last executing test programs: 2.037383778s ago: executing program 1 (id=104): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x5, 0x3, 0x0, 0x5, 0x0}) 1.991753749s ago: executing program 1 (id=105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) syz_usbip_server_init(0x4) (fail_nth: 3) 1.990837819s ago: executing program 4 (id=106): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usbip_server_init(0x4) 1.633304801s ago: executing program 0 (id=109): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r0, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x5c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x0) 1.560620231s ago: executing program 0 (id=110): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) sync_file_range(r0, 0x6be, 0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000040000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140004800800014000000003080002402de8387c28000000000a05000000000000000000010000080900010073797a31000000000800024000000001140000001100e7"], 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x8004) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000070000000200000000000000111000c108a8b38727ff", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) faccessat(0xffffffffffffffff, 0x0, 0x5) 1.560306591s ago: executing program 0 (id=111): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40ca, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f0000000840)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x7, 0x6, 0x0, 0x100, 0x10, 0x540000, r5}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @private2, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r7}) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x114, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a6", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) ftruncate(r0, 0x8201) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0x1, 0x8080c61) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) truncate(&(0x7f00000002c0)='./file1\x00', 0x8080000) 1.351681492s ago: executing program 0 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000280)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000340)=""/112, 0x70}], 0x3}, 0x100) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYRESDEC=r0], 0x2ba}, 0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000"], 0x48) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r9, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.229972973s ago: executing program 3 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYBLOB='\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) lsetxattr$security_selinux(&(0x7f0000000c00)='./cgroup.net/devices.allow\x00', &(0x7f0000000c40), &(0x7f0000000c80)='system_u:object_r:pam_console_exec_t:s0\x00', 0x28, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r3}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ae27000000000000040000001811"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip_mr_vif\x00') preadv(r5, &(0x7f0000004300)=[{&(0x7f0000004200)=""/221, 0xdd}], 0x1, 0x10001, 0xfffffffd) pread64(r5, &(0x7f0000004380)=""/246, 0xf6, 0x2) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r5}, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') 1.045356724s ago: executing program 2 (id=117): syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x576, &(0x7f0000000580)="$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") 1.045042254s ago: executing program 1 (id=118): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x1, {{0x2, 0x4e21, @empty=0xe0000000}}, {{0x2, 0x4e25, @broadcast}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x1000000, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) io_setup(0x9, &(0x7f00000001c0)=0x0) io_destroy(r5) r6 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x90) pwritev2(r6, 0x0, 0x0, 0x7800, 0x0, 0x3) io_cancel(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x4, r0, &(0x7f0000001580)="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", 0xc00, 0x9, 0x0, 0x0, r6}, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c00"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 794.929006ms ago: executing program 4 (id=119): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x34, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8000c62) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r4, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f00000011c0)={{r4}, "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"}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x5b, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4040084) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x2) pwrite64(r6, &(0x7f0000000140), 0x0, 0xfecc) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 793.336776ms ago: executing program 2 (id=120): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) 587.211067ms ago: executing program 2 (id=121): r0 = socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='workqueue_queue_work\x00', r1, 0x0, 0x2000000000000}, 0x18) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 586.802037ms ago: executing program 3 (id=122): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0, 0x3b}], 0x1) 567.946287ms ago: executing program 2 (id=123): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000240)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@nolazytime, 0x0}, {@test_dummy_encryption}, {@usrquota}, {@grpquota}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f0000000840)={{}, {0x0, 0x989680}}, &(0x7f0000000880)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000005304010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x64049}, 0x40000) r4 = socket(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f00000002c0), 0xc, &(0x7f0000000240)={&(0x7f0000000400)=@deltaction={0x24, 0x31, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x833, 0xffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x72c, &(0x7f00000014c0)="$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") 500.294847ms ago: executing program 4 (id=124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000000700000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={0x0, r0}, 0x18) 492.568787ms ago: executing program 1 (id=125): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000014840)=ANY=[@ANYBLOB="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"], 0x65d4}}, 0x200000d4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x6, 0x3}, 0x0, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x88094}, 0x40) sendmsg$NFT_BATCH(r4, 0x0, 0x2000c0d1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r3, @ANYBLOB="14000100fff1ffffffffffffff00000000000001080008000204"], 0x34}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x1010, 0xffffffffffffffff, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x4000010, 0xffffffffffffffff, 0x10000000) r9 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x5e}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, 0x0, &(0x7f0000000180)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r11}}) syz_io_uring_submit(r7, r8, &(0x7f0000000100)=@IORING_OP_POLL_REMOVE={0x7, 0x5e, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r11}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c0000001a0a01080000000000000000010000020c0004"], 0x13c}}, 0x0) 454.746558ms ago: executing program 3 (id=126): r0 = syz_io_uring_setup(0x223d, 0x0, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000740)={0x3, 0x1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/94, 0x5e}], &(0x7f0000000700)=[0x0, 0x0]}, 0x20) 418.670278ms ago: executing program 0 (id=127): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@delalloc}, {@errors_remount}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}]}, 0x11, 0x556, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) truncate(&(0x7f00000002c0)='./file1\x00', 0x8080000) 394.211518ms ago: executing program 3 (id=128): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) open$dir(0x0, 0x0, 0x0) 393.539148ms ago: executing program 2 (id=129): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffe) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") 370.252648ms ago: executing program 4 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}, {0x7, 0xe22, 0x9, 0x5cf4}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xa4}}, 0x24040084) (fail_nth: 2) 369.875888ms ago: executing program 1 (id=131): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) link(&(0x7f0000000200)='./file1\x00', 0x0) 285.312939ms ago: executing program 3 (id=132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x1000, 0x5e, 0x80, 0x4}]}) 285.129448ms ago: executing program 4 (id=133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x5c, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400}, 0x0) 272.206059ms ago: executing program 0 (id=134): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x4, 0x0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r2, 0x0, 0xfffffffffffffff4}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4, {0x3}}, './file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x43, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r7, 0x0, 0x900, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x4d, &(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYRESHEX], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r9 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x141000, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, r9, 0xf2d6e000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x8}, 0x100b28, 0x9, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0x2, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) 18.326381ms ago: executing program 1 (id=135): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") open(&(0x7f0000000040)='./file0\x00', 0x108843, 0x98) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x8, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x19, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de477f00f61effc978"}, {0x5, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) 17.572181ms ago: executing program 2 (id=136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xf07, &(0x7f0000000580)={0x0, 0x400826e, 0x1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{0x0, 0x3b}], 0x1) 10.89053ms ago: executing program 3 (id=137): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x7, &(0x7f0000000840)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000180)="f7ba7cad93417e5c3a5aa265eb5e194b980947411e7fbc8c01d5c69557fa1dac7ca06463bc53f6b6a239dea1b2d947f3e7c63d50161979827ff01da6aa739260b5355083f44aae0c6feea5cd35eba8cfc4b079437d070d68e9d2f72797bffd4e5da48a4a3192e654cf09cbc3806c7c470230508809af79d445f9ec6dc15f0a1b72040c3ee9e6b7f164d0539eb9730064c1266282451787956acfbba44069e7cf4905306a9746c674b36ab91d7d", 0xad, 0x1, 0x0, 0x3, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x40, r1, &(0x7f0000000280)="56ef0351e0587a249df03650a7c22dfe9761a9cc06a994536728f1fb91466f5a95e43d23e424a9d86db3aad2bd3ba7eb9cb6a50a09353230489f993e5de32f5e1feca325a4ff845c7b05f328a5eedf474a27e69f2efb41d7227a31c6eb", 0x5d, 0x200, 0x0, 0x0, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x2, r0, &(0x7f0000000340)="e6a26c281f30d7b811567d6d8f2a97f587c092a4718000f496b8cb84fd3b6ab45455b0cf3ea5e5e4fb128b1b57a3e9521a233b0921145b0a3150c24043327c1281a85f6070452208de9312be6b619b1e45d96d9b21839279873dfa3a8bedc8e0da2894ca736a53fc9433c448866499f50e9369189f657cbdf79380fe04d46f2130797b6e22e6d77c7e3d0f387a", 0x8d, 0xfb, 0x0, 0x1, r1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000880)="479ab93e49fa5997537bec817e55bb674347a2dff2e8de1da39c4db6b7c8949d2ccb7812ee47918894b8ada00a0abbb407e1785901168eadb92af5248f14ca639334ec4b881b34e2c00bad6b13f23c7af2e2d908d979d512800bb46c448cbf2e61d9f872f0decf738d0410ae0d87d2502a257d038acb99fedefaea04b9c76b8a1bea08ca5c5262845f75486f4e598b8cf9c5eee3690843d16ea1d85abcb5fb039e4e09d47fc476047deeda487c1db2a5133f4aee849a8cdbc4c49aa69173e0aa3c9c2ff305cb90358d813974dc1ee039b7f867bc8af3", 0xd6, 0x200, 0x0, 0x2, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x828, r1, &(0x7f00000005c0)="b1a11e7ef5da6cb969ffda57ea851cac7eee471c8aad7da9b51a1de73dce2d014a808a7bf81f317e7544879f5f2a55ef18f09228ce1e4b3c3a72cf344251ffd9773fc074dceb5466eb5a5d6551e99db4a03fcf29bd0b1e1eb8ddec1e285464a730b08bbbc00425d9e001296f443695da741028c5a8fbf204afa3a6589977377abfd48977f73cbc5e257b5ca61eff7105a430564480a6e64daf1e6af476307a1c8a41e69c8c2b596cbfbc27d110ca73993104950b89", 0xb5, 0x7, 0x0, 0x2, r1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f00000006c0), 0x0, 0x1, 0x0, 0x3, r1}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x2, 0x11, r1, &(0x7f00000007c0)="f4857eb3ac4eaa0763a18ed16f55b4", 0xf, 0x3, 0x0, 0x2, r1}]) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r4, 0x0, 0x100000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000380)=ANY=[@ANYBLOB="03"], 0x0, 0xe800) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0xfffd, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc96, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56561, 0x4000, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x280400dc}, 0x4000050) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a014400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000024000380100000800c00018006000100d10300000c0000800800034000000002040000802c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) fcntl$setpipe(r0, 0x407, 0x401) 0s ago: executing program 4 (id=138): r0 = syz_io_uring_setup(0x223d, 0x0, &(0x7f0000000040), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000740)={0x3, 0x1, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)=""/81, 0x51}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/94, 0x5e}], &(0x7f0000000700)=[0x0, 0x0]}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 21.847326][ T29] audit: type=1400 audit(1762005725.249:62): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.870287][ T29] audit: type=1400 audit(1762005725.279:63): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.870993][ T3297] cgroup: Unknown subsys name 'net' [ 21.897897][ T29] audit: type=1400 audit(1762005725.309:64): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.090382][ T3297] cgroup: Unknown subsys name 'cpuset' [ 22.096487][ T3297] cgroup: Unknown subsys name 'rlimit' [ 22.265871][ T29] audit: type=1400 audit(1762005725.669:65): avc: denied { setattr } for pid=3297 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.289849][ T29] audit: type=1400 audit(1762005725.669:66): avc: denied { create } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.302037][ T3302] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.310352][ T29] audit: type=1400 audit(1762005725.669:67): avc: denied { write } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.339180][ T29] audit: type=1400 audit(1762005725.669:68): avc: denied { read } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.359638][ T29] audit: type=1400 audit(1762005725.679:69): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.362246][ T3297] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.384548][ T29] audit: type=1400 audit(1762005725.679:70): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.419853][ T29] audit: type=1400 audit(1762005725.729:71): avc: denied { relabelto } for pid=3302 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.614131][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 23.622669][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 23.664781][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 23.711862][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 23.722602][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 23.770040][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.777107][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.784403][ T3312] bridge_slave_0: entered allmulticast mode [ 23.790683][ T3312] bridge_slave_0: entered promiscuous mode [ 23.802064][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.809233][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.816370][ T3317] bridge_slave_0: entered allmulticast mode [ 23.822783][ T3317] bridge_slave_0: entered promiscuous mode [ 23.840110][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.847147][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.854276][ T3315] bridge_slave_0: entered allmulticast mode [ 23.860930][ T3315] bridge_slave_0: entered promiscuous mode [ 23.867319][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.874406][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.881591][ T3312] bridge_slave_1: entered allmulticast mode [ 23.888051][ T3312] bridge_slave_1: entered promiscuous mode [ 23.894287][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.901410][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.908504][ T3317] bridge_slave_1: entered allmulticast mode [ 23.914883][ T3317] bridge_slave_1: entered promiscuous mode [ 23.927204][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.934291][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.941386][ T3315] bridge_slave_1: entered allmulticast mode [ 23.947636][ T3315] bridge_slave_1: entered promiscuous mode [ 23.968576][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.993234][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.010773][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.033419][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.043471][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.052779][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.059911][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.067083][ T3322] bridge_slave_0: entered allmulticast mode [ 24.073495][ T3322] bridge_slave_0: entered promiscuous mode [ 24.084503][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.091572][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.098692][ T3311] bridge_slave_0: entered allmulticast mode [ 24.105050][ T3311] bridge_slave_0: entered promiscuous mode [ 24.112292][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.121420][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.128627][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.135826][ T3311] bridge_slave_1: entered allmulticast mode [ 24.142197][ T3311] bridge_slave_1: entered promiscuous mode [ 24.152794][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.159877][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.167033][ T3322] bridge_slave_1: entered allmulticast mode [ 24.173370][ T3322] bridge_slave_1: entered promiscuous mode [ 24.184798][ T3317] team0: Port device team_slave_0 added [ 24.207495][ T3317] team0: Port device team_slave_1 added [ 24.223033][ T3312] team0: Port device team_slave_0 added [ 24.229968][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.240470][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.254406][ T3315] team0: Port device team_slave_0 added [ 24.260968][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.270506][ T3315] team0: Port device team_slave_1 added [ 24.276935][ T3312] team0: Port device team_slave_1 added [ 24.283569][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.302403][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.309625][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.335524][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.363687][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.370669][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.396611][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.420807][ T3322] team0: Port device team_slave_0 added [ 24.426730][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.433680][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.459619][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.473089][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.480062][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.506057][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.517391][ T3311] team0: Port device team_slave_0 added [ 24.523600][ T3322] team0: Port device team_slave_1 added [ 24.529465][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.536471][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.562496][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.582316][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.589262][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.615183][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.631538][ T3311] team0: Port device team_slave_1 added [ 24.661233][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.668169][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.694081][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.710996][ T3317] hsr_slave_0: entered promiscuous mode [ 24.716838][ T3317] hsr_slave_1: entered promiscuous mode [ 24.733677][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.740684][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.766585][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.791682][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.798632][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.824602][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.837951][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.844901][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.870790][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.883410][ T3312] hsr_slave_0: entered promiscuous mode [ 24.889290][ T3312] hsr_slave_1: entered promiscuous mode [ 24.895170][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 24.900906][ T3312] Cannot create hsr debugfs directory [ 24.908269][ T3315] hsr_slave_0: entered promiscuous mode [ 24.914268][ T3315] hsr_slave_1: entered promiscuous mode [ 24.920102][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 24.925806][ T3315] Cannot create hsr debugfs directory [ 24.960727][ T3311] hsr_slave_0: entered promiscuous mode [ 24.966751][ T3311] hsr_slave_1: entered promiscuous mode [ 24.972652][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 24.978355][ T3311] Cannot create hsr debugfs directory [ 25.018798][ T3322] hsr_slave_0: entered promiscuous mode [ 25.024842][ T3322] hsr_slave_1: entered promiscuous mode [ 25.030815][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 25.036529][ T3322] Cannot create hsr debugfs directory [ 25.189131][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.199786][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.208654][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.219205][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.240232][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.248987][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.258080][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.270135][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.298468][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.308763][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.321886][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.340187][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.361716][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.387686][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.399681][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.416458][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.423629][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.432724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.439751][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.448382][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.457456][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.474333][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.489229][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.513700][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.523261][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.533552][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.542716][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.562394][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.569429][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.578204][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.594789][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.601887][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.624849][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.654546][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.675678][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.682835][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.701156][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.708430][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.727751][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.751476][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.784616][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.802353][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.816683][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.823781][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.833096][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 25.843495][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.850562][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.874838][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.887831][ T3317] veth0_vlan: entered promiscuous mode [ 25.906273][ T2716] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.913344][ T2716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.931415][ T3317] veth1_vlan: entered promiscuous mode [ 25.943309][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.950491][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.966359][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 25.976788][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 25.998379][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.008803][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.029485][ T3317] veth0_macvtap: entered promiscuous mode [ 26.044722][ T3317] veth1_macvtap: entered promiscuous mode [ 26.053373][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.067686][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.085679][ T3312] veth0_vlan: entered promiscuous mode [ 26.094334][ T3312] veth1_vlan: entered promiscuous mode [ 26.105754][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.128768][ T3312] veth0_macvtap: entered promiscuous mode [ 26.140824][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.149562][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.159402][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.180516][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.188222][ T3312] veth1_macvtap: entered promiscuous mode [ 26.200904][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.216640][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.231179][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.264902][ T3311] veth0_vlan: entered promiscuous mode [ 26.273307][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.286179][ T3311] veth1_vlan: entered promiscuous mode [ 26.300530][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.324912][ T2716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.345746][ T42] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.355338][ T3311] veth0_macvtap: entered promiscuous mode [ 26.363154][ T3311] veth1_macvtap: entered promiscuous mode [ 26.369917][ T42] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.379512][ T3472] FAULT_INJECTION: forcing a failure. [ 26.379512][ T3472] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 26.383955][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.392694][ T3472] CPU: 0 UID: 0 PID: 3472 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(voluntary) [ 26.392722][ T3472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 26.392735][ T3472] Call Trace: [ 26.392800][ T3472] [ 26.392808][ T3472] __dump_stack+0x1d/0x30 [ 26.392836][ T3472] dump_stack_lvl+0xe8/0x140 [ 26.392907][ T3472] dump_stack+0x15/0x1b [ 26.392924][ T3472] should_fail_ex+0x265/0x280 [ 26.392999][ T3472] should_fail+0xb/0x20 [ 26.393014][ T3472] should_fail_usercopy+0x1a/0x20 [ 26.393080][ T3472] _copy_from_user+0x1c/0xb0 [ 26.393107][ T3472] ___sys_sendmsg+0xc1/0x1d0 [ 26.393151][ T3472] __x64_sys_sendmsg+0xd4/0x160 [ 26.393173][ T3472] x64_sys_call+0x191e/0x3000 [ 26.393305][ T3472] do_syscall_64+0xd2/0x200 [ 26.393388][ T3472] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 26.393422][ T3472] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 26.393455][ T3472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 26.393477][ T3472] RIP: 0033:0x7f9b1682efc9 [ 26.393520][ T3472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 26.393538][ T3472] RSP: 002b:00007f9b15297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 26.393562][ T3472] RAX: ffffffffffffffda RBX: 00007f9b16a85fa0 RCX: 00007f9b1682efc9 [ 26.393576][ T3472] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000007 [ 26.393588][ T3472] RBP: 00007f9b15297090 R08: 0000000000000000 R09: 0000000000000000 [ 26.393600][ T3472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.393613][ T3472] R13: 00007f9b16a86038 R14: 00007f9b16a85fa0 R15: 00007ffd5b043c38 [ 26.393631][ T3472] [ 26.576112][ T42] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.592690][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.602774][ T3315] veth0_vlan: entered promiscuous mode [ 26.614470][ T3315] veth1_vlan: entered promiscuous mode [ 26.637258][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.660963][ T3315] veth0_macvtap: entered promiscuous mode [ 26.685940][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.697749][ T3485] FAULT_INJECTION: forcing a failure. [ 26.697749][ T3485] name failslab, interval 1, probability 0, space 0, times 1 [ 26.710559][ T3485] CPU: 0 UID: 0 PID: 3485 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 26.710594][ T3315] veth1_macvtap: entered promiscuous mode [ 26.710611][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 26.710622][ T3485] Call Trace: [ 26.710627][ T3485] [ 26.710633][ T3485] __dump_stack+0x1d/0x30 [ 26.710727][ T3485] dump_stack_lvl+0xe8/0x140 [ 26.710749][ T3485] dump_stack+0x15/0x1b [ 26.710773][ T3485] should_fail_ex+0x265/0x280 [ 26.710793][ T3485] should_failslab+0x8c/0xb0 [ 26.710822][ T3485] kmem_cache_alloc_noprof+0x50/0x480 [ 26.710852][ T3485] ? ioctx_alloc+0xf5/0x4e0 [ 26.710957][ T3485] ? __fget_files+0x184/0x1c0 [ 26.710985][ T3485] ioctx_alloc+0xf5/0x4e0 [ 26.711014][ T3485] ? fput+0x8f/0xc0 [ 26.711033][ T3485] __se_sys_io_setup+0x6b/0x1b0 [ 26.711062][ T3485] __x64_sys_io_setup+0x31/0x40 [ 26.711090][ T3485] x64_sys_call+0x2f0e/0x3000 [ 26.711169][ T3485] do_syscall_64+0xd2/0x200 [ 26.711189][ T3485] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 26.711262][ T3485] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 26.711324][ T3485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 26.711345][ T3485] RIP: 0033:0x7f9b1682efc9 [ 26.711362][ T3485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 26.711380][ T3485] RSP: 002b:00007f9b15297038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 26.711431][ T3485] RAX: ffffffffffffffda RBX: 00007f9b16a85fa0 RCX: 00007f9b1682efc9 [ 26.711444][ T3485] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 26.711456][ T3485] RBP: 00007f9b15297090 R08: 0000000000000000 R09: 0000000000000000 [ 26.711469][ T3485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.711481][ T3485] R13: 00007f9b16a86038 R14: 00007f9b16a85fa0 R15: 00007ffd5b043c38 [ 26.711499][ T3485] [ 26.779680][ T3488] 9pnet_fd: Insufficient options for proto=fd [ 26.857202][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.912780][ T371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.921711][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 26.921722][ T29] audit: type=1400 audit(1762005730.329:104): avc: denied { cpu } for pid=3487 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 26.948176][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.955649][ T371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.981481][ T3322] veth0_vlan: entered promiscuous mode [ 26.990952][ T3322] veth1_vlan: entered promiscuous mode [ 27.005660][ T29] audit: type=1400 audit(1762005730.409:105): avc: denied { allowed } for pid=3496 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 27.014552][ T3322] veth0_macvtap: entered promiscuous mode [ 27.024666][ T29] audit: type=1400 audit(1762005730.409:106): avc: denied { create } for pid=3496 comm="syz.3.9" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.051224][ T29] audit: type=1400 audit(1762005730.409:107): avc: denied { map } for pid=3496 comm="syz.3.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.075054][ T29] audit: type=1400 audit(1762005730.409:108): avc: denied { read write } for pid=3496 comm="syz.3.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3878 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.112724][ T3322] veth1_macvtap: entered promiscuous mode [ 27.129945][ T42] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.157784][ T42] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.186166][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.199463][ T29] audit: type=1326 audit(1762005730.589:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1682efc9 code=0x7ffc0000 [ 27.222726][ T29] audit: type=1326 audit(1762005730.609:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b1682efc9 code=0x7ffc0000 [ 27.222732][ T42] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.222767][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.246053][ T29] audit: type=1326 audit(1762005730.609:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1682efc9 code=0x7ffc0000 [ 27.269722][ T3502] loop3: detected capacity change from 0 to 512 [ 27.286659][ T29] audit: type=1326 audit(1762005730.609:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b1682efc9 code=0x7ffc0000 [ 27.316172][ T29] audit: type=1326 audit(1762005730.609:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3500 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b1682efc9 code=0x7ffc0000 [ 27.344773][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.367904][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.400019][ T3502] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 27.409223][ T52] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.413243][ T3502] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 27.458492][ T52] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.474684][ T3502] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.11: invalid indirect mapped block 4294967295 (level 0) [ 27.492252][ T52] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.494163][ T3502] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.11: invalid indirect mapped block 4294967295 (level 1) [ 27.526036][ T3520] lo speed is unknown, defaulting to 1000 [ 27.540387][ T3520] lo speed is unknown, defaulting to 1000 [ 27.547048][ T3520] lo speed is unknown, defaulting to 1000 [ 27.548224][ T3502] EXT4-fs (loop3): 1 orphan inode deleted [ 27.558645][ T3502] EXT4-fs (loop3): 1 truncate cleaned up [ 27.564933][ T3502] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.611059][ T3523] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 27.622031][ T3520] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 27.629663][ T3520] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 27.652489][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.691326][ T3520] lo speed is unknown, defaulting to 1000 [ 27.749974][ T3498] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 27.774835][ T3530] netlink: 'syz.3.17': attribute type 13 has an invalid length. [ 27.782911][ T3520] lo speed is unknown, defaulting to 1000 [ 27.844185][ T3520] lo speed is unknown, defaulting to 1000 [ 27.850124][ T3527] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 27.859743][ T3527] SELinux: failed to load policy [ 27.867818][ T3527] loop1: detected capacity change from 0 to 512 [ 27.882517][ T3530] gretap0: refused to change device tx_queue_len [ 27.889023][ T3527] EXT4-fs (loop1): orphan cleanup on readonly fs [ 27.895535][ T3527] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 27.905069][ T3527] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 27.919507][ T3527] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.18: attempt to clear invalid blocks 2 len 1 [ 27.932803][ T3527] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.18: invalid indirect mapped block 1819239214 (level 0) [ 27.946949][ T3527] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.18: invalid indirect mapped block 1819239214 (level 1) [ 27.949912][ T3530] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 27.970210][ T3527] EXT4-fs (loop1): 1 truncate cleaned up [ 27.982619][ T3527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 27.995538][ T3520] lo speed is unknown, defaulting to 1000 [ 28.001770][ T3520] lo speed is unknown, defaulting to 1000 [ 28.070378][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.127227][ T3540] loop1: detected capacity change from 0 to 512 [ 28.179791][ T3540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.197685][ T3538] loop4: detected capacity change from 0 to 8192 [ 28.200806][ T3540] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 28.226667][ T3538] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 28.249630][ T3552] loop0: detected capacity change from 0 to 128 [ 28.258836][ T3538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 28.278238][ T3552] ======================================================= [ 28.278238][ T3552] WARNING: The mand mount option has been deprecated and [ 28.278238][ T3552] and is ignored by this kernel. Remove the mand [ 28.278238][ T3552] option from the mount to silence this warning. [ 28.278238][ T3552] ======================================================= [ 28.341303][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.354548][ T3538] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 28.371053][ T3552] netlink: 'syz.0.25': attribute type 1 has an invalid length. [ 28.378763][ T3552] netlink: 224 bytes leftover after parsing attributes in process `syz.0.25'. [ 28.435056][ T3560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 28.444791][ T3560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3560 comm=syz.3.29 [ 28.519005][ T3565] loop3: detected capacity change from 0 to 1024 [ 28.527882][ T3568] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 28.560246][ T3565] EXT4-fs: Ignoring removed bh option [ 28.570506][ T3565] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 28.579229][ T3565] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 28.620913][ T3565] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 28.666796][ T3565] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.31: lblock 2 mapped to illegal pblock 2 (length 1) [ 28.725750][ T3586] loop1: detected capacity change from 0 to 512 [ 28.735663][ T3586] EXT4-fs: test_dummy_encryption option not supported [ 28.756139][ T3584] sctp: [Deprecated]: syz.2.38 (pid 3584) Use of int in maxseg socket option. [ 28.756139][ T3584] Use struct sctp_assoc_value instead [ 28.781096][ T3565] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.31: lblock 0 mapped to illegal pblock 48 (length 1) [ 28.817594][ T3565] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.31: Failed to acquire dquot type 0 [ 28.828209][ T3580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.35'. [ 28.879054][ T3565] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 28.890574][ T3565] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.31: mark_inode_dirty error [ 28.890839][ C1] hrtimer: interrupt took 30381 ns [ 28.911871][ T3565] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 28.928591][ T3591] syzkaller0: entered promiscuous mode [ 28.934122][ T3591] syzkaller0: entered allmulticast mode [ 28.942988][ T3565] EXT4-fs (loop3): 1 orphan inode deleted [ 28.959949][ T52] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 28.976634][ T3565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.997049][ T52] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 29.036021][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.060487][ T3312] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 29.090541][ T3593] loop1: detected capacity change from 0 to 512 [ 29.105102][ T3593] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.119702][ T3312] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 29.129431][ T3312] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 29.130232][ T3607] loop4: detected capacity change from 0 to 128 [ 29.145851][ T3593] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 29.162681][ T3593] EXT4-fs (loop1): 1 truncate cleaned up [ 29.171672][ T3593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.189014][ T3610] capability: warning: `syz.3.44' uses 32-bit capabilities (legacy support in use) [ 29.215044][ T3607] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 29.222730][ T3607] netlink: 224 bytes leftover after parsing attributes in process `syz.4.47'. [ 29.261400][ T3614] loop4: detected capacity change from 0 to 1024 [ 29.272352][ T3614] EXT4-fs: inline encryption not supported [ 29.290159][ T3593] loop1: detected capacity change from 512 to 0 [ 29.296751][ T3612] EXT4-fs error (device loop1): ext4_get_inode_loc:4970: inode #2: block 5: comm syz.1.41: unable to read itable block [ 29.324774][ T3611] loop2: detected capacity change from 0 to 1024 [ 29.331232][ C1] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 29.333446][ T3614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.398787][ T3612] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 29.446176][ T3612] EXT4-fs (loop1): I/O error while writing superblock [ 29.453036][ T3612] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6313: IO failure [ 29.496357][ T3611] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 29.518036][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.527115][ T3612] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 29.528019][ T3621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.536692][ T3612] EXT4-fs (loop1): I/O error while writing superblock [ 29.559949][ T3611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 29.568076][ T3611] EXT4-fs (loop2): failed to initialize system zone (-117) [ 29.576594][ T3621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.613964][ T3611] EXT4-fs (loop2): mount failed [ 29.648563][ T3621] syz.3.50 uses obsolete (PF_INET,SOCK_PACKET) [ 29.687621][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.700164][ T3315] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 29.728963][ T3315] EXT4-fs (loop1): I/O error while writing superblock [ 29.732311][ T3621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 29.747869][ T3605] loop2: detected capacity change from 0 to 512 [ 29.775319][ T3605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.820262][ T3605] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.836764][ T3633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 29.844003][ T3633] IPv6: NLM_F_CREATE should be set when creating new route [ 29.967343][ T3636] loop1: detected capacity change from 0 to 256 [ 29.978663][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.979955][ T3636] loop7: detected capacity change from 0 to 7 [ 31.038114][ T3648] netlink: 'syz.4.57': attribute type 1 has an invalid length. [ 31.038142][ T3648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.57'. [ 31.160134][ T3656] loop4: detected capacity change from 0 to 128 [ 31.184731][ T3655] loop2: detected capacity change from 0 to 512 [ 31.199737][ T3655] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.214908][ T3650] netlink: 'syz.0.58': attribute type 1 has an invalid length. [ 31.244621][ T3655] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 31.265676][ T3656] netlink: 'syz.4.59': attribute type 1 has an invalid length. [ 31.273323][ T3656] netlink: 224 bytes leftover after parsing attributes in process `syz.4.59'. [ 31.298173][ T3655] EXT4-fs (loop2): 1 truncate cleaned up [ 31.304249][ T3655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.491529][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.528484][ T3666] lo speed is unknown, defaulting to 1000 [ 31.558573][ T3666] lo speed is unknown, defaulting to 1000 [ 31.575776][ T3666] lo speed is unknown, defaulting to 1000 [ 31.586157][ T3672] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 31.592698][ T3672] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 31.600554][ T3672] vhci_hcd vhci_hcd.0: Device attached [ 31.607566][ T3666] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 31.617068][ T3677] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 31.641897][ T3676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 31.665220][ T3666] lo speed is unknown, defaulting to 1000 [ 31.688065][ T3673] vhci_hcd: connection closed [ 31.688196][ T42] vhci_hcd: stop threads [ 31.693329][ T3666] lo speed is unknown, defaulting to 1000 [ 31.697223][ T42] vhci_hcd: release socket [ 31.697234][ T42] vhci_hcd: disconnect device [ 31.760305][ T3666] lo speed is unknown, defaulting to 1000 [ 31.766480][ T3666] lo speed is unknown, defaulting to 1000 [ 31.780817][ T3666] lo speed is unknown, defaulting to 1000 [ 31.805449][ T3686] loop1: detected capacity change from 0 to 1024 [ 31.831070][ T3686] EXT4-fs (loop1): orphan cleanup on readonly fs [ 31.894777][ T3692] vlan2: entered allmulticast mode [ 31.900052][ T3692] hsr0: entered allmulticast mode [ 31.905103][ T3692] hsr_slave_0: entered allmulticast mode [ 31.910853][ T3692] hsr_slave_1: entered allmulticast mode [ 31.953143][ T3694] lo speed is unknown, defaulting to 1000 [ 32.008403][ T29] kauditd_printk_skb: 681 callbacks suppressed [ 32.008420][ T29] audit: type=1400 audit(1762005735.409:792): avc: denied { create } for pid=3681 comm="syz.2.69" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.035136][ T29] audit: type=1400 audit(1762005735.409:793): avc: denied { write } for pid=3681 comm="syz.2.69" name="file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.057374][ T29] audit: type=1400 audit(1762005735.409:794): avc: denied { open } for pid=3681 comm="syz.2.69" path="/20/file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.080087][ T29] audit: type=1400 audit(1762005735.409:795): avc: denied { ioctl } for pid=3681 comm="syz.2.69" path="/20/file0" dev="tmpfs" ino=124 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.275145][ T3686] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 32.285287][ T3686] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 32.294694][ T3686] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.68: Failed to acquire dquot type 0 [ 32.334679][ T3686] EXT4-fs (loop1): 1 truncate cleaned up [ 32.348230][ T3686] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.441443][ T3704] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 32.449047][ T3704] netlink: 224 bytes leftover after parsing attributes in process `syz.0.73'. [ 32.458094][ T3701] loop4: detected capacity change from 0 to 512 [ 32.458541][ T3701] /dev/loop4: Can't open blockdev [ 32.528949][ T29] audit: type=1400 audit(1762005735.929:796): avc: denied { create } for pid=3710 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.563791][ T29] audit: type=1400 audit(1762005735.939:797): avc: denied { bind } for pid=3710 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.583424][ T29] audit: type=1400 audit(1762005735.939:798): avc: denied { connect } for pid=3710 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 32.651588][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.667198][ T3713] loop3: detected capacity change from 0 to 512 [ 32.672319][ T3714] pimreg: entered allmulticast mode [ 32.682916][ T3713] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.689283][ T3713] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 32.698556][ T3713] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 32.712850][ T3708] pimreg: left allmulticast mode [ 32.713186][ T3713] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.76: attempt to clear invalid blocks 2 len 1 [ 32.730921][ T3713] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.76: invalid indirect mapped block 1819239214 (level 0) [ 32.746384][ T3713] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.76: invalid indirect mapped block 1819239214 (level 1) [ 32.760611][ T3713] EXT4-fs (loop3): 1 truncate cleaned up [ 32.766617][ T3713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.885838][ T29] audit: type=1400 audit(1762005736.279:799): avc: denied { unlink } for pid=3317 comm="syz-executor" name="file0" dev="tmpfs" ino=124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 32.908967][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.967666][ T3729] loop2: detected capacity change from 0 to 8192 [ 32.992871][ T3729] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.021238][ T3732] loop3: detected capacity change from 0 to 8192 [ 33.038859][ T3740] loop4: detected capacity change from 0 to 764 [ 33.056334][ T3741] netlink: 'syz.1.84': attribute type 16 has an invalid length. [ 33.064087][ T3741] netlink: 'syz.1.84': attribute type 17 has an invalid length. [ 33.080863][ T3729] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 33.098506][ T3732] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.123970][ T3740] rock: directory entry would overflow storage [ 33.130204][ T3740] rock: sig=0x4654, size=5, remaining=4 [ 33.153791][ T3741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 33.177594][ T3736] loop1: detected capacity change from 0 to 512 [ 33.248761][ T3732] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 33.293591][ T3750] 9p: Unknown access argument ¿: -22 [ 33.364761][ T3756] loop2: detected capacity change from 0 to 1024 [ 33.377347][ T3756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.402911][ T3756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.471315][ T3763] __nla_validate_parse: 4 callbacks suppressed [ 33.471332][ T3763] netlink: 24 bytes leftover after parsing attributes in process `syz.3.93'. [ 33.499566][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.534439][ T3765] FAULT_INJECTION: forcing a failure. [ 33.534439][ T3765] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.547897][ T3765] CPU: 0 UID: 0 PID: 3765 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.547926][ T3765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.547939][ T3765] Call Trace: [ 33.547945][ T3765] [ 33.547951][ T3765] __dump_stack+0x1d/0x30 [ 33.547988][ T3765] dump_stack_lvl+0xe8/0x140 [ 33.548010][ T3765] dump_stack+0x15/0x1b [ 33.548055][ T3765] should_fail_ex+0x265/0x280 [ 33.548073][ T3765] should_fail_alloc_page+0xf2/0x100 [ 33.548174][ T3765] __alloc_frozen_pages_noprof+0xff/0x360 [ 33.548222][ T3765] alloc_pages_mpol+0xb3/0x260 [ 33.548299][ T3765] alloc_pages_noprof+0x90/0x130 [ 33.548318][ T3765] __pmd_alloc+0x47/0x420 [ 33.548342][ T3765] handle_mm_fault+0x19d4/0x2be0 [ 33.548367][ T3765] ? __rcu_read_unlock+0x4f/0x70 [ 33.548464][ T3765] ? mt_find+0x208/0x320 [ 33.548491][ T3765] do_user_addr_fault+0x3fe/0x1080 [ 33.548582][ T3765] exc_page_fault+0x62/0xa0 [ 33.548610][ T3765] asm_exc_page_fault+0x26/0x30 [ 33.548631][ T3765] RIP: 0010:__put_user_4+0xd/0x20 [ 33.548651][ T3765] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 33.548671][ T3765] RSP: 0018:ffffc9000f68bc68 EFLAGS: 00050206 [ 33.548689][ T3765] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000000c0 [ 33.548735][ T3765] RDX: 000000000000018b RSI: 0000000000000000 RDI: ffffc9000f68bc70 [ 33.548749][ T3765] RBP: 0000000000005411 R08: 0001c9000f68bc73 R09: 0000000000000000 [ 33.548764][ T3765] R10: 000000000000541b R11: 0000000000000000 R12: ffffffff86c87b80 [ 33.548856][ T3765] R13: ffffffff85bfe8a0 R14: ffff8881040f44c0 R15: 0000000000000000 [ 33.548877][ T3765] sk_ioctl+0x261/0x3c0 [ 33.548921][ T3765] inet_ioctl+0x32b/0x3a0 [ 33.548951][ T3765] sock_do_ioctl+0x73/0x220 [ 33.548979][ T3765] sock_ioctl+0x41b/0x610 [ 33.549062][ T3765] ? __pfx_sock_ioctl+0x10/0x10 [ 33.549109][ T3765] __se_sys_ioctl+0xce/0x140 [ 33.549131][ T3765] __x64_sys_ioctl+0x43/0x50 [ 33.549153][ T3765] x64_sys_call+0x1816/0x3000 [ 33.549179][ T3765] do_syscall_64+0xd2/0x200 [ 33.549222][ T3765] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.549305][ T3765] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 33.549341][ T3765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.549364][ T3765] RIP: 0033:0x7fb440b8efc9 [ 33.549380][ T3765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.549402][ T3765] RSP: 002b:00007fb43f5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 33.549422][ T3765] RAX: ffffffffffffffda RBX: 00007fb440de5fa0 RCX: 00007fb440b8efc9 [ 33.549437][ T3765] RDX: 00002000000000c0 RSI: 0000000000005411 RDI: 0000000000000003 [ 33.549450][ T3765] RBP: 00007fb43f5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 33.549464][ T3765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.549478][ T3765] R13: 00007fb440de6038 R14: 00007fb440de5fa0 R15: 00007ffec313b4a8 [ 33.549498][ T3765] [ 33.909007][ T3773] netlink: 'syz.2.98': attribute type 13 has an invalid length. [ 33.913715][ T3774] FAULT_INJECTION: forcing a failure. [ 33.913715][ T3774] name failslab, interval 1, probability 0, space 0, times 0 [ 33.929338][ T3774] CPU: 0 UID: 0 PID: 3774 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT(voluntary) [ 33.929364][ T3774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 33.929378][ T3774] Call Trace: [ 33.929385][ T3774] [ 33.929392][ T3774] __dump_stack+0x1d/0x30 [ 33.929413][ T3774] dump_stack_lvl+0xe8/0x140 [ 33.929467][ T3774] dump_stack+0x15/0x1b [ 33.929488][ T3774] should_fail_ex+0x265/0x280 [ 33.929507][ T3774] should_failslab+0x8c/0xb0 [ 33.929534][ T3774] __kmalloc_noprof+0xa5/0x570 [ 33.929581][ T3774] ? bpf_ctx_init+0x87/0x170 [ 33.929615][ T3774] bpf_ctx_init+0x87/0x170 [ 33.929694][ T3774] bpf_prog_test_run_xdp+0x1ca/0x970 [ 33.929789][ T3774] ? kstrtouint+0x76/0xc0 [ 33.929826][ T3774] ? __rcu_read_unlock+0x4f/0x70 [ 33.929857][ T3774] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 33.929933][ T3774] bpf_prog_test_run+0x22a/0x390 [ 33.929959][ T3774] __sys_bpf+0x4c0/0x7c0 [ 33.929991][ T3774] __x64_sys_bpf+0x41/0x50 [ 33.930032][ T3774] x64_sys_call+0x2aee/0x3000 [ 33.930056][ T3774] do_syscall_64+0xd2/0x200 [ 33.930078][ T3774] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 33.930108][ T3774] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 33.930222][ T3774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.930245][ T3774] RIP: 0033:0x7fb440b8efc9 [ 33.930259][ T3774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.930275][ T3774] RSP: 002b:00007fb43f5ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 33.930293][ T3774] RAX: ffffffffffffffda RBX: 00007fb440de5fa0 RCX: 00007fb440b8efc9 [ 33.930304][ T3774] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 33.930318][ T3774] RBP: 00007fb43f5ef090 R08: 0000000000000000 R09: 0000000000000000 [ 33.930331][ T3774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.930345][ T3774] R13: 00007fb440de6038 R14: 00007fb440de5fa0 R15: 00007ffec313b4a8 [ 33.930362][ T3774] [ 34.145043][ T3777] loop4: detected capacity change from 0 to 1024 [ 34.154356][ T3773] gretap0: refused to change device tx_queue_len [ 34.160579][ T3777] EXT4-fs: inline encryption not supported [ 34.187839][ T3773] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.196052][ T3777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.231729][ T3780] netlink: 'syz.0.101': attribute type 13 has an invalid length. [ 34.244124][ T3780] gretap0: refused to change device tx_queue_len [ 34.251005][ T3780] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 34.331279][ T3788] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 34.380741][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.399560][ T3791] FAULT_INJECTION: forcing a failure. [ 34.399560][ T3791] name failslab, interval 1, probability 0, space 0, times 0 [ 34.412245][ T3791] CPU: 1 UID: 0 PID: 3791 Comm: syz.1.105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.412373][ T3791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.412385][ T3791] Call Trace: [ 34.412391][ T3791] [ 34.412398][ T3791] __dump_stack+0x1d/0x30 [ 34.412422][ T3791] dump_stack_lvl+0xe8/0x140 [ 34.412509][ T3791] dump_stack+0x15/0x1b [ 34.412526][ T3791] should_fail_ex+0x265/0x280 [ 34.412548][ T3791] should_failslab+0x8c/0xb0 [ 34.412570][ T3791] kmem_cache_alloc_noprof+0x50/0x480 [ 34.412617][ T3791] ? sk_prot_alloc+0x3f/0x190 [ 34.412635][ T3791] sk_prot_alloc+0x3f/0x190 [ 34.412652][ T3791] sk_alloc+0x34/0x360 [ 34.412729][ T3791] unix_create1+0xa5/0x430 [ 34.412744][ T3791] ? inode_init_always_gfp+0x4cd/0x500 [ 34.412818][ T3791] unix_create+0x11f/0x150 [ 34.412857][ T3791] __sock_create+0x2ec/0x5b0 [ 34.412872][ T3791] __sys_socketpair+0x170/0x430 [ 34.412887][ T3791] ? ksys_write+0x192/0x1a0 [ 34.412901][ T3791] __x64_sys_socketpair+0x52/0x60 [ 34.412954][ T3791] x64_sys_call+0x2bf6/0x3000 [ 34.412967][ T3791] do_syscall_64+0xd2/0x200 [ 34.412978][ T3791] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.413062][ T3791] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.413079][ T3791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.413142][ T3791] RIP: 0033:0x7fb4a0550f1a [ 34.413152][ T3791] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.413162][ T3791] RSP: 002b:00007fb49efb6f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 34.413173][ T3791] RAX: ffffffffffffffda RBX: 00007fb4a07a5f00 RCX: 00007fb4a0550f1a [ 34.413180][ T3791] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 34.413190][ T3791] RBP: 00007fb49efb7090 R08: 0000000000000000 R09: 0000000000000000 [ 34.413200][ T3791] R10: 00007fb49efb6f98 R11: 0000000000000246 R12: 0000000000000004 [ 34.413277][ T3791] R13: 00007fb4a07a6038 R14: 00007fb4a07a5fa0 R15: 00007ffdd7acab18 [ 34.413296][ T3791] [ 34.625375][ T3793] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 34.631933][ T3793] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 34.639476][ T3793] vhci_hcd vhci_hcd.0: Device attached [ 34.645792][ T3794] vhci_hcd: connection closed [ 34.646048][ T12] vhci_hcd: stop threads [ 34.655059][ T12] vhci_hcd: release socket [ 34.659508][ T12] vhci_hcd: disconnect device [ 34.738459][ T3799] FAULT_INJECTION: forcing a failure. [ 34.738459][ T3799] name failslab, interval 1, probability 0, space 0, times 0 [ 34.751285][ T3799] CPU: 1 UID: 0 PID: 3799 Comm: syz.2.108 Not tainted syzkaller #0 PREEMPT(voluntary) [ 34.751313][ T3799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 34.751326][ T3799] Call Trace: [ 34.751332][ T3799] [ 34.751340][ T3799] __dump_stack+0x1d/0x30 [ 34.751365][ T3799] dump_stack_lvl+0xe8/0x140 [ 34.751459][ T3799] dump_stack+0x15/0x1b [ 34.751479][ T3799] should_fail_ex+0x265/0x280 [ 34.751499][ T3799] should_failslab+0x8c/0xb0 [ 34.751527][ T3799] kmem_cache_alloc_noprof+0x50/0x480 [ 34.751579][ T3799] ? audit_log_start+0x342/0x720 [ 34.751602][ T3799] audit_log_start+0x342/0x720 [ 34.751625][ T3799] ? kstrtouint+0x76/0xc0 [ 34.751682][ T3799] audit_seccomp+0x48/0x100 [ 34.751730][ T3799] ? __seccomp_filter+0x82d/0x1250 [ 34.751839][ T3799] __seccomp_filter+0x83e/0x1250 [ 34.751869][ T3799] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 34.751978][ T3799] ? vfs_write+0x7e8/0x960 [ 34.752047][ T3799] ? __rcu_read_unlock+0x4f/0x70 [ 34.752072][ T3799] ? __fget_files+0x184/0x1c0 [ 34.752102][ T3799] __secure_computing+0x82/0x150 [ 34.752173][ T3799] syscall_trace_enter+0xcf/0x1e0 [ 34.752202][ T3799] do_syscall_64+0xac/0x200 [ 34.752221][ T3799] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 34.752258][ T3799] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 34.752345][ T3799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.752366][ T3799] RIP: 0033:0x7f9b1682efc9 [ 34.752379][ T3799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.752399][ T3799] RSP: 002b:00007f9b15297038 EFLAGS: 00000246 ORIG_RAX: 000000000000010d [ 34.752416][ T3799] RAX: ffffffffffffffda RBX: 00007f9b16a85fa0 RCX: 00007f9b1682efc9 [ 34.752429][ T3799] RDX: 0000000000000005 RSI: 0000000000000000 RDI: ffffffffffffffff [ 34.752441][ T3799] RBP: 00007f9b15297090 R08: 0000000000000000 R09: 0000000000000000 [ 34.752454][ T3799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 34.752467][ T3799] R13: 00007f9b16a86038 R14: 00007f9b16a85fa0 R15: 00007ffd5b043c38 [ 34.752503][ T3799] [ 34.988806][ T3805] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 34.996535][ T3805] netlink: 224 bytes leftover after parsing attributes in process `syz.0.111'. [ 35.247128][ T3819] lo speed is unknown, defaulting to 1000 [ 35.310982][ T3822] loop2: detected capacity change from 0 to 164 [ 35.387281][ T3822] rock: directory entry would overflow storage [ 35.393637][ T3822] rock: sig=0x4543, size=28, remaining=18 [ 35.411786][ T3824] netlink: 'syz.1.118': attribute type 13 has an invalid length. [ 35.566394][ T3824] gretap0: refused to change device tx_queue_len [ 35.584673][ T3824] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 35.619501][ T3829] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.637519][ T3827] loop2: detected capacity change from 0 to 2048 [ 35.649043][ T3829] loop4: detected capacity change from 0 to 512 [ 35.675109][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.704871][ T3829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.719000][ T3829] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.742663][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.774385][ T3836] netlink: 'syz.2.121': attribute type 6 has an invalid length. [ 35.792017][ T3829] syz.4.119 (3829) used greatest stack depth: 10536 bytes left [ 35.832196][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.834306][ T3840] loop2: detected capacity change from 0 to 512 [ 35.849850][ T3840] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 35.860785][ T3840] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 35.870821][ T3840] EXT4-fs (loop2): group descriptors corrupted! [ 36.000930][ T3854] FAULT_INJECTION: forcing a failure. [ 36.000930][ T3854] name failslab, interval 1, probability 0, space 0, times 0 [ 36.013611][ T3854] CPU: 1 UID: 0 PID: 3854 Comm: syz.4.130 Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.013688][ T3854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.013700][ T3854] Call Trace: [ 36.013722][ T3854] [ 36.013729][ T3854] __dump_stack+0x1d/0x30 [ 36.013750][ T3854] dump_stack_lvl+0xe8/0x140 [ 36.013784][ T3854] dump_stack+0x15/0x1b [ 36.013868][ T3854] should_fail_ex+0x265/0x280 [ 36.013886][ T3854] should_failslab+0x8c/0xb0 [ 36.013918][ T3854] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 36.013949][ T3854] ? __alloc_skb+0x101/0x320 [ 36.014004][ T3854] __alloc_skb+0x101/0x320 [ 36.014031][ T3854] netlink_alloc_large_skb+0xbf/0xf0 [ 36.014063][ T3854] netlink_sendmsg+0x3cf/0x6b0 [ 36.014122][ T3854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 36.014140][ T3854] __sock_sendmsg+0x145/0x180 [ 36.014162][ T3854] ____sys_sendmsg+0x31e/0x4e0 [ 36.014269][ T3854] ___sys_sendmsg+0x17b/0x1d0 [ 36.014314][ T3854] __x64_sys_sendmsg+0xd4/0x160 [ 36.014339][ T3854] x64_sys_call+0x191e/0x3000 [ 36.014433][ T3854] do_syscall_64+0xd2/0x200 [ 36.014516][ T3854] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 36.014572][ T3854] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 36.014647][ T3854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.014668][ T3854] RIP: 0033:0x7f4ba877efc9 [ 36.014682][ T3854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.014702][ T3854] RSP: 002b:00007f4ba71e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 36.014721][ T3854] RAX: ffffffffffffffda RBX: 00007f4ba89d5fa0 RCX: 00007f4ba877efc9 [ 36.014758][ T3854] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000007 [ 36.014771][ T3854] RBP: 00007f4ba71e7090 R08: 0000000000000000 R09: 0000000000000000 [ 36.014784][ T3854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.014797][ T3854] R13: 00007f4ba89d6038 R14: 00007f4ba89d5fa0 R15: 00007ffc5d8474d8 [ 36.014816][ T3854] [ 36.022576][ T3855] loop2: detected capacity change from 0 to 512 [ 36.227707][ T3855] EXT4-fs (loop2): orphan cleanup on readonly fs [ 36.234093][ T3855] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 36.242409][ T3855] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 36.256959][ T3855] EXT4-fs error (device loop2): ext4_clear_blocks:876: inode #13: comm syz.2.129: attempt to clear invalid blocks 2 len 1 [ 36.270202][ T3855] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.129: invalid indirect mapped block 1819239214 (level 0) [ 36.284766][ T3855] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.129: invalid indirect mapped block 1819239214 (level 1) [ 36.299178][ T3855] EXT4-fs (loop2): 1 truncate cleaned up [ 36.305138][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.339914][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.361812][ T3866] loop1: detected capacity change from 0 to 128 [ 36.382971][ T3643] ================================================================== [ 36.391081][ T3643] BUG: KCSAN: data-race in fill_mg_cmtime / shmem_mknod [ 36.398025][ T3643] [ 36.400336][ T3643] write to 0xffff8881044e5e04 of 4 bytes by task 3561 on cpu 0: [ 36.407961][ T3643] shmem_mknod+0x137/0x180 [ 36.412370][ T3643] shmem_create+0x34/0x50 [ 36.416690][ T3643] path_openat+0x1105/0x2170 [ 36.421271][ T3643] do_filp_open+0x109/0x230 [ 36.425783][ T3643] do_sys_openat2+0xa6/0x110 [ 36.430358][ T3643] __x64_sys_openat+0xf2/0x120 [ 36.435123][ T3643] x64_sys_call+0x2eab/0x3000 [ 36.439796][ T3643] do_syscall_64+0xd2/0x200 [ 36.444289][ T3643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.450173][ T3643] [ 36.452481][ T3643] read to 0xffff8881044e5e04 of 4 bytes by task 3643 on cpu 1: [ 36.460094][ T3643] fill_mg_cmtime+0x5b/0x260 [ 36.464681][ T3643] generic_fillattr+0x24a/0x340 [ 36.469528][ T3643] shmem_getattr+0x181/0x200 [ 36.474106][ T3643] vfs_getattr_nosec+0x146/0x1e0 [ 36.479049][ T3643] vfs_statx+0x113/0x390 [ 36.483289][ T3643] vfs_fstatat+0x115/0x170 [ 36.487703][ T3643] __se_sys_newfstatat+0x55/0x260 [ 36.492727][ T3643] __x64_sys_newfstatat+0x55/0x70 [ 36.497770][ T3643] x64_sys_call+0x135a/0x3000 [ 36.502442][ T3643] do_syscall_64+0xd2/0x200 [ 36.506937][ T3643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.512819][ T3643] [ 36.515124][ T3643] value changed: 0x07c2e499 -> 0x08f0d13c [ 36.520824][ T3643] [ 36.523130][ T3643] Reported by Kernel Concurrency Sanitizer on: [ 36.529264][ T3643] CPU: 1 UID: 0 PID: 3643 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 36.538534][ T3643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 36.548580][ T3643] ================================================================== [ 36.574825][ T3866] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.587240][ T3866] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.631220][ T3866] IPv6: addrconf: prefix option has invalid lifetime [ 36.646369][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.