last executing test programs: 6.971773447s ago: executing program 0 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000180)=0x62, 0xf92) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x9}, 0x14) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x6, 0xa}, {0xd, 0xffe0}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20048054) 5.261129187s ago: executing program 2 (id=202): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00000b5000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x4e0, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e24], [0x4e24, 0x4e22], [0x8, 0x0, 0xa94, 0x1000, 0x3, 0x83fa, 0x3ff, 0xe, 0x1, 0x2, 0x3, 0x9e, 0x945, 0x2, 0x1d3, 0x7fff, 0x7, 0x8, 0x9, 0x7, 0x81, 0x4b5, 0xd, 0x8, 0x1, 0x3, 0x0, 0x8908, 0x7fff, 0xfff, 0x5, 0x200, 0xf1, 0x1000, 0x33, 0x2, 0x8, 0x1, 0x4, 0x6, 0x101000, 0x8, 0x3, 0x101, 0x3, 0x0, 0xc0000000, 0x0, 0x18000000, 0x8, 0x2bb, 0x1000, 0x5, 0x80000000, 0x5a2, 0x4, 0xa4, 0x1, 0x4, 0xff, 0x8, 0x5, 0x3, 0x4], 0x4, [{0x7, 0xe, 0x2}, {0xff, 0x77, 0x8}, {0x2, 0x8d, 0x3}, {0xfe, 0x7f, 0x5}], 0x3, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 5.208881292s ago: executing program 2 (id=204): r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff008500000001ffe6009500"/65], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000280)=r2}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r3}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000004a81294fb264d9eb77d8e3f1efec16eb1d6d4dd3a4c00b24199f7e6a4bf0839963a880f8521d55d9f5e03959e72ef619aa8e29f4c0ec03ba473906af20c2ec87bbac52ad83e9d1eb0de7bc562aa5a2d6f602b7f589f803d3f3247764a96f51abf51875ef65a924541241e9c3f3483db4661b91e7b3d3868c050752e0b986476281393cc8fa79ee82ecacb9244027aa7de400968e782871098fbb1db8068d772d03929b2ff9c6503733e718ce92d2c6b17ed898c8492018ab0f4e9f663d6c5addc0ac91ec74f30f145f6c8a3e002710ed9edf5ea686a31e8c5c1fb11dd5"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095", @ANYRES32=r1, @ANYRESDEC, @ANYRESHEX=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000380)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = syz_io_uring_setup(0x6981, &(0x7f00000000c0)={0x0, 0xf96d, 0x800, 0x0, 0x1f4}, &(0x7f0000000680)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$igmp6(0xa, 0x3, 0x2) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r12}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="b4010000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fedbdf25050000002000018008000100", @ANYRES32=r12, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x80}, 0x40000) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0xe8}, 0x0, 0x24040092, 0x1}) io_uring_enter(r6, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r13 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r13, 0x4, 0x42000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) r14 = socket$inet6(0xa, 0x800000000000002, 0x0) r15 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mknodat$loop(r15, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x310, 0x0) sendto$inet6(r14, 0x0, 0x0, 0x4004800, &(0x7f0000000180)={0xa, 0x4e22, 0x10003, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r16, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.103531493s ago: executing program 0 (id=208): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = fsmount(r0, 0x1, 0x0) fchdir(r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300"/16], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r4}, 0x18) 5.02897774s ago: executing program 0 (id=210): r0 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0xbc3}, 0x18) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 4.455569087s ago: executing program 2 (id=216): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 4.409178862s ago: executing program 2 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1, 0x0, 0x2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x3, &(0x7f0000000180)=0x62, 0xf92) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x9}, 0x14) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x6, 0xa}, {0xd, 0xffe0}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040040}, 0x20048054) 4.143018178s ago: executing program 0 (id=227): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$security_ima(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000200), &(0x7f0000000240)=ANY=[], 0x700, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xe}, 0x8804, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="702541e900000000006b09743b63fceb88110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = gettid() tkill(r2, 0x1) rt_sigtimedwait(&(0x7f00000010c0)={[0x401]}, 0x0, 0x0, 0x8) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x2, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "2313a3101166d6c856214c013c019043"}, @md5sig={0x13, 0x12, "0945e50b171770263892a9d0853ede9d"}]}}}}}}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}}) 3.731913919s ago: executing program 0 (id=239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000200)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, r1) 3.705482822s ago: executing program 0 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x4800}, 0x0) read(r0, 0xfffffffffffffffe, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r7}, 0x10) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010104, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x20, 0x0, [{0x0, 0x8, "5e000000ff00"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0xd, "9606053d0006ff00800000"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) 3.301780562s ago: executing program 3 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@empty, @dev, 0x0}, &(0x7f0000000080)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = syz_io_uring_setup(0xff9, &(0x7f0000000400)={0x0, 0xc459, 0x8, 0x2, 0x398}, &(0x7f0000000040)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) r7 = socket$key(0xf, 0x3, 0x2) accept4(r7, 0x0, 0x0, 0x80000) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_setup(0x9, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$qrtrtun(r8, &(0x7f0000000340)="8f52eb24cc", 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1813000007000000eab4040000000000001000000000", @ANYRES32, @ANYBLOB="827400"/19, @ANYRES32, @ANYRES32], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0xc}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r10, 0x58, &(0x7f00000002c0)}, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2a}, r3}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) epoll_create1(0x0) 2.382894204s ago: executing program 4 (id=254): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KDMKTONE(r0, 0x4b30, 0x7000000000000000) (async) ioctl$KDMKTONE(r0, 0x4b30, 0x7000000000000000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0xfffffffd, 0x1, 0x7, 0x1, 0xaafb, 0x7ff}) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x5944, 0xffff, 0x26, 0x5}) (async) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x5944, 0xffff, 0x26, 0x5}) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, 0x0, 0x300, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc081}, 0x4000081) r2 = getpid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7b6, 0x1, 0x3, 0xffffffff, 0x8, r2}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xa57d}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x4c}}, 0x8840) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r5, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'syz_tun\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000580)={0x0, 0xea60}, 0x10) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000580)={0x0, 0xea60}, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@loopback, @in=@private}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000840)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000740)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000840)=0xe8) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x2, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x60000000}}, {@access_uid={'access', 0x3d, 0xee00}}, {@cachetag={'cachetag', 0x3d, 'a'}}], [{@dont_measure}, {@subj_type={'subj_type', 0x3d, 'l2tp\x00'}}, {@euid_gt={'euid>', r6}}]}}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xed180557c4afd808}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x12c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x78}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x5}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_DATA={0xd1, 0xc5, "33d958c7f3ed001060de4594a496a44dc32527c059911d2d5521ad2c421b788e966ec79b4cb2e1a44e554cdddf8664a72acd1bfd6762415f68fc84056e931407dcc0b25efb8de7f7c4cc071053fd142b7c4a9509b062aa32470663980f865f28d29dbc019119db052d432aec38e77ff46ccb1402b2d9b781b1884f3a348208bd7e146aa9386d2cf47d5bb27b18d5354c1e65b76aaeb1a62038af100a51dcf91425076acff91193715485aa2f3b5de6cbd5ec8e85bf3f1eca44cfa114f8fa7346440a1ad9668bcafb9245922efa"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) signalfd4(r1, &(0x7f0000000b80)={[0x2]}, 0x8, 0x0) sendto$inet(r3, &(0x7f0000000bc0)="567c141195b99b90d40f5f5b9f57465563d6fc6976e39b2aca65b6909379b3d7c9715b1bf7bab1d76c833029e5f6833bb97686503852419925d41cbbd3350a25208a06332da81a84ab422c42e713065611721fb814e86014159058775a2a07723438ec418099f575783df1fefc75b7416b5398683044e55eeb2e2b11bb", 0x7d, 0x8004, &(0x7f0000000c40)={0x2, 0x4e22, @multicast2}, 0x10) (async) sendto$inet(r3, &(0x7f0000000bc0)="567c141195b99b90d40f5f5b9f57465563d6fc6976e39b2aca65b6909379b3d7c9715b1bf7bab1d76c833029e5f6833bb97686503852419925d41cbbd3350a25208a06332da81a84ab422c42e713065611721fb814e86014159058775a2a07723438ec418099f575783df1fefc75b7416b5398683044e55eeb2e2b11bb", 0x7d, 0x8004, &(0x7f0000000c40)={0x2, 0x4e22, @multicast2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d40), r8) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb4, r10, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) (async) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xb4, r10, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20040840}, 0x20000000) socket$kcm(0x29, 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000012c0)={0x0, 0x1, 0x17, 0x0, 0x9, &(0x7f0000000ec0)="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"}) recvfrom$rxrpc(r9, &(0x7f0000001300)=""/134, 0x86, 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004801) 2.3183907s ago: executing program 3 (id=255): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000001bc0)="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", 0x801}], 0x2}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x9, 0x35, 0x7, 0x6}, {0x6, 0x8, 0x3f, 0x328}]}) 2.31800731s ago: executing program 4 (id=256): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x4e0, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e24], [0x4e24, 0x4e22], [0x8, 0x0, 0xa94, 0x1000, 0x3, 0x83fa, 0x3ff, 0xe, 0x1, 0x2, 0x3, 0x9e, 0x945, 0x2, 0x1d3, 0x7fff, 0x7, 0x8, 0x9, 0x7, 0x81, 0x4b5, 0xd, 0x8, 0x1, 0x3, 0x0, 0x8908, 0x7fff, 0xfff, 0x5, 0x200, 0xf1, 0x1000, 0x33, 0x2, 0x8, 0x1, 0x4, 0x6, 0x101000, 0x8, 0x3, 0x101, 0x3, 0x0, 0xc0000000, 0x0, 0x18000000, 0x8, 0x2bb, 0x1000, 0x5, 0x80000000, 0x5a2, 0x4, 0xa4, 0x1, 0x4, 0xff, 0x8, 0x5, 0x3, 0x4], 0x4, [{0x7, 0xe, 0x2}, {0xff, 0x77, 0x8}, {0x2, 0x8d, 0x3}, {0xfe, 0x7f, 0x5}], 0x3, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 2.303859511s ago: executing program 4 (id=257): r0 = socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) setresuid(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x77, 0x10000}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x80, &(0x7f0000000000)=0x9, 0x0, 0x4) setgid(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0xfffffffffffffffe) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000640)=@filename='./file1\x00', 0x0, &(0x7f0000000680)='./file1\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_route(0x10, 0x3, 0x0) 2.290574313s ago: executing program 3 (id=258): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) dup3(r2, r3, 0x0) (fail_nth: 1) 1.967727534s ago: executing program 3 (id=259): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) flistxattr(r1, &(0x7f0000000280)=""/108, 0x6c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f00000003c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socket$netlink(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='geneve1\x00', 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000800000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000078000000060a010400000000000000000100000008000b400000000050000480200001800e000100636f6e6e6c696d69740000000c00028008000140000000002c00018008000100636d70002000028008000140000000010c00038006000100efbb000008000240000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x20008020}, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, 0x48002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0) r7 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$eJzs3c9vG1kdAPDvTJImm81usrASPwRsWRYKqtZO3N1otaflAkKrlRArThzakLhRFDuOYqc0oYf0f0CiEif4EzggcUDqiTs3uCGkckAqUIEaJA5GM56kaWqnEU08Vfz5SE8zb57t73tt573pt41fACPrckTsRcSliLgREbPF9aQo8VGvZK97/OjO8v6jO8tJdLuf/iPJ27NrceQ9mVeLz5yKiB98N+LHybNx2zu760uNRn2rqFc7zc1qe2f3L2vNpdX6an2jVltcWJz/4Nr7tTMb61vNXz/8ztrHP/zdb7/84A973/pp1q2Zou3oOM5Sb+gTh3Ey4xHx8XkEK8FYMZ5LZXeE/0saEZ+JiLez+79bdm8AgGHodmejO3u0DgBcdGmeA0vSSpELmIk0rVR6Obw3YzpttNqdqzdb2xsrvVzZXEykN9ca9fkiVzgXE0lWX8jPn9Rrx+rXIuKNiPjZ5Ct5vbLcaqyU+eADACPs1WPr/78ne+s/AHDBTZXdAQBg6Kz/ADB6rP8AMHqs/wAweqz/ADB6rP8AMHqs/wAwUr7/ySdZ6e4X33+9cmtne711692Venu90txeriy3tjYrq63Wav6dPc3nfV6j1dpceC+2b1c79Xan2t7Zvd5sbW90ruff6329PjGUUQEAJ3njrft/SiJi78NX8hJH9nKwVsPFlpbdAaA0Y2V3ACjNeNkdAErj7/hAny16nzLwvwjdG/gWUwu85K58Qf4fRpX8P4wu+X8YXfL/MLq63cSe/wAwYuT4gXP4938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC48GbykqSVYi/wmUjTSiXitYiYi4nk5lqjPh8Rr0fEHycnJrP6QtmdBgBeUPq3pNj/68rsOzPHWy8l/5nMjxHxk198+vPbS53O1kJ2/Z+H1zv3iuu1EwPZahAASnKwTh+s4wceP7qzfFCG2Z+H3+5tLprF3S9Kr2U8xvPjVP7gMP2vpKj3ZM8rY2cQf+9uRHy+3/iTPDcyV+x8ejx+Fvu1ocZPn4qf5m29Y/Zr8dkz6AuMmvvZ/PNRv/svjcv5sf/9P5XPUC/uYP7bf2b+Sw/nv7EB89/l08Z47/ffG9h2N+KL4/3iJ4fxkwHx3zll/D9/6StvD2rr/jLiSvSPfzRWtdPcrLZ3dt9day6t1lfrG7Xa4sLi/AfX3q9V8xx19SBT/ay/f3j19ZPGPz0g/tRzxv/1U47/V/+98aOvnhD/m1/r//v/5gnxszXxG6eMvzT9m4Hbd2fxV/qPv3jP4PFfPWX8B3/dXTnlSwGAIWjv7K4vNRr1LSdDO8me3V6Cbjgp7ST7E3AWn/O5c+xq2TMTcN6e3PRl9wQAAAAAAAAAAAAAABhkGD/wVPYYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA//+vctdr") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2095, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) rt_tgsigqueueinfo(r2, 0xffffffffffffffff, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = openat(r7, &(0x7f0000000000)='./file2\x00', 0x143242, 0x80) pwritev2(r8, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) flock(r6, 0x1) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.920627159s ago: executing program 4 (id=260): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001"], 0x168}}, 0x4010) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4001000010003306000000000000000064010102000000000000000000000000fe8000000000000000000000000000bb00004000001080040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0000000000000000000000000000000000000032000000ac1e00010000000000000000000000002703000000000000090000000000000000000000000000000400000000000000ff0f00000000000000000000000000000600000000000000000000000000000001000000000000000000000000000000000000000000000000000000000080008f000000ffff0000040000002dbd7000000000000a000100000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080016"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r3, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xa, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x25, 0x2, 0x2, 0xffffffff}, {0x6, 0x2, 0x9, 0xfffffff7}, {0x4, 0x9, 0xff, 0x3}, {0x6, 0x2, 0x4, 0x4}]}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2000000000000014}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000400)='spmi_write_end\x00', r6, 0x0, 0x8}, 0x18) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0xf8, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f00000003c0), 0x1}, 0x11000, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x3, 0x0, 0xc0}, 0xffffffffffffffff, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") r9 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0xe357, 0x0, 0x4, 0x1000000}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r9, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) r12 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x82, &(0x7f0000000300)={0x0, 0x10, 0x4}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) 1.681228543s ago: executing program 3 (id=261): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e060000feffffff0500000007000000100206321c20fd4cbd621f15bd5e0000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) set_mempolicy(0x6005, 0x0, 0x4) r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x1, &(0x7f0000000000)=[r2]) setregid(0x0, r2) socket$inet(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r4 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0xa0000004}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1a, 0xfffffffb) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_wait(r6, &(0x7f00000000c0)=[{}, {}], 0x2, 0x44000006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x4, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_ECN={0x8, 0x4, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}]}}]}, 0x48}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0400b6660a1d1bf947add44481de30732dbd7000fddbdf2511002f000101000028000700340000000800230100000000000000e54556de20443ee97ecaa911d37944000000000000000023f98bad37eaf38a9dea5759704af657848115ea536b6c692dfa7e5070624b15cfa95a04dcc27a2b031e91e423"], 0x38}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000090) unshare(0x40020000) 1.536765847s ago: executing program 3 (id=262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000400), &(0x7f00000004c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0xf) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 1.296590641s ago: executing program 1 (id=264): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x20000000002}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) 1.273156134s ago: executing program 2 (id=265): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}}], 0x2, 0x2090) sendmsg$sock(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001b00)="d0756d6c05f949a3de7c231b780bc4618416f04dba9a1cb62144536a677bb8c85d5e963449a39cf693480f434010f07d1ecef5d0a1a47c9f83f1493b94273f2ecafd31d035dd0f1219a0789ead595c77ff6a0aab923b6e1bdf30687b65a3dcedaad83ac413c8143aecffe859517b173fa1f56cc3eb6bcc9b945aab763538a4ec53b7c4d43c2855a51357fd9918170774b87aefd6b83e74ce90f9b14912e4903779897dce77a8aebb88e0806efffcb32c827dfe394ac06e0b9f13a53391c70ba6fc6410999db08a61e469521cd96b51ee5bf594348f548ebed2c352586d98d4774319e009", 0xe4}, {&(0x7f0000000a80)="6c9aed4c36c5bed5f52f15653dbdae4ccd19a726acade8f6c3ffc3bd24d40517669a7d06b632cdf8bf900d4c96cbd9d8424b22ebfc88b8d1d55cb7dc7069ca83bb88720592e6675d527a7efb46857cb05cca1ca32595d8ef6a", 0x59}, {&(0x7f00000000c0)="15dd866026f761e35c585aec48b66cb0e178358ed6", 0x15}, {&(0x7f0000001c00)="754e871ae22a5a32b2e37730d3461f575ff9c552e8d43c1b07d60830e0cea1c9ae13d79eaa6e7db11551bc67fc992963c628f701321bd26edc28bd3c016d9fe6d6db7fb32a015e41f1338fa142880e56f81ddcbef171ceb217d77209a27f9e140991e4440ece10e91c8060609b1ddfeddf4380", 0x73}, {&(0x7f0000001c80)="4576e19216a67f2e072ad1672aa245575dc3c99fb4298e313f160892d7a14056786a55eba59917cd98506f308b0b5b16ad87c756416eae872b98546c0e6a5abda01baea75e80565890bd85f06061a672bfb3030b8475ce4bfbe8f68feab6e4e2c704f48451db3dd69bc18622f6826543ac7b46bc800178d71f43d5a0bc051ee80bc82ccec759", 0x86}], 0x5}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x1, r2, 0x180}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000300)={0x0, "1e4e1557a609bff6a596dea0fb0503f22231b15d27fce60137b6c6cbf512f89b431f5dd9b4ae337bbf37b108c1ec26396567359e079aae967f5d8aad34301a48", 0x13}, 0x48, 0xfffffffffffffffc) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000004000b702000000000000850000008400000097000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getrlimit(0xc, 0x0) r5 = shmget$private(0x0, 0x400000, 0x20, &(0x7f0000c00000/0x400000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000140)=""/112) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='mem_disconnect\x00'}, 0x18) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000007a80)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 1.188025992s ago: executing program 1 (id=266): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1000000, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000240)={0x1, 0x0, 0x11, 0x2, 0x37, &(0x7f0000000f80)}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r7}, 0x10) r8 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000000c0)={0x30000009}) close_range(r5, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='spmi_read_begin\x00', r10, 0x0, 0xfffffffffffffffa}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x109, &(0x7f00000003c0)={0x0, 0x114df, 0x0, 0x0, 0x87}, &(0x7f00000000c0)=0x0, &(0x7f0000000200)=0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r13}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) r14 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) 955.822255ms ago: executing program 4 (id=267): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="e00f4b03afa75c3500435baa404d56e4beb9d6d9d1ec4166ccecfa728cae769f6cb59ef6488703178338be0517d2da32aad0cd4de1a34db5281c7b0be79c06bf9312130ddc5eb4a4bf9a74bf8728d6157fb93f1c9d647049e3e868e9ead6d07ad963afb5d92b26dd89e1562d1ee11f565bf5daaeb9c4bf38faa661069b0ddd75b6d3eafa95358aef", @ANYRES16=r0, @ANYRES32=0x0, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) lsm_list_modules(&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff000200000000e1ffffff851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080200ffd00000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x24) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001180)={0x4, [0x0, 0x1, 0x6, 0x1]}, &(0x7f00000011c0)=0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 679.451503ms ago: executing program 1 (id=268): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x4, 0x4, 0x4e0, 0xffffffff, 0xe8, 0x340, 0xe8, 0xfeffffff, 0xffffffff, 0x410, 0x410, 0x410, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1f}, @loopback, [0xffffffff, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffff00, 0xffffff00, 0xffffffff, 0xff000000], 'team0\x00', 'veth1_to_batadv\x00', {}, {0xff}, 0x11, 0x4, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@uncond, 0x0, 0x218, 0x258, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xd, 0x1}}, @common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e24], [0x4e24, 0x4e22], [0x8, 0x0, 0xa94, 0x1000, 0x3, 0x83fa, 0x3ff, 0xe, 0x1, 0x2, 0x3, 0x9e, 0x945, 0x2, 0x1d3, 0x7fff, 0x7, 0x8, 0x9, 0x7, 0x81, 0x4b5, 0xd, 0x8, 0x1, 0x3, 0x0, 0x8908, 0x7fff, 0xfff, 0x5, 0x200, 0xf1, 0x1000, 0x33, 0x2, 0x8, 0x1, 0x4, 0x6, 0x101000, 0x8, 0x3, 0x101, 0x3, 0x0, 0xc0000000, 0x0, 0x18000000, 0x8, 0x2bb, 0x1000, 0x5, 0x80000000, 0x5a2, 0x4, 0xa4, 0x1, 0x4, 0xff, 0x8, 0x5, 0x3, 0x4], 0x4, [{0x7, 0xe, 0x2}, {0xff, 0x77, 0x8}, {0x2, 0x8d, 0x3}, {0xfe, 0x7f, 0x5}], 0x3, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x5c, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x652}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 446.975436ms ago: executing program 1 (id=269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e06", 0xab}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000004c40)="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", 0x5dd}], 0x1}}], 0x6, 0x200040d1) 328.666877ms ago: executing program 1 (id=270): symlink(&(0x7f0000001780)='./file0/../file0\x00', 0x0) readlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)=""/121, 0x79) 328.287168ms ago: executing program 2 (id=271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1}, 0x20000044) 327.966668ms ago: executing program 1 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchdir(0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r3, &(0x7f0000000100)=""/253, 0xfd, 0x2) bind$rds(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) listen(0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r3, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440), &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000080), 0x4) 0s ago: executing program 4 (id=273): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) kernel console output (not intermixed with test programs): [ 18.505915][ T29] audit: type=1400 audit(1768057969.391:62): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.527861][ T29] audit: type=1400 audit(1768057969.391:63): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.550404][ T29] audit: type=1400 audit(1768057969.391:64): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.573257][ T29] audit: type=1400 audit(1768057969.391:65): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.596212][ T29] audit: type=1400 audit(1768057969.391:66): avc: denied { read open } for pid=3199 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 23.633180][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 23.633193][ T29] audit: type=1400 audit(1768057974.521:70): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.662116][ T29] audit: type=1400 audit(1768057974.551:71): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.662845][ T3303] cgroup: Unknown subsys name 'net' [ 23.689734][ T29] audit: type=1400 audit(1768057974.581:72): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.849680][ T3303] cgroup: Unknown subsys name 'cpuset' [ 23.855759][ T3303] cgroup: Unknown subsys name 'rlimit' [ 24.004822][ T29] audit: type=1400 audit(1768057974.891:73): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.028158][ T29] audit: type=1400 audit(1768057974.891:74): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.048613][ T29] audit: type=1400 audit(1768057974.891:75): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.068987][ T29] audit: type=1400 audit(1768057974.891:76): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.075655][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.089313][ T29] audit: type=1400 audit(1768057974.901:77): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.122660][ T29] audit: type=1400 audit(1768057974.901:78): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.146573][ T29] audit: type=1400 audit(1768057974.991:79): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.181965][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.214584][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 26.226476][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.326586][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.335561][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.342609][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.349801][ T3319] bridge_slave_0: entered allmulticast mode [ 26.356130][ T3319] bridge_slave_0: entered promiscuous mode [ 26.374481][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.381540][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.388680][ T3314] bridge_slave_0: entered allmulticast mode [ 26.395377][ T3314] bridge_slave_0: entered promiscuous mode [ 26.404283][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.411447][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.418513][ T3319] bridge_slave_1: entered allmulticast mode [ 26.424853][ T3319] bridge_slave_1: entered promiscuous mode [ 26.431232][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 26.439896][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 26.450902][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.457939][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.465176][ T3314] bridge_slave_1: entered allmulticast mode [ 26.471668][ T3314] bridge_slave_1: entered promiscuous mode [ 26.512672][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.535012][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.547042][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.567818][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.600425][ T3319] team0: Port device team_slave_0 added [ 26.623938][ T3319] team0: Port device team_slave_1 added [ 26.629708][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.636749][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.644113][ T3321] bridge_slave_0: entered allmulticast mode [ 26.650476][ T3321] bridge_slave_0: entered promiscuous mode [ 26.657359][ T3314] team0: Port device team_slave_0 added [ 26.663009][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.670161][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.677384][ T3316] bridge_slave_0: entered allmulticast mode [ 26.683725][ T3316] bridge_slave_0: entered promiscuous mode [ 26.698841][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.705907][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.713091][ T3321] bridge_slave_1: entered allmulticast mode [ 26.719346][ T3321] bridge_slave_1: entered promiscuous mode [ 26.726391][ T3314] team0: Port device team_slave_1 added [ 26.732082][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.739136][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.746403][ T3316] bridge_slave_1: entered allmulticast mode [ 26.752891][ T3316] bridge_slave_1: entered promiscuous mode [ 26.759349][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.766384][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.773768][ T3322] bridge_slave_0: entered allmulticast mode [ 26.780139][ T3322] bridge_slave_0: entered promiscuous mode [ 26.803385][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.810453][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.817555][ T3322] bridge_slave_1: entered allmulticast mode [ 26.823852][ T3322] bridge_slave_1: entered promiscuous mode [ 26.830547][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.837467][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.863434][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.891756][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.898751][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.924756][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.936440][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.945913][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.952963][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.978980][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.991087][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.007504][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.016937][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.023945][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.049834][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.061524][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.077175][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.098473][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.117550][ T3316] team0: Port device team_slave_0 added [ 27.128172][ T3321] team0: Port device team_slave_0 added [ 27.138397][ T3316] team0: Port device team_slave_1 added [ 27.152973][ T3321] team0: Port device team_slave_1 added [ 27.160692][ T3319] hsr_slave_0: entered promiscuous mode [ 27.166656][ T3319] hsr_slave_1: entered promiscuous mode [ 27.177803][ T3322] team0: Port device team_slave_0 added [ 27.197364][ T3322] team0: Port device team_slave_1 added [ 27.204805][ T3314] hsr_slave_0: entered promiscuous mode [ 27.210835][ T3314] hsr_slave_1: entered promiscuous mode [ 27.216527][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.222259][ T3314] Cannot create hsr debugfs directory [ 27.232006][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.238934][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.264862][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.287109][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.294106][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.320095][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.337074][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.344053][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.369997][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.386219][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.393208][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.419275][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.436857][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.443870][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.469835][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.491297][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.498243][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.524233][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.567153][ T3316] hsr_slave_0: entered promiscuous mode [ 27.573103][ T3316] hsr_slave_1: entered promiscuous mode [ 27.578926][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.584662][ T3316] Cannot create hsr debugfs directory [ 27.609572][ T3321] hsr_slave_0: entered promiscuous mode [ 27.615507][ T3321] hsr_slave_1: entered promiscuous mode [ 27.621352][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 27.627055][ T3321] Cannot create hsr debugfs directory [ 27.638655][ T3322] hsr_slave_0: entered promiscuous mode [ 27.644664][ T3322] hsr_slave_1: entered promiscuous mode [ 27.650588][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 27.656292][ T3322] Cannot create hsr debugfs directory [ 27.805883][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.825148][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.835603][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.849114][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.867803][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.878699][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.891120][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.899976][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.917658][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.930213][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.946043][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.960278][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.976843][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.990722][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.009190][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.018768][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.036557][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.046522][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.055985][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.064737][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.090059][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.120434][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.128783][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.147239][ T935] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.154310][ T935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.169411][ T935] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.176469][ T935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.187458][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.204324][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.211376][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.223739][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.238501][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.245572][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.262601][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.285061][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.302446][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.310505][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.317521][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.330786][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.337850][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.347164][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.356974][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.364020][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.382487][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.389529][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.418858][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.445175][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.455560][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.480078][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.487136][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.501798][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.508822][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.531054][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.553857][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.622677][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.648109][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.681370][ T3314] veth0_vlan: entered promiscuous mode [ 28.692007][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.706386][ T3319] veth0_vlan: entered promiscuous mode [ 28.714882][ T3314] veth1_vlan: entered promiscuous mode [ 28.723188][ T3319] veth1_vlan: entered promiscuous mode [ 28.748754][ T3314] veth0_macvtap: entered promiscuous mode [ 28.764331][ T3314] veth1_macvtap: entered promiscuous mode [ 28.776759][ T3319] veth0_macvtap: entered promiscuous mode [ 28.787089][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.813457][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.827267][ T3319] veth1_macvtap: entered promiscuous mode [ 28.840260][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.857216][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 28.857230][ T29] audit: type=1400 audit(1768057979.741:90): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.tSzX7l/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.867874][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.908084][ T3321] veth0_vlan: entered promiscuous mode [ 28.914133][ T29] audit: type=1400 audit(1768057979.781:91): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.936105][ T29] audit: type=1400 audit(1768057979.781:92): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.tSzX7l/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.940573][ T3322] veth0_vlan: entered promiscuous mode [ 28.961240][ T29] audit: type=1400 audit(1768057979.781:93): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.973706][ T3316] veth0_vlan: entered promiscuous mode [ 28.988492][ T29] audit: type=1400 audit(1768057979.781:94): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.tSzX7l/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.997729][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.020547][ T29] audit: type=1400 audit(1768057979.781:95): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.tSzX7l/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.037826][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.055085][ T29] audit: type=1400 audit(1768057979.791:96): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.068309][ T3316] veth1_vlan: entered promiscuous mode [ 29.083130][ T29] audit: type=1400 audit(1768057979.791:97): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.083150][ T29] audit: type=1400 audit(1768057979.791:98): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.090885][ T3321] veth1_vlan: entered promiscuous mode [ 29.141781][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.150351][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.166203][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.173876][ T3322] veth1_vlan: entered promiscuous mode [ 29.187529][ T922] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.201468][ T3321] veth0_macvtap: entered promiscuous mode [ 29.209796][ T29] audit: type=1400 audit(1768057980.101:99): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.215815][ T3322] veth0_macvtap: entered promiscuous mode [ 29.248057][ T3485] loop0: detected capacity change from 0 to 128 [ 29.255023][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.271622][ T3321] veth1_macvtap: entered promiscuous mode [ 29.279019][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.288054][ T3322] veth1_macvtap: entered promiscuous mode [ 29.297052][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.319117][ T3485] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 29.319687][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.340961][ T3316] veth0_macvtap: entered promiscuous mode [ 29.357859][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.375061][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.385319][ T3316] veth1_macvtap: entered promiscuous mode [ 29.397865][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.419176][ C1] hrtimer: interrupt took 28264 ns [ 29.429466][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.446197][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.455115][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.474060][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.483077][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.491945][ T3488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 29.506967][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.516404][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.524269][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.524269][ T31] loop0: rw=1, sector=153, nr_sectors = 8 limit=128 [ 29.538001][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.538001][ T31] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 29.553277][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.585566][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.595037][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.595037][ T31] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 29.609940][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.609940][ T31] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 29.623516][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.623516][ T31] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 29.637460][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.637460][ T31] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 29.650993][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.650993][ T31] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 29.664611][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.664611][ T31] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 29.677966][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.681174][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.681174][ T31] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 29.687834][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.708713][ T31] kworker/u8:1: attempt to access beyond end of device [ 29.708713][ T31] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 29.754986][ T52] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.771500][ T3502] loop4: detected capacity change from 0 to 128 [ 29.784444][ T3506] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.789776][ T52] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.809429][ T3507] loop3: detected capacity change from 0 to 512 [ 29.817248][ T3505] FAULT_INJECTION: forcing a failure. [ 29.817248][ T3505] name failslab, interval 1, probability 0, space 0, times 1 [ 29.829974][ T3505] CPU: 1 UID: 0 PID: 3505 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 29.829998][ T3505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 29.830011][ T3505] Call Trace: [ 29.830019][ T3505] [ 29.830025][ T3505] __dump_stack+0x1d/0x30 [ 29.830111][ T3505] dump_stack_lvl+0x95/0xd0 [ 29.830129][ T3505] dump_stack+0x15/0x1b [ 29.830144][ T3505] should_fail_ex+0x265/0x280 [ 29.830163][ T3505] should_failslab+0x8c/0xb0 [ 29.830252][ T3505] __kmalloc_noprof+0xb9/0x5a0 [ 29.830273][ T3505] ? memcg_list_lru_alloc+0x2e5/0x4c0 [ 29.830301][ T3505] memcg_list_lru_alloc+0x2e5/0x4c0 [ 29.830322][ T3505] ? path_openat+0x1e82/0x23b0 [ 29.830396][ T3505] __memcg_slab_post_alloc_hook+0x1aa/0x530 [ 29.830503][ T3505] kmem_cache_alloc_lru_noprof+0x2cc/0x4c0 [ 29.830521][ T3505] ? shmem_alloc_inode+0x34/0x50 [ 29.830551][ T3505] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 29.830599][ T3505] shmem_alloc_inode+0x34/0x50 [ 29.830621][ T3505] alloc_inode+0x40/0x170 [ 29.830641][ T3505] new_inode+0x1d/0xe0 [ 29.830664][ T3505] shmem_get_inode+0x246/0x750 [ 29.830737][ T3505] __shmem_file_setup+0x113/0x210 [ 29.830763][ T3505] shmem_file_setup+0x3b/0x50 [ 29.830786][ T3505] __se_sys_memfd_create+0x2f7/0x6b0 [ 29.830815][ T3505] __x64_sys_memfd_create+0x31/0x40 [ 29.830891][ T3505] x64_sys_call+0x28cb/0x3000 [ 29.830914][ T3505] do_syscall_64+0xca/0x2b0 [ 29.830986][ T3505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.831008][ T3505] RIP: 0033:0x7f35eadef749 [ 29.831069][ T3505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 29.831087][ T3505] RSP: 002b:00007f35e984ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 29.831115][ T3505] RAX: ffffffffffffffda RBX: 00000000000004ef RCX: 00007f35eadef749 [ 29.831125][ T3505] RDX: 00007f35e984eef0 RSI: 0000000000000000 RDI: 00007f35eae74960 [ 29.831136][ T3505] RBP: 0000200000000a40 R08: 00007f35e984ebb7 R09: 00007f35e984ee40 [ 29.831146][ T3505] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 29.831193][ T3505] R13: 00007f35e984eef0 R14: 00007f35e984eeb0 R15: 0000200000000740 [ 29.831210][ T3505] [ 29.832595][ T3507] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.888813][ T3513] IPv6: NLM_F_CREATE should be specified when creating new route [ 29.890865][ T3507] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.900848][ T52] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.980102][ T3507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 30.076515][ T3519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 30.087813][ T3518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'. [ 30.135574][ T3507] System zones: 1-12 [ 30.144187][ T3528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 30.152981][ T3507] EXT4-fs (loop3): 1 truncate cleaned up [ 30.162014][ T3525] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11'. [ 30.186957][ T3507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.211639][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 30.224298][ T3531] vlan2: entered allmulticast mode [ 30.236927][ T3525] loop4: detected capacity change from 0 to 512 [ 30.250499][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.262622][ T3535] capability: warning: `syz.1.16' uses deprecated v2 capabilities in a way that may be insecure [ 30.272637][ T3532] loop2: detected capacity change from 0 to 764 [ 30.280463][ T3532] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 30.298720][ T3539] FAULT_INJECTION: forcing a failure. [ 30.298720][ T3539] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 30.311861][ T3539] CPU: 1 UID: 0 PID: 3539 Comm: syz.3.15 Not tainted syzkaller #0 PREEMPT(voluntary) [ 30.312027][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 30.312037][ T3539] Call Trace: [ 30.312043][ T3539] [ 30.312049][ T3539] __dump_stack+0x1d/0x30 [ 30.312147][ T3539] dump_stack_lvl+0x95/0xd0 [ 30.312174][ T3539] dump_stack+0x15/0x1b [ 30.312192][ T3539] should_fail_ex+0x265/0x280 [ 30.312316][ T3539] should_fail+0xb/0x20 [ 30.312333][ T3539] should_fail_usercopy+0x1a/0x20 [ 30.312356][ T3539] _copy_from_user+0x1c/0xb0 [ 30.312381][ T3539] __sys_bpf+0x183/0x7c0 [ 30.312470][ T3539] __x64_sys_bpf+0x41/0x50 [ 30.312499][ T3539] x64_sys_call+0x28e1/0x3000 [ 30.312535][ T3539] do_syscall_64+0xca/0x2b0 [ 30.312642][ T3539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 30.312735][ T3539] RIP: 0033:0x7f324eb9f749 [ 30.312751][ T3539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 30.312768][ T3539] RSP: 002b:00007f324d607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 30.312786][ T3539] RAX: ffffffffffffffda RBX: 00007f324edf5fa0 RCX: 00007f324eb9f749 [ 30.312797][ T3539] RDX: 0000000000000048 RSI: 0000200000001740 RDI: 0000000000000000 [ 30.312808][ T3539] RBP: 00007f324d607090 R08: 0000000000000000 R09: 0000000000000000 [ 30.312818][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 30.312827][ T3539] R13: 00007f324edf6038 R14: 00007f324edf5fa0 R15: 00007ffde7aab508 [ 30.312902][ T3539] [ 30.489643][ T3532] Symlink component flag not implemented [ 30.499199][ T3532] Symlink component flag not implemented (7) [ 30.530027][ T3525] EXT4-fs (loop4): too many log groups per flexible block group [ 30.537832][ T3525] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 30.546485][ T3525] EXT4-fs (loop4): mount failed [ 30.563432][ T3543] loop3: detected capacity change from 0 to 764 [ 30.572033][ T3543] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 30.614330][ T3543] Symlink component flag not implemented [ 30.630544][ T3543] Symlink component flag not implemented (7) [ 30.867191][ T3553] netlink: 36 bytes leftover after parsing attributes in process `syz.4.21'. [ 30.899741][ T3553] loop4: detected capacity change from 0 to 512 [ 30.982686][ T3553] EXT4-fs (loop4): too many log groups per flexible block group [ 31.024809][ T3553] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 31.034972][ T3559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.23'. [ 31.051938][ T3553] EXT4-fs (loop4): mount failed [ 31.098514][ T3563] loop2: detected capacity change from 0 to 128 [ 31.117740][ T3566] loop3: detected capacity change from 0 to 256 [ 31.121397][ T3563] netlink: 'syz.2.24': attribute type 3 has an invalid length. [ 31.133475][ T3567] capability: warning: `syz.0.26' uses 32-bit capabilities (legacy support in use) [ 31.196216][ T3572] IPv6: Can't replace route, no match found [ 31.204910][ T3573] program syz.0.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 31.279968][ T3579] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.368266][ T3584] loop2: detected capacity change from 0 to 128 [ 31.563515][ T3584] netlink: 'syz.2.33': attribute type 3 has an invalid length. [ 31.598950][ T3588] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.35: bad orphan inode 134217728 [ 31.739345][ T3588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.853815][ T3602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.38'. [ 31.884819][ T3604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=3604 comm=syz.0.39 [ 31.970320][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.985867][ T3606] pimreg: entered allmulticast mode [ 32.009203][ T3606] pimreg: left allmulticast mode [ 32.064911][ T3608] vlan2: entered allmulticast mode [ 32.066318][ T3615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.104713][ T3612] msdos: Bad value for 'gid' [ 32.109577][ T3612] msdos: Bad value for 'gid' [ 32.150952][ T3619] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.170448][ T3612] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 32.211241][ T3623] netlink: 'syz.4.48': attribute type 1 has an invalid length. [ 32.223239][ T3619] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 32.233071][ T3612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'. [ 32.248773][ T3623] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 32.249173][ T3619] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.281877][ T3619] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 32.283012][ T3511] Alternate GPT is invalid, using primary GPT. [ 32.302705][ T3511] loop2: p1 p2 p3 [ 32.306425][ T3511] loop2: partition table partially beyond EOD, truncated [ 32.327526][ T3619] EXT4-fs (loop1): Remounting filesystem read-only [ 32.340948][ T3621] Alternate GPT is invalid, using primary GPT. [ 32.347306][ T3621] loop2: p1 p2 p3 [ 32.351090][ T3621] loop2: partition table partially beyond EOD, truncated [ 32.368496][ T3619] EXT4-fs (loop1): 1 truncate cleaned up [ 32.374818][ T922] EXT4-fs (loop1): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 32.385624][ T922] EXT4-fs (loop1): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 32.404459][ T922] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 32.407779][ T3632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=3632 comm=syz.3.52 [ 32.416241][ T3619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.443159][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 32.443159][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 32.456225][ T3633] Zero length message leads to an empty skb [ 32.463953][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 32.471920][ T3633] syz.0.51 uses obsolete (PF_INET,SOCK_PACKET) [ 32.507065][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 32.517510][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 32.529746][ T3639] EXT4-fs (loop4): too many log groups per flexible block group [ 32.533880][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 32.537499][ T3639] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 32.557280][ T3639] EXT4-fs (loop4): mount failed [ 32.601446][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 32.612892][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 32.624378][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 32.638375][ T3619] syz.1.46 (3619) used greatest stack depth: 10528 bytes left [ 32.654230][ T3648] program syz.0.57 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 32.687858][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.769329][ T3660] vlan2: entered allmulticast mode [ 32.837016][ T3668] geneve2: entered promiscuous mode [ 32.842231][ T3668] geneve2: entered allmulticast mode [ 32.881709][ T3671] bond1: entered promiscuous mode [ 32.887296][ T3671] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.895221][ T3671] team0: Port device bond1 added [ 32.914710][ T3671] ======================================================= [ 32.914710][ T3671] WARNING: The mand mount option has been deprecated and [ 32.914710][ T3671] and is ignored by this kernel. Remove the mand [ 32.914710][ T3671] option from the mount to silence this warning. [ 32.914710][ T3671] ======================================================= [ 32.996791][ T3683] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 33.019169][ T3511] Alternate GPT is invalid, using primary GPT. [ 33.025505][ T3511] loop1: p2 p3 p7 [ 33.032986][ T3679] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 33.044870][ T3679] Symlink component flag not implemented [ 33.052170][ T3687] IPv6: Can't replace route, no match found [ 33.058780][ T3671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.063035][ T3683] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 33.073691][ T3679] Symlink component flag not implemented (7) [ 33.096327][ T3671] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.098846][ T3677] Alternate GPT is invalid, using primary GPT. [ 33.113013][ T3677] loop1: p2 p3 p7 [ 33.124878][ T3671] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 33.132320][ T3671] EXT4-fs warning (device loop0): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 33.165530][ T3690] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 33.190704][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.337226][ T3697] netlink: 'syz.0.78': attribute type 3 has an invalid length. [ 33.376370][ T3706] ext4: Bad value for 'sb' [ 33.557318][ T3716] EXT4-fs (loop2): too many log groups per flexible block group [ 33.570819][ T3716] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 33.581160][ T3716] EXT4-fs (loop2): mount failed [ 33.589995][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 33.648109][ T3725] IPv6: Can't replace route, no match found [ 33.676283][ T3729] FAULT_INJECTION: forcing a failure. [ 33.676283][ T3729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.689415][ T3729] CPU: 0 UID: 0 PID: 3729 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.689440][ T3729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.689451][ T3729] Call Trace: [ 33.689456][ T3729] [ 33.689463][ T3729] __dump_stack+0x1d/0x30 [ 33.689582][ T3729] dump_stack_lvl+0x95/0xd0 [ 33.689601][ T3729] dump_stack+0x15/0x1b [ 33.689618][ T3729] should_fail_ex+0x265/0x280 [ 33.689666][ T3729] should_fail+0xb/0x20 [ 33.689684][ T3729] should_fail_usercopy+0x1a/0x20 [ 33.689738][ T3729] strncpy_from_user+0x27/0x260 [ 33.689793][ T3729] getname_flags+0xae/0x3b0 [ 33.689817][ T3729] do_sys_openat2+0x60/0x150 [ 33.689845][ T3729] __x64_sys_openat+0xf2/0x120 [ 33.689885][ T3729] x64_sys_call+0x2b07/0x3000 [ 33.689910][ T3729] do_syscall_64+0xca/0x2b0 [ 33.690005][ T3729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.690064][ T3729] RIP: 0033:0x7f2135ccdf90 [ 33.690080][ T3729] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 33.690098][ T3729] RSP: 002b:00007f2134736b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 33.690118][ T3729] RAX: ffffffffffffffda RBX: 0000000000008d00 RCX: 00007f2135ccdf90 [ 33.690131][ T3729] RDX: 0000000000008d00 RSI: 00007f2134736c10 RDI: 00000000ffffff9c [ 33.690142][ T3729] RBP: 00007f2134736c10 R08: 0000000000000000 R09: 002367732f766564 [ 33.690233][ T3729] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 33.690245][ T3729] R13: 00007f2135f26038 R14: 00007f2135f25fa0 R15: 00007ffdc1fe8248 [ 33.690262][ T3729] [ 33.896421][ T3738] FAULT_INJECTION: forcing a failure. [ 33.896421][ T3738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.910091][ T3738] CPU: 0 UID: 0 PID: 3738 Comm: syz.1.92 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.910118][ T3738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.910162][ T3738] Call Trace: [ 33.910169][ T3738] [ 33.910176][ T3738] __dump_stack+0x1d/0x30 [ 33.910231][ T3738] dump_stack_lvl+0x95/0xd0 [ 33.910265][ T3738] dump_stack+0x15/0x1b [ 33.910285][ T3738] should_fail_ex+0x265/0x280 [ 33.910308][ T3738] should_fail+0xb/0x20 [ 33.910327][ T3738] should_fail_usercopy+0x1a/0x20 [ 33.910360][ T3738] _copy_to_iter+0x251/0xe70 [ 33.910408][ T3738] ? fib_trie_seq_show+0x4df/0x510 [ 33.910442][ T3738] seq_read_iter+0x776/0x950 [ 33.910475][ T3738] seq_read+0x270/0x2b0 [ 33.910560][ T3738] ? __pfx_seq_read+0x10/0x10 [ 33.910586][ T3738] proc_reg_read+0x128/0x1c0 [ 33.910616][ T3738] ? __pfx_proc_reg_read+0x10/0x10 [ 33.910666][ T3731] netlink: 'syz.0.91': attribute type 3 has an invalid length. [ 33.910683][ T3738] vfs_read+0x1a8/0x770 [ 33.910698][ T3738] ? __fget_files+0x184/0x1c0 [ 33.910716][ T3738] ? __rcu_read_unlock+0x4f/0x70 [ 33.910736][ T3738] ? __fget_files+0x184/0x1c0 [ 33.910845][ T3738] ? mutex_unlock+0x4f/0x90 [ 33.910872][ T3738] __x64_sys_pread64+0xfd/0x150 [ 33.910892][ T3738] x64_sys_call+0x281b/0x3000 [ 33.910916][ T3738] do_syscall_64+0xca/0x2b0 [ 33.911064][ T3738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.911085][ T3738] RIP: 0033:0x7f35eadef749 [ 33.911100][ T3738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.911141][ T3738] RSP: 002b:00007f35e984f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 33.911160][ T3738] RAX: ffffffffffffffda RBX: 00007f35eb045fa0 RCX: 00007f35eadef749 [ 33.911172][ T3738] RDX: 0000000000018fd4 RSI: 0000200000000080 RDI: 0000000000000003 [ 33.911184][ T3738] RBP: 00007f35e984f090 R08: 0000000000000000 R09: 0000000000000000 [ 33.911196][ T3738] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 33.911208][ T3738] R13: 00007f35eb046038 R14: 00007f35eb045fa0 R15: 00007ffde2b92998 [ 33.911233][ T3738] [ 34.127648][ T3742] journal_path: Non-blockdev passed as './bus' [ 34.133884][ T3742] EXT4-fs: error: could not find journal device path [ 34.147756][ T29] kauditd_printk_skb: 624 callbacks suppressed [ 34.147767][ T29] audit: type=1326 audit(1768057984.759:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35eadedf90 code=0x7ffc0000 [ 34.182470][ T3742] hub 8-0:1.0: USB hub found [ 34.187235][ T3742] hub 8-0:1.0: 8 ports detected [ 34.309179][ T3751] FAULT_INJECTION: forcing a failure. [ 34.309179][ T3751] name failslab, interval 1, probability 0, space 0, times 0 [ 34.321829][ T3751] CPU: 1 UID: 0 PID: 3751 Comm: syz.4.100 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.321857][ T3751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 34.321870][ T3751] Call Trace: [ 34.321878][ T3751] [ 34.321885][ T3751] __dump_stack+0x1d/0x30 [ 34.321939][ T3751] dump_stack_lvl+0x95/0xd0 [ 34.321957][ T3751] dump_stack+0x15/0x1b [ 34.321972][ T3751] should_fail_ex+0x265/0x280 [ 34.322024][ T3751] should_failslab+0x8c/0xb0 [ 34.322121][ T3751] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 34.322141][ T3751] ? __d_alloc+0x37/0x340 [ 34.322162][ T3751] __d_alloc+0x37/0x340 [ 34.322243][ T3751] d_alloc+0x2e/0x100 [ 34.322264][ T3751] lookup_one_qstr_excl+0x99/0x250 [ 34.322289][ T3751] start_dirop+0x3e/0x70 [ 34.322349][ T3751] simple_start_creating+0x83/0xb0 [ 34.322368][ T3751] debugfs_start_creating+0xda/0x150 [ 34.322386][ T3751] __debugfs_create_file+0x70/0x2b0 [ 34.322605][ T3751] debugfs_create_file_full+0x3f/0x60 [ 34.322633][ T3751] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 34.322664][ T3751] ref_tracker_dir_debugfs+0x100/0x210 [ 34.322757][ T3751] alloc_netdev_mqs+0x1a7/0xa40 [ 34.322845][ T3751] rtnl_create_link+0x239/0x6e0 [ 34.322874][ T3751] rtnl_newlink_create+0x14c/0x620 [ 34.322973][ T3751] ? security_capable+0x83/0x90 [ 34.323029][ T3751] ? netlink_ns_capable+0x86/0xa0 [ 34.323052][ T3751] rtnl_newlink+0xf5b/0x1360 [ 34.323100][ T3751] ? xas_load+0x413/0x430 [ 34.323129][ T3751] ? __rcu_read_unlock+0x34/0x70 [ 34.323147][ T3751] ? bpf_trace_run3+0x12c/0x1e0 [ 34.323174][ T3751] ? xas_load+0x413/0x430 [ 34.323220][ T3751] ? __kfree_skb+0x109/0x150 [ 34.323240][ T3751] ? __rcu_read_unlock+0x4f/0x70 [ 34.323255][ T3751] ? __rcu_read_unlock+0x4f/0x70 [ 34.323271][ T3751] ? avc_has_perm_noaudit+0xab/0x130 [ 34.323339][ T3751] ? cred_has_capability+0x210/0x280 [ 34.323371][ T3751] ? selinux_capable+0x31/0x40 [ 34.323503][ T3751] ? security_capable+0x83/0x90 [ 34.323534][ T3751] ? ns_capable+0x7d/0xb0 [ 34.323563][ T3751] ? __pfx_rtnl_newlink+0x10/0x10 [ 34.323644][ T3751] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 34.323668][ T3751] netlink_rcv_skb+0x123/0x220 [ 34.323696][ T3751] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 34.323723][ T3751] rtnetlink_rcv+0x1c/0x30 [ 34.323790][ T3751] netlink_unicast+0x5c0/0x690 [ 34.323896][ T3751] netlink_sendmsg+0x58b/0x6b0 [ 34.323928][ T3751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 34.323953][ T3751] __sock_sendmsg+0x145/0x180 [ 34.324009][ T3751] ____sys_sendmsg+0x31e/0x4a0 [ 34.324090][ T3751] ___sys_sendmsg+0x17b/0x1d0 [ 34.324132][ T3751] __x64_sys_sendmsg+0xd4/0x160 [ 34.324175][ T3751] x64_sys_call+0x17ba/0x3000 [ 34.324195][ T3751] do_syscall_64+0xca/0x2b0 [ 34.324286][ T3751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.324305][ T3751] RIP: 0033:0x7f69bf7df749 [ 34.324321][ T3751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.324338][ T3751] RSP: 002b:00007f69be23f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 34.324359][ T3751] RAX: ffffffffffffffda RBX: 00007f69bfa35fa0 RCX: 00007f69bf7df749 [ 34.324369][ T3751] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 34.324379][ T3751] RBP: 00007f69be23f090 R08: 0000000000000000 R09: 0000000000000000 [ 34.324450][ T3751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.324462][ T3751] R13: 00007f69bfa36038 R14: 00007f69bfa35fa0 R15: 00007ffff836b988 [ 34.324478][ T3751] [ 34.438500][ T29] audit: type=1326 audit(1768057984.788:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35eadef34b code=0x7ffc0000 [ 34.493209][ T3751] syz.4.100 (3751) used greatest stack depth: 9848 bytes left [ 34.495334][ T29] audit: type=1326 audit(1768057984.788:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f35eadee3aa code=0x7ffc0000 [ 34.495364][ T29] audit: type=1326 audit(1768057984.788:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35eadef749 code=0x7ffc0000 [ 34.495386][ T29] audit: type=1326 audit(1768057984.788:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35eadef749 code=0x7ffc0000 [ 34.495465][ T29] audit: type=1326 audit(1768057984.788:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f35eadef749 code=0x7ffc0000 [ 34.532152][ T3760] IPv6: Can't replace route, no match found [ 34.535582][ T29] audit: type=1326 audit(1768057984.788:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35eadef749 code=0x7ffc0000 [ 34.823472][ T29] audit: type=1326 audit(1768057984.788:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35eadef749 code=0x7ffc0000 [ 34.846631][ T29] audit: type=1326 audit(1768057984.788:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35eadef749 code=0x7ffc0000 [ 34.869721][ T29] audit: type=1326 audit(1768057984.788:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3741 comm="syz.1.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35eadef749 code=0x7ffc0000 [ 34.896297][ T3756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.923227][ T3769] IPv6: Can't replace route, no match found [ 34.959006][ T3764] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.966213][ T3764] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.020428][ T3773] lo speed is unknown, defaulting to 1000 [ 35.027282][ T3773] lo speed is unknown, defaulting to 1000 [ 35.036582][ T3756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.048060][ T3773] lo speed is unknown, defaulting to 1000 [ 35.084906][ T3756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.099912][ T3773] infiniband syz1: set down [ 35.104482][ T3773] infiniband syz1: added lo [ 35.109063][ T3746] lo speed is unknown, defaulting to 1000 [ 35.123998][ T3773] RDS/IB: syz1: added [ 35.133842][ T3773] smc: adding ib device syz1 with port count 1 [ 35.140261][ T3773] smc: ib device syz1 port 1 has no pnetid [ 35.146378][ T3390] lo speed is unknown, defaulting to 1000 [ 35.152425][ T3773] lo speed is unknown, defaulting to 1000 [ 35.171860][ T3756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.206215][ T3773] lo speed is unknown, defaulting to 1000 [ 35.242015][ T3773] lo speed is unknown, defaulting to 1000 [ 35.280482][ T3773] lo speed is unknown, defaulting to 1000 [ 35.303125][ T53] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.315828][ T3773] lo speed is unknown, defaulting to 1000 [ 35.318653][ T53] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.351838][ T3773] lo speed is unknown, defaulting to 1000 [ 35.355275][ T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.382175][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.403539][ T3804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5138 sclass=netlink_route_socket pid=3804 comm=syz.0.115 [ 35.470614][ T3807] __nla_validate_parse: 8 callbacks suppressed [ 35.470626][ T3807] netlink: 2 bytes leftover after parsing attributes in process `syz.2.116'. [ 35.500656][ T3810] set_capacity_and_notify: 16 callbacks suppressed [ 35.500669][ T3810] loop0: detected capacity change from 0 to 2048 [ 35.570333][ T42] smc: removing ib device syz1 [ 35.579088][ T3630] Alternate GPT is invalid, using primary GPT. [ 35.585528][ T3630] loop0: p2 p3 p7 [ 35.615183][ T3810] Alternate GPT is invalid, using primary GPT. [ 35.622101][ T3810] loop0: p2 p3 p7 [ 35.789670][ T3818] loop2: detected capacity change from 0 to 764 [ 35.821584][ T3818] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 35.846401][ T3818] Symlink component flag not implemented [ 35.854183][ T3818] Symlink component flag not implemented (7) [ 35.988070][ T3820] netlink: 28 bytes leftover after parsing attributes in process `syz.4.122'. [ 35.997071][ T3820] unsupported nla_type 24929 [ 36.052648][ T3825] program syz.0.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.204534][ T3829] bridge0: entered promiscuous mode [ 36.211713][ T3829] macsec1: entered promiscuous mode [ 36.218026][ T3829] bridge0: port 3(macsec1) entered blocking state [ 36.224525][ T3829] bridge0: port 3(macsec1) entered disabled state [ 36.235918][ T3829] macsec1: entered allmulticast mode [ 36.241292][ T3829] bridge0: entered allmulticast mode [ 36.247341][ T3829] macsec1: left allmulticast mode [ 36.252382][ T3829] bridge0: left allmulticast mode [ 36.258036][ T3829] bridge0: left promiscuous mode [ 36.280177][ T3839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.129'. [ 36.306153][ T3842] loop4: detected capacity change from 0 to 128 [ 36.317372][ T3839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.349023][ T3842] netlink: 'syz.4.130': attribute type 3 has an invalid length. [ 36.373155][ T3839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.398673][ T3849] program syz.2.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 36.432415][ T3839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.495639][ T3839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.529495][ T31] bio_check_eod: 535 callbacks suppressed [ 36.529508][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.529508][ T31] loop4: rw=1, sector=153, nr_sectors = 8 limit=128 [ 36.548897][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.548897][ T31] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 36.554832][ T3857] loop3: detected capacity change from 0 to 1024 [ 36.562402][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.562402][ T31] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 36.582871][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.582871][ T31] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 36.587659][ T3857] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 36.608451][ T1682] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.609518][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.609518][ T31] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 36.618368][ T3857] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #11: comm syz.3.135: iget: bogus i_mode (1) [ 36.634302][ T53] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.641913][ T3857] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.135: couldn't read orphan inode 11 (err -117) [ 36.661878][ T3857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.676890][ T53] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.685261][ T53] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.693982][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.693982][ T31] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 36.725295][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.725295][ T31] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 36.739566][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.739566][ T31] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 36.754231][ T3857] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.763815][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.763815][ T31] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 36.781739][ T31] kworker/u8:1: attempt to access beyond end of device [ 36.781739][ T31] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 36.806542][ T3864] loop3: detected capacity change from 0 to 2048 [ 36.838963][ T3862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 36.853629][ T3868] loop1: detected capacity change from 0 to 512 [ 36.862099][ T3868] EXT4-fs: Ignoring removed i_version option [ 36.862104][ T3511] Alternate GPT is invalid, using primary GPT. [ 36.862128][ T3868] EXT4-fs: Ignoring removed bh option [ 36.868368][ T3511] loop3: p2 p3 p7 [ 36.892037][ T3868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.914689][ T3868] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.018050][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 37.032072][ T3864] Alternate GPT is invalid, using primary GPT. [ 37.038534][ T3864] loop3: p2 p3 p7 [ 37.052326][ T3878] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.147277][ T3878] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.216053][ T3884] loop4: detected capacity change from 0 to 128 [ 37.242060][ T3878] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.293285][ T3890] program syz.0.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 37.316575][ T3884] netlink: 'syz.4.146': attribute type 3 has an invalid length. [ 37.426288][ T3878] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.598045][ T3910] loop4: detected capacity change from 0 to 1024 [ 37.617060][ T3912] IPv6: Can't replace route, no match found [ 37.680092][ T3914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 37.699029][ T3910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.733910][ T3910] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.155: Allocating blocks 449-513 which overlap fs metadata [ 37.797845][ T3910] EXT4-fs (loop4): pa ffff888107ea0150: logic 48, phys. 177, len 21 [ 37.805862][ T3910] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 37.828692][ T3918] FAULT_INJECTION: forcing a failure. [ 37.828692][ T3918] name failslab, interval 1, probability 0, space 0, times 0 [ 37.841362][ T3918] CPU: 0 UID: 0 PID: 3918 Comm: syz.2.158 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.841387][ T3918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.841397][ T3918] Call Trace: [ 37.841403][ T3918] [ 37.841410][ T3918] __dump_stack+0x1d/0x30 [ 37.841441][ T3918] dump_stack_lvl+0x95/0xd0 [ 37.841505][ T3918] dump_stack+0x15/0x1b [ 37.841523][ T3918] should_fail_ex+0x265/0x280 [ 37.841667][ T3918] should_failslab+0x8c/0xb0 [ 37.841750][ T3918] kmem_cache_alloc_noprof+0x69/0x4b0 [ 37.841770][ T3918] ? security_inode_alloc+0x37/0x100 [ 37.841888][ T3918] security_inode_alloc+0x37/0x100 [ 37.841909][ T3918] inode_init_always_gfp+0x4b7/0x500 [ 37.841933][ T3918] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 37.841961][ T3918] alloc_inode+0x58/0x170 [ 37.841982][ T3918] new_inode+0x1d/0xe0 [ 37.842001][ T3918] shmem_get_inode+0x246/0x750 [ 37.842084][ T3918] __shmem_file_setup+0x113/0x210 [ 37.842104][ T3918] shmem_file_setup+0x3b/0x50 [ 37.842171][ T3918] __se_sys_memfd_create+0x2f7/0x6b0 [ 37.842314][ T3918] __x64_sys_memfd_create+0x31/0x40 [ 37.842426][ T3918] x64_sys_call+0x28cb/0x3000 [ 37.842451][ T3918] do_syscall_64+0xca/0x2b0 [ 37.842485][ T3918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.842570][ T3918] RIP: 0033:0x7f2135ccf749 [ 37.842585][ T3918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.842599][ T3918] RSP: 002b:00007f2134736d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 37.842615][ T3918] RAX: ffffffffffffffda RBX: 0000000000004097 RCX: 00007f2135ccf749 [ 37.842626][ T3918] RDX: 00007f2134736dec RSI: 0000000000000000 RDI: 00007f2135d54960 [ 37.842725][ T3918] RBP: 00002000000040c0 R08: 00007f2134736b07 R09: 0000000000000000 [ 37.842737][ T3918] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 37.842750][ T3918] R13: 00007f2134736dec R14: 00007f2134736df0 R15: 00007ffdc1fe8248 [ 37.842770][ T3918] [ 38.076496][ T3910] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.104792][ T3925] IPv6: Can't replace route, no match found [ 38.126381][ T3927] loop4: detected capacity change from 0 to 128 [ 38.173193][ T3932] vlan2: entered allmulticast mode [ 38.180624][ T3929] loop2: detected capacity change from 0 to 128 [ 38.199792][ T3929] netlink: 'syz.2.162': attribute type 3 has an invalid length. [ 38.271661][ T3937] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 38.286900][ T3937] Symlink component flag not implemented [ 38.292620][ T3937] Symlink component flag not implemented (7) [ 38.394526][ T3630] loop4: p3 < > p4 < > [ 38.398729][ T3630] loop4: partition table partially beyond EOD, truncated [ 38.405896][ T3630] loop4: p3 start 4284289 is beyond EOD, truncated [ 38.486753][ T3945] EXT4-fs: Ignoring removed oldalloc option [ 38.492820][ T3945] EXT4-fs: Ignoring removed bh option [ 38.515785][ T3945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.535405][ T3945] SELinux: Context @ is not valid (left unmapped). [ 38.544391][ T3945] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 38.551022][ T3945] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 38.650739][ T3963] netlink: 9 bytes leftover after parsing attributes in process `+jõ@'. [ 38.660531][ T3963] netlink: 9 bytes leftover after parsing attributes in process `+jõ@'. [ 38.715264][ T3941] loop4: p3 < > p4 < > [ 38.719460][ T3941] loop4: partition table partially beyond EOD, truncated [ 38.728882][ T3967] program syz.3.175 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.732350][ T3941] loop4: p3 start 4284289 is beyond EOD, truncated [ 38.763978][ T3969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.176'. [ 38.777333][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.826467][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.839753][ T3973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.902231][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.914736][ T3978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 38.932633][ T3973] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.177: Allocating blocks 449-513 which overlap fs metadata [ 38.969915][ T3973] EXT4-fs (loop2): pa ffff888107ea00e0: logic 48, phys. 177, len 21 [ 38.978011][ T3973] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 39.011229][ T3973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.083826][ T3987] lo speed is unknown, defaulting to 1000 [ 39.107184][ T3987] lo speed is unknown, defaulting to 1000 [ 39.113355][ T3985] EXT4-fs: Ignoring removed orlov option [ 39.121850][ T3987] lo speed is unknown, defaulting to 1000 [ 39.122668][ T3985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.177277][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.190758][ T3987] infiniband syz1: set active [ 39.195452][ T3987] infiniband syz1: added lo [ 39.200152][ T3983] lo speed is unknown, defaulting to 1000 [ 39.219625][ T3987] RDS/IB: syz1: added [ 39.223672][ T3987] smc: adding ib device syz1 with port count 1 [ 39.233441][ T3987] smc: ib device syz1 port 1 has no pnetid [ 39.239547][ T10] lo speed is unknown, defaulting to 1000 [ 39.249610][ T3987] lo speed is unknown, defaulting to 1000 [ 39.291471][ T3998] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 39.305400][ T3987] lo speed is unknown, defaulting to 1000 [ 39.313630][ T3998] Symlink component flag not implemented [ 39.324192][ T3998] Symlink component flag not implemented (7) [ 39.342252][ T3987] lo speed is unknown, defaulting to 1000 [ 39.371059][ T4002] EXT4-fs: Ignoring removed i_version option [ 39.377156][ T4002] EXT4-fs: Ignoring removed bh option [ 39.391580][ T4002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.399888][ T3987] lo speed is unknown, defaulting to 1000 [ 39.405384][ T4002] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.437648][ T3987] lo speed is unknown, defaulting to 1000 [ 39.469249][ T3987] lo speed is unknown, defaulting to 1000 [ 39.547686][ T4009] mmap: syz.4.188 (4009) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.586193][ T4002] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.653262][ T4002] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.725606][ T4002] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.779040][ T4002] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.838747][ T1682] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.850470][ T1682] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.861180][ T1682] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.871988][ T1682] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.940081][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.990316][ T3630] Alternate GPT is invalid, using primary GPT. [ 39.996809][ T3630] loop2: p2 p3 p7 [ 40.005826][ T4017] Alternate GPT is invalid, using primary GPT. [ 40.012193][ T4017] loop2: p2 p3 p7 [ 40.119337][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 40.131078][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 40.131303][ T3511] udevd[3511]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 40.158467][ T29] kauditd_printk_skb: 1213 callbacks suppressed [ 40.158480][ T29] audit: type=1326 audit(1768057990.373:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135ccf749 code=0x7ffc0000 [ 40.188749][ T3630] udevd[3630]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 40.199456][ T29] audit: type=1326 audit(1768057990.373:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2135ccf749 code=0x7ffc0000 [ 40.222774][ T29] audit: type=1326 audit(1768057990.382:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135ccf749 code=0x7ffc0000 [ 40.246078][ T29] audit: type=1326 audit(1768057990.382:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2135ccf749 code=0x7ffc0000 [ 40.269425][ T29] audit: type=1326 audit(1768057990.382:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135ccf749 code=0x7ffc0000 [ 40.292708][ T29] audit: type=1326 audit(1768057990.382:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2135ccf749 code=0x7ffc0000 [ 40.315968][ T29] audit: type=1326 audit(1768057990.382:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135ccf749 code=0x7ffc0000 [ 40.339255][ T29] audit: type=1326 audit(1768057990.382:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2135ccf749 code=0x7ffc0000 [ 40.362547][ T29] audit: type=1326 audit(1768057990.382:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2135cd1667 code=0x7ffc0000 [ 40.385841][ T29] audit: type=1326 audit(1768057990.382:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.2.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f2135cd15dc code=0x7ffc0000 [ 40.517860][ T4038] ext4: Bad value for 'sb' [ 40.523273][ T4036] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 40.542743][ T4036] Symlink component flag not implemented [ 40.549194][ T4036] Symlink component flag not implemented (7) [ 40.605382][ T4042] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 40.608729][ T4040] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 40.855801][ T4062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.879417][ T4062] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.211: Allocating blocks 449-513 which overlap fs metadata [ 40.905581][ T4062] EXT4-fs (loop4): pa ffff888107ea01c0: logic 48, phys. 177, len 21 [ 40.913596][ T4062] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 40.924800][ T4062] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.203150][ T4069] program syz.4.213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.229464][ T4071] set_capacity_and_notify: 12 callbacks suppressed [ 41.229475][ T4071] loop4: detected capacity change from 0 to 764 [ 41.243925][ T4071] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 41.253507][ T4071] Symlink component flag not implemented [ 41.259185][ T4071] Symlink component flag not implemented (7) [ 41.407598][ T4073] IPv6: Can't replace route, no match found [ 41.410605][ T4075] __nla_validate_parse: 3 callbacks suppressed [ 41.410619][ T4075] netlink: 148 bytes leftover after parsing attributes in process `syz.2.216'. [ 41.453175][ T4079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 41.547775][ T4087] loop4: detected capacity change from 0 to 1024 [ 41.554714][ T4087] EXT4-fs: inline encryption not supported [ 41.560820][ T4087] EXT4-fs: test_dummy_encryption option not supported [ 41.596701][ T4089] IPv6: Can't replace route, no match found [ 41.620476][ T2724] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.633726][ T2724] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.644240][ T4091] program syz.4.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.661035][ T4093] vlan2: entered allmulticast mode [ 41.672220][ T42] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.675213][ T4095] program syz.4.226 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.684226][ T42] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.711620][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.720814][ T4097] loop0: detected capacity change from 0 to 1024 [ 41.727451][ T4097] EXT4-fs: Ignoring removed orlov option [ 41.755928][ T4097] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.834988][ T4107] loop3: detected capacity change from 0 to 512 [ 41.841621][ T4107] ext4: Bad value for 'sb' [ 41.856631][ T4109] netlink: 148 bytes leftover after parsing attributes in process `syz.4.231'. [ 41.890086][ T4112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4112 comm=syz.3.233 [ 41.912362][ T4112] lo speed is unknown, defaulting to 1000 [ 42.023576][ T4120] IPv6: Can't replace route, no match found [ 42.071009][ T4110] syz.0.227 (4110) used greatest stack depth: 9704 bytes left [ 42.072816][ T4124] loop3: detected capacity change from 0 to 512 [ 42.085849][ T4124] EXT4-fs: Ignoring removed nobh option [ 42.091413][ T4124] EXT4-fs: quotafile must be on filesystem root [ 42.100188][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.111939][ T4124] tmpfs: Unknown parameter 'iodes' [ 42.170326][ T4129] vlan0: entered allmulticast mode [ 42.263750][ T4143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 42.311467][ T4146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4146 comm=syz.3.247 [ 42.362114][ T4146] lo speed is unknown, defaulting to 1000 [ 42.645359][ T4155] loop4: detected capacity change from 0 to 512 [ 42.652400][ T4155] journal_path: Lookup failure for './file0' [ 42.658381][ T4155] EXT4-fs: error: could not find journal device path [ 42.681606][ T4155] lo speed is unknown, defaulting to 1000 [ 43.058059][ T4158] lo speed is unknown, defaulting to 1000 [ 43.477325][ T4164] 9p: Bad value for 'wfdno' [ 43.526405][ T4170] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 43.585312][ T4172] loop4: detected capacity change from 0 to 512 [ 43.586511][ T4174] FAULT_INJECTION: forcing a failure. [ 43.586511][ T4174] name failslab, interval 1, probability 0, space 0, times 0 [ 43.604258][ T4174] CPU: 1 UID: 0 PID: 4174 Comm: syz.3.258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.604284][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.604295][ T4174] Call Trace: [ 43.604300][ T4174] [ 43.604307][ T4174] __dump_stack+0x1d/0x30 [ 43.604327][ T4174] dump_stack_lvl+0x95/0xd0 [ 43.604395][ T4174] dump_stack+0x15/0x1b [ 43.604415][ T4174] should_fail_ex+0x265/0x280 [ 43.604450][ T4174] should_failslab+0x8c/0xb0 [ 43.604471][ T4174] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 43.604565][ T4174] ? __alloc_skb+0x2ff/0x4b0 [ 43.604657][ T4174] __alloc_skb+0x2ff/0x4b0 [ 43.604682][ T4174] tipc_buf_acquire+0x2c/0xb0 [ 43.604702][ T4174] tipc_named_withdraw+0x13b/0x360 [ 43.604725][ T4174] tipc_nametbl_withdraw+0x114/0x200 [ 43.604824][ T4174] tipc_sk_leave+0x258/0x270 [ 43.604857][ T4174] tipc_release+0x83/0xcd0 [ 43.604898][ T4174] ? locks_remove_posix+0x1b4/0x300 [ 43.604922][ T4174] ? kstrtouint_from_user+0x9f/0xf0 [ 43.604945][ T4174] ? __rcu_read_unlock+0x4f/0x70 [ 43.605015][ T4174] sock_close+0x6b/0x150 [ 43.605045][ T4174] ? __pfx_sock_close+0x10/0x10 [ 43.605077][ T4174] __fput+0x29b/0x650 [ 43.605141][ T4174] ____fput+0x1c/0x30 [ 43.605166][ T4174] task_work_run+0x131/0x1a0 [ 43.605261][ T4174] exit_to_user_mode_loop+0x1fe/0x740 [ 43.605280][ T4174] ? ksys_dup3+0x14a/0x1b0 [ 43.605302][ T4174] do_syscall_64+0x1dd/0x2b0 [ 43.605329][ T4174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.605359][ T4174] RIP: 0033:0x7f324eb9f749 [ 43.605374][ T4174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.605433][ T4174] RSP: 002b:00007f324d607038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 43.605452][ T4174] RAX: 0000000000000006 RBX: 00007f324edf5fa0 RCX: 00007f324eb9f749 [ 43.605465][ T4174] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 43.605478][ T4174] RBP: 00007f324d607090 R08: 0000000000000000 R09: 0000000000000000 [ 43.605491][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.605504][ T4174] R13: 00007f324edf6038 R14: 00007f324edf5fa0 R15: 00007ffde7aab508 [ 43.605544][ T4174] [ 43.605551][ T4174] tipc: Withdrawal distribution failure [ 43.848219][ T4172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.907907][ T4172] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.932817][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.034338][ T4181] netlink: 6 bytes leftover after parsing attributes in process `syz.4.260'. [ 44.061728][ T4181] loop4: detected capacity change from 0 to 128 [ 44.073352][ T4179] loop3: detected capacity change from 0 to 512 [ 44.090757][ T4179] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.108150][ T4179] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.171817][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.213811][ T4195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4195 comm=syz.3.261 [ 44.238373][ T4195] lo speed is unknown, defaulting to 1000 [ 44.369181][ T4199] FAULT_INJECTION: forcing a failure. [ 44.369181][ T4199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.382335][ T4199] CPU: 0 UID: 0 PID: 4199 Comm: syz.1.263 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.382367][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.382449][ T4199] Call Trace: [ 44.382456][ T4199] [ 44.382550][ T4199] __dump_stack+0x1d/0x30 [ 44.382576][ T4199] dump_stack_lvl+0x95/0xd0 [ 44.382596][ T4199] dump_stack+0x15/0x1b [ 44.382612][ T4199] should_fail_ex+0x265/0x280 [ 44.382635][ T4199] should_fail+0xb/0x20 [ 44.382654][ T4199] should_fail_usercopy+0x1a/0x20 [ 44.382804][ T4199] _copy_from_user+0x1c/0xb0 [ 44.382832][ T4199] __ia32_sys_rt_sigreturn+0x128/0x350 [ 44.382860][ T4199] x64_sys_call+0x274a/0x3000 [ 44.382878][ T4199] do_syscall_64+0xca/0x2b0 [ 44.382950][ T4199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.382971][ T4199] RIP: 0033:0x7f35ead8b829 [ 44.382987][ T4199] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 44.383005][ T4199] RSP: 002b:00007f35e984ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 44.383063][ T4199] RAX: ffffffffffffffda RBX: 00007f35eb045fa0 RCX: 00007f35ead8b829 [ 44.383073][ T4199] RDX: 00007f35e984ea80 RSI: 00007f35e984ebb0 RDI: 0000000000000021 [ 44.383084][ T4199] RBP: 00007f35e984f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.383097][ T4199] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 44.383110][ T4199] R13: 00007f35eb046038 R14: 00007f35eb045fa0 R15: 00007ffde2b92998 [ 44.383166][ T4199] [ 44.602849][ T4204] loop2: detected capacity change from 0 to 1024 [ 44.619561][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.264'. [ 44.638766][ T4204] EXT4-fs: inline encryption not supported [ 44.644647][ T4204] EXT4-fs: Ignoring removed orlov option [ 44.689572][ T4204] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 44.746318][ T4204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 44.776692][ T4204] System zones: 0-1, 3-12 [ 44.822119][ T4204] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.094878][ T4216] veth0_to_team: entered promiscuous mode [ 45.264301][ T4219] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 45.526376][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.848556][ T3479] ================================================================== [ 45.856653][ T3479] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 45.864821][ T3479] [ 45.867140][ T3479] read-write to 0xffff8881005f11f8 of 8 bytes by task 3319 on cpu 1: [ 45.875191][ T3479] __filemap_remove_folio+0x1bc/0x2a0 [ 45.880566][ T3479] __remove_mapping+0x390/0x4c0 [ 45.885423][ T3479] remove_mapping+0x22/0x90 [ 45.889927][ T3479] mapping_try_invalidate+0x26a/0x3f0 [ 45.895304][ T3479] invalidate_mapping_pages+0x27/0x40 [ 45.900668][ T3479] invalidate_bdev+0x58/0x70 [ 45.905239][ T3479] ext4_put_super+0x624/0x7d0 [ 45.909901][ T3479] generic_shutdown_super+0xe6/0x210 [ 45.915175][ T3479] kill_block_super+0x2a/0x70 [ 45.919832][ T3479] ext4_kill_sb+0x42/0x80 [ 45.924145][ T3479] deactivate_locked_super+0x75/0x1c0 [ 45.929507][ T3479] deactivate_super+0x97/0xa0 [ 45.934172][ T3479] cleanup_mnt+0x2a9/0x320 [ 45.938572][ T3479] __cleanup_mnt+0x19/0x20 [ 45.942979][ T3479] task_work_run+0x131/0x1a0 [ 45.947562][ T3479] exit_to_user_mode_loop+0x1fe/0x740 [ 45.952917][ T3479] do_syscall_64+0x1dd/0x2b0 [ 45.957502][ T3479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.963379][ T3479] [ 45.965694][ T3479] read to 0xffff8881005f11f8 of 8 bytes by task 3479 on cpu 0: [ 45.973218][ T3479] nr_blockdev_pages+0x7e/0xd0 [ 45.977965][ T3479] si_meminfo+0x87/0xd0 [ 45.982103][ T3479] update_defense_level+0x47/0x5c0 [ 45.987202][ T3479] defense_work_handler+0x1f/0x80 [ 45.992213][ T3479] process_scheduled_works+0x4ce/0x9d0 [ 45.997658][ T3479] worker_thread+0x582/0x770 [ 46.002242][ T3479] kthread+0x489/0x510 [ 46.006298][ T3479] ret_from_fork+0x149/0x290 [ 46.010875][ T3479] ret_from_fork_asm+0x1a/0x30 [ 46.015625][ T3479] [ 46.017927][ T3479] value changed: 0x0000000000000005 -> 0x0000000000000002 [ 46.025008][ T3479] [ 46.027311][ T3479] Reported by Kernel Concurrency Sanitizer on: [ 46.033440][ T3479] CPU: 0 UID: 0 PID: 3479 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.043229][ T3479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.053266][ T3479] Workqueue: events_long defense_work_handler [ 46.059322][ T3479] ==================================================================