last executing test programs: 14.884243431s ago: executing program 1 (id=2): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = inotify_init1(0x80800) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000340)={0x10, 0x0, "deb89d69643a9d208f2598760dfcd0f8"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x0, 0x81, 0x0, 0x2, 0x0, 0x7e150a0b, 0xffff, 0x5, 0x0, 0x80000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x1007, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e982638, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4005, 0x4, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd2d1, 0x0, 0x1, 0x4000b2e, 0x52f7, 0x0, 0x0, 0xfffffffe, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x26, 0x800, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0x80c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xbebc20, 0x0, 0x3, 0x8, 0x0, 0x14, 0x1e, 0x0, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x100, 0x7f0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0xff, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x153, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x400, 0xfffffff0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0x101, 0x0, 0x0, 0xffffffff}, 0x9, 0xf, 0x2000000}}]}}]}, 0x45c}}, 0x0) 14.728827963s ago: executing program 1 (id=6): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sendmsg$key(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x2, 0x6, 0x3c, 0x9, 0xe, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d4, 0x40, 0x14, 0x67, 0x1, 0xc0000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e21}, @sadb_lifetime={0x4, 0x1, 0x2, 0x3, 0xf, 0x3}, @sadb_ident={0x2, 0xb, 0x3, 0x0, 0x100000000}, @sadb_address={0x3, 0x5, 0x2b, 0x20, 0x0, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x70}}, 0x4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000001140)={0x0, 0x0, 0x5, 0x2, 0x19, "40c6db673e640c11"}) write$UHID_INPUT(r1, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) 14.088656181s ago: executing program 1 (id=7): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 14.076116691s ago: executing program 1 (id=8): r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x16, &(0x7f0000000740)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x16, &(0x7f0000000d00)=ANY=[@ANYBLOB="1804000000000000000000000009000000000000006c6c2500000000002020207b1af8ff00000000bfa10d000000000000000000f8ffffff000000b70300000000000085000000b100000095", @ANYBLOB="a0a539533a91fc1a7a4ade961044054dea6c38d9fbee662b7782dfba3ea86b998dea67b6ed19d05b2883b78d55f0ac46464f8ae3c4729caf20a226b1cdb9678b3a92a01956b56cb4ac29ee837117cbfc934d9285e9b0231170211884a6ffa9315710cff80e3113d02346812c2745251d0c6146e830e248faa43d1f9455eab53f29ad196b2cb8d87199ab65eb667763958825ea94992b235d5423482b8a3f0ed07ab3cdf5bd23c770f6dfeee2e4b3c3a1c3f82b3bb5765f4a1f79e560b6f88d8f4bbe6c22d747c742d56b9731c981ea6dd6611fe25607fc3ac02b112463ead7c81c814b5490f1d9fa51cd3ea12c6f336353d75d9756039cc7d3e477cea467a54a546258fcb12d4e1cde38fef530bddae955f6483d820b792fd88f4e3553127ffb0c948d70f0144e69158bd6081426671eb52633e8b9d4a54005d5f20ab4cb88748ef4f93a0701e026ee96afafd37c5ec9414383729a2e80f68d84fac3fcf0c440ba433ca063a3a798a85b1b9e195414dab31c6ea91745792986fc0d3053b8f3fc094cfce42b735bbc6a7b69903ffa50a8f2b81becc0e6d88d9cb00773857e845a8282f3c62301e9a2f43f6cd730727be978ccd1bb1336792b69e3fc4f757d01f1f0f39010695fb97664eb338056238dc2ac2b0a9fcc8a58ff45349427a43bc968db51045becb2aa628cf78c2f1d33f5aabefbe03f650a6c07dda80599c1c9f9ea7c29688c4e7b74c5649c196a23b8cc1d4a25e9af0224fffb2ba9e6387dc29a9070935629bdb36e0c2be0ec081b73e1fada3f9e186a5e81f544a05f8c6c4aee91ce5fa266a8dc75bcae328de8c983affe2e75c185ca1f73138af227c7b8e59cfe6e7a96bd049648fb416b1a0a07023daeacf31d388ecace1f1a8716594684eda2c41bd25cc3e7a0a1ac3d896321ffff394b9330c057c8237c5e912c3749a7868b3a93d172a22d9b85b68a33798a517a18a81407dd7646125ac30cc312d7daa4d3fa47c5e0ed26069c72ea0f23959b9b0e5336dcc1f3b25a5db38380886a0c63b66fc5973758a5fcf1abaa20fa9e08d1528ec5e69d870f0ffe85d422176e2c04705e8bf19e632d7b63e7cc8bea4c856bbce3a8641d03adc5933e49fccf63b04817dcb648c0f6ca66d467c3dbafba672f71f18f76ac31b9ee2f373c0450f2f33bfd7c25932e094458d3c283418cfba0ad41692cf7f96a45a449a0250132506fce0361877273b2183b514b88e8578493cff1f4b6b819c87dc6218a8fa16e1c87fd49433a630d4cdc33e4abf18f2b7faea2a2c8f8038c306928a5779f483e2ea9748d2e45ce37c238ee12120e41ffb4a870c8cfbd066ca123242809b04e30694f91355be5b46b801ddfbbb5dfabdd66ecb558ef69f1dc25664f8c987f1b63dc8898a55a4f1b07354f6ec4d81d14bf83bbb4566f8bb2581d303299a2b21da679226253d4828b099f70b1033ef2ac538ae9167c3c304704d4dc59e446e31c00674e775bb074b8ce7cbc232a7e72ca53f3f173f542e656144b4fcaab08fbea7feb83d00ac2f6eb625edc1c7a26c46b2284e79efaf85d64f939764b367cc71c0356f58a2a6bd1b84574de0a08e5ba9024eb1c8c18294a367597b21467fb32c1661a1f243f854ae076cd378af1017798bde1fd82d789e152ce6cced178840a7dfb756e3f71026b5eac69a625d6d8058812c2dea8a303efca9857354b790539d5f9e550a6df43667b0a03ea1e669424bb5633a7fd3e29791d43354f3df942cc39f261548e7a73c2c5b5c3c608fcca22e33c63dcc2e3398b1072cf58cbcd5505545e670a46efea41fe5585b9b5e823d62ca8f7f43a0b67db5f0150b2ca750f0104832e2fbd10c40210352adb79cbcf5607b19c035cca928d35ac81d619d7aefffb356056a8e2bada1eaeba4741755629f68887bdd55ed0a99472716ddba24f48dcda4e8857fc86eafbc727b4d9320207b16888c1b26ed2cfeebbf23a724952e28af3d5333369cf720b2d3ffd867c2ad6e27bcd4a9016cffbf61230bb66c12e06c88ab01dfbfffd1d0f5c13c4a293fbc696799b23afa89df964c8f20defc6fcda37d88190e2092a75627db193879702ee915a8db5419b95fc7f4488c90ba9f63692d7dd31f140788c866a206934e8ebd2f7b9a004f75672774ff61eeb6c809b136111e6d86af02807c2d2abbe6bdedb97050806d7d216adf0ad9f78aae1bf99720796f7892a96f01c47e01f2f6d8054bbdf6b6fe387ac79b6de359c7a67114bebbae33934a9b71aad956bfbf09bf2f4c2bf7ef014ad176d6d323cdeece0e32874cf6faaea10a9e05cb3330300000094fb9c66c46405942ccdeed0a4809920161e0819b6001d63e28b9e6b771664f1bb1c367de5482876502587567c09a98f771456ceff9d55530dbb5d55ee4c368c8699284c724e18f45c621648d25ffb1f5b18c9ed6e264e1a7a563fd9a7fc16d5808dff22f40da90c5461eafa2fc6fa82cac454ac7ab2f4c6e676724c7b13bb0d218ef373d560087a21cb5bf239f2e2b9f268ce6d27df76fac2d024b89c44c24585242523f08e7b6ddff3a01908f6387018b091eb59adb6167c29fbb089971176e354c83a3df5c7530f0e5f7d305d29b04d8ead40bffe5dfb6f3f6ba1fba47732342e271dc0fb18e2422a2065c4c6bdf1f849202689370497586bc3b8f594d404ba541cc764e5f57785405e03e5ae98811a997fca958175c9963c0219ab1d4c68761dd0a41d13cab0f01837204291ee12f0b65296d48d2be3506ed3419ebd7e00b96e9dde8bd4fb25fda12ecfc2c9ef85d5627476d5ca4a9ede58293efcac91fd260c8051ae209520ea681132131a4568b70a81d4562876797e5f8e29f7b6422459ac3f21f60bc8c4c1dd88a208e1d5e913e919a391d15f059731276eb7db86de7f89e16991d78814f3269916c58b0bbf1fbcfca6b4d398a6e2427152ac8f8e3b5ea90b1ea09a484c12fb6d8479954107ac752ba56b2e3640e096787fe76445148244474d45b655cf73be358a8d6825134595400df62aeb41ea05fdcc232fa59888fe5227fe5b4db188050b3c62d7536e76c1ea14508e7be693cd207e33532fed3cfa04efad1d2eef7f74729e93132f9753310109d9c6cae55d85843210dd84e3d5af3442aa82a4985182aab22d7fa1a67488dd48c99b7edc82b0d511f234e2838071c838dbdb5f776ccd29cebf96cca81c2f263752cc8377ac89d48948770b0085ed88661d7e9ec69e06b60a32a146b939b07b3ebe4b5ed57f1f3277ef3e6e5b833c368bf1a9c5bc67ae79facdb2fbe1f648764fb0dff1026a33ff4113db618b4c1edff1b45ddfed07cd3ca118a71258ffb25685d095612ec38448e99735a262959fe9010574a9580b3b88b272c91d387d50b26e2cbbb017a09876d1cf50adaa376ab9309c7197cb348a1e06c35c9fbd4919e9abd4b571cada83b695d3744d36c23ffb280a18e18bf4f34a50db5d037c7be93ac4ed0a199d2eeb166e430b4564c57b4fc105f1a90d0f7eea48f9cdcf7d2cf6d6be7aaf19fd04143a9f4602845bfa914f412dbe13041de0b4bbc08ab5fd1dff3b5eb950a4f6b36ee6d4ec0bff43c5ecd4434a1c7c7490e3a9161b378afcb6d7845df34862ee35724755c8b1a1ff27d78e0613ba715b77adeef541dec343bdf7b30c563c48a41491ec76a65fb021ee779a257025ffdc6b7c65135b58441996cdf235192bd65e4c95f634575acc6c053fd44c909959220c4c2650cb6c1eb64baf427ad2657a408932a9408ef8a79dc25eba4345b5d0a43d39ae3c5dda0fcc6734116d0435187a0ea5ddcb955197fd6754388a451d0183c64808302a147bfaabeee467564058c1216d7331b5207285c1c336807b42d98d5b6375a4d6691e8bf9068945ebf13293120d4a0e779e66577b7e1dd419c861a10310509d779a70fb1ce5a69fcfa9a5a7d13d5fe70eef78f1f721efe87ce73f246b260d7ae81ba35374c7f6ad0a1501daf91416baf4a01a60aceb1a2fdf98e0b370df2575d56a571588052057a29297f40c4dbfe029236244b5862f8ee7b5b3b4713d60ac0c7207cd5114afecf2f49dab663f06ae8b6759ca061f330fb4b8f2756403a029d69e14061c807e9298ef6ed9423ec3158f39c8a2f2823b34249721e2ef032c77f389d99ee639ae4b2237b73ad83d7bc118be665bea4726c5cae3221f474b47f572a8a997b0bdda0920a64cc5080e32a065cd77119995efeadb009963fcaa1fe5fad359efd57431633c2c597a25d23444f4831456f6b23726b683bd661e31130d6a175cb0716529f2898b923c25b9a52411c5d0333a180db0b7b134999b1c8e3a45126cf3db32e5dcf396846d10819451852e7f69cec389fc9eb3231159e35c1087c31d465782a994def895e5c7ab7f6c7759c552a7d7474d16b697b4d5c008806bde217f44f0e4e9de8cab672357124cb70cb5cdba2558fa096e682e8f105521e5156310a18b7c275816a627e8ac5869da779e3cddab87914d0a4be687303304f4537d8599a58e91706c3c3673db7ad3d6a4abc716815f1f70221422b73d50d61a5cd7fd28dd7c3ff1a1416fb53d7f9e503e14afd6840a6aa279c958112f5ffd0d8383c2c0dc0fc25055412296a6eaaddda2701b4e90b777180cd197b4d30e921f034f7b8a071f3b5bcffdcb0cfbfca95f0215c304aaef6f108b0f58842ee9d0388dbf7c211f7f64f1107255070e4d445bb7972eb612b3611fcd23e0d086266abaa3b9796f580875edd047351fa4f2d4afee1b98c57456c35d3f9a99f61848f606e855e2374d7717f7bc5d69f234a8176fe3d018a033d961d01eb1178d31d1fa685b5f2a95b1d263100b496142a6ca49c1ff760ffbbcba5bbf38ca17060d222ed3318d2642fd022924e5ff573347115c285697320bc93475472320ad73d4878645de72fcdcc56d51130ece7a61bdebdb3e7326de1c5ced31f7e316a6725567563d6544312f5417a35a11530c97d545ef37d5257645fb10345a71373025c31dde37b7415654fddbdaafd047a9d52f952650855f3ac3b0cdea1e7eee441653f16f52099ac580dfb30f165d501767b7ce4e9daf9e5811110a5a648a746fff26f44817b4a76da2e875ef8d784748b205ca1aeecff9af2ca67ebff8aa37666632b15deb0b9e8cfdee67e04fef7bc0529b3c5abcd61b8ffb45fd2fc82c55f885816eed29dcd7ac4b8610ccf7558cc19822825728e8c42eed1ead7016331da2459fb6510ddf45cd92a5519854551e92c286799a88988434fd8a4b19dfbc9ad4183cc77d3b49d5dc23f0b31302f38b430486203f93fbab2c2135c077c07b3c5e8ab7ded0f1a183c869998445489e0afe53cbbf41cddba122dcb6e665aea5f8da3ccad93942b55abf1bd38d80a196a7ab0c9f96f483e27f57d7b31c4cfdc4f2fee62506b0832882881740f0be8b60eda38296f241ad67b8704a8b4a5689e0b56247c7b4dbd221725f3421d35ab0a5ac0a15ead4d2eb87cff6fd5a608efb5e10fb1cc097ea1e3d4b84b74ce2da8ef576436163db115f00cea336ed5e786b5e4800ef3c6c74e77b533dae7aa9ee3f3b815d07d3c5c9a5c10a8ebefee72f991a365d47bf8c3dfae2623486f5939b415e683c463873664028780b42e869aed7efee14aa0b7d7f82dd7bbc8174a143d53d258c08c05337600c62760ffc518331b30a1875d680899af22541ddf498d08309dd7f045501a0cf68b17f8523f4437e12b5110c75f992735b01e320dfe00b4aadfd2b214e27028fdae866894f49d5a4c2431b7f9426dcd2f5de5c1d45042f5acc3f54", @ANYRES32=r1, @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r1, r0, 0x2e, 0x4608, @val=@netkit={@void, @value}}, 0x1c) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r7}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='setgroups\x00') close_range(r8, 0xffffffffffffffff, 0x0) fchdir(r6) r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, 0xfffffffffffffffe, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='generic_add_lease\x00', r5}, 0x18) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x2, 0x3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r11}, &(0x7f0000004000), &(0x7f0000004040)=r9}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r12, 0x0, 0x8000000000000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0xe4}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 12.865258717s ago: executing program 1 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) 12.864991247s ago: executing program 32 (id=27): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) 4.556833562s ago: executing program 3 (id=154): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='9p_protocol_dump\x00', r2}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 4.177843087s ago: executing program 3 (id=159): syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 4.096889288s ago: executing program 3 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000740)={[{@jqfmt_vfsv0}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x0, 0x10, 0x1, 0x4291aa30, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x10, 0x0, 0xffffff51, 0x300}}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) r5 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r6 = dup3(r5, r2, 0x0) ioctl$TIOCSTI(r6, 0x402c542c, &(0x7f0000000000)) 3.223355409s ago: executing program 3 (id=189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 3.18100999s ago: executing program 3 (id=190): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = inotify_init1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000200)={0xa0002000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x3, r3, &(0x7f0000000000)) syz_emit_ethernet(0xe, &(0x7f0000001f40)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@generic={0x892f}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb0800450000380068ea62330448dfe11e0001ac1414aa04009078e00000e0450000000000000000110000ac1414aaac1e0001341517c1b7df60c7"], 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x1, 0xa, 0x1, 0x0, 0x0, 0x2000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBMETA(r8, 0x4b62, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r9, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) shutdown(r9, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000000e80)=""/4096, 0x1000) 2.35227707s ago: executing program 2 (id=211): syz_read_part_table(0x610, &(0x7f0000000600)="$eJzs3D9oFFYcB/DvmdydUeh1cHKpcegkFMXRG6okV8VCOJVCcLD/EGmmCIGTHqbo0GZQzCAdu0jhOmicjBmcDAqdS3CwCBlcCnaR2iFX7g+5C5RiaaSUfj7D/d4dP973/eCt78J/2o4U+6t2uVve++Qv+9uVwXo+Z1oTk8fb7Xb7dFLI2RQzXnxrKclotu6a/UlKQ/vc+m7Xyje/flBsPTn18t1zDxd2bO5ZzttJdg83Z+zPjlL+e5PyJtyurlauXJ2tXet8qTXXNz5K7ryYqC+fXFhcOlE89lnn98vJo35/72KM5WIauZQv8vHoa0d9NVgWBherulqZ7+Q3qhfWas31b1vPDm7srY3cO3/k1b6V6w8OJXOdiKl0L/tA6Z/PnuH5+/lz4zemF5tHD9zdc/Nw4/7j+vOR39o9/ciR7ckFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODNuN35uDpbu9aoXlirNde//unHD++8mKgvn1xYXDpROva03/eoX0f79WIauZRikpnM5PPMvn7kdGE4v7paubKZ//uu5NnBjb211r3zR15Nrlx/cKjbVchUp+zYjom3Gs4vJZkbvzG92Dx64O6em4cb9x/Xn4/0+mbK+bQ7bpLy9h8DAAAAAAAAAAAAAAAAAACA/7mJyeP7pt6vn04KObszyS9fdl/Zt8tjP6T78r5nf78+LSdrleTWzt5/AbSenHpZOvdw4ef+o/j5lDOfZPf3y2eSdzZzLm+NLQ525t/0RwAAAP///wCQmw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xc082, 0x1db) writev(r0, 0x0, 0x0) 2.156762863s ago: executing program 3 (id=213): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="34010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088008010c8004000b8004000b801c000b80080009000000000008000a0000000000080009000000000024000b8008000900000000000800090000000000080009000000000008000900000000005c000b8008000a000000000008000a04000000000800090000000000d7fe0a000000000008000a000000000008000a00000000000800090000000000080009000000000008000a000000000008000a005a300000080009000000000054000b8008000900df074e4808000a000000000008000a000000"], 0x134}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x161200, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x80) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000200)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0xffffffff}}], 0x18}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000140), &(0x7f0000000300)=r3}, 0x20) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) io_setup(0xa, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ee, &(0x7f0000000880)="$eJzs3cFuG1sZAOB/Jja3SXNxLrC4XInbihYlFdRJGtpGLApICFaVgLIvIXGjKE5cJU7bRBWk4gGQEAIkNrBig8QDIKE+AkKqBHsECFRBCwsWhUG2xyFN7SSljg3x90mnc8547P/8tXw8Z2biCWBonY+IqYjIsiy7FBGlfH2al9htlcZ2z589XGyUJLLs1l+SSPJ17dd6K1+ezZ92JiK++qWIbySvxt3c3lldqFYrG3l7ur6WvMiyncsrawvLleXK+tzc7LX56/NX52d6kudERNz4wh+//52ffvHGLz91/3e3/zz1zVaCLfvz6KVW6sXm/0VbISI2TiLYgBSaGbZcHXBfAAA4XGN//0MR8fGIuBSlGGnuzQEAAACnSfbZ8XiRtM7/AQAAAKdTGhHjkaTl/Hrf8UjTcrl1De9HYiyt1jbrn8xKe8cLJqKY3lmpVmbyawcmopg02rP5Nbbt9pUD7bmIeCcivlcabbbLi7Xq0kCPfAAAAMDwOHtg/v/3Umv+DwAAAJwyE4PuAAAAAHDizP8BAADg9DP/BwAAgFPtyzdvNkrWvv/10r3trdXavctLlc3V8trWYnmxtnG3vFyrLTd/s2/tqNer1mp3Px3rWw+m65XN+vTm9s7ttdrWev32yku3wAYAAAD66J1zj3+bRMTuZ0bTiMiSfY8VI7KR/RsX+t8/4OSkr7PxH06uH0D/jQy6A8DA2KWH4VUcdAeAgTtqHOh68c6vet8XAADgZEx+dO/8f7MAw+Px0+YiSQbdEaDvnP+H4eX8Hwyv4mF7ACYFcOqlh3zU238Q9Obn/7Ps9XsGAAD00nizJGk5nweMR5qWyxFvN28LUEzurFQrMxHxwYj4Tan4VqM923xm4vAAAAAAAAAAAAAAAAAAAAAAAAAAABxTliWRdTG6tw0AAADw/ywi/VOS3/9rsnRx/ODxgQ8k/yg1lxFx/0e3fvBgoV7fmG2s/+ve+voP8/VX+n30AgAAAOikPU9vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJeeP3u42C79jPv08xEx0Sl+Ic40l2eiGBFjf0uisO95SUSM9CD+7lhEvNspftLoVkzkvTgYP42I0V7Ef/Tfxz/bg/gwzB43xp/Pdfr8pXG+uez8+Svk5U11H//SvfFvpMv493anF0xfXfXek59Pd43/KOK9Qufxpx0/6RL/wjFz/PrXdna6PZb9JGKy4/dP8lKs6aRwd3pze+fyytrCcmW5sj43N3tt/vr81fmZ6Tsr1Ur+b8cY3/3YL/51WP5jXeJPHJH/xWPm/88nD559uFUtHnioGD/OsqkLnd//d7vEb3/3fSJ/uxvtyXZ9t1Xf7/2f/fr9c4fkv9Ql/6Pe/6lj5n/pK9/+/TE3BQD6YHN7Z3WhWq1sqKicWGU0+hh0IQ7bpr0T24f+fCsP9T/xFrx2ZYCDEgAAcCL+s9M/6J4AAAAAAAAAAAAAAAAAAADA8DrqZ8CiBz8ndjDm7mBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA41L8DAAD//y7szXE=") 1.53306453s ago: executing program 2 (id=214): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="210000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xeffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x8000083f, &(0x7f00000000c0)={0x0, 0x9b1b, 0x2000, 0x1, 0x8002aa}, &(0x7f0000000400), &(0x7f0000000280)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}}, 0x80) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x42000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) execve(0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010300000000fedbdf2501"], 0x28}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 1.374161162s ago: executing program 5 (id=216): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 1.063568056s ago: executing program 4 (id=221): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000501"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000edffffff000000000000000018110000debf3bf9ac35d278c090354e95182d2cc203ad6137c01d77dc447f36f9e91740c4a259ccaa315924fbfef92690ed531a27", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r5 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2208c, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000080), 0x2}, 0x8000, 0x101, 0x2, 0x5, 0x3000000000000000, 0x5, 0xec, 0x0, 0x9, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000004c0)='ns\x00') getdents64(r6, &(0x7f0000000080)=""/95, 0x18) getdents(r6, 0x0, 0x3b) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r9) ioctl$PERF_EVENT_IOC_RESET(r5, 0x2403, 0x4) lchown(&(0x7f00000006c0)='./file0\x00', r4, 0xee01) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2b3000, &(0x7f0000000180)={[], [{@context={'context', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, '['}}, {@uid_gt={'uid>', r4}}, {@obj_type={'obj_type', 0x3d, '%pS \x00'}}, {@uid_lt={'uid<', r4}}, {@measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@uid_gt={'uid>', r4}}]}, 0x0, 0x52e, &(0x7f0000000f00)="$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") r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x8000, 0x20, 0xc}, 0x18) name_to_handle_at(r10, &(0x7f0000000680)='./file0\x00', &(0x7f00000007c0)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x3, 0xc, 0x0, 0x2}}, &(0x7f0000000800), 0x400) 669.131831ms ago: executing program 4 (id=226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 668.285091ms ago: executing program 4 (id=227): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 667.980091ms ago: executing program 0 (id=228): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') r1 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe7b}, 0x0, 0x0, 0x0, {0xfffd}}) io_uring_enter(r1, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r5, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 667.725732ms ago: executing program 0 (id=229): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x52, 0x0, 0x100, 0x34120, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x10}, 0x10000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 667.614721ms ago: executing program 0 (id=230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000000600000004028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) (fail_nth: 13) 665.239441ms ago: executing program 4 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xba, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x53, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', r1, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r4, 0x0, 0x0) close(r4) 664.950061ms ago: executing program 2 (id=232): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x1000480, &(0x7f0000000080)={[], [{@seclabel}]}, 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==") (fail_nth: 11) 578.215473ms ago: executing program 4 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 538.665603ms ago: executing program 4 (id=234): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f0000000040), 0x0}, 0x20) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x10808, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES16, @ANYRES16=r0], 0x1, 0x370, &(0x7f0000000680)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000080)={0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 449.304274ms ago: executing program 5 (id=235): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) pwritev2(r3, &(0x7f0000000600)=[{&(0x7f0000000080)='W', 0x1}], 0x1, 0x800be6b, 0x8000000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) write$binfmt_aout(r3, 0x0, 0xa8d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d"], 0x6c}}, 0x0) 340.313905ms ago: executing program 2 (id=236): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1}, 0x0, 0xfffffffffffffdff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000680)=""/150, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000028000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0xc, 0xa, 0x0, 0x28, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, 0x58) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x9a, 0xc, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080)}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xc) 151.417728ms ago: executing program 5 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x1000000}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00', 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r6}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 93.053869ms ago: executing program 0 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 92.450509ms ago: executing program 2 (id=239): syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6090030000000000000000000000000000000000000000bbfe8000000000000000000000000000aa2b00010000000000"], 0x0) 91.161649ms ago: executing program 0 (id=240): mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000f, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6991, &(0x7f0000000480)={0x0, 0xd3b3, 0x2, 0x3, 0x288}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0x3516, 0x0, 0x4, 0x0, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xa3020000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 54.691709ms ago: executing program 5 (id=241): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x52, 0x0, 0x100, 0x34120, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x10}, 0x10000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 54.178809ms ago: executing program 5 (id=242): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) 17.8388ms ago: executing program 2 (id=243): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x1008082, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_async_commit}, {@abort}, {@errors_continue}, {@dioread_nolock}, {@mblk_io_submit}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e0, &(0x7f00000011c0)="$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") r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x1, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 553.49µs ago: executing program 0 (id=244): openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x81}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x2000000}, 0x2400c800) kernel console output (not intermixed with test programs): [ 21.121650][ T29] audit: type=1400 audit(1745697353.404:81): avc: denied { read } for pid=2987 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 26.160163][ T29] audit: type=1400 audit(1745697358.434:82): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.161199][ T3292] cgroup: Unknown subsys name 'net' [ 26.182907][ T29] audit: type=1400 audit(1745697358.434:83): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.210397][ T29] audit: type=1400 audit(1745697358.474:84): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.365081][ T3292] cgroup: Unknown subsys name 'cpuset' [ 26.371290][ T3292] cgroup: Unknown subsys name 'rlimit' [ 26.542237][ T29] audit: type=1400 audit(1745697358.814:85): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.567406][ T29] audit: type=1400 audit(1745697358.814:86): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.587951][ T29] audit: type=1400 audit(1745697358.814:87): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.607077][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.608326][ T29] audit: type=1400 audit(1745697358.814:88): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.637323][ T29] audit: type=1400 audit(1745697358.824:89): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.644056][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.662322][ T29] audit: type=1400 audit(1745697358.824:90): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.694643][ T29] audit: type=1400 audit(1745697358.904:91): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.935800][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.952265][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.970481][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.997894][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.100763][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.109633][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.116888][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.124574][ T3307] bridge_slave_0: entered allmulticast mode [ 28.131014][ T3307] bridge_slave_0: entered promiscuous mode [ 28.140698][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.147828][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.155043][ T3313] bridge_slave_0: entered allmulticast mode [ 28.161474][ T3313] bridge_slave_0: entered promiscuous mode [ 28.167948][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.175125][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.182866][ T3305] bridge_slave_0: entered allmulticast mode [ 28.189491][ T3305] bridge_slave_0: entered promiscuous mode [ 28.206311][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.213393][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.220611][ T3307] bridge_slave_1: entered allmulticast mode [ 28.227208][ T3307] bridge_slave_1: entered promiscuous mode [ 28.235882][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.242960][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.250289][ T3313] bridge_slave_1: entered allmulticast mode [ 28.256661][ T3313] bridge_slave_1: entered promiscuous mode [ 28.263082][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.270219][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.277450][ T3305] bridge_slave_1: entered allmulticast mode [ 28.284132][ T3305] bridge_slave_1: entered promiscuous mode [ 28.336057][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.345297][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.352443][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.359656][ T3303] bridge_slave_0: entered allmulticast mode [ 28.366340][ T3303] bridge_slave_0: entered promiscuous mode [ 28.374143][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.383391][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.390487][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.397699][ T3303] bridge_slave_1: entered allmulticast mode [ 28.404151][ T3303] bridge_slave_1: entered promiscuous mode [ 28.411333][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.426365][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.436700][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.451347][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.485297][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.492447][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.499722][ T3309] bridge_slave_0: entered allmulticast mode [ 28.506376][ T3309] bridge_slave_0: entered promiscuous mode [ 28.523699][ T3313] team0: Port device team_slave_0 added [ 28.530954][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.545617][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.552717][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.560035][ T3309] bridge_slave_1: entered allmulticast mode [ 28.566637][ T3309] bridge_slave_1: entered promiscuous mode [ 28.573409][ T3307] team0: Port device team_slave_0 added [ 28.580106][ T3307] team0: Port device team_slave_1 added [ 28.586435][ T3313] team0: Port device team_slave_1 added [ 28.593099][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.602961][ T3305] team0: Port device team_slave_0 added [ 28.633751][ T3305] team0: Port device team_slave_1 added [ 28.650323][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.657509][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.683551][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.694863][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.701891][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.727846][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.755727][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.766305][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.778545][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.785627][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.811702][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.823159][ T3303] team0: Port device team_slave_0 added [ 28.829172][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.836178][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.862164][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.884020][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.891015][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.916948][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.928599][ T3303] team0: Port device team_slave_1 added [ 28.939755][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.946775][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.972776][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.985016][ T3309] team0: Port device team_slave_0 added [ 29.012211][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.019244][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.045285][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.056634][ T3309] team0: Port device team_slave_1 added [ 29.062584][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.069583][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.095568][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.113078][ T3307] hsr_slave_0: entered promiscuous mode [ 29.119152][ T3307] hsr_slave_1: entered promiscuous mode [ 29.156937][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.163988][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.189943][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.217526][ T3303] hsr_slave_0: entered promiscuous mode [ 29.223523][ T3303] hsr_slave_1: entered promiscuous mode [ 29.229402][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.237015][ T3303] Cannot create hsr debugfs directory [ 29.242753][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.249839][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.275786][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.288676][ T3313] hsr_slave_0: entered promiscuous mode [ 29.294787][ T3313] hsr_slave_1: entered promiscuous mode [ 29.300694][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.308320][ T3313] Cannot create hsr debugfs directory [ 29.321618][ T3305] hsr_slave_0: entered promiscuous mode [ 29.327990][ T3305] hsr_slave_1: entered promiscuous mode [ 29.333868][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.341470][ T3305] Cannot create hsr debugfs directory [ 29.389623][ T3309] hsr_slave_0: entered promiscuous mode [ 29.395845][ T3309] hsr_slave_1: entered promiscuous mode [ 29.401709][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.409338][ T3309] Cannot create hsr debugfs directory [ 29.590299][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.599006][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.613112][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.622174][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.640425][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.651176][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.660590][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.669405][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.706663][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.716525][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.727636][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.737002][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.786055][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.795292][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.804109][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.819467][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.837678][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.863099][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.886759][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.893969][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.905782][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.917697][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.927756][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.940266][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.949924][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.957090][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.967912][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.978313][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.986592][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.006826][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.015876][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.022996][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.040810][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.048006][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.058130][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.065243][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.082439][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.089619][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.152595][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.188051][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.208577][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.223736][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.248541][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.263572][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.270683][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.281158][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.288317][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.312602][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.319798][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.338792][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.345872][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.365037][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.378717][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.424052][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.485874][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.532564][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.544644][ T3307] veth0_vlan: entered promiscuous mode [ 30.552412][ T3307] veth1_vlan: entered promiscuous mode [ 30.573236][ T3307] veth0_macvtap: entered promiscuous mode [ 30.588288][ T3305] veth0_vlan: entered promiscuous mode [ 30.607782][ T3305] veth1_vlan: entered promiscuous mode [ 30.622111][ T3307] veth1_macvtap: entered promiscuous mode [ 30.651777][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.670362][ T3305] veth0_macvtap: entered promiscuous mode [ 30.679593][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.688034][ T3305] veth1_macvtap: entered promiscuous mode [ 30.707619][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.716514][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.725429][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.734182][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.749888][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.760474][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.771109][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.779605][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.790116][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.800630][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.826776][ T3309] veth0_vlan: entered promiscuous mode [ 30.836580][ T3313] veth0_vlan: entered promiscuous mode [ 30.842662][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.851528][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.860305][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.869178][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.883468][ T3303] veth0_vlan: entered promiscuous mode [ 30.892133][ T3309] veth1_vlan: entered promiscuous mode [ 30.915423][ T3313] veth1_vlan: entered promiscuous mode [ 30.925147][ T3303] veth1_vlan: entered promiscuous mode [ 30.937076][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.951941][ T3313] veth0_macvtap: entered promiscuous mode [ 30.967932][ T3303] veth0_macvtap: entered promiscuous mode [ 30.975495][ T3303] veth1_macvtap: entered promiscuous mode [ 30.983934][ T3313] veth1_macvtap: entered promiscuous mode [ 31.006049][ T3444] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 31.019678][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.030317][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.040181][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.050704][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.063870][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.072380][ T3309] veth0_macvtap: entered promiscuous mode [ 31.083648][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.094320][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.104395][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.114931][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.124773][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.135269][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.142705][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.156135][ T3309] veth1_macvtap: entered promiscuous mode [ 31.160677][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.160739][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.160751][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.160767][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.160778][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.160793][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.160804][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.160820][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.161455][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.162564][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.162673][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.162683][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.162777][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.163283][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.164522][ T3303] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.164635][ T3303] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.164679][ T3303] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.164762][ T3303] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.165988][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 31.166004][ T29] audit: type=1400 audit(1745697363.444:139): avc: denied { create } for pid=3445 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.167197][ T29] audit: type=1400 audit(1745697363.444:140): avc: denied { ioctl } for pid=3445 comm="syz.0.1" path="socket:[4118]" dev="sockfs" ino=4118 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.167230][ T29] audit: type=1400 audit(1745697363.444:141): avc: denied { write } for pid=3445 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.167256][ T29] audit: type=1400 audit(1745697363.444:142): avc: denied { nlmsg_write } for pid=3445 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 31.183071][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.183117][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.183126][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.183139][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.183147][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.183159][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.183773][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.186471][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.186494][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.186506][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.186522][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.186533][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.186548][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.186585][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.186600][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.186629][ T29] audit: type=1400 audit(1745697363.464:143): avc: denied { ioctl } for pid=3445 comm="syz.0.1" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 31.187267][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.191895][ T3446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3446 comm=syz.0.1 [ 31.192038][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192081][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192121][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192156][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237264][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237307][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237340][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.237418][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.748889][ T29] audit: type=1400 audit(1745697364.024:144): avc: denied { mounton } for pid=3454 comm="syz.1.7" path="/2/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 31.772284][ T29] audit: type=1400 audit(1745697364.024:145): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.831279][ T3459] loop2: detected capacity change from 0 to 1024 [ 31.848768][ T3459] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.859346][ T3459] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 31.884021][ T3462] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 31.892686][ T29] audit: type=1400 audit(1745697364.154:146): avc: denied { name_bind } for pid=3460 comm="syz.3.4" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.893123][ T3463] FAULT_INJECTION: forcing a failure. [ 31.893123][ T3463] name failslab, interval 1, probability 0, space 0, times 1 [ 31.914137][ T29] audit: type=1400 audit(1745697364.154:147): avc: denied { node_bind } for pid=3460 comm="syz.3.4" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.926711][ T3463] CPU: 1 UID: 0 PID: 3463 Comm: syz.4.5 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 31.926820][ T3463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 31.926840][ T3463] Call Trace: [ 31.926848][ T3463] [ 31.926858][ T3463] __dump_stack+0x1d/0x30 [ 31.926880][ T3463] dump_stack_lvl+0xe8/0x140 [ 31.926903][ T3463] dump_stack+0x15/0x1b [ 31.926991][ T3463] should_fail_ex+0x265/0x280 [ 31.927036][ T3463] should_failslab+0x8c/0xb0 [ 31.927075][ T3463] kmem_cache_alloc_noprof+0x50/0x310 [ 31.927221][ T3463] ? getname_flags+0x80/0x3b0 [ 31.927260][ T3463] getname_flags+0x80/0x3b0 [ 31.927297][ T3463] __se_sys_move_mount+0x16d/0x440 [ 31.927335][ T3463] __x64_sys_move_mount+0x67/0x80 [ 31.927421][ T3463] x64_sys_call+0x1f00/0x2fb0 [ 31.927448][ T3463] do_syscall_64+0xd0/0x1a0 [ 31.927475][ T3463] ? clear_bhb_loop+0x25/0x80 [ 31.927502][ T3463] ? clear_bhb_loop+0x25/0x80 [ 31.927624][ T3463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.927650][ T3463] RIP: 0033:0x7fe9932ee969 [ 31.927708][ T3463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 31.927730][ T3463] RSP: 002b:00007fe991957038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 31.927834][ T3463] RAX: ffffffffffffffda RBX: 00007fe993515fa0 RCX: 00007fe9932ee969 [ 31.927850][ T3463] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000003 [ 31.927866][ T3463] RBP: 00007fe991957090 R08: 0000000000000000 R09: 0000000000000000 [ 31.927881][ T3463] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 31.927896][ T3463] R13: 0000000000000000 R14: 00007fe993515fa0 R15: 00007ffd291e00d8 [ 31.927919][ T3463] [ 32.024629][ T3468] Zero length message leads to an empty skb [ 32.033992][ T29] audit: type=1400 audit(1745697364.304:148): avc: denied { create } for pid=3458 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 32.160233][ T3470] syz.3.10 uses obsolete (PF_INET,SOCK_PACKET) [ 32.191984][ T3470] loop3: detected capacity change from 0 to 512 [ 32.199564][ T3470] EXT4-fs: Ignoring removed oldalloc option [ 32.220788][ T3470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0182] [ 32.242456][ T3470] System zones: 1-12 [ 32.248361][ T3470] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.10: Parent and EA inode have the same ino 15 [ 32.262474][ T3470] EXT4-fs (loop3): Remounting filesystem read-only [ 32.262588][ T3483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15'. [ 32.277978][ T3483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15'. [ 32.278355][ T3470] EXT4-fs (loop3): 1 orphan inode deleted [ 32.296038][ T3470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.314834][ T3487] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 32.318800][ T3470] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.443969][ T3497] loop2: detected capacity change from 0 to 512 [ 32.452618][ T3497] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.465839][ T3497] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.477082][ T3497] EXT4-fs (loop2): 1 truncate cleaned up [ 32.484045][ T3497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.569116][ T3507] loop0: detected capacity change from 0 to 1024 [ 32.579249][ T3507] EXT4-fs: Ignoring removed orlov option [ 32.598773][ T3507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.622429][ T3507] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.647659][ T3502] netlink: 'syz.3.21': attribute type 21 has an invalid length. [ 32.655481][ T3502] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 32.663090][ T3502] netlink: 144 bytes leftover after parsing attributes in process `syz.3.21'. [ 32.672836][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.696374][ T3512] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.719209][ T3512] loop0: detected capacity change from 0 to 512 [ 32.737654][ T3512] EXT4-fs (loop0): 1 orphan inode deleted [ 32.743928][ T3512] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.756858][ T57] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 32.772505][ T3512] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.805316][ C1] hrtimer: interrupt took 44457 ns [ 32.840019][ T3519] kernel profiling enabled (shift: 9) [ 32.945110][ T3305] syz-executor (3305) used greatest stack depth: 10744 bytes left [ 32.959831][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.045153][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.084580][ T3524] Falling back ldisc for ttyS3. [ 33.138805][ T3538] loop2: detected capacity change from 0 to 4096 [ 33.164748][ T3538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.226422][ T3525] chnl_net:caif_netlink_parms(): no params data found [ 33.282790][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.290128][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.304187][ T3525] bridge_slave_0: entered allmulticast mode [ 33.311141][ T3525] bridge_slave_0: entered promiscuous mode [ 33.318906][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.326125][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.333591][ T3525] bridge_slave_1: entered allmulticast mode [ 33.340678][ T3525] bridge_slave_1: entered promiscuous mode [ 33.356772][ T3549] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.34'. [ 33.378189][ T3525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.396387][ T3525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.426948][ T3525] team0: Port device team_slave_0 added [ 33.441658][ T3525] team0: Port device team_slave_1 added [ 33.475412][ T3525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.482431][ T3525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.508436][ T3525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.521896][ T3525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.529074][ T3525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.555064][ T3525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.580114][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.629216][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.642011][ T3525] hsr_slave_0: entered promiscuous mode [ 33.648356][ T3525] hsr_slave_1: entered promiscuous mode [ 33.654454][ T3525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.662083][ T3525] Cannot create hsr debugfs directory [ 33.737672][ T3559] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.750059][ T3559] FAULT_INJECTION: forcing a failure. [ 33.750059][ T3559] name failslab, interval 1, probability 0, space 0, times 0 [ 33.762930][ T3559] CPU: 0 UID: 0 PID: 3559 Comm: syz.2.38 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 33.762955][ T3559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 33.762965][ T3559] Call Trace: [ 33.762971][ T3559] [ 33.762977][ T3559] __dump_stack+0x1d/0x30 [ 33.762999][ T3559] dump_stack_lvl+0xe8/0x140 [ 33.763015][ T3559] dump_stack+0x15/0x1b [ 33.763053][ T3559] should_fail_ex+0x265/0x280 [ 33.763098][ T3559] ? v9fs_mount+0x51/0x590 [ 33.763119][ T3559] should_failslab+0x8c/0xb0 [ 33.763144][ T3559] __kmalloc_cache_noprof+0x4c/0x320 [ 33.763162][ T3559] v9fs_mount+0x51/0x590 [ 33.763179][ T3559] ? __pfx_v9fs_mount+0x10/0x10 [ 33.763212][ T3559] legacy_get_tree+0x75/0xd0 [ 33.763233][ T3559] vfs_get_tree+0x54/0x1d0 [ 33.763255][ T3559] do_new_mount+0x207/0x680 [ 33.763278][ T3559] path_mount+0x4a4/0xb20 [ 33.763367][ T3559] ? user_path_at+0x109/0x130 [ 33.763384][ T3559] __se_sys_mount+0x28f/0x2e0 [ 33.763405][ T3559] ? fput+0x8f/0xc0 [ 33.763421][ T3559] __x64_sys_mount+0x67/0x80 [ 33.763502][ T3559] x64_sys_call+0xd36/0x2fb0 [ 33.763608][ T3559] do_syscall_64+0xd0/0x1a0 [ 33.763687][ T3559] ? clear_bhb_loop+0x25/0x80 [ 33.763705][ T3559] ? clear_bhb_loop+0x25/0x80 [ 33.763742][ T3559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.763760][ T3559] RIP: 0033:0x7f55ce75e969 [ 33.763772][ T3559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.763787][ T3559] RSP: 002b:00007f55ccdc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 33.763802][ T3559] RAX: ffffffffffffffda RBX: 00007f55ce985fa0 RCX: 00007f55ce75e969 [ 33.763813][ T3559] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 33.763832][ T3559] RBP: 00007f55ccdc7090 R08: 0000200000000ec0 R09: 0000000000000000 [ 33.763841][ T3559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.763851][ T3559] R13: 0000000000000000 R14: 00007f55ce985fa0 R15: 00007ffd1baa8ab8 [ 33.763946][ T3559] [ 34.150429][ T3525] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 34.170648][ T3566] capability: warning: `syz.0.40' uses deprecated v2 capabilities in a way that may be insecure [ 34.186097][ T3525] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 34.198923][ T3525] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 34.200006][ T3564] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3564 comm=syz.2.39 [ 34.226044][ T3525] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 34.292489][ T3525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.307442][ T3525] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.318201][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.325384][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.338601][ T3574] FAULT_INJECTION: forcing a failure. [ 34.338601][ T3574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 34.351906][ T3574] CPU: 0 UID: 0 PID: 3574 Comm: syz.0.44 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 34.351971][ T3574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.351985][ T3574] Call Trace: [ 34.351992][ T3574] [ 34.352002][ T3574] __dump_stack+0x1d/0x30 [ 34.352029][ T3574] dump_stack_lvl+0xe8/0x140 [ 34.352112][ T3574] dump_stack+0x15/0x1b [ 34.352128][ T3574] should_fail_ex+0x265/0x280 [ 34.352167][ T3574] should_fail+0xb/0x20 [ 34.352196][ T3574] should_fail_usercopy+0x1a/0x20 [ 34.352291][ T3574] _copy_from_user+0x1c/0xb0 [ 34.352338][ T3574] __tun_chr_ioctl+0x147/0x1490 [ 34.352366][ T3574] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 34.352429][ T3574] tun_chr_ioctl+0x27/0x40 [ 34.352450][ T3574] __se_sys_ioctl+0xcb/0x140 [ 34.352564][ T3574] __x64_sys_ioctl+0x43/0x50 [ 34.352584][ T3574] x64_sys_call+0x19a8/0x2fb0 [ 34.352763][ T3574] do_syscall_64+0xd0/0x1a0 [ 34.352785][ T3574] ? clear_bhb_loop+0x25/0x80 [ 34.352806][ T3574] ? clear_bhb_loop+0x25/0x80 [ 34.352826][ T3574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.352847][ T3574] RIP: 0033:0x7f291133e969 [ 34.352861][ T3574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.352923][ T3574] RSP: 002b:00007f290f9a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 34.352941][ T3574] RAX: ffffffffffffffda RBX: 00007f2911565fa0 RCX: 00007f291133e969 [ 34.352953][ T3574] RDX: 0000200000000100 RSI: 00000000400454d9 RDI: 0000000000000007 [ 34.352965][ T3574] RBP: 00007f290f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.352976][ T3574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.352988][ T3574] R13: 0000000000000000 R14: 00007f2911565fa0 R15: 00007ffcb0a2d8f8 [ 34.353006][ T3574] [ 34.552907][ T3525] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.563368][ T3525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.594810][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.601925][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.609902][ T3576] loop2: detected capacity change from 0 to 2048 [ 34.640024][ T3580] loop3: detected capacity change from 0 to 2048 [ 34.648889][ T3576] loop2: p1 < > p4 [ 34.654357][ T3576] loop2: p4 size 8388608 extends beyond EOD, truncated [ 34.661400][ T3525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.699738][ T3297] loop3: p1 < > p4 [ 34.707103][ T3297] loop3: p4 size 8388608 extends beyond EOD, truncated [ 34.742484][ T3580] loop3: p1 < > p4 [ 34.757452][ T3580] loop3: p4 size 8388608 extends beyond EOD, truncated [ 34.768899][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 34.780520][ T3465] udevd[3465]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 34.800866][ T3592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 34.816586][ T3592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 34.847800][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.928707][ T3610] xt_hashlimit: max too large, truncated to 1048576 [ 34.932857][ T3297] udevd[3297]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 34.939465][ T3464] udevd[3464]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 34.967289][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.980558][ T3610] FAULT_INJECTION: forcing a failure. [ 34.980558][ T3610] name failslab, interval 1, probability 0, space 0, times 0 [ 34.993300][ T3610] CPU: 1 UID: 0 PID: 3610 Comm: syz.2.54 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 34.993334][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 34.993350][ T3610] Call Trace: [ 34.993408][ T3610] [ 34.993416][ T3610] __dump_stack+0x1d/0x30 [ 34.993444][ T3610] dump_stack_lvl+0xe8/0x140 [ 34.993462][ T3610] dump_stack+0x15/0x1b [ 34.993482][ T3610] should_fail_ex+0x265/0x280 [ 34.993521][ T3610] should_failslab+0x8c/0xb0 [ 34.993564][ T3610] kmem_cache_alloc_noprof+0x50/0x310 [ 34.993595][ T3610] ? getname_kernel+0x3c/0x1f0 [ 34.993627][ T3610] getname_kernel+0x3c/0x1f0 [ 34.993656][ T3610] kern_path+0x23/0x130 [ 34.993718][ T3610] bpf_prog_get_type_path+0x45/0x1c0 [ 34.993761][ T3610] ? strnlen+0x28/0x50 [ 34.993791][ T3610] bpf_mt_check_v1+0xee/0x260 [ 34.993841][ T3610] xt_check_match+0x2aa/0x4f0 [ 34.993933][ T3610] ? xt_find_match+0x1d1/0x210 [ 34.993964][ T3610] ? xt_find_match+0x1b5/0x210 [ 34.994004][ T3610] translate_table+0xa9c/0xf90 [ 34.994037][ T3610] ? _copy_from_user+0x89/0xb0 [ 34.994066][ T3610] do_ipt_set_ctl+0x66f/0x820 [ 34.994132][ T3610] nf_setsockopt+0x196/0x1b0 [ 34.994174][ T3610] ip_setsockopt+0x102/0x110 [ 34.994208][ T3610] udp_setsockopt+0x99/0xb0 [ 34.994278][ T3610] sock_common_setsockopt+0x66/0x80 [ 34.994310][ T3610] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 34.994341][ T3610] __sys_setsockopt+0x181/0x200 [ 34.994446][ T3610] __x64_sys_setsockopt+0x64/0x80 [ 34.994487][ T3610] x64_sys_call+0x2bd5/0x2fb0 [ 34.994512][ T3610] do_syscall_64+0xd0/0x1a0 [ 34.994533][ T3610] ? clear_bhb_loop+0x25/0x80 [ 34.994594][ T3610] ? clear_bhb_loop+0x25/0x80 [ 34.994620][ T3610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.994644][ T3610] RIP: 0033:0x7f55ce75e969 [ 34.994673][ T3610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.994750][ T3610] RSP: 002b:00007f55ccdc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 34.994852][ T3610] RAX: ffffffffffffffda RBX: 00007f55ce985fa0 RCX: 00007f55ce75e969 [ 34.994867][ T3610] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 34.994881][ T3610] RBP: 00007f55ccdc7090 R08: 0000000000000548 R09: 0000000000000000 [ 34.994936][ T3610] R10: 0000200000002480 R11: 0000000000000246 R12: 0000000000000001 [ 34.994950][ T3610] R13: 0000000000000000 R14: 00007f55ce985fa0 R15: 00007ffd1baa8ab8 [ 34.994972][ T3610] [ 35.031937][ T3525] veth0_vlan: entered promiscuous mode [ 35.198822][ T3628] loop2: detected capacity change from 0 to 4096 [ 35.220345][ T3525] veth1_vlan: entered promiscuous mode [ 35.273114][ T3628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.276928][ T3525] veth0_macvtap: entered promiscuous mode [ 35.303646][ T3525] veth1_macvtap: entered promiscuous mode [ 35.335352][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.368892][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 35.386129][ T3633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.61'. [ 35.389264][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.405685][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.415714][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.426237][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.436159][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.446692][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.456563][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.467282][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.478293][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.488789][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.545290][ T3525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.556749][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.567277][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.577117][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.587608][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.597581][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.608332][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.618302][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.628757][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.638875][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.649447][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.669894][ T3638] loop4: detected capacity change from 0 to 8192 [ 35.696822][ T3638] ======================================================= [ 35.696822][ T3638] WARNING: The mand mount option has been deprecated and [ 35.696822][ T3638] and is ignored by this kernel. Remove the mand [ 35.696822][ T3638] option from the mount to silence this warning. [ 35.696822][ T3638] ======================================================= [ 35.733466][ T3525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.790871][ T3525] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.799766][ T3525] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.808638][ T3525] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.817484][ T3525] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.887901][ T3651] FAULT_INJECTION: forcing a failure. [ 35.887901][ T3651] name failslab, interval 1, probability 0, space 0, times 0 [ 35.900634][ T3651] CPU: 0 UID: 0 PID: 3651 Comm: syz.3.66 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 35.900664][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 35.900680][ T3651] Call Trace: [ 35.900688][ T3651] [ 35.900697][ T3651] __dump_stack+0x1d/0x30 [ 35.900718][ T3651] dump_stack_lvl+0xe8/0x140 [ 35.900736][ T3651] dump_stack+0x15/0x1b [ 35.900764][ T3651] should_fail_ex+0x265/0x280 [ 35.900813][ T3651] should_failslab+0x8c/0xb0 [ 35.900904][ T3651] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 35.900981][ T3651] ? kstrdup_const+0x3e/0x50 [ 35.901024][ T3651] kstrdup+0x3e/0xd0 [ 35.901099][ T3651] kstrdup_const+0x3e/0x50 [ 35.901139][ T3651] __kernfs_new_node+0x3f/0x350 [ 35.901168][ T3651] ? trace_reschedule_exit+0xd/0xc0 [ 35.901247][ T3651] ? sysvec_reschedule_ipi+0x4f/0x70 [ 35.901293][ T3651] ? trace_reschedule_exit+0xd/0xc0 [ 35.901334][ T3651] kernfs_new_node+0xd0/0x140 [ 35.901407][ T3651] kernfs_create_link+0x70/0x130 [ 35.901438][ T3651] sysfs_do_create_link_sd+0x6a/0x100 [ 35.901518][ T3651] sysfs_create_link+0x51/0x70 [ 35.901542][ T3651] __kmem_cache_alias+0x5e/0xe0 [ 35.901568][ T3651] __kmem_cache_create_args+0x95/0x270 [ 35.901654][ T3651] copy_pid_ns+0x2ad/0x550 [ 35.901679][ T3651] create_new_namespaces+0x176/0x410 [ 35.901714][ T3651] unshare_nsproxy_namespaces+0xe8/0x120 [ 35.901823][ T3651] ksys_unshare+0x3d0/0x6d0 [ 35.901934][ T3651] ? ksys_write+0x16e/0x1a0 [ 35.901967][ T3651] __x64_sys_unshare+0x1f/0x30 [ 35.901996][ T3651] x64_sys_call+0x2d4b/0x2fb0 [ 35.902023][ T3651] do_syscall_64+0xd0/0x1a0 [ 35.902066][ T3651] ? clear_bhb_loop+0x25/0x80 [ 35.902091][ T3651] ? clear_bhb_loop+0x25/0x80 [ 35.902111][ T3651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.902209][ T3651] RIP: 0033:0x7f5523c1e969 [ 35.902225][ T3651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.902246][ T3651] RSP: 002b:00007f5522245038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 35.902267][ T3651] RAX: ffffffffffffffda RBX: 00007f5523e46160 RCX: 00007f5523c1e969 [ 35.902285][ T3651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 35.902295][ T3651] RBP: 00007f5522245090 R08: 0000000000000000 R09: 0000000000000000 [ 35.902307][ T3651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.902375][ T3651] R13: 0000000000000000 R14: 00007f5523e46160 R15: 00007ffcb7e091f8 [ 35.902402][ T3651] [ 35.902412][ T3651] SLUB: Unable to add cache alias pid_3 to sysfs [ 36.172353][ T3652] process 'syz.4.63' launched '/dev/fd/3' with NULL argv: empty string added [ 36.193373][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 36.193390][ T29] audit: type=1400 audit(1745697368.464:296): avc: denied { execute_no_trans } for pid=3637 comm="syz.4.63" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.258147][ T29] audit: type=1400 audit(1745697368.534:297): avc: denied { read } for pid=3655 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.286030][ T3650] loop0: detected capacity change from 0 to 2048 [ 36.303484][ T57] bridge_slave_1: left allmulticast mode [ 36.309241][ T57] bridge_slave_1: left promiscuous mode [ 36.315038][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.323241][ T29] audit: type=1400 audit(1745697368.554:298): avc: denied { open } for pid=3655 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.348295][ T29] audit: type=1400 audit(1745697368.554:299): avc: denied { getattr } for pid=3655 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.383246][ T57] bridge_slave_0: left allmulticast mode [ 36.389092][ T57] bridge_slave_0: left promiscuous mode [ 36.394897][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.406690][ T29] audit: type=1400 audit(1745697368.624:300): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.450047][ T3650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.464399][ T29] audit: type=1400 audit(1745697368.714:301): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 36.492756][ T3650] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.509689][ T29] audit: type=1326 audit(1745697368.784:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9932ee969 code=0x7ffc0000 [ 36.533101][ T29] audit: type=1326 audit(1745697368.784:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe9932ee969 code=0x7ffc0000 [ 36.556308][ T29] audit: type=1326 audit(1745697368.784:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3663 comm="syz.4.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9932ee969 code=0x7ffc0000 [ 36.630460][ T29] audit: type=1400 audit(1745697368.904:305): avc: denied { write } for pid=3654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.702432][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.718678][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.737152][ T57] bond0 (unregistering): Released all slaves [ 36.739027][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.813322][ T57] hsr_slave_0: left promiscuous mode [ 36.828625][ T57] hsr_slave_1: left promiscuous mode [ 36.835583][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.843128][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.853157][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.860678][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.879040][ T57] veth1_macvtap: left promiscuous mode [ 36.883969][ T3676] serio: Serial port ptm0 [ 36.889020][ T57] veth0_macvtap: left promiscuous mode [ 36.906359][ T57] veth1_vlan: left promiscuous mode [ 36.912286][ T3688] loop4: detected capacity change from 0 to 512 [ 36.922495][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 36.932599][ T57] veth0_vlan: left promiscuous mode [ 36.938832][ T3688] EXT4-fs: Ignoring removed oldalloc option [ 36.998527][ T3688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0182] [ 37.006900][ T3688] System zones: 1-12 [ 37.011163][ T3688] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.74: Parent and EA inode have the same ino 15 [ 37.025145][ T3688] EXT4-fs (loop4): Remounting filesystem read-only [ 37.032019][ T3688] EXT4-fs (loop4): 1 orphan inode deleted [ 37.035725][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 37.038908][ T3688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.060709][ T3688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.070316][ T57] team0 (unregistering): Port device team_slave_1 removed [ 37.084187][ T57] team0 (unregistering): Port device team_slave_0 removed [ 37.146728][ T3691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.172814][ T3691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.198085][ T3701] loop5: detected capacity change from 0 to 4096 [ 37.243430][ T3701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.260232][ T3709] bridge0: port 3(syz_tun) entered blocking state [ 37.264187][ T337] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:6: bg 0: block 345: padding at end of block bitmap is not set [ 37.266765][ T3709] bridge0: port 3(syz_tun) entered disabled state [ 37.266915][ T3709] syz_tun: entered allmulticast mode [ 37.283399][ T337] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 37.294862][ T3709] syz_tun: entered promiscuous mode [ 37.306005][ T337] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.306005][ T337] [ 37.354973][ T3709] bridge0: port 3(syz_tun) entered blocking state [ 37.361609][ T3709] bridge0: port 3(syz_tun) entered forwarding state [ 37.471143][ T144] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 37.473112][ T3725] loop4: detected capacity change from 0 to 1024 [ 37.484037][ T144] EXT4-fs (loop0): This should not happen!! Data will be lost [ 37.484037][ T144] [ 37.500122][ T144] EXT4-fs (loop0): Total free blocks count 0 [ 37.506147][ T144] EXT4-fs (loop0): Free/Dirty block details [ 37.512072][ T144] EXT4-fs (loop0): free_blocks=0 [ 37.512216][ T3725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.517037][ T144] EXT4-fs (loop0): dirty_blocks=2048 [ 37.528966][ T144] EXT4-fs (loop0): Block reservation details [ 37.586031][ T3725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.760436][ T3728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.794653][ T3728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.810838][ T3525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.827491][ T3728] loop2: detected capacity change from 0 to 512 [ 37.845795][ T3728] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.874331][ T3728] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.83: bad orphan inode 13 [ 37.931642][ T3757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 37.942170][ T3728] ext4_test_bit(bit=12, block=18) = 1 [ 37.947694][ T3728] is_bad_inode(inode)=0 [ 37.951884][ T3728] NEXT_ORPHAN(inode)=2130706432 [ 37.956817][ T3728] max_ino=32 [ 37.960107][ T3728] i_nlink=1 [ 37.974947][ T3757] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 37.990612][ T3725] EXT4-fs (loop4): shut down requested (0) [ 38.009523][ T3728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.031586][ T3775] FAULT_INJECTION: forcing a failure. [ 38.031586][ T3775] name failslab, interval 1, probability 0, space 0, times 0 [ 38.044487][ T3775] CPU: 1 UID: 0 PID: 3775 Comm: syz.0.91 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 38.044515][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 38.044530][ T3775] Call Trace: [ 38.044538][ T3775] [ 38.044547][ T3775] __dump_stack+0x1d/0x30 [ 38.044572][ T3775] dump_stack_lvl+0xe8/0x140 [ 38.044648][ T3775] dump_stack+0x15/0x1b [ 38.044668][ T3775] should_fail_ex+0x265/0x280 [ 38.044707][ T3775] should_failslab+0x8c/0xb0 [ 38.044754][ T3775] kmem_cache_alloc_node_noprof+0x57/0x320 [ 38.044880][ T3775] ? __alloc_skb+0x101/0x320 [ 38.044909][ T3775] __alloc_skb+0x101/0x320 [ 38.044999][ T3775] alloc_skb_with_frags+0x7d/0x470 [ 38.045106][ T3775] ? selinux_file_open+0x31c/0x370 [ 38.045145][ T3775] ? __rcu_read_unlock+0x4f/0x70 [ 38.045168][ T3775] sock_alloc_send_pskb+0x43a/0x4f0 [ 38.045191][ T3775] ? terminate_walk+0x27f/0x2a0 [ 38.045352][ T3775] tun_get_user+0x8c0/0x24d0 [ 38.045382][ T3775] ? ref_tracker_alloc+0x1f2/0x2f0 [ 38.045439][ T3775] ? avc_policy_seqno+0x15/0x30 [ 38.045479][ T3775] tun_chr_write_iter+0x15e/0x210 [ 38.045503][ T3775] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 38.045592][ T3775] vfs_write+0x49d/0x8d0 [ 38.045640][ T3775] ksys_write+0xda/0x1a0 [ 38.045699][ T3775] __x64_sys_write+0x40/0x50 [ 38.045732][ T3775] x64_sys_call+0x2cdd/0x2fb0 [ 38.045828][ T3775] do_syscall_64+0xd0/0x1a0 [ 38.045900][ T3775] ? clear_bhb_loop+0x25/0x80 [ 38.045927][ T3775] ? clear_bhb_loop+0x25/0x80 [ 38.045954][ T3775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.046043][ T3775] RIP: 0033:0x7f291133d41f [ 38.046075][ T3775] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 38.046096][ T3775] RSP: 002b:00007f290f9a7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 38.046120][ T3775] RAX: ffffffffffffffda RBX: 00007f2911565fa0 RCX: 00007f291133d41f [ 38.046133][ T3775] RDX: 000000000000fdef RSI: 0000200000000180 RDI: 00000000000000c8 [ 38.046146][ T3775] RBP: 00007f290f9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 38.046159][ T3775] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 38.046173][ T3775] R13: 0000000000000000 R14: 00007f2911565fa0 R15: 00007ffcb0a2d8f8 [ 38.046251][ T3775] [ 38.328507][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.359043][ T3787] loop3: detected capacity change from 0 to 512 [ 38.393965][ T3787] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.413610][ T3791] bridge0: port 3(syz_tun) entered blocking state [ 38.420267][ T3791] bridge0: port 3(syz_tun) entered disabled state [ 38.443428][ T3791] syz_tun: entered allmulticast mode [ 38.448297][ T3787] EXT4-fs (loop3): 1 truncate cleaned up [ 38.456401][ T3787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.461465][ T3791] syz_tun: entered promiscuous mode [ 38.474134][ T3791] bridge0: port 3(syz_tun) entered blocking state [ 38.480656][ T3791] bridge0: port 3(syz_tun) entered forwarding state [ 38.503865][ T3797] loop5: detected capacity change from 0 to 4096 [ 38.557069][ T3797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.747596][ T3831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.101'. [ 38.777637][ T3831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.101'. [ 38.856860][ T3525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.917568][ T3728] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.968885][ T3857] loop2: detected capacity change from 0 to 1024 [ 38.984771][ T3857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.009637][ T3857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.069758][ T3853] bond1: entered promiscuous mode [ 39.076085][ T3853] bond1: entered allmulticast mode [ 39.083505][ T3853] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.102089][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.147566][ T3853] bond1 (unregistering): Released all slaves [ 39.213221][ T3858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.103'. [ 39.222197][ T3858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.103'. [ 39.222358][ T3872] loop3: detected capacity change from 0 to 512 [ 39.231142][ T3858] netlink: 12 bytes leftover after parsing attributes in process `syz.5.103'. [ 39.237540][ T3858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.103'. [ 39.255537][ T3858] netlink: 'syz.5.103': attribute type 6 has an invalid length. [ 39.267806][ T3873] EXT4-fs (loop2): shut down requested (0) [ 39.297979][ T3872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 39.316110][ T3872] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.335545][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.368934][ T3880] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 39.385088][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 39.424824][ T3883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.112'. [ 39.454807][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 39.496933][ T3890] loop0: detected capacity change from 0 to 4096 [ 39.526093][ T3901] netlink: 'syz.2.115': attribute type 7 has an invalid length. [ 39.547187][ T3890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.601200][ T3906] loop3: detected capacity change from 0 to 512 [ 39.608392][ T3906] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.643280][ T3915] netlink: 'syz.4.118': attribute type 13 has an invalid length. [ 39.674835][ T3906] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 39.683047][ T3906] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.689781][ T3906] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.723532][ T3906] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 39.736425][ T3906] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.114: bg 0: block 40: padding at end of block bitmap is not set [ 39.752964][ T3906] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 39.771540][ T3906] EXT4-fs (loop3): 1 truncate cleaned up [ 39.777841][ T3906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.810153][ T3906] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.114: corrupted xattr block 31: invalid header [ 39.845457][ T3906] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 39.861898][ T3906] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.114: corrupted xattr block 31: invalid header [ 39.877578][ T3931] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #16: comm syz.3.114: corrupted xattr block 31: invalid header [ 39.892365][ T3906] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 39.932557][ T3931] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=16 [ 39.945609][ T3935] netlink: 'syz.3.114': attribute type 10 has an invalid length. [ 39.963769][ T3906] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.114: bad symlink. [ 39.981831][ T3931] EXT4-fs error (device loop3): ext4_get_link:106: inode #16: comm syz.3.114: bad symlink. [ 40.002889][ T3935] batman_adv: batadv0: Adding interface: team0 [ 40.009144][ T3935] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.034323][ T3935] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 40.104081][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.236150][ T3944] loop3: detected capacity change from 0 to 512 [ 40.264308][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.276715][ T3944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.299693][ T3944] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.333758][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.510363][ T3970] loop4: detected capacity change from 0 to 512 [ 40.517639][ T3970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.530228][ T3970] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.535677][ T3976] loop3: detected capacity change from 0 to 2048 [ 40.583678][ T3970] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 40.586187][ T3983] loop2: detected capacity change from 0 to 512 [ 40.598693][ T3970] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 40.622042][ T3980] loop0: detected capacity change from 0 to 4096 [ 40.637621][ T3970] EXT4-fs (loop4): 1 truncate cleaned up [ 40.646612][ T3970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.666653][ T3983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 40.708572][ T3980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.726244][ T3983] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.749219][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.786260][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 40.825756][ T3998] FAULT_INJECTION: forcing a failure. [ 40.825756][ T3998] name failslab, interval 1, probability 0, space 0, times 0 [ 40.838554][ T3998] CPU: 1 UID: 0 PID: 3998 Comm: syz.4.143 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 40.838597][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.838609][ T3998] Call Trace: [ 40.838614][ T3998] [ 40.838629][ T3998] __dump_stack+0x1d/0x30 [ 40.838709][ T3998] dump_stack_lvl+0xe8/0x140 [ 40.838733][ T3998] dump_stack+0x15/0x1b [ 40.838754][ T3998] should_fail_ex+0x265/0x280 [ 40.838787][ T3998] ? register_netdevice+0x1e8/0xf10 [ 40.838866][ T3998] should_failslab+0x8c/0xb0 [ 40.838903][ T3998] __kmalloc_cache_noprof+0x4c/0x320 [ 40.838927][ T3998] ? rb_erase+0x206/0x680 [ 40.838965][ T3998] register_netdevice+0x1e8/0xf10 [ 40.838995][ T3998] ? dev_addr_mod+0x1a4/0x1d0 [ 40.839089][ T3998] tun_set_iff+0x5f1/0x890 [ 40.839115][ T3998] __tun_chr_ioctl+0x5f0/0x1490 [ 40.839146][ T3998] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 40.839251][ T3998] tun_chr_ioctl+0x27/0x40 [ 40.839278][ T3998] __se_sys_ioctl+0xcb/0x140 [ 40.839300][ T3998] __x64_sys_ioctl+0x43/0x50 [ 40.839318][ T3998] x64_sys_call+0x19a8/0x2fb0 [ 40.839337][ T3998] do_syscall_64+0xd0/0x1a0 [ 40.839427][ T3998] ? clear_bhb_loop+0x25/0x80 [ 40.839448][ T3998] ? clear_bhb_loop+0x25/0x80 [ 40.839468][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.839491][ T3998] RIP: 0033:0x7fe9932ee969 [ 40.839532][ T3998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.839554][ T3998] RSP: 002b:00007fe991957038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.839577][ T3998] RAX: ffffffffffffffda RBX: 00007fe993515fa0 RCX: 00007fe9932ee969 [ 40.839592][ T3998] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000006 [ 40.839606][ T3998] RBP: 00007fe991957090 R08: 0000000000000000 R09: 0000000000000000 [ 40.839621][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.839707][ T3998] R13: 0000000000000000 R14: 00007fe993515fa0 R15: 00007ffd291e00d8 [ 40.839732][ T3998] [ 41.209706][ T4005] loop3: detected capacity change from 0 to 8192 [ 41.216708][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 41.216721][ T29] audit: type=1400 audit(1745697373.504:535): avc: denied { write } for pid=4018 comm=98B0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.242219][ T4015] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 41.250484][ T4015] vhci_hcd: default hub control req: 0531 v0000 i0000 l31125 [ 41.272040][ T4019] loop4: detected capacity change from 0 to 1024 [ 41.291778][ T4019] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 41.312210][ T29] audit: type=1326 audit(1745697373.534:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.5.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b757e969 code=0x7ffc0000 [ 41.336191][ T29] audit: type=1326 audit(1745697373.534:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.5.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b757e969 code=0x7ffc0000 [ 41.359548][ T29] audit: type=1326 audit(1745697373.534:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.5.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f13b757e969 code=0x7ffc0000 [ 41.364661][ T4019] JBD2: no valid journal superblock found [ 41.382712][ T29] audit: type=1326 audit(1745697373.534:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.5.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13b757e969 code=0x7ffc0000 [ 41.394095][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.411891][ T4019] EXT4-fs (loop4): Could not load journal inode [ 41.433630][ T4023] loop5: detected capacity change from 0 to 512 [ 41.476436][ T4023] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 41.483974][ T29] audit: type=1400 audit(1745697373.754:540): avc: denied { read write } for pid=4018 comm=98B0 name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.514793][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x1 [ 41.522700][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.530616][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.534697][ T4023] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.538429][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.556615][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.564436][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.572251][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.580062][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.587847][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.595636][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.603405][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.611248][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.619024][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0 [ 41.619455][ T4033] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 41.626793][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: item fetching failed at offset 20/43 [ 41.656666][ T29] audit: type=1400 audit(1745697373.774:541): avc: denied { connect } for pid=4024 comm="syz.2.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.676226][ T29] audit: type=1400 audit(1745697373.784:542): avc: denied { open } for pid=4018 comm=98B0 path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 41.698907][ T29] audit: type=1400 audit(1745697373.784:543): avc: denied { write } for pid=4024 comm="syz.2.157" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.721620][ T29] audit: type=1400 audit(1745697373.834:544): avc: denied { relabelfrom } for pid=4028 comm="syz.0.155" name="" dev="pipefs" ino=6383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 41.754910][ T1048] hid-generic 0000:007F:FFFFFFFE.0001: probe with driver hid-generic failed with error -22 [ 41.760633][ T3525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 41.782994][ T4039] loop3: detected capacity change from 0 to 1024 [ 41.792968][ T4039] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.802362][ T4039] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.813359][ T4039] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 41.842866][ T4039] JBD2: no valid journal superblock found [ 41.848686][ T4039] EXT4-fs (loop3): Could not load journal inode [ 42.097906][ T4068] loop2: detected capacity change from 0 to 512 [ 42.107139][ T4068] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.117683][ T4064] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 42.136679][ T4068] EXT4-fs (loop2): 1 truncate cleaned up [ 42.142935][ T4068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.172887][ T4064] syz.4.172 (4064) used greatest stack depth: 10272 bytes left [ 42.201169][ T4074] bridge0: port 3(geneve0) entered blocking state [ 42.207817][ T4074] bridge0: port 3(geneve0) entered disabled state [ 42.218623][ T4074] geneve0: entered allmulticast mode [ 42.225268][ T4074] geneve0: entered promiscuous mode [ 42.230758][ T4074] bridge0: port 3(geneve0) entered blocking state [ 42.237311][ T4074] bridge0: port 3(geneve0) entered forwarding state [ 42.302900][ T3380] hid-generic 0000:0004:000C.0002: unknown main item tag 0x0 [ 42.310473][ T3380] hid-generic 0000:0004:000C.0002: unknown main item tag 0x0 [ 42.318006][ T3380] hid-generic 0000:0004:000C.0002: unknown main item tag 0x0 [ 42.335075][ T4083] ip6tnl1: entered promiscuous mode [ 42.340341][ T4083] ip6tnl1: entered allmulticast mode [ 42.358080][ T4068] infiniband syz!: set active [ 42.362887][ T4068] infiniband syz!: added team_slave_0 [ 42.369758][ T3380] hid-generic 0000:0004:000C.0002: hidraw0: HID v0.03 Device [syz1] on syz1 [ 42.407308][ T4068] RDS/IB: syz!: added [ 42.411495][ T4068] smc: adding ib device syz! with port count 1 [ 42.417986][ T4068] smc: ib device syz! port 1 has pnetid [ 42.454517][ T4096] loop4: detected capacity change from 0 to 512 [ 42.486679][ T4096] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.510102][ T4096] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.515810][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 42.580517][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.731232][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.747506][ T4113] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 42.828745][ T4123] bridge0: port 4(geneve0) entered blocking state [ 42.835424][ T4123] bridge0: port 4(geneve0) entered disabled state [ 42.844997][ T4123] geneve0: entered allmulticast mode [ 42.851628][ T4123] geneve0: entered promiscuous mode [ 42.857315][ T4123] bridge0: port 4(geneve0) entered blocking state [ 42.863887][ T4123] bridge0: port 4(geneve0) entered forwarding state [ 42.984890][ T4141] usb usb8: usbfs: process 4141 (syz.4.196) did not claim interface 0 before use [ 43.004090][ T4147] loop2: detected capacity change from 0 to 164 [ 43.099875][ T4147] syz.2.197 (4147) used greatest stack depth: 9808 bytes left [ 43.122232][ T4159] bridge0: port 4(geneve0) entered blocking state [ 43.128993][ T4159] bridge0: port 4(geneve0) entered disabled state [ 43.135851][ T4159] geneve0: entered allmulticast mode [ 43.144179][ T4161] loop5: detected capacity change from 0 to 512 [ 43.153463][ T4159] geneve0: entered promiscuous mode [ 43.164390][ T4159] bridge0: port 4(geneve0) entered blocking state [ 43.170907][ T4159] bridge0: port 4(geneve0) entered forwarding state [ 43.210172][ T4161] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.230897][ T4161] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.242486][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 43.279795][ T4171] loop4: detected capacity change from 0 to 512 [ 43.287830][ T4171] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 43.296086][ T4171] EXT4-fs (loop4): Invalid default hash set in the superblock [ 43.324126][ T3525] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 43.463989][ T4181] loop4: detected capacity change from 0 to 4096 [ 43.503307][ T4181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.524149][ T4186] loop2: detected capacity change from 0 to 2048 [ 43.717410][ T3464] loop2: p1 < > p4 [ 43.734578][ T4202] __nla_validate_parse: 12 callbacks suppressed [ 43.734595][ T4202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 43.749859][ T4202] netlink: 64 bytes leftover after parsing attributes in process `syz.3.213'. [ 43.758747][ T4202] netlink: 56 bytes leftover after parsing attributes in process `syz.3.213'. [ 43.769318][ T3464] loop2: p4 size 8388608 extends beyond EOD, truncated [ 43.980941][ T4202] loop3: detected capacity change from 0 to 512 [ 44.131553][ T4186] loop2: p1 < > p4 [ 44.141888][ T4186] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.559446][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.736846][ T4254] loop4: detected capacity change from 0 to 2048 [ 44.927849][ T4257] loop4: detected capacity change from 0 to 512 [ 45.063993][ T4266] Illegal XDP return value 310648832 on prog (id 168) dev N/A, expect packet loss! [ 45.151989][ T4278] FAULT_INJECTION: forcing a failure. [ 45.151989][ T4278] name failslab, interval 1, probability 0, space 0, times 0 [ 45.156989][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.165579][ T4278] CPU: 1 UID: 0 PID: 4278 Comm: syz.2.232 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 45.165689][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.165769][ T4278] Call Trace: [ 45.165776][ T4278] [ 45.165786][ T4278] __dump_stack+0x1d/0x30 [ 45.165818][ T4278] dump_stack_lvl+0xe8/0x140 [ 45.165844][ T4278] dump_stack+0x15/0x1b [ 45.165865][ T4278] should_fail_ex+0x265/0x280 [ 45.165918][ T4278] should_failslab+0x8c/0xb0 [ 45.165956][ T4278] kmem_cache_alloc_noprof+0x50/0x310 [ 45.166087][ T4278] ? __anon_vma_prepare+0x70/0x2f0 [ 45.166122][ T4278] __anon_vma_prepare+0x70/0x2f0 [ 45.166155][ T4278] do_wp_page+0x17fa/0x23e0 [ 45.166235][ T4278] ? __lruvec_stat_mod_folio+0xd6/0x120 [ 45.166278][ T4278] ? __rcu_read_lock+0x37/0x50 [ 45.166319][ T4278] handle_mm_fault+0x6dc/0x2ae0 [ 45.166409][ T4278] ? mas_walk+0xf2/0x120 [ 45.166441][ T4278] do_user_addr_fault+0x636/0x1090 [ 45.166492][ T4278] ? fpregs_assert_state_consistent+0x84/0xa0 [ 45.166531][ T4278] exc_page_fault+0x54/0xc0 [ 45.166573][ T4278] asm_exc_page_fault+0x26/0x30 [ 45.166599][ T4278] RIP: 0033:0x7f55ce620cc3 [ 45.166618][ T4278] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 45.166688][ T4278] RSP: 002b:00007f55ccdc64a0 EFLAGS: 00010202 [ 45.166777][ T4278] RAX: 0000000000000400 RBX: 00007f55ccdc6540 RCX: 00007f55c49a7000 [ 45.166793][ T4278] RDX: 00007f55ccdc66e0 RSI: 0000000000000000 RDI: 00007f55ccdc65e0 [ 45.166808][ T4278] RBP: 00000000000000f9 R08: 0000000000000008 R09: 00000000000000a9 [ 45.166824][ T4278] R10: 00000000000000c0 R11: 00007f55ccdc6540 R12: 0000000000000001 [ 45.166839][ T4278] R13: 00007f55ce7fbfc0 R14: 0000000000000020 R15: 00007f55ccdc65e0 [ 45.166864][ T4278] [ 45.166878][ T4278] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 45.176939][ C1] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 45.381831][ T4281] FAULT_INJECTION: forcing a failure. [ 45.381831][ T4281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.392303][ T4278] loop2: detected capacity change from 0 to 2048 [ 45.395285][ T4281] CPU: 0 UID: 0 PID: 4281 Comm: syz.0.230 Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 45.395356][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 45.395391][ T4281] Call Trace: [ 45.395400][ T4281] [ 45.395409][ T4281] __dump_stack+0x1d/0x30 [ 45.395518][ T4281] dump_stack_lvl+0xe8/0x140 [ 45.395551][ T4281] dump_stack+0x15/0x1b [ 45.395572][ T4281] should_fail_ex+0x265/0x280 [ 45.395614][ T4281] should_fail+0xb/0x20 [ 45.395729][ T4281] should_fail_usercopy+0x1a/0x20 [ 45.395753][ T4281] _copy_from_iter+0xcf/0xdd0 [ 45.395778][ T4281] ? _copy_from_iter+0x16d/0xdd0 [ 45.395817][ T4281] copy_page_from_iter+0x15a/0x290 [ 45.395844][ T4281] skb_copy_datagram_from_iter+0x232/0x490 [ 45.395878][ T4281] tun_get_user+0x10b6/0x24d0 [ 45.395916][ T4281] ? ref_tracker_alloc+0x1f2/0x2f0 [ 45.396002][ T4281] ? avc_policy_seqno+0x15/0x30 [ 45.396140][ T4281] tun_chr_write_iter+0x15e/0x210 [ 45.396171][ T4281] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 45.396198][ T4281] vfs_write+0x49d/0x8d0 [ 45.396325][ T4281] ksys_write+0xda/0x1a0 [ 45.396439][ T4281] __x64_sys_write+0x40/0x50 [ 45.396473][ T4281] x64_sys_call+0x2cdd/0x2fb0 [ 45.396502][ T4281] do_syscall_64+0xd0/0x1a0 [ 45.396616][ T4281] ? clear_bhb_loop+0x25/0x80 [ 45.396704][ T4281] ? clear_bhb_loop+0x25/0x80 [ 45.396732][ T4281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.396758][ T4281] RIP: 0033:0x7f291133e969 [ 45.396778][ T4281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.396800][ T4281] RSP: 002b:00007f290f986038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 45.396898][ T4281] RAX: ffffffffffffffda RBX: 00007f2911566080 RCX: 00007f291133e969 [ 45.396914][ T4281] RDX: 000000000000fdef RSI: 00002000000003c0 RDI: 0000000000000003 [ 45.396929][ T4281] RBP: 00007f290f986090 R08: 0000000000000000 R09: 0000000000000000 [ 45.396944][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 45.396959][ T4281] R13: 0000000000000000 R14: 00007f2911566080 R15: 00007ffcb0a2d8f8 [ 45.396985][ T4281] [ 45.418608][ T4285] loop4: detected capacity change from 0 to 128 [ 45.466636][ T4278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.473427][ T4285] vfat: Unknown parameter '„' [ 45.657874][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.785275][ T4305] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 45.803009][ T4302] futex_wake_op: syz.0.240 tries to shift op by 32; fix this program [ 45.853112][ T4313] loop2: detected capacity change from 0 to 1024 [ 45.862914][ T4313] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.869581][ T4313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.884674][ T3464] ================================================================== [ 45.892774][ T3464] BUG: KCSAN: data-race in delete_from_page_cache_batch / folio_mapping [ 45.901124][ T3464] [ 45.903445][ T3464] write to 0xffffea0004399ed8 of 8 bytes by task 4313 on cpu 1: [ 45.911072][ T3464] delete_from_page_cache_batch+0x2f6/0x6f0 [ 45.916970][ T3464] truncate_inode_pages_range+0x1b8/0x690 [ 45.922724][ T3464] truncate_inode_pages+0x24/0x30 [ 45.927764][ T3464] set_blocksize+0x259/0x310 [ 45.932373][ T3464] sb_min_blocksize+0xb8/0x140 [ 45.937144][ T3464] ext4_fill_super+0x390/0x34e0 [ 45.942002][ T3464] get_tree_bdev_flags+0x28e/0x300 [ 45.947117][ T3464] get_tree_bdev+0x1f/0x30 [ 45.951537][ T3464] ext4_get_tree+0x1c/0x30 [ 45.955960][ T3464] vfs_get_tree+0x54/0x1d0 [ 45.960393][ T3464] do_new_mount+0x207/0x680 [ 45.964900][ T3464] path_mount+0x4a4/0xb20 [ 45.969233][ T3464] __se_sys_mount+0x28f/0x2e0 [ 45.974002][ T3464] __x64_sys_mount+0x67/0x80 [ 45.978596][ T3464] x64_sys_call+0xd36/0x2fb0 [ 45.983195][ T3464] do_syscall_64+0xd0/0x1a0 [ 45.987722][ T3464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.993616][ T3464] [ 45.995936][ T3464] read to 0xffffea0004399ed8 of 8 bytes by task 3464 on cpu 0: [ 46.003494][ T3464] folio_mapping+0xa1/0x120 [ 46.008000][ T3464] lru_add+0x80/0x430 [ 46.011987][ T3464] folio_batch_move_lru+0x174/0x230 [ 46.017979][ T3464] lru_add_drain_cpu+0x77/0x250 [ 46.022836][ T3464] __folio_batch_release+0x44/0xb0 [ 46.027956][ T3464] shmem_undo_range+0x344/0xa80 [ 46.032807][ T3464] shmem_evict_inode+0x134/0x520 [ 46.037776][ T3464] evict+0x2e0/0x550 [ 46.041670][ T3464] iput+0x447/0x5b0 [ 46.045481][ T3464] dentry_unlink_inode+0x24f/0x260 [ 46.050593][ T3464] __dentry_kill+0x18d/0x4b0 [ 46.055188][ T3464] dput+0x5e/0xd0 [ 46.058829][ T3464] do_renameat2+0x479/0xab0 [ 46.063338][ T3464] __x64_sys_rename+0x58/0x70 [ 46.068019][ T3464] x64_sys_call+0x2aee/0x2fb0 [ 46.072699][ T3464] do_syscall_64+0xd0/0x1a0 [ 46.077236][ T3464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.083128][ T3464] [ 46.085445][ T3464] value changed: 0xffff888100631198 -> 0x0000000000000000 [ 46.092546][ T3464] [ 46.094865][ T3464] Reported by Kernel Concurrency Sanitizer on: [ 46.101011][ T3464] CPU: 0 UID: 0 PID: 3464 Comm: udevd Not tainted 6.15.0-rc3-syzkaller-00283-gf1a3944c860b #0 PREEMPT(voluntary) [ 46.112988][ T3464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.123043][ T3464] ================================================================== [ 46.140933][ T4313] EXT4-fs: Mount option(s) incompatible with ext3