ T3963] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 56.713667][ T3963] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 56.747446][ T3963] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 56.785504][ T3963] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.792676][ T3963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.800159][ T3963] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.807399][ T3963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.863767][ T3963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.877151][ T3963] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.892624][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.904093][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.961519][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.968729][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.042644][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.049804][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.087485][ T4012] loop1: detected capacity change from 0 to 1024 [ 57.103148][ T4013] loop0: detected capacity change from 0 to 2048 [ 57.136716][ T4012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.177545][ T4013] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.220854][ T4012] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.151: Allocating blocks 449-513 which overlap fs metadata [ 57.230340][ T3963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.277533][ T4010] EXT4-fs (loop1): pa ffff8881069da770: logic 48, phys. 177, len 21 [ 57.285621][ T4010] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 57.364213][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.493969][ T3963] veth0_vlan: entered promiscuous mode [ 57.507157][ T3963] veth1_vlan: entered promiscuous mode [ 57.513824][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.541851][ T3963] veth0_macvtap: entered promiscuous mode [ 57.551011][ T3963] veth1_macvtap: entered promiscuous mode [ 57.569902][ T3963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.599652][ T3963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.611620][ T3963] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.620522][ T3963] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.629585][ T3963] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.638435][ T3963] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.656888][ T4039] loop4: detected capacity change from 0 to 1024 [ 57.670859][ T4039] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.709682][ T4039] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.154: Allocating blocks 497-513 which overlap fs metadata [ 57.731508][ T4038] EXT4-fs (loop4): pa ffff888106a3f000: logic 48, phys. 193, len 20 [ 57.739671][ T4038] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 57.796372][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.891911][ T4047] futex_wake_op: syz.3.156 tries to shift op by -1; fix this program [ 57.898384][ T4049] loop5: detected capacity change from 0 to 1024 [ 57.986887][ T4051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 58.010600][ T4049] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.057541][ T4049] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.142: Allocating blocks 497-513 which overlap fs metadata [ 58.132863][ T4055] loop3: detected capacity change from 0 to 2048 [ 58.174678][ T4055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.187044][ T4055] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.290088][ T4048] EXT4-fs (loop5): pa ffff888106a3f0e0: logic 48, phys. 193, len 20 [ 58.298194][ T4048] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 58.524041][ T3963] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.565086][ T4068] futex_wake_op: syz.5.162 tries to shift op by -1; fix this program [ 58.763222][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.777744][ T3305] EXT4-fs (loop0): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 58.786886][ T4069] loop5: detected capacity change from 0 to 2048 [ 58.814155][ T4069] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.841922][ T4076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.163'. [ 58.886397][ T4078] loop0: detected capacity change from 0 to 2048 [ 59.040908][ T4083] loop5: detected capacity change from 0 to 1024 [ 59.294496][ T4083] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.165: Allocating blocks 497-513 which overlap fs metadata [ 59.439921][ T4082] EXT4-fs (loop5): pa ffff888106a3f070: logic 48, phys. 193, len 20 [ 59.448105][ T4082] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 59.522226][ T4090] loop1: detected capacity change from 0 to 512 [ 59.532741][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 59.532766][ T29] audit: type=1326 audit(1751677355.717:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.562419][ T29] audit: type=1326 audit(1751677355.717:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.585805][ T29] audit: type=1326 audit(1751677355.717:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.609211][ T29] audit: type=1326 audit(1751677355.717:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.632581][ T29] audit: type=1326 audit(1751677355.717:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.642622][ T4090] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.669013][ T4090] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.759479][ T4090] EXT4-fs (loop1): failed to initialize system zone (-117) [ 59.779513][ T4090] EXT4-fs (loop1): mount failed [ 59.837213][ T29] audit: type=1326 audit(1751677355.847:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.860675][ T29] audit: type=1326 audit(1751677355.847:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.884032][ T29] audit: type=1326 audit(1751677355.847:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.907337][ T29] audit: type=1326 audit(1751677355.847:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 59.930868][ T29] audit: type=1326 audit(1751677355.847:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4091 comm="syz.4.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7285f1e929 code=0x7ffc0000 [ 60.078452][ T4123] loop1: detected capacity change from 0 to 1024 [ 60.123283][ T4123] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.179: Allocating blocks 497-513 which overlap fs metadata [ 60.189080][ T4122] EXT4-fs (loop1): pa ffff888106a3f0e0: logic 48, phys. 193, len 20 [ 60.197197][ T4122] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 60.281258][ T4130] netlink: 16 bytes leftover after parsing attributes in process `syz.1.181'. [ 60.301081][ T4132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 60.402523][ T4134] FAULT_INJECTION: forcing a failure. [ 60.402523][ T4134] name failslab, interval 1, probability 0, space 0, times 0 [ 60.415618][ T4134] CPU: 0 UID: 0 PID: 4134 Comm: syz.0.182 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 60.415653][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 60.415717][ T4134] Call Trace: [ 60.415725][ T4134] [ 60.415732][ T4134] __dump_stack+0x1d/0x30 [ 60.415767][ T4134] dump_stack_lvl+0xe8/0x140 [ 60.415832][ T4134] dump_stack+0x15/0x1b [ 60.415853][ T4134] should_fail_ex+0x265/0x280 [ 60.415886][ T4134] should_failslab+0x8c/0xb0 [ 60.415949][ T4134] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 60.415988][ T4134] ? kstrdup_const+0x3e/0x50 [ 60.416016][ T4134] kstrdup+0x3e/0xd0 [ 60.416097][ T4134] kstrdup_const+0x3e/0x50 [ 60.416125][ T4134] alloc_vfsmnt+0xe7/0x360 [ 60.416194][ T4134] clone_mnt+0x41/0x750 [ 60.416309][ T4134] copy_tree+0x2f1/0x820 [ 60.416429][ T4134] copy_mnt_ns+0x120/0x5e0 [ 60.416463][ T4134] ? kmem_cache_alloc_noprof+0x220/0x310 [ 60.416492][ T4134] ? create_new_namespaces+0x3c/0x3d0 [ 60.416664][ T4134] create_new_namespaces+0x83/0x3d0 [ 60.416699][ T4134] unshare_nsproxy_namespaces+0xe8/0x120 [ 60.416783][ T4134] ksys_unshare+0x3d0/0x6d0 [ 60.416831][ T4134] __x64_sys_unshare+0x1f/0x30 [ 60.416896][ T4134] x64_sys_call+0x2d4b/0x2fb0 [ 60.417053][ T4134] do_syscall_64+0xd2/0x200 [ 60.417070][ T4134] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.417094][ T4134] ? clear_bhb_loop+0x40/0x90 [ 60.417192][ T4134] ? clear_bhb_loop+0x40/0x90 [ 60.417212][ T4134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.417231][ T4134] RIP: 0033:0x7f6506d9e929 [ 60.417248][ T4134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.417276][ T4134] RSP: 002b:00007f65053e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 60.417292][ T4134] RAX: ffffffffffffffda RBX: 00007f6506fc6080 RCX: 00007f6506d9e929 [ 60.417303][ T4134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040020000 [ 60.417314][ T4134] RBP: 00007f65053e6090 R08: 0000000000000000 R09: 0000000000000000 [ 60.417335][ T4134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.417345][ T4134] R13: 0000000000000000 R14: 00007f6506fc6080 R15: 00007ffe029dc008 [ 60.417362][ T4134] [ 60.922245][ T4147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.187'. [ 61.111510][ T4147] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.143814][ T4156] ipt_rpfilter: unknown options [ 61.152789][ T4156] ipt_rpfilter: unknown options [ 61.168045][ T4152] FAULT_INJECTION: forcing a failure. [ 61.168045][ T4152] name failslab, interval 1, probability 0, space 0, times 0 [ 61.180838][ T4152] CPU: 1 UID: 0 PID: 4152 Comm: syz.4.187 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 61.180873][ T4152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 61.180889][ T4152] Call Trace: [ 61.180897][ T4152] [ 61.180907][ T4152] __dump_stack+0x1d/0x30 [ 61.180933][ T4152] dump_stack_lvl+0xe8/0x140 [ 61.180957][ T4152] dump_stack+0x15/0x1b [ 61.180977][ T4152] should_fail_ex+0x265/0x280 [ 61.181084][ T4152] should_failslab+0x8c/0xb0 [ 61.181119][ T4152] __kvmalloc_node_noprof+0x123/0x4e0 [ 61.181186][ T4152] ? alloc_netdev_mqs+0x73f/0xab0 [ 61.181231][ T4152] alloc_netdev_mqs+0x73f/0xab0 [ 61.181307][ T4152] rtnl_create_link+0x239/0x710 [ 61.181349][ T4152] rtnl_newlink_create+0x14c/0x620 [ 61.181435][ T4152] ? __list_del_entry_valid_or_report+0x65/0x130 [ 61.181464][ T4152] rtnl_newlink+0xf29/0x12d0 [ 61.181494][ T4152] ? xas_load+0x413/0x430 [ 61.181534][ T4152] ? x2apic_send_IPI_self+0x10/0x20 [ 61.181647][ T4152] ? __memcg_slab_free_hook+0x135/0x230 [ 61.181705][ T4152] ? __kfree_skb+0x109/0x150 [ 61.181743][ T4152] ? __rcu_read_unlock+0x4f/0x70 [ 61.181772][ T4152] ? avc_has_perm_noaudit+0x1b1/0x200 [ 61.181808][ T4152] ? selinux_capable+0x1f9/0x270 [ 61.181881][ T4152] ? security_capable+0x83/0x90 [ 61.181916][ T4152] ? ns_capable+0x7d/0xb0 [ 61.181992][ T4152] ? __pfx_rtnl_newlink+0x10/0x10 [ 61.182102][ T4152] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 61.182132][ T4152] netlink_rcv_skb+0x120/0x220 [ 61.182166][ T4152] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 61.182198][ T4152] rtnetlink_rcv+0x1c/0x30 [ 61.182219][ T4152] netlink_unicast+0x5a1/0x670 [ 61.182259][ T4152] netlink_sendmsg+0x58b/0x6b0 [ 61.182289][ T4152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.182308][ T4152] __sock_sendmsg+0x145/0x180 [ 61.182352][ T4152] ____sys_sendmsg+0x31e/0x4e0 [ 61.182452][ T4152] ___sys_sendmsg+0x17b/0x1d0 [ 61.182602][ T4152] __x64_sys_sendmsg+0xd4/0x160 [ 61.182671][ T4152] x64_sys_call+0x2999/0x2fb0 [ 61.182693][ T4152] do_syscall_64+0xd2/0x200 [ 61.182710][ T4152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 61.182772][ T4152] ? clear_bhb_loop+0x40/0x90 [ 61.182801][ T4152] ? clear_bhb_loop+0x40/0x90 [ 61.182828][ T4152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.182853][ T4152] RIP: 0033:0x7f7285f1e929 [ 61.182924][ T4152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.182945][ T4152] RSP: 002b:00007f7284566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.183025][ T4152] RAX: ffffffffffffffda RBX: 00007f7286146080 RCX: 00007f7285f1e929 [ 61.183041][ T4152] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 61.183111][ T4152] RBP: 00007f7284566090 R08: 0000000000000000 R09: 0000000000000000 [ 61.183126][ T4152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 61.183141][ T4152] R13: 0000000000000000 R14: 00007f7286146080 R15: 00007ffe00e84fa8 [ 61.183165][ T4152] [ 61.208480][ T4156] ipt_rpfilter: unknown options [ 61.298585][ T4164] loop1: detected capacity change from 0 to 1024 [ 61.528910][ T4169] netlink: 'syz.5.195': attribute type 21 has an invalid length. [ 61.536795][ T4169] IPv6: NLM_F_CREATE should be specified when creating new route [ 61.575742][ T4169] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 61.632962][ T4164] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.192: Allocating blocks 497-513 which overlap fs metadata [ 61.669317][ T4163] EXT4-fs (loop1): pa ffff8881069da700: logic 48, phys. 193, len 20 [ 61.677471][ T4163] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 62.079417][ T4187] loop0: detected capacity change from 0 to 1024 [ 62.140573][ T4187] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.199: Allocating blocks 449-513 which overlap fs metadata [ 62.157071][ T4192] futex_wake_op: syz.3.200 tries to shift op by -1; fix this program [ 62.278971][ T4186] EXT4-fs (loop0): pa ffff888106a3f070: logic 48, phys. 177, len 21 [ 62.287196][ T4186] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 62.427090][ T4201] netlink: 16 bytes leftover after parsing attributes in process `syz.0.202'. [ 62.462695][ T4203] loop3: detected capacity change from 0 to 2048 [ 62.649210][ T4207] loop4: detected capacity change from 0 to 512 [ 62.665321][ T4203] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.748617][ T4207] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.915773][ T4214] loop1: detected capacity change from 0 to 2048 [ 62.923635][ T4214] EXT4-fs: Ignoring removed i_version option [ 62.936651][ T4214] journal_path: Non-blockdev passed as './file1' [ 62.943175][ T4214] EXT4-fs: error: could not find journal device path [ 62.962459][ T4216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.206'. [ 63.047573][ T4214] netlink: 20 bytes leftover after parsing attributes in process `syz.1.205'. [ 63.067240][ T3390] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 63.074734][ T3390] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 63.082349][ T3390] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 63.106893][ T4222] loop3: detected capacity change from 0 to 1024 [ 63.137944][ T3390] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.217728][ T4222] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.208: Allocating blocks 497-513 which overlap fs metadata [ 63.306613][ T4227] fido_id[4227]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 63.366588][ T4219] EXT4-fs (loop3): pa ffff888106a3f1c0: logic 48, phys. 193, len 20 [ 63.374791][ T4219] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 64.062556][ T4245] loop4: detected capacity change from 0 to 512 [ 64.076750][ T4249] SELinux: syz.3.218 (4249) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 64.129138][ T4249] syz.3.218 uses obsolete (PF_INET,SOCK_PACKET) [ 64.207311][ T4251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.220'. [ 64.219053][ T4253] futex_wake_op: syz.0.219 tries to shift op by -1; fix this program [ 64.238401][ T4249] loop3: detected capacity change from 0 to 1764 [ 64.256162][ T4249] iso9660: Unknown parameter 'maP' [ 64.539029][ T4273] loop0: detected capacity change from 0 to 2048 [ 64.612867][ T4273] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.844249][ T4281] loop3: detected capacity change from 0 to 1024 [ 64.925264][ T4281] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.226: Allocating blocks 497-513 which overlap fs metadata [ 64.965548][ T4289] netlink: 16 bytes leftover after parsing attributes in process `syz.1.229'. [ 65.103892][ T4279] EXT4-fs (loop3): pa ffff8881069da770: logic 48, phys. 193, len 20 [ 65.113671][ T4279] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 65.545200][ T4292] loop0: detected capacity change from 0 to 2048 [ 65.555009][ T4292] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.584431][ T4296] ================================================================== [ 65.592603][ T4296] BUG: KCSAN: data-race in get_tree_bdev_flags / super_cache_count [ 65.600641][ T4296] [ 65.602984][ T4296] read-write to 0xffff88812b9f5050 of 8 bytes by task 4292 on cpu 1: [ 65.611064][ T4296] get_tree_bdev_flags+0x2e4/0x300 [ 65.616214][ T4296] get_tree_bdev+0x1f/0x30 [ 65.620659][ T4296] ext4_get_tree+0x1c/0x30 [ 65.625093][ T4296] vfs_get_tree+0x54/0x1d0 [ 65.629538][ T4296] do_new_mount+0x207/0x680 [ 65.634075][ T4296] path_mount+0x4a4/0xb20 [ 65.638436][ T4296] __se_sys_mount+0x28f/0x2e0 [ 65.643140][ T4296] __x64_sys_mount+0x67/0x80 [ 65.647745][ T4296] x64_sys_call+0xd36/0x2fb0 [ 65.652361][ T4296] do_syscall_64+0xd2/0x200 [ 65.656927][ T4296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.662840][ T4296] [ 65.665443][ T4296] read to 0xffff88812b9f5050 of 8 bytes by task 4296 on cpu 0: [ 65.673001][ T4296] super_cache_count+0x30/0x160 [ 65.677871][ T4296] do_shrink_slab+0x60/0x680 [ 65.682484][ T4296] shrink_slab+0x448/0x760 [ 65.686951][ T4296] shrink_node+0x6c3/0x2120 [ 65.691479][ T4296] do_try_to_free_pages+0x3f6/0xcd0 [ 65.696695][ T4296] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 65.702604][ T4296] try_charge_memcg+0x358/0x9e0 [ 65.707473][ T4296] obj_cgroup_charge_pages+0xa6/0x150 [ 65.712907][ T4296] __memcg_kmem_charge_page+0x9f/0x170 [ 65.718404][ T4296] __alloc_frozen_pages_noprof+0x188/0x360 [ 65.724245][ T4296] alloc_pages_mpol+0xb3/0x250 [ 65.729037][ T4296] alloc_pages_noprof+0x90/0x130 [ 65.734003][ T4296] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 65.739854][ T4296] __kvmalloc_node_noprof+0x30f/0x4e0 [ 65.745257][ T4296] ip_set_alloc+0x1f/0x30 [ 65.749614][ T4296] hash_netiface_create+0x282/0x740 [ 65.754845][ T4296] ip_set_create+0x3c9/0x960 [ 65.759465][ T4296] nfnetlink_rcv_msg+0x4c6/0x590 [ 65.764423][ T4296] netlink_rcv_skb+0x120/0x220 [ 65.769216][ T4296] nfnetlink_rcv+0x16b/0x1690 [ 65.773918][ T4296] netlink_unicast+0x5a1/0x670 [ 65.778708][ T4296] netlink_sendmsg+0x58b/0x6b0 [ 65.783486][ T4296] __sock_sendmsg+0x145/0x180 [ 65.788274][ T4296] ____sys_sendmsg+0x31e/0x4e0 [ 65.793156][ T4296] ___sys_sendmsg+0x17b/0x1d0 [ 65.797868][ T4296] __x64_sys_sendmsg+0xd4/0x160 [ 65.802753][ T4296] x64_sys_call+0x2999/0x2fb0 [ 65.807455][ T4296] do_syscall_64+0xd2/0x200 [ 65.811973][ T4296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.817885][ T4296] [ 65.820221][ T4296] value changed: 0x0000000010810050 -> 0x0000000070810050 [ 65.827337][ T4296] [ 65.829672][ T4296] Reported by Kernel Concurrency Sanitizer on: [ 65.835934][ T4296] CPU: 0 UID: 0 PID: 4296 Comm: syz.5.232 Not tainted 6.16.0-rc4-syzkaller-00123-g4c06e63b9203 #0 PREEMPT(voluntary) [ 65.848290][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 65.858360][ T4296] ================================================================== [ 65.869277][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 65.869295][ T29] audit: type=1400 audit(1751677361.767:1176): avc: denied { append } for pid=4291 comm="syz.0.230" path="/34/file1/cgroup.controllers" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 65.882016][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 65.903017][ T29] audit: type=1326 audit(1751677362.067:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 65.931716][ T29] audit: type=1326 audit(1751677362.067:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 65.955353][ T29] audit: type=1326 audit(1751677362.067:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 65.978938][ T29] audit: type=1326 audit(1751677362.067:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 66.002654][ T29] audit: type=1326 audit(1751677362.067:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 66.026022][ T29] audit: type=1326 audit(1751677362.067:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 66.049418][ T29] audit: type=1326 audit(1751677362.067:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 66.072940][ T29] audit: type=1326 audit(1751677362.067:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 66.147803][ T4292] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.230: bg 0: block 2: invalid block bitmap [ 66.170576][ T29] audit: type=1326 audit(1751677362.297:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4300 comm="syz.3.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f59b49ae929 code=0x7ffc0000 [ 66.209067][ T4292] EXT4-fs (loop0): Remounting filesystem read-only