last executing test programs: 2.660744467s ago: executing program 2 (id=210): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x2, 0x1}, 0x20) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="20d10000000000000000020000000c0019800800020002030000"], 0x20}, 0x1, 0x0, 0x0, 0x30000804}, 0x4000014) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r5 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x450800, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r8}, 0x18) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)=r5}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES16=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x4}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r7, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1024, 0x1000000000006) mmap(&(0x7f000040f000/0x1000)=nil, 0x1000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 2.344679374s ago: executing program 0 (id=214): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r7, &(0x7f0000000000)='./file0\x00', 0x5) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x0, 0x40000333}, &(0x7f0000000380), &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x82) 1.930532461s ago: executing program 4 (id=224): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_opts(r0, 0x29, 0x48, &(0x7f00000000c0)=ANY=[@ANYBLOB="3e04"], 0x28) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/108, 0x6c}], 0x1}, 0x40000001) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000440)='./file0\x00', 0x414, &(0x7f00000000c0)=ANY=[], 0x1, 0x2c7, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 1.589140719s ago: executing program 4 (id=227): pipe(&(0x7f0000000380)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@errors_continue}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks}, {@dioread_nolock}]}, 0x21, 0x553, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e8", 0x7e}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x20}, 0xe900) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3ffff) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000440)={0x0, 0x3, 0x4, 0x8000, 0x10040, 0x8f}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) 1.459015751s ago: executing program 3 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x5, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28008000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x7, 0x9) write$P9_RWRITE(r7, &(0x7f0000000040)={0xb}, 0x11000) read(r6, &(0x7f0000032440)=""/102364, 0x18fdc) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) mq_notify(r7, &(0x7f0000000340)={0x0, 0xc, 0x4, @thr={0x0, &(0x7f00000004c0)="eada06da02c9d255146e253e81927eb960c7d8e90464fe865804b0621254e11a4ba52e515e273075f08d5fc3854824ec2e6dacf0288a4361d7f970bf031d5ac6142d7dfb73a347e49b5de47f3ff4be352f488b6bafc4908828430555ba8427e15547cc02145ac7be7272ac431baa07744bea0d16c4ad683ede792d2735ac8774bcca5c2e11a6e108dd2b1069374e"}}) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000080)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f00000003c0)=0x1ff, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r10, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x27}}, './file0\x00'}) 1.458069631s ago: executing program 0 (id=231): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.443173471s ago: executing program 1 (id=232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}}, 0x20}}, 0x40000) 1.401709542s ago: executing program 2 (id=233): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000720000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 1.401214273s ago: executing program 1 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x85, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xd3, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'vcan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000e00), 0x4) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r10, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000280)="f1f003699135bf91d937db81383d8d7a6f1b1beb24e3d6e6be70b90daf1b99ac9728a0fe76dde231c9b832dd3b4a3520ca6fb66e32cfb3e5111e95a69f03f190e1c5f3e635", 0x45}, {&(0x7f0000000340)="ff4af96d98ca15b355c9cfe291be6293946ab84c2810dfac23158a9c56f812326452070668e6f246b8f739ce1dad23c0b27462c95ccecac62bf304d6a96ac73ff8c0f0444860d15d29d5f36e274305", 0x4f}, {&(0x7f0000000480)="598c82ddc7b48c5bac8277d8ce4a640baa25347b63e3a70a8de613349aaeeabc167bd2389c85eb77fd0488dbf76ad66db7e1b4dcd7fa0b3d60ac9f45cbe0cb0e8140627356d800c0cb0947e9dac790b139ff4b164c1d4c37137e20bd567198a252ea4e5d97bdcbef45c7767eacb904ba17a29d375cef512779c99232e52aefb184fa6ada6a389c9971d904f77d5b00fe401660fba7b19707c397", 0x9a}, {&(0x7f0000000540)="5e9673eb59155edee45edbec2f524ed395a6ceec076587fafcaf8ce3514c1b1ee7527d9ab88f176de3d42621e099c4d17a51a4a97e1fdbb43509df2b77d880a444876d8344c26d88d0675b417d845d0882bc9b399d6dd1800472351ea82ae99f5f61835108ec49140acc1bc51e430699683e048ba323eb967a857a05bf646bf81652a9ff26e0d8d226bca69d6d886a27d0c4054e1b5958cdee1210086cfa1838193d9cbaceecf033674419b1fc3a4572fb4cec6256be6a57ee195ddd561ff8f0c16fdc925fefb1be02", 0xc9}, {&(0x7f0000000640)="032b1255709cfe21fa4816f2135b19e495da8e5d690311f2945d16ff2193bb2314516917dd1c92c0028715a1bf1a346bb64863c33a85e655474c677f6f618e3b06614a9872f1c7ea145f3007384fa1e8e3d3b4a714c6530cb027d0cdebedb3f675870bacf81f2effd2f51d92ddffef1145c470aa90ea0bb1599ab9884c5eaadda254bab16efdba4abe8ef88d523f1eca744d384219", 0x95}, {&(0x7f0000000700)="d9a05e6262c9651c539cca389ea95af0ead302fc69d49cfe56dca5992dd2f751b4b40297b98f10165bb7779e5c6859af670dd31f8a1df574bb1aac2ad94527ceaaea", 0x42}, {&(0x7f0000000780)="e116e7b1d7c15831da2de1022ebe4d5d3d3888d83f3fa79395a678e534861ee349c5df552fed4354cd1902c6da5294660d4ca2a838c6c13f2cb279f433e49bde8b581d6d71d2f833d7bbf2a77034110a5ef367c2591c49e2ec9dd32376deeda17fe53eb29f232a53ebbee6a15d9885cca7740c5bc4b7bb301443b23972f7eed32794685f62806eabcfdef6a9e783bf1f13667c88a86c369caaa32869ac60552e7670c9153d41cbab8e2b211254426b205421416ee91e1948e2e913601d6dddeb2d2b4d1dc320cee9e78c5aa7609a5b12eeadb7686fbbb28b1c4412800141e5d18ff67d971bae1febd17c75718f6938a199bb87eedb5cbb26", 0xf8}], 0x7, &(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0a010100e0000001000000001400000000000000000000000100000005000000000000001c000000000000000000000008000000", @ANYRES32=r2, @ANYBLOB="ac1414bbffffffff000000001c000000000000000000000008000000a434ac285eb666bf52118097140a8ede6b07f0b4b9bbec0965671b1b972ee2ff4f1931ac4dedd58d15ed0a4807a988e65f4c84a3082eab2ca6c813951b29c64bfe6b9d77657d1be7c7269e37d3b5537bd5e5ad2b5ab8b27046c022b6f00edfeea1532a5d04985d14966731052e12ca4f31b88b9dbbcab32950a74b4b85be222a1549701f1128a70347bb8a5685d609c3fb41411be1d7b32c1f8a401b803d39f95912f469bc83c5c1cfc9fe83affc51d36a3c5d839f2375e26fd76327d36fa811a8cfca9bbf92ea23e3616b8e0f1a87427b9ff045ec7535b91ee811fddc11c71f6fdba36cc4811bd5fd07b3b31f11d28f712c8a457ceb576ab021f9", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff000000001c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="ac1414aa0a01010000000000"], 0x1b8}, 0x800) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000d80), &(0x7f0000000dc0)={'L-', 0x9}, 0x16, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000300)=r11) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r11) 1.396291802s ago: executing program 0 (id=235): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) (fail_nth: 3) 1.359635743s ago: executing program 2 (id=236): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)={0x18, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x76, 0x0, 0x0, @u32=0x9}]}, 0x18}], 0x1}, 0x0) (fail_nth: 3) 1.282130874s ago: executing program 2 (id=237): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x14, 0x24, 0x1, 0x70bd2a, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x8090) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/fscaps', 0x101000, 0x124) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r4, 0x2, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8000000000000004}, 0x60db, 0x0, 0x4, 0x5, 0xa, 0x100, 0x0, 0x0, 0xfffffffd, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_submit(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, 0xffffffffffffffff, 0x0, 0xfffffe60, 0x800, 0x0, 0x6}]) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 1.075547389s ago: executing program 4 (id=238): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='veno', 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000000002010400000000000000000a00fffc040001803c0003800c000280050001003a0000002c00018014000300e300000000000000000000000000000014000400000000000000000000000000000000003c0002800c00028005000100000000002c000180140003"], 0x90}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.037382389s ago: executing program 1 (id=239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='veno', 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000000002010400000000000000000a00fffc040001803c0003800c000280050001003a0000002c00018014000300e300000000000000000000000000000014000400000000000000000000000000000000003c0002800c00028005000100000000002c000180140003"], 0x90}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) tee(r2, r3, 0x80000001, 0x0) 961.197501ms ago: executing program 0 (id=240): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r0, 0x0, 0x100000004, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x5, 0x0, 0x39, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x28643, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000001c0)) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) acct(&(0x7f0000000300)='./file0\x00') 960.546461ms ago: executing program 2 (id=241): pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@errors_continue}, {@data_err_abort}, {@nomblk_io_submit}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b0}}, {@noblock_validity}, {@grpquota}, {@nobh}, {@user_xattr}, {@inode_readahead_blks}, {@dioread_nolock}]}, 0x21, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e8", 0x7e}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @loopback}}}], 0x20}, 0xe900) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r2, 0xffffffffffffffff, 0x0, 0x3ffff) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000440)={0x0, 0x3, 0x4, 0x8000, 0x10040, 0x8f}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) 815.223184ms ago: executing program 2 (id=242): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x75, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r7, &(0x7f0000000000)='./file0\x00', 0x5) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x0, 0x40000333}, &(0x7f0000000380), &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x82) 231.151685ms ago: executing program 3 (id=243): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 230.834705ms ago: executing program 3 (id=244): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x20, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}}, 0x20}}, 0x40000) 215.494836ms ago: executing program 3 (id=245): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1, 0x0, 0x8000}, 0x18) r2 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x62af, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xfdfffffffffffffe}], 0x0, 0x7}, 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0281, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x82) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000001780)={0x1, 0x1000, "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"}) 183.037186ms ago: executing program 4 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000072000000"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) 177.183097ms ago: executing program 1 (id=247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x3, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x94) 146.314087ms ago: executing program 3 (id=248): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r0, 0x0, 0x0, 0x0, 0x0) 145.835467ms ago: executing program 4 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000058c0)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xb84, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100, 0x0, 0x0, 0xc74, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x40, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffff002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0x0, 0x200, 0x3, 0x0, 0x0, 0x3, 0xfffff36d, 0x0, 0x0, 0x20000000, 0xfffffffd, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x0, 0xf, 0xf, 0x0, 0x0, 0xb, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x5, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x3, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0xac0, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff8002, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x9, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x6340, 0x8, 0x7, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x4914, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0x20eb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0x3, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0xa, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xffffffff, 0x1f2, 0x24000, 0x7, 0x100, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0xb, 0xffffffff, 0x8, 0x3, 0x5, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0b, 0xa, 0x62, 0x8, 0x120000, 0x8, 0xfff, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0xfffffff8, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x1, 0x6, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x898}}, 0xc0) 121.740757ms ago: executing program 3 (id=250): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x14, 0x24, 0x1, 0x70bd2a, 0xfffffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x8090) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000940)='/sys/kernel/fscaps', 0x101000, 0x124) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8000000000000004}, 0x60db, 0x0, 0x4, 0x5, 0xa, 0x100, 0x0, 0x0, 0xfffffffd, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) io_submit(0x0, 0x1, &(0x7f00000012c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2004, 0xffffffffffffffff, 0x0, 0xfffffe60, 0x800, 0x0, 0x6}]) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 121.440138ms ago: executing program 0 (id=251): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000001c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) 113.561218ms ago: executing program 1 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000000700)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "fe2e80ee"}, @mss={0x2, 0x4, 0x2}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x0, 0x3) 110.049448ms ago: executing program 4 (id=253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffd74, 0x40004, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000340)='veno', 0x4) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="900000000002010400000000000000000a00fffc040001803c0003800c000280050001003a0000002c00018014000300e300000000000000000000000000000014000400000000000000000000000000000000003c0002800c00028005000100000000002c000180140003"], 0x90}, 0x1, 0x0, 0x0, 0x448c4}, 0x0) r3 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) tee(r2, r3, 0x80000001, 0x0) 81.590249ms ago: executing program 1 (id=254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f0000000280)=0x1, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) pivot_root(0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="98000000020101020000000000000000010000080c00058008000100524153004000068014000500fe80000000000000000000000000003e0c000380060002004e24000014000400fc02000000000000000000000000000008000100000000000c0019"], 0x98}, 0x1, 0x0, 0x0, 0x20000840}, 0x40) 0s ago: executing program 0 (id=255): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) pwritev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="6f462b57ef8c01ca6bdb4129e51d2511b73d6617ee9c6ff10e7efdfbd5ec38a6adc85c6ee441219b70feafec", 0x2c}], 0x1, 0x48, 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.233' (ED25519) to the list of known hosts. [ 31.041783][ T29] audit: type=1400 audit(1758934602.154:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.042986][ T3291] cgroup: Unknown subsys name 'net' [ 31.064537][ T29] audit: type=1400 audit(1758934602.154:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.093681][ T29] audit: type=1400 audit(1758934602.184:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.221580][ T3291] cgroup: Unknown subsys name 'cpuset' [ 31.227873][ T3291] cgroup: Unknown subsys name 'rlimit' [ 31.339765][ T29] audit: type=1400 audit(1758934602.444:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.363820][ T29] audit: type=1400 audit(1758934602.454:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.384528][ T29] audit: type=1400 audit(1758934602.454:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.392933][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.404942][ T29] audit: type=1400 audit(1758934602.454:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.433767][ T29] audit: type=1400 audit(1758934602.454:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.458642][ T29] audit: type=1400 audit(1758934602.454:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.480407][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.481926][ T29] audit: type=1400 audit(1758934602.534:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.718196][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 32.769216][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 32.809834][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.817206][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.824864][ T3302] bridge_slave_0: entered allmulticast mode [ 32.831441][ T3302] bridge_slave_0: entered promiscuous mode [ 32.839991][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 32.861663][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.868755][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.876132][ T3302] bridge_slave_1: entered allmulticast mode [ 32.882659][ T3302] bridge_slave_1: entered promiscuous mode [ 32.888753][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 32.954814][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.962096][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.969356][ T3308] bridge_slave_0: entered allmulticast mode [ 32.975763][ T3308] bridge_slave_0: entered promiscuous mode [ 32.987527][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.010641][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.017801][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.025158][ T3308] bridge_slave_1: entered allmulticast mode [ 33.031550][ T3308] bridge_slave_1: entered promiscuous mode [ 33.038359][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.084421][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.091581][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.098743][ T3301] bridge_slave_0: entered allmulticast mode [ 33.105509][ T3301] bridge_slave_0: entered promiscuous mode [ 33.112380][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.119505][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.126919][ T3301] bridge_slave_1: entered allmulticast mode [ 33.133512][ T3301] bridge_slave_1: entered promiscuous mode [ 33.139976][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.147117][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.154263][ T3307] bridge_slave_0: entered allmulticast mode [ 33.160628][ T3307] bridge_slave_0: entered promiscuous mode [ 33.172462][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 33.182380][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.192172][ T3302] team0: Port device team_slave_0 added [ 33.203173][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.210428][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.217670][ T3307] bridge_slave_1: entered allmulticast mode [ 33.224231][ T3307] bridge_slave_1: entered promiscuous mode [ 33.239389][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.253895][ T3302] team0: Port device team_slave_1 added [ 33.268451][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.288636][ T3308] team0: Port device team_slave_0 added [ 33.307089][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.317383][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.327420][ T3308] team0: Port device team_slave_1 added [ 33.350974][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.369640][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.376648][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.402751][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.421346][ T3301] team0: Port device team_slave_0 added [ 33.427339][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.434329][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.460413][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.471487][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.478456][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.504463][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.526506][ T3307] team0: Port device team_slave_0 added [ 33.533218][ T3301] team0: Port device team_slave_1 added [ 33.539336][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.546424][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.572424][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.594474][ T3307] team0: Port device team_slave_1 added [ 33.613560][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.620747][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.646738][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.659641][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.666631][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.692649][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.703443][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.710512][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.717899][ T3310] bridge_slave_0: entered allmulticast mode [ 33.724273][ T3310] bridge_slave_0: entered promiscuous mode [ 33.756350][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.763626][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.770757][ T3310] bridge_slave_1: entered allmulticast mode [ 33.777294][ T3310] bridge_slave_1: entered promiscuous mode [ 33.789369][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.796359][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.822510][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.853787][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.860754][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.886830][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.900219][ T3308] hsr_slave_0: entered promiscuous mode [ 33.906197][ T3308] hsr_slave_1: entered promiscuous mode [ 33.915140][ T3302] hsr_slave_0: entered promiscuous mode [ 33.921243][ T3302] hsr_slave_1: entered promiscuous mode [ 33.927096][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 33.932886][ T3302] Cannot create hsr debugfs directory [ 33.939643][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.964614][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.997673][ T3301] hsr_slave_0: entered promiscuous mode [ 34.003901][ T3301] hsr_slave_1: entered promiscuous mode [ 34.009766][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.015582][ T3301] Cannot create hsr debugfs directory [ 34.038378][ T3307] hsr_slave_0: entered promiscuous mode [ 34.044520][ T3307] hsr_slave_1: entered promiscuous mode [ 34.050310][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 34.056101][ T3307] Cannot create hsr debugfs directory [ 34.067637][ T3310] team0: Port device team_slave_0 added [ 34.076369][ T3310] team0: Port device team_slave_1 added [ 34.121829][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.128814][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.154821][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.168549][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.175653][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.201665][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.295229][ T3310] hsr_slave_0: entered promiscuous mode [ 34.301283][ T3310] hsr_slave_1: entered promiscuous mode [ 34.307108][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 34.312887][ T3310] Cannot create hsr debugfs directory [ 34.383106][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.392151][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.411874][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.429589][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.451657][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.465592][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.476872][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.490411][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.533068][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.542655][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.553004][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.562536][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.577845][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.606910][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.616892][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.626270][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.641173][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.662091][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.682973][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.690116][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.708301][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.715409][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.728591][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.738063][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.747378][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.756719][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.819504][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.829197][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.842453][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.854538][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.876608][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.883760][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.892906][ T1436] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.900042][ T1436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.915186][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.925752][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.945520][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.952609][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.973769][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.981038][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.992881][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.000052][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.009696][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.016792][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.039863][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.059948][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.096304][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.105539][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.127036][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.163800][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.170947][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.181101][ T1436] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.188397][ T1436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.210299][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.243574][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.287194][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.344087][ T3308] veth0_vlan: entered promiscuous mode [ 35.367607][ T3308] veth1_vlan: entered promiscuous mode [ 35.386475][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.398932][ T3301] veth0_vlan: entered promiscuous mode [ 35.428806][ T3308] veth0_macvtap: entered promiscuous mode [ 35.437159][ T3308] veth1_macvtap: entered promiscuous mode [ 35.448487][ T3302] veth0_vlan: entered promiscuous mode [ 35.459848][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.468155][ T3301] veth1_vlan: entered promiscuous mode [ 35.486917][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.501199][ T3302] veth1_vlan: entered promiscuous mode [ 35.522819][ T1734] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.533685][ T3301] veth0_macvtap: entered promiscuous mode [ 35.547134][ T1734] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.561468][ T3301] veth1_macvtap: entered promiscuous mode [ 35.576933][ T1734] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.588349][ T3302] veth0_macvtap: entered promiscuous mode [ 35.598459][ T1436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.608180][ T3302] veth1_macvtap: entered promiscuous mode [ 35.624092][ T3310] veth0_vlan: entered promiscuous mode [ 35.647465][ T3307] veth0_vlan: entered promiscuous mode [ 35.655523][ T3310] veth1_vlan: entered promiscuous mode [ 35.664424][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.678181][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.689311][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.689962][ T3308] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.707988][ T3310] veth0_macvtap: entered promiscuous mode [ 35.718804][ T3307] veth1_vlan: entered promiscuous mode [ 35.733319][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.743937][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.754446][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.766045][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.778982][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.789095][ T3310] veth1_macvtap: entered promiscuous mode [ 35.810159][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.821882][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.839015][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.855031][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.868364][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.889305][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.900832][ T3307] veth0_macvtap: entered promiscuous mode [ 35.935354][ T3307] veth1_macvtap: entered promiscuous mode [ 35.972305][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.983064][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.992337][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.015198][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.044617][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.076365][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.092887][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.150935][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 36.150954][ T29] audit: type=1400 audit(1758934607.214:129): avc: denied { prog_run } for pid=3471 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.175977][ T29] audit: type=1400 audit(1758934607.214:130): avc: denied { create } for pid=3471 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.326913][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.446980][ T3485] loop1: detected capacity change from 0 to 1024 [ 36.463410][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.473501][ T29] audit: type=1326 audit(1758934607.434:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285aceec9 code=0x7ffc0000 [ 36.496711][ T29] audit: type=1326 audit(1758934607.434:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285aceec9 code=0x7ffc0000 [ 36.514983][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.519922][ T29] audit: type=1326 audit(1758934607.434:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2285aceec9 code=0x7ffc0000 [ 36.551669][ T29] audit: type=1400 audit(1758934607.434:134): avc: denied { map_read map_write } for pid=3484 comm="syz.1.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.571410][ T29] audit: type=1326 audit(1758934607.454:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285aceec9 code=0x7ffc0000 [ 36.594899][ T29] audit: type=1326 audit(1758934607.454:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285aceec9 code=0x7ffc0000 [ 36.615311][ T3492] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 36.618105][ T29] audit: type=1326 audit(1758934607.454:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2285aceec9 code=0x7ffc0000 [ 36.637556][ T3485] ======================================================= [ 36.637556][ T3485] WARNING: The mand mount option has been deprecated and [ 36.637556][ T3485] and is ignored by this kernel. Remove the mand [ 36.637556][ T3485] option from the mount to silence this warning. [ 36.637556][ T3485] ======================================================= [ 36.647260][ T29] audit: type=1326 audit(1758934607.454:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3481 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2285aceec9 code=0x7ffc0000 [ 36.694314][ T3485] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.718797][ T3492] loop3: detected capacity change from 0 to 512 [ 36.720120][ T3485] EXT4-fs: Ignoring removed nobh option [ 36.734899][ T3492] EXT4-fs: Ignoring removed orlov option [ 36.753236][ T3492] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.763617][ T3492] EXT4-fs (loop3): orphan cleanup on readonly fs [ 36.770565][ T3485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.784798][ T3492] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8: bg 0: block 248: padding at end of block bitmap is not set [ 36.800208][ T3492] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.8: Failed to acquire dquot type 1 [ 36.822157][ T3492] EXT4-fs (loop3): 1 truncate cleaned up [ 36.829028][ T3492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 36.847159][ T3485] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 36.891094][ T3485] Falling back ldisc for ttyS3. [ 36.944272][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.967571][ T3492] syz.3.8 (3492) used greatest stack depth: 9280 bytes left [ 36.975376][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.007040][ T3515] Zero length message leads to an empty skb [ 37.023511][ T3508] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.095053][ T3518] loop3: detected capacity change from 0 to 4096 [ 37.105649][ T3518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.188395][ T3518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.360326][ T3544] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.373612][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.382564][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.391419][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.455353][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.464261][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.473108][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.612492][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.621462][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.630313][ T3545] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 37.744140][ T3557] capability: warning: `syz.4.18' uses 32-bit capabilities (legacy support in use) [ 38.099686][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.108149][ T3515] Set syz1 is full, maxelem 65536 reached [ 38.178249][ C1] hrtimer: interrupt took 47438 ns [ 38.208841][ T3559] binfmt_misc: register: failed to install interpreter file ./file2 [ 38.292347][ T3566] loop4: detected capacity change from 0 to 128 [ 38.302100][ T3566] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.314717][ T3566] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.324696][ T3570] loop1: detected capacity change from 0 to 128 [ 38.337351][ T3570] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 38.358133][ T3570] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.381510][ T3575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.24'. [ 38.390552][ T52] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.402991][ T52] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 38.482483][ T3575] loop3: detected capacity change from 0 to 8192 [ 38.498856][ T3583] loop1: detected capacity change from 0 to 4096 [ 38.506910][ T3583] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.519928][ T3583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.635570][ T3587] loop4: detected capacity change from 0 to 8192 [ 38.780648][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.837312][ T3592] loop1: detected capacity change from 0 to 4096 [ 38.844244][ T3592] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.871944][ T3592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.929008][ T3596] loop0: detected capacity change from 0 to 1024 [ 38.938251][ T3596] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.945580][ T3596] EXT4-fs: Ignoring removed nobh option [ 38.964776][ T3596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.051023][ T3596] Falling back ldisc for ttyS3. [ 39.105345][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.147377][ T3613] loop0: detected capacity change from 0 to 512 [ 39.166645][ T3613] EXT4-fs: Ignoring removed orlov option [ 39.192301][ T3613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.213045][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.228243][ T3618] loop2: detected capacity change from 0 to 1024 [ 39.234884][ T3613] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.244148][ T3618] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.272116][ T3613] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.31: bg 0: block 248: padding at end of block bitmap is not set [ 39.287073][ T3621] loop3: detected capacity change from 0 to 512 [ 39.290863][ T3618] EXT4-fs: Ignoring removed nobh option [ 39.305101][ T3613] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.31: Failed to acquire dquot type 1 [ 39.328850][ T3621] EXT4-fs: Ignoring removed orlov option [ 39.342761][ T3613] EXT4-fs (loop0): 1 truncate cleaned up [ 39.351117][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.360564][ T3624] loop1: detected capacity change from 0 to 4096 [ 39.373552][ T3624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.388168][ T3613] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.414635][ T3621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.427989][ T3624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.443618][ T3621] EXT4-fs (loop3): orphan cleanup on readonly fs [ 39.454384][ T3621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.34: bg 0: block 248: padding at end of block bitmap is not set [ 39.473346][ T3621] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.34: Failed to acquire dquot type 1 [ 39.498851][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.518808][ T3621] EXT4-fs (loop3): 1 truncate cleaned up [ 39.525079][ T3618] Falling back ldisc for ttyS3. [ 39.666910][ T3621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.676387][ T3649] loop0: detected capacity change from 0 to 512 [ 39.703905][ T3649] EXT4-fs: Ignoring removed orlov option [ 39.832182][ T3649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.842872][ T3649] EXT4-fs (loop0): orphan cleanup on readonly fs [ 39.854882][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.866965][ T3649] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.36: bg 0: block 248: padding at end of block bitmap is not set [ 39.949659][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.995056][ T3649] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.36: Failed to acquire dquot type 1 [ 40.038057][ T3649] EXT4-fs (loop0): 1 truncate cleaned up [ 40.235599][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.247559][ T3649] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.303292][ T3658] loop2: detected capacity change from 0 to 512 [ 40.316312][ T3658] EXT4-fs: Ignoring removed orlov option [ 40.338440][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.347543][ T3658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.393958][ T3658] EXT4-fs (loop2): orphan cleanup on readonly fs [ 40.452529][ T3658] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.38: bg 0: block 248: padding at end of block bitmap is not set [ 40.468566][ T3658] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.38: Failed to acquire dquot type 1 [ 40.505192][ T3658] EXT4-fs (loop2): 1 truncate cleaned up [ 40.511562][ T3658] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.563945][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.003546][ T3688] loop4: detected capacity change from 0 to 8192 [ 41.116606][ T3695] binfmt_misc: register: failed to install interpreter file ./file2 [ 41.179747][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 41.179765][ T29] audit: type=1326 audit(1758934612.284:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 41.210308][ T29] audit: type=1326 audit(1758934612.284:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 41.233981][ T29] audit: type=1326 audit(1758934612.284:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 41.257721][ T29] audit: type=1326 audit(1758934612.324:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3697 comm="syz.2.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 41.598709][ T3711] rdma_op ffff88811a899580 conn xmit_rdma 0000000000000000 [ 41.735527][ T29] audit: type=1400 audit(1758934612.514:502): avc: denied { create } for pid=3703 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.754802][ T29] audit: type=1400 audit(1758934612.704:503): avc: denied { bind } for pid=3703 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.773807][ T29] audit: type=1400 audit(1758934612.704:504): avc: denied { write } for pid=3703 comm="syz.1.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 41.793068][ T29] audit: type=1400 audit(1758934612.764:505): avc: denied { mount } for pid=3710 comm="syz.0.55" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 41.793176][ T3707] Falling back ldisc for ttyS3. [ 41.814937][ T29] audit: type=1400 audit(1758934612.794:506): avc: denied { unmount } for pid=3710 comm="syz.0.55" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 41.864314][ T3715] netlink: 'syz.0.57': attribute type 13 has an invalid length. [ 41.865445][ T29] audit: type=1400 audit(1758934612.974:507): avc: denied { listen } for pid=3714 comm="syz.0.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.920373][ T3715] gretap0: refused to change device tx_queue_len [ 41.934433][ T3715] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 41.952320][ T3717] Falling back ldisc for ttyS3. [ 42.019164][ T3720] loop2: detected capacity change from 0 to 1024 [ 42.026613][ T3720] EXT4-fs: Ignoring removed bh option [ 42.036145][ T3720] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 42.100502][ T3727] loop4: detected capacity change from 0 to 512 [ 42.113264][ T3727] EXT4-fs: Ignoring removed orlov option [ 42.133942][ T3727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.152518][ T3727] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.160081][ T3727] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.60: bg 0: block 248: padding at end of block bitmap is not set [ 42.174916][ T3720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.195733][ T3727] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.60: Failed to acquire dquot type 1 [ 42.208565][ T3727] EXT4-fs (loop4): 1 truncate cleaned up [ 42.215728][ T3727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.287832][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.315393][ T3737] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.332364][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.347269][ T3743] binfmt_misc: register: failed to install interpreter file ./file2 [ 42.367987][ T3744] serio: Serial port ptm0 [ 42.381929][ T3741] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 42.405485][ T3747] loop4: detected capacity change from 0 to 512 [ 42.412338][ T3747] EXT4-fs: Ignoring removed orlov option [ 42.425122][ T3747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.451000][ T3747] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.457933][ T3747] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.65: bg 0: block 248: padding at end of block bitmap is not set [ 42.473669][ T3747] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.65: Failed to acquire dquot type 1 [ 42.496306][ T3747] EXT4-fs (loop4): 1 truncate cleaned up [ 42.517407][ T3747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.550143][ T3752] loop1: detected capacity change from 0 to 4096 [ 42.565264][ T3752] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.577192][ T3752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.602211][ T3762] __nla_validate_parse: 5 callbacks suppressed [ 42.602228][ T3762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 42.629962][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.669485][ T3752] netlink: 'syz.1.66': attribute type 6 has an invalid length. [ 42.735457][ T3762] loop3: detected capacity change from 0 to 8192 [ 42.751411][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.905422][ T3772] team0: Port device team_slave_0 removed [ 42.963755][ T3775] loop1: detected capacity change from 0 to 4096 [ 42.981915][ T3775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.005057][ T3775] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.142776][ T3783] netlink: 'syz.1.73': attribute type 6 has an invalid length. [ 43.273281][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.340984][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.349911][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.350076][ T3785] loop1: detected capacity change from 0 to 1024 [ 43.358889][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.385401][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.388370][ T3785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.394264][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.394284][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.429921][ T3785] EXT4-fs: Ignoring removed nobh option [ 43.457516][ T3785] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.476310][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.485256][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.485462][ T3790] loop2: detected capacity change from 0 to 512 [ 43.494134][ T3787] netlink: 16 bytes leftover after parsing attributes in process `syz.3.76'. [ 43.502765][ T3790] EXT4-fs: Ignoring removed orlov option [ 43.521557][ T3790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.539477][ T3790] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.561689][ T3790] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.77: bg 0: block 248: padding at end of block bitmap is not set [ 43.593302][ T3785] Falling back ldisc for ttyS3. [ 43.594874][ T3799] netlink: 'syz.3.78': attribute type 13 has an invalid length. [ 43.604106][ T3790] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.77: Failed to acquire dquot type 1 [ 43.621203][ T3790] EXT4-fs (loop2): 1 truncate cleaned up [ 43.627550][ T3790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.644972][ T3799] gretap0: refused to change device tx_queue_len [ 43.685694][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.695684][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.741207][ T3799] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 43.785537][ T3803] loop2: detected capacity change from 0 to 4096 [ 43.792653][ T3803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.813961][ T3803] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.972512][ T3813] netlink: 'syz.2.80': attribute type 6 has an invalid length. [ 44.033172][ T3814] loop3: detected capacity change from 0 to 8192 [ 44.148858][ T3808] loop1: detected capacity change from 0 to 8192 [ 44.239783][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.377142][ T3811] loop4: detected capacity change from 0 to 128 [ 44.422052][ T3822] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.801792][ T3834] binfmt_misc: register: failed to install interpreter file ./file2 [ 45.575073][ T3851] loop4: detected capacity change from 0 to 1024 [ 45.647560][ T3851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.747680][ T3851] EXT4-fs: Ignoring removed nobh option [ 45.917144][ T3851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.067762][ T3853] Set syz1 is full, maxelem 65536 reached [ 46.070713][ T3860] loop3: detected capacity change from 0 to 8192 [ 46.091751][ T3851] Falling back ldisc for ttyS3. [ 46.149152][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.303141][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 46.303172][ T29] audit: type=1326 audit(1758934617.414:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.345028][ T3866] loop2: detected capacity change from 0 to 128 [ 46.365461][ T29] audit: type=1326 audit(1758934617.444:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.368701][ T3869] netlink: 'syz.0.101': attribute type 13 has an invalid length. [ 46.388853][ T29] audit: type=1326 audit(1758934617.444:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.398720][ T3866] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.419803][ T29] audit: type=1326 audit(1758934617.444:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.455167][ T29] audit: type=1326 audit(1758934617.444:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.478411][ T29] audit: type=1326 audit(1758934617.444:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.479284][ T3866] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.501739][ T29] audit: type=1326 audit(1758934617.444:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.533940][ T29] audit: type=1326 audit(1758934617.444:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.557190][ T29] audit: type=1326 audit(1758934617.444:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.580437][ T29] audit: type=1326 audit(1758934617.444:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3865 comm="syz.2.100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6fdd1eec9 code=0x7ffc0000 [ 46.605896][ T3869] gretap0: refused to change device tx_queue_len [ 46.614518][ T3869] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 46.631085][ T3871] loop4: detected capacity change from 0 to 8192 [ 46.770341][ T3877] netlink: 'syz.2.106': attribute type 13 has an invalid length. [ 46.785555][ T3879] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.799818][ T3877] gretap0: refused to change device tx_queue_len [ 46.806352][ T3881] loop0: detected capacity change from 0 to 1024 [ 46.812861][ T3877] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 46.815240][ T3881] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.836005][ T3881] EXT4-fs: Ignoring removed nobh option [ 46.848692][ T3882] bridge0: entered promiscuous mode [ 46.855418][ T3882] bridge0: port 3(macvlan2) entered blocking state [ 46.862005][ T3882] bridge0: port 3(macvlan2) entered disabled state [ 46.869444][ T3882] macvlan2: entered allmulticast mode [ 46.874961][ T3882] bridge0: entered allmulticast mode [ 46.882641][ T3882] macvlan2: left allmulticast mode [ 46.883372][ T3881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.887819][ T3882] bridge0: left allmulticast mode [ 46.906301][ T3882] bridge0: left promiscuous mode [ 46.991361][ T3881] Falling back ldisc for ttyS3. [ 47.023085][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.053353][ T3895] loop2: detected capacity change from 0 to 128 [ 47.069881][ T3893] loop3: detected capacity change from 0 to 512 [ 47.076733][ T3893] EXT4-fs: Ignoring removed orlov option [ 47.087105][ T3895] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.092933][ T3893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.109805][ T3895] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.211520][ T3893] EXT4-fs (loop3): orphan cleanup on readonly fs [ 47.228533][ T3893] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.109: bg 0: block 248: padding at end of block bitmap is not set [ 47.266320][ T3918] loop2: detected capacity change from 0 to 512 [ 47.279440][ T3918] EXT4-fs: Ignoring removed orlov option [ 47.286549][ T3893] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.109: Failed to acquire dquot type 1 [ 47.303319][ T3918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.327951][ T3926] loop0: detected capacity change from 0 to 1024 [ 47.336010][ T3893] EXT4-fs (loop3): 1 truncate cleaned up [ 47.343222][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.358561][ T3918] EXT4-fs (loop2): orphan cleanup on readonly fs [ 47.385734][ T3926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.401355][ T3918] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.113: bg 0: block 248: padding at end of block bitmap is not set [ 47.418422][ T3926] EXT4-fs: Ignoring removed nobh option [ 47.433155][ T3926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.445902][ T3935] loop4: detected capacity change from 0 to 8192 [ 47.446248][ T3918] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.113: Failed to acquire dquot type 1 [ 47.479377][ T3918] EXT4-fs (loop2): 1 truncate cleaned up [ 47.489962][ T3918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.534060][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.560946][ T3926] Falling back ldisc for ttyS3. [ 47.566354][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.605594][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.634495][ T3948] netlink: 'syz.2.117': attribute type 13 has an invalid length. [ 47.646073][ T3948] gretap0: refused to change device tx_queue_len [ 47.664902][ T3948] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 47.720666][ T3954] __nla_validate_parse: 7 callbacks suppressed [ 47.720695][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 47.735972][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 47.744923][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 47.770591][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 47.779632][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 47.788573][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 47.838256][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 47.847286][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 47.856274][ T3954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.122'. [ 48.083099][ T3970] netlink: 20 bytes leftover after parsing attributes in process `syz.1.127'. [ 48.154151][ T3995] netlink: 'syz.4.135': attribute type 13 has an invalid length. [ 48.167413][ T3970] loop1: detected capacity change from 0 to 8192 [ 48.173869][ T3995] gretap0: refused to change device tx_queue_len [ 48.181561][ T3995] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.322257][ T4004] loop4: detected capacity change from 0 to 4096 [ 48.329975][ T4004] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.346002][ T4004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.467588][ T4008] netlink: 'syz.4.139': attribute type 6 has an invalid length. [ 48.545650][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.850743][ T4033] netlink: 'syz.2.150': attribute type 13 has an invalid length. [ 48.880647][ T4038] loop1: detected capacity change from 0 to 1024 [ 48.888958][ T4033] gretap0: refused to change device tx_queue_len [ 48.899314][ T4038] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.915201][ T4038] EXT4-fs: Ignoring removed nobh option [ 48.920992][ T4033] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 48.985142][ T4038] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.018455][ T4047] loop2: detected capacity change from 0 to 764 [ 49.024971][ T4041] loop0: detected capacity change from 0 to 8192 [ 49.034524][ T4047] iso9660: Unknown parameter '' [ 49.110109][ T4050] loop2: detected capacity change from 0 to 764 [ 49.121005][ T4038] Falling back ldisc for ttyS3. [ 49.175255][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.190507][ T4055] loop3: detected capacity change from 0 to 8192 [ 49.395016][ T4077] loop1: detected capacity change from 0 to 4096 [ 49.407011][ T4077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.432795][ T4077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.624649][ T4104] netlink: 'syz.1.161': attribute type 6 has an invalid length. [ 49.742565][ T4114] 9pnet: Could not find request transport: 0xffffffffffffffff [ 49.805766][ T4121] loop2: detected capacity change from 0 to 8192 [ 49.830352][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.853897][ T4128] netlink: 'syz.3.173': attribute type 13 has an invalid length. [ 49.865150][ T4128] gretap0: refused to change device tx_queue_len [ 49.878413][ T4128] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 50.492382][ T4151] FAULT_INJECTION: forcing a failure. [ 50.492382][ T4151] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.505726][ T4151] CPU: 1 UID: 0 PID: 4151 Comm: syz.2.180 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.505760][ T4151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 50.505777][ T4151] Call Trace: [ 50.505782][ T4151] [ 50.505790][ T4151] __dump_stack+0x1d/0x30 [ 50.505879][ T4151] dump_stack_lvl+0xe8/0x140 [ 50.505898][ T4151] dump_stack+0x15/0x1b [ 50.505916][ T4151] should_fail_ex+0x265/0x280 [ 50.505939][ T4151] should_fail+0xb/0x20 [ 50.505959][ T4151] should_fail_usercopy+0x1a/0x20 [ 50.506057][ T4151] _copy_from_user+0x1c/0xb0 [ 50.506092][ T4151] memdup_user+0x5e/0xd0 [ 50.506125][ T4151] strndup_user+0x68/0xb0 [ 50.506149][ T4151] __se_sys_mount+0x4d/0x2e0 [ 50.506211][ T4151] ? fput+0x8f/0xc0 [ 50.506247][ T4151] ? ksys_write+0x192/0x1a0 [ 50.506269][ T4151] __x64_sys_mount+0x67/0x80 [ 50.506417][ T4151] x64_sys_call+0x2b4d/0x2ff0 [ 50.506442][ T4151] do_syscall_64+0xd2/0x200 [ 50.506604][ T4151] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 50.506636][ T4151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.506668][ T4151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.506747][ T4151] RIP: 0033:0x7fe6fdd1eec9 [ 50.506761][ T4151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.506776][ T4151] RSP: 002b:00007fe6fc77f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.506796][ T4151] RAX: ffffffffffffffda RBX: 00007fe6fdf75fa0 RCX: 00007fe6fdd1eec9 [ 50.506835][ T4151] RDX: 0000200000000040 RSI: 0000200000000080 RDI: 0000000000000000 [ 50.506864][ T4151] RBP: 00007fe6fc77f090 R08: 0000200000000400 R09: 0000000000000000 [ 50.506874][ T4151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.506885][ T4151] R13: 00007fe6fdf76038 R14: 00007fe6fdf75fa0 R15: 00007ffef16c1488 [ 50.506902][ T4151] [ 50.775108][ T4159] netlink: 'syz.1.184': attribute type 13 has an invalid length. [ 50.804923][ T4159] gretap0: refused to change device tx_queue_len [ 50.810501][ T4155] loop0: detected capacity change from 0 to 4096 [ 50.812316][ T4159] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 50.819616][ T4155] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.879039][ T4155] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.029977][ T4195] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 51.141048][ T4197] loop4: detected capacity change from 0 to 8192 [ 51.190268][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.749800][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 51.749816][ T29] audit: type=1326 audit(1758934622.854:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05fc1e5d67 code=0x7ffc0000 [ 51.782378][ T2992] udevd[2992]: worker [3295] terminated by signal 33 (Unknown signal 33) [ 51.799594][ T29] audit: type=1326 audit(1758934622.854:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05fc18af79 code=0x7ffc0000 [ 51.823171][ T29] audit: type=1326 audit(1758934622.854:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fc1eeec9 code=0x7ffc0000 [ 51.846524][ T29] audit: type=1326 audit(1758934622.854:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05fc1e5d67 code=0x7ffc0000 [ 51.869905][ T29] audit: type=1326 audit(1758934622.854:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05fc18af79 code=0x7ffc0000 [ 51.893238][ T29] audit: type=1326 audit(1758934622.854:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05fc1e5d67 code=0x7ffc0000 [ 51.916605][ T29] audit: type=1326 audit(1758934622.854:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05fc18af79 code=0x7ffc0000 [ 51.939965][ T29] audit: type=1326 audit(1758934622.854:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05fc1e5d67 code=0x7ffc0000 [ 51.963756][ T29] audit: type=1326 audit(1758934622.854:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05fc18af79 code=0x7ffc0000 [ 51.987435][ T29] audit: type=1326 audit(1758934622.854:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4218 comm="syz.4.206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05fc1e5d67 code=0x7ffc0000 [ 52.026146][ T4219] hub 9-0:1.0: USB hub found [ 52.030913][ T4219] hub 9-0:1.0: 8 ports detected [ 52.103218][ T4219] ref_ctr_offset mismatch. inode: 0x126 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 52.167601][ T4234] binfmt_misc: register: failed to install interpreter file ./file2 [ 52.357101][ T4247] macvtap0: refused to change device tx_queue_len [ 52.584651][ T4264] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.813213][ T4229] 9pnet_fd: Insufficient options for proto=fd [ 52.874943][ T4277] loop4: detected capacity change from 0 to 128 [ 52.889389][ T4277] vfat: Unknown parameter '>' [ 53.086735][ T4283] loop4: detected capacity change from 0 to 1024 [ 53.113877][ T4283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.127578][ T4283] EXT4-fs: Ignoring removed nobh option [ 53.144432][ T4283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.247304][ T4239] syz.2.210 (4239) used greatest stack depth: 7288 bytes left [ 53.258398][ T4295] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 53.298512][ T4302] FAULT_INJECTION: forcing a failure. [ 53.298512][ T4302] name failslab, interval 1, probability 0, space 0, times 0 [ 53.311350][ T4302] CPU: 1 UID: 0 PID: 4302 Comm: syz.0.235 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.311378][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 53.311391][ T4302] Call Trace: [ 53.311397][ T4302] [ 53.311406][ T4302] __dump_stack+0x1d/0x30 [ 53.311480][ T4302] dump_stack_lvl+0xe8/0x140 [ 53.311512][ T4302] dump_stack+0x15/0x1b [ 53.311529][ T4302] should_fail_ex+0x265/0x280 [ 53.311554][ T4302] should_failslab+0x8c/0xb0 [ 53.311653][ T4302] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 53.311684][ T4302] ? __d_alloc+0x3d/0x340 [ 53.311716][ T4302] __d_alloc+0x3d/0x340 [ 53.311823][ T4302] ? should_fail_ex+0x30/0x280 [ 53.311849][ T4302] d_alloc_parallel+0x53/0xc60 [ 53.311936][ T4302] ? __rcu_read_unlock+0x4f/0x70 [ 53.311979][ T4302] ? __d_lookup+0x316/0x340 [ 53.312009][ T4302] ? default_pointer+0xf2/0x5e0 [ 53.312064][ T4302] __lookup_slow+0x8c/0x250 [ 53.312178][ T4302] lookup_noperm+0xc9/0x180 [ 53.312210][ T4302] simple_start_creating+0x97/0x120 [ 53.312238][ T4302] start_creating+0xe9/0x160 [ 53.312320][ T4302] __debugfs_create_file+0x6b/0x330 [ 53.312349][ T4302] debugfs_create_file_full+0x3f/0x60 [ 53.312377][ T4302] ? __pfx_ppp_setup+0x10/0x10 [ 53.312468][ T4302] ref_tracker_dir_debugfs+0x100/0x1e0 [ 53.312532][ T4302] alloc_netdev_mqs+0x1a2/0xa30 [ 53.312561][ T4302] ppp_ioctl+0x4d5/0x11c0 [ 53.312582][ T4302] ? __fget_files+0x184/0x1c0 [ 53.312657][ T4302] ? __pfx_ppp_ioctl+0x10/0x10 [ 53.312677][ T4302] __se_sys_ioctl+0xcb/0x140 [ 53.312697][ T4302] __x64_sys_ioctl+0x43/0x50 [ 53.312716][ T4302] x64_sys_call+0x1816/0x2ff0 [ 53.312744][ T4302] do_syscall_64+0xd2/0x200 [ 53.312850][ T4302] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.312876][ T4302] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.312903][ T4302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.312941][ T4302] RIP: 0033:0x7fb15ca4eec9 [ 53.312957][ T4302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.312975][ T4302] RSP: 002b:00007fb15b4b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 53.312995][ T4302] RAX: ffffffffffffffda RBX: 00007fb15cca5fa0 RCX: 00007fb15ca4eec9 [ 53.313008][ T4302] RDX: 0000200000000100 RSI: 00000000c004743e RDI: 0000000000000004 [ 53.313060][ T4302] RBP: 00007fb15b4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.313071][ T4302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.313083][ T4302] R13: 00007fb15cca6038 R14: 00007fb15cca5fa0 R15: 00007ffe35cc18a8 [ 53.313103][ T4302] [ 53.320064][ T4283] Falling back ldisc for ttyS3. [ 53.597821][ T4311] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 53.608995][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.727124][ T4325] loop2: detected capacity change from 0 to 1024 [ 53.734281][ T4325] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.741285][ T4325] EXT4-fs: Ignoring removed nobh option [ 53.753303][ T4325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.769744][ T4331] __nla_validate_parse: 36 callbacks suppressed [ 53.769761][ T4331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.239'. [ 53.801516][ T4333] netlink: 20 bytes leftover after parsing attributes in process `syz.4.238'. [ 53.828088][ T4318] loop1: detected capacity change from 0 to 8192 [ 53.834716][ T4325] Falling back ldisc for ttyS3. [ 53.851936][ T4333] loop4: detected capacity change from 0 to 8192 [ 53.860307][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.153218][ T4339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 54.603192][ T4357] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 54.661429][ T4366] netlink: 44 bytes leftover after parsing attributes in process `syz.1.254'. [ 54.680387][ T4367] ================================================================== [ 54.688526][ T4367] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 54.697528][ T4367] [ 54.699861][ T4367] write to 0xffff88811a29d9a0 of 4 bytes by task 4364 on cpu 0: [ 54.707514][ T4367] selinux_inode_permission+0x3ac/0x740 [ 54.713103][ T4367] security_inode_permission+0x6d/0xb0 [ 54.718687][ T4367] inode_permission+0x106/0x310 [ 54.723567][ T4367] link_path_walk+0x162/0x900 [ 54.728273][ T4367] path_openat+0x1de/0x2170 [ 54.732796][ T4367] do_filp_open+0x109/0x230 [ 54.737305][ T4367] io_openat2+0x272/0x390 [ 54.737522][ T4371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.253'. [ 54.741660][ T4367] io_openat+0x1b/0x30 [ 54.741695][ T4367] __io_issue_sqe+0xfe/0x2e0 [ 54.741715][ T4367] io_issue_sqe+0x53/0x970 [ 54.741733][ T4367] io_submit_sqes+0x675/0x1060 [ 54.741756][ T4367] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 54.774132][ T4367] __x64_sys_io_uring_enter+0x78/0x90 [ 54.779534][ T4367] x64_sys_call+0x2de1/0x2ff0 [ 54.784257][ T4367] do_syscall_64+0xd2/0x200 [ 54.788799][ T4367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.794713][ T4367] [ 54.797074][ T4367] read to 0xffff88811a29d9a0 of 4 bytes by task 4367 on cpu 1: [ 54.804715][ T4367] selinux_inode_permission+0x334/0x740 [ 54.810285][ T4367] security_inode_permission+0x6d/0xb0 [ 54.815771][ T4367] inode_permission+0x106/0x310 [ 54.820656][ T4367] link_path_walk+0x162/0x900 [ 54.825366][ T4367] path_openat+0x1de/0x2170 [ 54.829874][ T4367] do_filp_open+0x109/0x230 [ 54.834378][ T4367] io_openat2+0x272/0x390 [ 54.838727][ T4367] io_openat+0x1b/0x30 [ 54.842823][ T4367] __io_issue_sqe+0xfe/0x2e0 [ 54.847422][ T4367] io_issue_sqe+0x53/0x970 [ 54.851848][ T4367] io_wq_submit_work+0x3f7/0x5f0 [ 54.856801][ T4367] io_worker_handle_work+0x44e/0x9b0 [ 54.862102][ T4367] io_wq_worker+0x22e/0x870 [ 54.866610][ T4367] ret_from_fork+0x11f/0x1b0 [ 54.871234][ T4367] ret_from_fork_asm+0x1a/0x30 [ 54.876044][ T4367] [ 54.878389][ T4367] value changed: 0x00000003 -> 0x00000000 [ 54.884114][ T4367] [ 54.886442][ T4367] Reported by Kernel Concurrency Sanitizer on: [ 54.892595][ T4367] CPU: 1 UID: 0 PID: 4367 Comm: iou-wrk-4364 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.902583][ T4367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.912658][ T4367] ================================================================== [ 54.926725][ T4371] loop4: detected capacity change from 0 to 8192